okay my load is up on the roof now .. i have no idea why ... i got mod security installed ..


top - 14:40:58 up 6 days, 1:44, 2 users, load average: 4.28, 4.02, 4.09
Tasks: 179 total, 6 running, 172 sleeping, 1 stopped, 0 zombie
Cpu(s): 68.6% us, 21.1% sy, 0.0% ni, 6.1% id, 0.0% wa, 1.1% hi, 3.2% si
Mem: 2067452k total, 1295412k used, 772040k free, 91284k buffers
Swap: 917496k total, 512k used, 916984k free, 797524k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
10395 mysql 15 0 104m 20m 4336 S 45.0 1.0 29:15.91 mysqld
18313 nigmae 20 0 51032 26m 22m R 17.1 1.3 0:00.24 php
12411 nigmae 18 0 51376 8140 4596 R 15.0 0.4 0:00.21 php
5871 root 16 0 36036 33m 1984 S 13.6 1.6 0:01.29 spamd
8820 nobody 15 0 10888 6212 1284 S 11.4 0.3 1:29.70 httpd
14354 nobody 15 0 9896 5356 1172 S 8.6 0.3 0:00.25 httpd
21240 nobody 15 0 10488 6428 1720 S 7.1 0.3 1:34.61 httpd
9234 nobody 15 0 10644 6104 1300 S 6.4 0.3 1:35.32 httpd
18849 root 20 0 10184 4084 2956 S 6.4 0.2 0:00.09 exim
14050 nobody 15 0 10524 6456 1724 S 4.3 0.3 1:39.91 httpd


my top looks like this .. please help ... it's driving me nuts...

You need to check in "ps auxf" what's the user "nigmae" running. It seems to be consuming much of the CPU power.

Is it the same server you mentioned in your last topic?

yes it is the same server ...

top - 10:26:19 up 7 days, 21:29, 1 user, load average: 4.18, 5.80, 5.59
Tasks: 240 total, 13 running, 226 sleeping, 0 stopped, 1 zombie
Cpu(s): 14.3% us, 6.4% sy, 0.2% ni, 76.4% id, 0.8% wa, 0.4% hi, 1.5% si
Mem: 2067452k total, 1537220k used, 530232k free, 81520k buffers
Swap: 917496k total, 584k used, 916912k free, 871972k cached

this is the top output... i can't get it lower than 4.


root@nemesis [~]# ps auxf
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1716 612 ? Ss Jul20 0:04 init [3]
root 2 0.0 0.0 0 0 ? S Jul20 0:02 [migration/0]
root 3 0.0 0.0 0 0 ? SN Jul20 2:02 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? S Jul20 0:00 [watchdog/0]
root 5 0.0 0.0 0 0 ? S Jul20 0:04 [migration/1]
root 6 0.0 0.0 0 0 ? SN Jul20 0:02 [ksoftirqd/1]
root 7 0.0 0.0 0 0 ? S Jul20 0:00 [watchdog/1]
root 8 0.0 0.0 0 0 ? S< Jul20 0:00 [events/0]
root 9 0.0 0.0 0 0 ? S< Jul20 0:25 [events/1]
root 10 0.0 0.0 0 0 ? S< Jul20 0:00 [khelper]
root 11 0.0 0.0 0 0 ? S< Jul20 0:00 [kthread]
root 14 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kblockd/0]
root 15 0.0 0.0 0 0 ? S< Jul20 1:22 \_ [kblockd/1]
root 16 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kacpid]
root 81 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kseriod]
root 134 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [aio/0]
root 135 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [aio/1]
root 757 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kpsmoused]
root 17843 0.0 0.0 0 0 ? S< Jul20 3:12 \_ [kjournald]
root 23606 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kauditd]
root 5875 0.0 0.0 0 0 ? S< Jul20 0:00 \_ [kjournald]
root 8156 0.0 0.0 0 0 ? S< Jul20 3:52 \_ [kjournald]
root 12259 0.0 0.0 0 0 ? S< Jul20 0:06 \_ [kjournald]
root 11913 0.0 0.0 0 0 ? S Jul25 1:00 \_ [pdflush]
root 11542 0.0 0.0 0 0 ? S Jul25 0:01 \_ [pdflush]
root 133 0.0 0.0 0 0 ? S Jul20 3:25 [kswapd0]
root 767 0.0 0.0 0 0 ? S Jul20 0:01 [kirqd]
root 10725 0.0 0.0 1612 480 ? S<s Jul20 0:00 udevd
root 8936 0.0 0.0 1576 296 ? Ss Jul20 0:01 irqbalance
root 6888 0.0 0.0 4068 560 ? Ss Jul20 0:00 rpc.idmapd
root 22116 0.0 0.0 1844 500 ? S Jul20 0:00 /usr/sbin/smartd
root 21291 0.0 0.0 1540 492 ? Ss Jul20 0:00 /usr/sbin/acpid
root 16285 0.0 0.0 4080 1048 ? Ss Jul20 0:00 /usr/sbin/sshd
root 19670 0.0 0.1 7152 2316 ? Ss 10:04 0:00 \_ sshd: root@pts/1
root 20758 0.0 0.0 4436 1444 pts/1 Ss 10:04 0:00 \_ -bash
root 29142 0.0 0.0 2540 844 pts/1 R+ 10:25 0:00 \_ ps auxf
root 13008 0.0 0.0 2176 804 ? Ss Jul20 0:01 xinetd -stayalive -pidfile /var/run/xinetd.pid
nobody 27192 0.0 0.1 6060 2216 ? S Jul20 0:00 entropychat
root 20588 0.0 1.2 29804 26376 ? SN Jul20 6:10 cpanellogd - sleeping for logs
nobody 32209 0.0 0.0 1900 848 ? S Jul20 0:00 /usr/local/cpanel/bin/startmelange
cpanel 19851 0.0 0.1 6860 3304 ? Ss Jul20 1:38 /usr/bin/stunnel-4.15local /usr/local/cpanel/etc/stunnel/default/stunnel.conf.run
dbus 2321 0.0 0.0 2460 948 ? Ss Jul20 0:00 dbus-daemon-1 --system
root 29444 0.0 0.1 5688 3948 ? Ss Jul20 0:04 hald
root 15600 0.0 0.0 1608 392 ? Ss Jul20 0:00 /usr/sbin/portsentry -tcp
root 8687 0.0 0.0 0 0 ? S< Jul20 0:23 [loop0]
root 3423 0.0 0.0 1560 436 tty1 Ss+ Jul20 0:00 /sbin/mingetty tty1
root 19831 0.0 0.0 1536 436 tty2 Ss+ Jul20 0:00 /sbin/mingetty tty2
root 3937 0.0 0.0 1560 440 tty3 Ss+ Jul20 0:00 /sbin/mingetty tty3
root 26603 0.0 0.0 1540 436 tty4 Ss+ Jul20 0:00 /sbin/mingetty tty4
root 2754 0.0 0.0 1528 432 tty5 Ss+ Jul20 0:00 /sbin/mingetty tty5
root 10296 0.0 0.0 1572 436 tty6 Ss+ Jul20 0:00 /sbin/mingetty tty6
postgres 32628 0.0 0.1 19320 3200 ? S Jul20 1:08 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data
postgres 5862 0.0 0.0 9108 1040 ? S Jul20 0:02 \_ postgres: logger process
postgres 5121 0.0 0.4 19452 9680 ? S Jul20 0:14 \_ postgres: writer process
postgres 30360 0.0 0.0 10108 1844 ? S Jul20 0:09 \_ postgres: stats buffer process
postgres 27193 0.0 0.0 9240 1172 ? S Jul20 0:05 \_ postgres: stats collector process
mchat 19864 0.0 0.2 5900 4680 ? Ss Jul20 1:20 ./ircd.200607140214
mias 20254 0.0 0.2 5800 4644 ? Ss Jul20 0:58 ./ircd.200607140702
venger 5747 0.0 0.2 5696 4524 ? Ss Jul20 0:04 ./ircd.200607140221
royal 27368 0.0 0.2 5816 4568 ? Ss Jul20 0:07 ./ircd.200607140228
neo 1459 0.0 0.2 5820 4472 ? Ss Jul20 0:03 ./ircd.200607140225
dewdrop 13623 0.1 0.7 19632 15688 ? S Jul20 15:16 ./eggdrop nemesis.conf
dodoirc 12159 0.0 0.1 3764 2532 ? S Jul20 0:08 ./ircd
cezarea 9159 0.0 0.1 29816 3352 ? Sl Jul20 9:17 ./sc_serv
speranta 22450 0.0 0.0 29440 1804 ? Sl Jul20 5:12 ./sc_serv
dark 12442 0.0 0.1 33328 3732 ? Sl Jul21 8:30 ./sc_serv
suparatu 18463 0.0 0.1 33328 2888 ? Sl Jul21 5:14 ./sc_serv sc_serv.conf
root 739 0.0 0.0 1644 340 ? Ss Jul21 0:00 /usr/local/oidentd/sbin/oidentd -q
upload 21854 0.0 0.1 6284 2532 ? S Jul21 5:04 ./eggdrop
root 20361 0.0 0.0 5100 1172 ? S Jul21 0:00 crond
auto 24281 0.0 0.3 51348 7940 ? Ss Jul21 0:00 \_ php /home/auto/public_html/curs_valutar.php
mailman 28954 0.0 0.2 11300 4320 ? Ss Jul21 0:00 /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start
mailman 19751 0.0 0.2 11052 5824 ? S Jul21 0:07 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunne
mailman 29961 0.0 0.2 11076 5840 ? S Jul21 0:07 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRun
mailman 9917 0.0 0.2 11032 5836 ? S Jul21 0:08 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRu
mailman 26883 0.0 0.2 11320 6060 ? S Jul21 0:08 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingR
mailman 920 0.0 0.2 11016 5872 ? S Jul21 0:08 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunne
mailman 19516 0.0 0.2 11340 6156 ? S Jul21 0:08 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingR
mailman 9561 0.0 0.2 11064 5968 ? S Jul21 0:07 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRun
mailman 26412 0.0 0.2 11084 5824 ? S Jul21 0:00 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunn
root 26783 0.0 0.0 1616 544 ? Ss Jul23 0:22 syslogd -m 0
root 21528 0.0 0.0 1540 380 ? Ss Jul23 0:00 klogd -x
radiomag 8328 0.0 0.1 33344 4068 ? Sl Jul23 6:49 ./sc_serv
named 24672 0.3 0.6 41588 13660 ? Ssl Jul24 21:04 /usr/sbin/named -u named -t /var/named/chroot
upload 13711 0.0 0.0 4876 1312 ? Ss Jul25 0:00 SCREEN
upload 14977 0.0 0.0 4448 1444 pts/9 Ss Jul25 0:00 \_ /bin/bash
upload 25632 0.0 0.3 52856 7004 pts/9 S+ Jul25 0:00 \_ php makelinks
root 28555 0.0 0.0 6188 1456 ? Ss Jul26 0:00 pure-ftpd (SERVER)
xoro 368 0.0 0.0 6296 1392 ? S 10:07 0:00 \_ pure-ftpd (IDLE)
root 14444 0.0 0.0 5700 1004 ? S Jul26 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth
root 2495 0.0 0.2 10596 5528 ? S Jul26 0:07 cppop - accepting on port 110
root 21360 0.0 0.3 11784 7872 ? S Jul26 0:08 chkservd
root 11407 0.0 0.1 6924 3128 ? S Jul26 0:02 lfd - sleeping
root 31886 0.0 0.2 9884 5992 ? Ss Jul27 0:09 /usr/local/apache/bin/httpd -DSSL
nobody 26679 0.1 0.2 10092 5636 ? S 03:08 0:41 \_ /usr/local/apache/bin/httpd -DSSL
nobody 29504 0.2 0.2 10116 5644 ? S 03:08 1:05 \_ /usr/local/apache/bin/httpd -DSSL
xoro 28592 0.0 0.4 51380 8368 ? S 09:54 0:00 | \_ /usr/bin/php index.php
nobody 21483 0.1 0.2 10140 5652 ? S 03:08 0:28 \_ /usr/local/apache/bin/httpd -DSSL
nobody 25841 0.1 0.2 10084 6052 ? S 03:08 0:31 \_ /usr/local/apache/bin/httpd -DSSL
nobody 28174 0.4 0.2 10244 5816 ? S 03:08 2:09 \_ /usr/local/apache/bin/httpd -DSSL
nobody 25688 0.1 0.2 10360 5880 ? S 03:08 0:29 \_ /usr/local/apache/bin/httpd -DSSL
nobody 7137 0.4 0.3 10744 6288 ? S 03:08 1:45 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23659 0.2 0.2 10160 6108 ? S 03:08 1:12 \_ /usr/local/apache/bin/httpd -DSSL
nobody 30369 0.6 0.2 10164 6132 ? S 03:08 2:49 \_ /usr/local/apache/bin/httpd -DSSL
nobody 10962 0.6 0.3 10284 6236 ? S 03:08 2:41 \_ /usr/local/apache/bin/httpd -DSSL
nobody 15891 0.4 0.2 10152 6120 ? S 03:08 1:52 \_ /usr/local/apache/bin/httpd -DSSL
nobody 25310 0.1 0.2 10144 5676 ? S 03:08 0:47 \_ /usr/local/apache/bin/httpd -DSSL
nobody 28639 0.1 0.2 10136 6064 ? S 03:08 0:50 \_ /usr/local/apache/bin/httpd -DSSL
xoro 31022 0.0 0.4 51412 8372 ? S 09:35 0:00 | \_ /usr/bin/php index.php
nobody 29973 0.4 0.2 10168 5720 ? S 03:08 2:03 \_ /usr/local/apache/bin/httpd -DSSL
nobody 11608 0.5 0.2 10156 6144 ? S 03:08 2:25 \_ /usr/local/apache/bin/httpd -DSSL
xoro 7611 0.0 0.4 51412 8444 ? S 09:52 0:00 | \_ /usr/bin/php index.php
nobody 8121 0.6 0.3 10736 6652 ? S 03:08 2:48 \_ /usr/local/apache/bin/httpd -DSSL
nobody 21402 0.5 0.3 10288 6248 ? S 03:08 2:28 \_ /usr/local/apache/bin/httpd -DSSL
nobody 10718 0.6 0.3 10520 6472 ? S 03:08 2:42 \_ /usr/local/apache/bin/httpd -DSSL
nobody 18206 0.6 0.2 10204 5740 ? S 03:08 2:40 \_ /usr/local/apache/bin/httpd -DSSL
nobody 6224 0.3 0.2 10160 5736 ? S 03:08 1:22 \_ /usr/local/apache/bin/httpd -DSSL
nobody 29903 0.6 0.2 10584 6100 ? S 03:08 2:42 \_ /usr/local/apache/bin/httpd -DSSL
nobody 18351 0.5 0.2 10180 6160 ? S 03:08 2:23 \_ /usr/local/apache/bin/httpd -DSSL
xoro 8042 0.0 0.3 51368 8156 ? S 09:31 0:00 | \_ /usr/bin/php recover.php
nobody 27307 0.2 0.2 10148 5728 ? S 03:08 1:08 \_ /usr/local/apache/bin/httpd -DSSL
nobody 31013 0.1 0.2 10076 5640 ? S 03:08 0:29 \_ /usr/local/apache/bin/httpd -DSSL
nobody 21974 0.0 0.2 10060 5588 ? S 03:08 0:19 \_ /usr/local/apache/bin/httpd -DSSL
xoro 10349 0.0 0.4 51424 8376 ? S 09:57 0:00 | \_ /usr/bin/php torrents.php
nobody 28780 0.2 0.2 10216 5744 ? S 03:08 1:03 \_ /usr/local/apache/bin/httpd -DSSL
xoro 18985 0.0 0.4 51404 8428 ? S 09:44 0:00 | \_ /usr/bin/php index.php
nobody 32490 0.4 0.3 10548 6532 ? S 03:08 2:10 \_ /usr/local/apache/bin/httpd -DSSL
nobody 26155 0.3 0.3 10700 6660 ? S 03:08 1:33 \_ /usr/local/apache/bin/httpd -DSSL
nobody 5985 0.2 0.2 10176 5712 ? S 03:08 1:08 \_ /usr/local/apache/bin/httpd -DSSL
nigmae 22415 8.8 0.0 0 0 ? Z 10:25 0:00 | \_ [php] <defunct>
nobody 5390 0.5 0.3 10212 6204 ? S 03:08 2:14 \_ /usr/local/apache/bin/httpd -DSSL
nobody 29768 0.5 0.3 10540 6484 ? S 03:08 2:11 \_ /usr/local/apache/bin/httpd -DSSL
nobody 10000 0.2 0.2 10208 6172 ? S 03:08 1:14 \_ /usr/local/apache/bin/httpd -DSSL
nobody 30178 0.0 0.2 10000 5500 ? S 03:08 0:02 \_ /usr/local/apache/bin/httpd -DSSL
xoro 17834 0.0 0.4 51656 8804 ? S 09:12 0:00 | \_ /usr/bin/php account.php
nobody 8195 0.6 0.3 10728 6856 ? S 03:08 2:59 \_ /usr/local/apache/bin/httpd -DSSL
nobody 3113 0.6 0.3 11596 6880 ? S 03:08 2:52 \_ /usr/local/apache/bin/httpd -DSSL
nobody 2233 0.2 0.2 10140 5660 ? S 03:08 1:04 \_ /usr/local/apache/bin/httpd -DSSL
xoro 10403 0.0 0.4 51384 8344 ? S 09:16 0:00 | \_ /usr/bin/php torrents.php
nobody 8641 0.1 0.2 10140 5660 ? S 03:09 0:51 \_ /usr/local/apache/bin/httpd -DSSL
nobody 17429 0.2 0.2 10164 6116 ? S 03:09 1:06 \_ /usr/local/apache/bin/httpd -DSSL
nobody 9969 0.5 0.3 10172 6300 ? R 03:09 2:31 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23703 0.5 0.3 10876 6720 ? S 03:09 2:23 \_ /usr/local/apache/bin/httpd -DSSL
chatnet 25096 0.0 0.2 5944 4688 ? S 10:08 0:00 | \_ /usr/bin/perl nph-irc.cgi
nobody 20594 0.4 0.2 10404 5948 ? S 03:09 1:51 \_ /usr/local/apache/bin/httpd -DSSL
nobody 8621 0.5 0.3 10308 6436 ? S 03:10 2:19 \_ /usr/local/apache/bin/httpd -DSSL
nobody 18582 0.2 0.3 10952 6916 ? S 03:10 1:11 \_ /usr/local/apache/bin/httpd -DSSL
nobody 29630 0.3 0.2 10244 5792 ? S 03:15 1:19 \_ /usr/local/apache/bin/httpd -DSSL
nobody 19069 0.0 0.2 9956 5444 ? S 03:15 0:02 \_ /usr/local/apache/bin/httpd -DSSL
xoro 4710 0.0 0.4 51396 8364 ? S 09:07 0:00 | \_ /usr/bin/php index.php
nobody 16179 0.5 0.2 10504 6072 ? S 03:15 2:10 \_ /usr/local/apache/bin/httpd -DSSL
xoro 26458 0.0 0.4 51352 8340 ? S 09:18 0:00 | \_ /usr/bin/php torrents.php
nobody 25895 0.1 0.2 10132 5648 ? S 03:31 0:34 \_ /usr/local/apache/bin/httpd -DSSL
xoro 32589 0.0 0.4 51360 8324 ? S 09:39 0:00 | \_ /usr/bin/php torrents.php
nobody 11120 0.2 0.2 10280 5796 ? S 04:00 0:55 \_ /usr/local/apache/bin/httpd -DSSL
xoro 4586 0.0 0.3 51436 8248 ? S 09:21 0:00 | \_ /usr/bin/php userdetails.php
nobody 17989 0.0 0.2 9884 5312 ? S 09:10 0:00 \_ /usr/local/apache/bin/httpd -DSSL
xoro 5568 0.0 0.4 51388 8368 ? S 09:11 0:00 | \_ /usr/bin/php index.php
nobody 22299 0.0 0.2 9884 5168 ? S 09:14 0:00 \_ /usr/local/apache/bin/httpd -DSSL
xoro 2251 0.0 0.3 51376 8264 ? S 09:14 0:00 | \_ /usr/bin/php torrents.php
nobody 31386 0.0 0.2 9884 5376 ? S 09:34 0:00 \_ /usr/local/apache/bin/httpd -DSSL
xoro 7388 0.0 0.4 51428 8372 ? S 09:37 0:00 | \_ /usr/bin/php index.php
nobody 918 0.5 0.2 10104 5624 ? S 09:52 0:10 \_ /usr/local/apache/bin/httpd -DSSL
nobody 26242 0.6 0.2 10084 5592 ? S 09:52 0:12 \_ /usr/local/apache/bin/httpd -DSSL
nobody 12974 0.6 0.2 10068 5600 ? S 09:52 0:12 \_ /usr/local/apache/bin/httpd -DSSL
nobody 20117 0.5 0.3 11136 6272 ? S 09:52 0:11 \_ /usr/local/apache/bin/httpd -DSSL
nobody 6784 0.5 0.2 10048 5596 ? S 09:52 0:11 \_ /usr/local/apache/bin/httpd -DSSL
nobody 18024 0.5 0.2 10092 5544 ? S 09:52 0:10 \_ /usr/local/apache/bin/httpd -DSSL
nobody 16335 0.5 0.2 10124 5632 ? S 09:52 0:11 \_ /usr/local/apache/bin/httpd -DSSL
nobody 10570 0.1 0.2 10016 5532 ? S 09:53 0:03 \_ /usr/local/apache/bin/httpd -DSSL
xoro 4635 0.0 0.4 51424 8364 ? S 10:03 0:00 | \_ /usr/bin/php index.php
nobody 4404 0.6 0.2 9960 5488 ? S 09:53 0:12 \_ /usr/local/apache/bin/httpd -DSSL
nobody 16623 0.0 0.2 9884 5396 ? S 09:53 0:01 \_ /usr/local/apache/bin/httpd -DSSL
xoro 18058 0.0 0.4 51388 8376 ? S 09:59 0:00 | \_ /usr/bin/php index.php
nobody 12654 0.7 0.2 10148 5584 ? S 10:02 0:09 \_ /usr/local/apache/bin/httpd -DSSL
nobody 3353 0.5 0.2 9984 5532 ? S 10:03 0:07 \_ /usr/local/apache/bin/httpd -DSSL
nobody 16482 0.6 0.2 10016 5512 ? S 10:03 0:08 \_ /usr/local/apache/bin/httpd -DSSL
nobody 22684 0.5 0.2 10020 5448 ? S 10:09 0:05 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23960 0.7 0.2 9956 5472 ? S 10:12 0:05 \_ /usr/local/apache/bin/httpd -DSSL
nobody 8433 0.7 0.2 10012 5904 ? S 10:13 0:05 \_ /usr/local/apache/bin/httpd -DSSL
nobody 5443 0.6 0.2 9992 5476 ? S 10:14 0:04 \_ /usr/local/apache/bin/httpd -DSSL
nobody 6330 0.8 0.2 9956 5480 ? S 10:14 0:05 \_ /usr/local/apache/bin/httpd -DSSL
nobody 2716 0.5 0.2 10016 5540 ? S 10:14 0:03 \_ /usr/local/apache/bin/httpd -DSSL
nobody 6009 0.7 0.2 10076 5564 ? S 10:14 0:04 \_ /usr/local/apache/bin/httpd -DSSL
nobody 7480 0.6 0.2 9976 5500 ? S 10:14 0:04 \_ /usr/local/apache/bin/httpd -DSSL
nobody 7360 0.3 0.2 9884 5380 ? S 10:14 0:02 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23925 0.9 0.2 10016 5376 ? S 10:20 0:02 \_ /usr/local/apache/bin/httpd -DSSL
nobody 7399 0.6 0.2 10016 5472 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 26462 0.9 0.2 10016 5508 ? S 10:21 0:02 \_ /usr/local/apache/bin/httpd -DSSL
nobody 27450 0.6 0.2 9976 5472 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23430 0.7 0.2 9972 5456 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 9030 0.5 0.2 9884 5368 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 8696 0.3 0.2 9956 5412 ? S 10:21 0:00 \_ /usr/local/apache/bin/httpd -DSSL
nobody 7684 0.8 0.2 10008 5380 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 2488 0.3 0.2 9884 5352 ? S 10:21 0:00 \_ /usr/local/apache/bin/httpd -DSSL
nobody 28818 0.8 0.2 9884 5396 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 31532 0.4 0.2 9884 5408 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 29191 0.7 0.2 10016 5452 ? S 10:21 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 5143 1.0 0.2 9884 5300 ? S 10:23 0:01 \_ /usr/local/apache/bin/httpd -DSSL
nobody 20043 0.3 0.2 9884 5236 ? S 10:25 0:00 \_ /usr/local/apache/bin/httpd -DSSL
nobody 14720 0.1 0.2 9884 5160 ? S 10:25 0:00 \_ /usr/local/apache/bin/httpd -DSSL
nobody 23127 0.2 0.2 9884 5224 ? S 10:25 0:00 \_ /usr/local/apache/bin/httpd -DSSL
katmai 23525 0.0 0.2 6916 5940 ? Ss Jul27 0:07 ./ircd
root 25491 0.0 0.3 12372 6492 ? S 03:03 0:01 cpsrvd - waiting for connections
root 4793 0.0 0.0 4348 1240 ? S 03:08 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/nemesis.design
mysql 11382 7.1 1.4 129512 29532 ? Sl 03:08 31:05 \_ /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mys
root 25373 0.0 0.0 4548 932 ? Ss 03:26 0:00 crond
mailnull 8296 0.0 0.2 10068 5248 ? S 09:15 0:00 eximstats
root 19134 0.0 0.6 15320 13376 ? Ss 10:22 0:00 /usr/sbin/clamd
mailnull 30726 0.0 0.0 7376 1200 ? Ss 10:22 0:00 /usr/sbin/exim -bd -q60m
mailnull 31123 0.0 0.0 7348 1152 ? Ss 10:22 0:00 /usr/sbin/exim -tls-on-connect -bd -oX 465
root 18078 0.0 0.0 3024 1012 pts/1 S 10:22 0:00 antirelayd
root 7492 0.9 1.5 34912 32768 ? Ss 10:22 0:01 /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pid --max-children=5
root 5788 0.0 1.5 34912 31236 ? S 10:22 0:00 \_ spamd child
root 2941 0.3 1.6 35980 33740 ? S 10:22 0:00 \_ spamd child

Server Version: Apache/1.3.36 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.27 OpenSSL/0.9.7a PHP-CGI/0.1b
Server Built: Jul 14 2006 14:19:27
Current Time: Friday, 28-Jul-2006 10:37:12 EST
Restart Time: Friday, 28-Jul-2006 03:08:52 EST
Parent Server Generation: 5
Server uptime: 7 hours 28 minutes 20 seconds
Total accesses: 640886 - Total Traffic: 2.4 GB
CPU Usage: u4489.24 s434.12 cu3441.16 cs2977.25 - 42.2% CPU load
23.8 requests/sec - 91.8 kB/second - 3943 B/request
57 requests currently being processed, 16 idle servers

Well, I guess you have a few torrent sites on the server getting hit heavily. Since the number of hits is too high, your apache can't cope up with it esp. due to the installation of mod_security. Either you should go for a more powerful server or get rid of mod_security. (or disable it for few sites)

Again, have you moved your MySQL to a second drive? and are the optimizations recommended in the previous topic applied?

just a sec i have read in few cpanel threads that gzip makes load. i am working on to see what is going on. i also disabled useragents.conf and kept only

Include "/usr/local/apache/conf/modsec.user.conf"
#Include "/usr/local/apache/conf/useragents.conf"
Include "/usr/local/apache/conf/rules.conf"


in modsec.conf

i will keep you posted .

on the other hand i moved all sites on the second drive, and the first drive has only the system files and mysql db.

i have recompiled the apache without mod gzip and load stays at 2 ... from 6 . ... the site has pretty many hits. could be the modsecurity on it ? causing load.? i disabled all rulesets in modsec.conf but still you know ... i notised some sql injection attacks on the server so i am considering to bring them back ...

Ahh, well mod_gzip was the culprit here..

To turn off mod_security for sites, you can add in your each virtualhost (except the one you need it enabled):

SecFilterEngine Off