Gossamer Forum: General: Internet Technologies: Many copies...

Jun 3, 2002, 5:08 AM

Andy

Veteran / Moderator (18441 posts)

Jun 3, 2002, 5:08 AM

Post #1 of 13

Shortcut

Many copies...

For some reason, I have about 15-25 copies of this running at one time;

root 21149 1.5 4.0 33420 20572 ? D 13:03 0:01 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf

Does anyone know what this would be, cos I cant for the life of me work it out! It seems to be using up the resources, with almost 2% of the CPU being used up on each copy!

Andy (mod)
andy@ultranerds.co.uk

Jun 3, 2002, 5:35 AM

Paul

Veteran (19537 posts)

Jun 3, 2002, 5:35 AM

Post #2 of 13

Shortcut

Re: [Andy] Many copies... In reply to

webmin

Webmin runs as a server.

Jun 3, 2002, 5:53 AM

yogi

Veteran (2199 posts)

Jun 3, 2002, 5:53 AM

Post #3 of 13

Shortcut

Re: [Andy] Many copies... In reply to

I think you want to shut down that webmin server. It's not really something very secure, certainly not if it's not through a SSL connection (as in your case)...

Ivan
-----
Iyengar Yoga Resources / GT Plugins

Jun 3, 2002, 7:35 AM

Andy

Veteran / Moderator (18441 posts)

Jun 3, 2002, 7:35 AM

Post #4 of 13

Shortcut

Re: [Paul] Many copies... In reply to

In Reply To:

webmin

Webmin runs as a server.

Right, but why would it make multiple copies running if it is just me using it?

Andy (mod)
andy@ultranerds.co.uk

Jun 3, 2002, 8:29 AM

Paul

Veteran (19537 posts)

Jun 3, 2002, 8:29 AM

Post #5 of 13

Shortcut

Re: [Andy] Many copies... In reply to

Do a ps aux, you'll notice that most servers have several processes running at once, like httpd, mysql, named

Last edited by:

Paul: Jun 3, 2002, 8:29 AM

Jun 3, 2002, 8:37 AM

Andy

Veteran / Moderator (18441 posts)

Jun 3, 2002, 8:37 AM

Post #6 of 13

Shortcut

Re: [Paul] Many copies... In reply to

Yeah, I suppose. It just seems like a lot of CPU wastage (about 30-40%), just on WebMin...especially if I only have one copy of the admin page open anyway Unsure

Oh well.

Thanks

Andy (mod)
andy@ultranerds.co.uk

Jun 3, 2002, 8:42 AM

Paul

Veteran (19537 posts)

Jun 3, 2002, 8:42 AM

Post #7 of 13

Shortcut

Re: [Andy] Many copies... In reply to

Im not sure it is 40%, or at least it shouldn't be.

root 27432 0.0 0.7 5780 3860 ? S May22 0:02 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 27991 0.0 0.4 5224 2216 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 27992 0.0 0.4 5224 2216 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 27993 0.0 0.4 5228 2220 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 27995 0.0 0.4 5232 2220 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 27999 0.0 0.4 5232 2220 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 28014 0.0 0.4 5232 2220 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 28015 0.0 0.4 5236 2220 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30447 0.0 0.4 5316 2260 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30448 0.0 0.4 5316 2260 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30449 0.0 0.4 5320 2256 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30450 0.0 0.4 5320 2256 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30451 0.0 0.4 5324 2260 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30452 0.0 0.4 5324 2260 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30453 0.0 0.4 5328 2264 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co
root 30454 0.0 0.4 5328 2264 ? S May22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.co

The 0.7 and 0.4 are the CPU usage.

They total about 8-9%

Last edited by:

Paul: Jun 3, 2002, 8:42 AM

Jun 3, 2002, 8:48 AM

Andy

Veteran / Moderator (18441 posts)

Jun 3, 2002, 8:48 AM

Post #8 of 13

Shortcut

Re: [Paul] Many copies... In reply to

Ahhh...restarting WebMin seems to have had a good effect on it :)

I know this may sound silly....but how do you restart a machine via SSH? I know how to do it via Webmin, but I want to do it via SSH. The system seems to be on a seriouse slow down, even though I only have these things running;

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1368 72 ? S Apr02 0:06 init [3]
root 2 0.0 0.0 0 0 ? SW Apr02 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW Apr02 0:00 [kapm-idled]
root 4 0.0 0.0 0 0 ? SW Apr02 5:00 [kswapd]
root 5 0.0 0.0 0 0 ? SW Apr02 0:00 [kreclaimd]
root 6 0.0 0.0 0 0 ? SW Apr02 0:21 [bdflush]
root 7 0.0 0.0 0 0 ? SW Apr02 0:01 [kupdated]
root 8 0.0 0.0 0 0 ? SW< Apr02 0:00 [mdrecoveryd]
root 73 0.0 0.0 0 0 ? SW Apr02 0:00 [khubd]
root 400 0.0 0.0 0 0 ? SW Apr02 0:00 [eth0]
root 480 0.0 0.0 1944 4 ? S Apr02 0:00 klogd -2
rpc 494 0.0 0.0 1516 4 ? S Apr02 0:00 portmap
rpcuser 509 0.0 0.0 1672 4 ? S Apr02 0:00 rpc.statd
root 593 0.0 0.0 1352 4 ? S Apr02 0:00 /usr/sbin/apmd -p 10 -w 5 -W -P /etc/sysconfig/apm-scripts/apmscript
root 642 0.0 0.0 1480 44 ? S Apr02 0:00 /usr/sbin/automount --timeout 60 /misc file /etc/auto.misc
daemon 654 0.0 0.0 1400 4 ? S Apr02 0:00 /usr/sbin/atd
root 669 0.0 0.0 2588 440 ? S Apr02 0:27 /usr/sbin/sshd
root 689 0.0 0.0 2240 4 ? S Apr02 0:00 xinetd -stayalive -reuse -pidfile /var/run/xinetd.pid
root 734 0.0 0.0 1564 112 ? S Apr02 0:07 crond
root 759 0.0 0.0 6072 92 ? S Apr02 0:06 /usr/local/apache/bin/httpd
root 779 0.0 0.0 5016 464 ? S Apr02 0:14 /usr/sbin/snmpd -s -l /dev/null -P /var/run/snmpd -a
root 789 0.0 0.0 1340 4 tty1 S Apr02 0:00 /sbin/mingetty tty1
root 790 0.0 0.0 1340 4 tty2 S Apr02 0:00 /sbin/mingetty tty2
root 791 0.0 0.0 1340 4 tty3 S Apr02 0:00 /sbin/mingetty tty3
root 792 0.0 0.0 1340 4 tty4 S Apr02 0:00 /sbin/mingetty tty4
root 793 0.0 0.0 1340 4 tty5 S Apr02 0:00 /sbin/mingetty tty5
root 794 0.0 0.0 1340 4 tty6 S Apr02 0:00 /sbin/mingetty tty6
root 6946 0.0 0.0 2076 4 ? S Apr03 0:00 ftpd: accepting connections on port 21
named 19781 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named
named 19782 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named
named 19786 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named
named 19787 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named
named 19788 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named
named 19899 0.0 0.1 11460 528 ? S Apr20 0:00 named -u named
named 19900 0.0 0.1 11460 528 ? S Apr20 0:00 named -u named
named 19901 0.0 0.1 11460 528 ? S Apr20 0:00 named -u named
named 19902 0.0 0.1 11460 528 ? S Apr20 0:00 named -u named
named 19903 0.0 0.1 11460 528 ? S Apr20 0:00 named -u named
root 31363 0.0 0.0 1668 180 ? S Apr20 0:01 /sbin/syslogd
root 20083 0.0 0.0 5024 400 ? S May16 0:00 sendmail: accepting connections
root 11393 0.0 0.0 2136 4 ? S May31 0:00 /bin/sh /usr/local/mysql/bin/safe_mysqld
mysql 11406 0.0 0.2 15148 1140 ? S May31 0:00 /usr/local/mysql/libexec/mysqld --basedir=/usr/local/mysql --datadir=/usr/local/mysql/var --use
mysql 11408 0.0 0.2 15148 1140 ? S May31 0:00 /usr/local/mysql/libexec/mysqld --basedir=/usr/local/mysql --datadir=/usr/local/mysql/var --use
mysql 11409 0.0 0.2 15148 1140 ? S May31 2:02 /usr/local/mysql/libexec/mysqld --basedir=/usr/local/mysql --datadir=/usr/local/mysql/var --use
nobody 5446 0.0 0.3 8472 1640 ? S Jun02 0:11 /usr/local/apache/bin/httpd
nobody 5447 0.0 0.1 8596 996 ? S Jun02 0:10 /usr/local/apache/bin/httpd
nobody 5448 0.0 0.4 8480 2124 ? S Jun02 0:11 /usr/local/apache/bin/httpd
nobody 5449 0.0 0.3 7976 1584 ? S Jun02 0:10 /usr/local/apache/bin/httpd
nobody 5450 0.0 0.3 8584 1744 ? S Jun02 0:10 /usr/local/apache/bin/httpd
nobody 5453 0.0 0.1 7664 832 ? S Jun02 0:10 /usr/local/apache/bin/httpd
nobody 5454 0.0 0.4 8480 2040 ? S Jun02 0:09 /usr/local/apache/bin/httpd
nobody 5455 0.0 0.2 7880 1448 ? S Jun02 0:11 /usr/local/apache/bin/httpd
nobody 5456 0.0 0.2 8632 1180 ? S Jun02 0:10 /usr/local/apache/bin/httpd
nobody 5457 0.0 0.2 8632 1036 ? S Jun02 0:10 /usr/local/apache/bin/httpd
root 24926 0.0 0.3 3452 1664 ? S 16:43 0:00 /usr/sbin/sshd
root 24947 0.0 0.2 2448 1412 pts/0 S 16:44 0:00 -bash
nobody 25005 0.0 0.4 6232 2208 ? S 16:46 0:00 /usr/local/apache/bin/httpd
root 25026 0.2 0.6 4736 3468 ? S 16:46 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 25131 0.0 0.6 4744 3496 ? S 16:47 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
nobody 25136 0.0 0.1 6084 944 ? S 16:48 0:00 /usr/local/apache/bin/httpd
nobody 25137 0.0 0.1 6084 944 ? S 16:48 0:00 /usr/local/apache/bin/httpd
nobody 25138 0.0 0.1 6084 944 ? S 16:48 0:00 /usr/local/apache/bin/httpd
root 25141 0.0 0.1 2776 876 pts/0 R 16:48 0:00 ps -aux

Andy (mod)
andy@ultranerds.co.uk

Jun 3, 2002, 8:51 AM

Paul

Veteran (19537 posts)

Jun 3, 2002, 8:51 AM

Post #9 of 13

Shortcut

Re: [Andy] Many copies... In reply to

Why do you have named running when you don't run your own DNS?

shell> reboot

I wouldn't though unless you are confident with dealing with any crap-ups.

Last edited by:

Paul: Jun 3, 2002, 8:52 AM

Jun 3, 2002, 11:06 AM

Alex

Administrator (9387 posts)

Jun 3, 2002, 11:06 AM

Post #10 of 13

Shortcut

Re: [Andy] Many copies... In reply to

Make sure to update Webmin to 0.970, as there is a security hole in lower versions that allows people to get access to any user on your machine:

http://www.webmin.com/

Cheers,

Alex
--
Gossamer Threads Inc.

Jun 3, 2002, 11:07 AM

Alex

Administrator (9387 posts)

Jun 3, 2002, 11:07 AM

Post #11 of 13

Shortcut

Re: [Andy] Many copies... In reply to

Oh, and there are many copies, because webmin is a pre-forking webserver like Apache. It will fork many copies of itself to handle incoming requests. The ps shows you each copy that is running (much like multiple copies of httpd).

Cheers,

Alex
--
Gossamer Threads Inc.

Jun 4, 2002, 12:16 AM

brewt

Staff (4101 posts)

Jun 4, 2002, 12:16 AM

Post #12 of 13

Shortcut

Re: [Andy] Many copies... In reply to

You might want to stop services you don't use. I'm sure you're not using NFS, or anything that requires portmap and the lot...

raid stuff:
root 8 0.0 0.0 0 0 ? SW< Apr02 0:00 [mdrecoveryd]

nfs stuff:
rpc 494 0.0 0.0 1516 4 ? S Apr02 0:00 portmap
rpcuser 509 0.0 0.0 1672 4 ? S Apr02 0:00 rpc.statd

apm stuff (power management on a server?):
root 593 0.0 0.0 1352 4 ? S Apr02 0:00 /usr/sbin/apmd -p 10 -w 5 -W -P /etc/sysconfig/apm-scripts/apmscript

automount (mounting remote file systems?):
root 642 0.0 0.0 1480 44 ? S Apr02 0:00 /usr/sbin/automount --timeout 60 /misc file /etc/auto.misc

snmpd (running mrtg or something?):
root 779 0.0 0.0 5016 464 ? S Apr02 0:14 /usr/sbin/snmpd -s -l /dev/null -P /var/run/snmpd -a

named (running your own dns?):
named 19781 0.0 0.1 11468 528 ? S Apr20 0:00 named -u named

Less services running means less to compromise Smile

Adrian

Jun 4, 2002, 3:17 AM

Andy

Veteran / Moderator (18441 posts)

Jun 4, 2002, 3:17 AM

Post #13 of 13

Shortcut

Re: [brewt] Many copies... In reply to

Yeah, I think I wil do that. I gave running a DNS server a go, but I couldn't get the hang of it, so I just left it. As for the other stuff..I'll have a look at it and see what my admin think I will need, and get them to de-activate the stuff I don't need Tongue

Thanks

Andy (mod)
andy@ultranerds.co.uk