в данный момент ps ax

ось CentOS

зависание происходит один-два раза в день, как будто процесс расстет до определенного момента

а как в логах nginx и ядра смотреть что именно?







[~]# ps ax

PID TTY STAT TIME COMMAND

1 ? Ss 2:30 init [3]

2 ? S< 0:30 [migration/0]

3 ? SN 0:16 [ksoftirqd/0]

4 ? S< 0:00 [watchdog/0]

5 ? S< 0:28 [migration/1]

6 ? SN 0:10 [ksoftirqd/1]

7 ? S< 0:00 [watchdog/1]

8 ? S< 2:46 [migration/2]

9 ? SN 0:11 [ksoftirqd/2]

10 ? S< 0:00 [watchdog/2]

11 ? S< 0:30 [migration/3]

12 ? SN 0:10 [ksoftirqd/3]

13 ? S< 0:00 [watchdog/3]

14 ? S< 0:00 [events/0]

15 ? S< 0:00 [events/1]

16 ? S< 0:00 [events/2]

17 ? S< 0:00 [events/3]

18 ? S< 0:00 [khelper]

19 ? S< 0:00 [kthread]

25 ? S< 0:02 [kblockd/0]

26 ? S< 0:04 [kblockd/1]

27 ? S< 0:09 [kblockd/2]

28 ? S< 0:10 [kblockd/3]

29 ? S< 0:00 [cqueue/0]

30 ? S< 0:00 [cqueue/1]

31 ? S< 0:00 [cqueue/2]

32 ? S< 0:00 [cqueue/3]

35 ? S< 0:00 [khubd]

37 ? S< 0:00 [kseriod]

152 ? S< 13:36 [kswapd0]

153 ? S< 0:00 [aio/0]

154 ? S< 0:00 [aio/1]

155 ? S< 0:00 [aio/2]

156 ? S< 0:00 [aio/3]

313 ? S< 0:00 [kpsmoused]

358 ? S< 0:00 [scsi_eh_0]

369 ? S< 0:00 [kstriped]

390 ? S< 1:38 [kjournald]

419 ? S< 0:18 [kauditd]

450 ? S<s 0:00 /sbin/udevd -d

878 ? S< 0:00 [kedac]

917 ? S< 0:00 [ata/0]

918 ? S< 0:00 [ata/1]

919 ? S< 0:00 [ata/2]

920 ? S< 0:00 [ata/3]

921 ? S< 0:00 [ata_aux]

1129 ? S 0:00 /usr/local/cpanel/bin/leechprotect

1135 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

1137 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1138 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1141 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1142 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1143 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1144 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1145 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1146 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1147 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1148 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1149 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1150 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1151 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1152 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1153 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1154 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1155 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1156 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1157 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1158 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1159 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1160 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1161 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1162 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1163 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1164 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1165 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1166 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1167 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1168 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1169 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1170 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1171 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1172 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1173 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1174 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1175 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1176 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1177 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1178 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1184 ? S< 0:00 [scsi_eh_1]

1185 ? S< 0:00 [scsi_eh_2]

1186 ? S< 0:00 [scsi_eh_3]

1187 ? S< 0:00 [scsi_eh_4]

1188 ? S< 0:00 [scsi_eh_5]

1189 ? S< 0:00 [scsi_eh_6]

1246 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1379 ? S< 0:00 [kmpathd/0]

1380 ? S< 0:00 [kmpathd/1]

1381 ? S< 0:00 [kmpathd/2]

1382 ? S< 0:00 [kmpathd/3]

1383 ? S< 0:00 [kmpath_handlerd]

1412 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

1419 ? S< 12:12 [kjournald]

1421 ? S< 3:19 [kjournald]

1423 ? S< 7:23 [kjournald]

1425 ? S< 4:59 [kjournald]

1427 ? S< 3:06 [kjournald]

1429 ? S< 0:00 [kjournald]

1431 ? S< 4:01 [kjournald]

1461 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

1676 ? S 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql

1700 ? Sl 618:13 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql

1746 ? Ss 79:18 mcstransd

1948 ? S<sl 2:35 auditd

1950 ? S<sl 1:22 /sbin/audispd

2144 ? Ss 0:00 /usr/sbin/restorecond

2155 ? Ss 1:28 syslogd -m 0

2158 ? Ss 0:11 klogd -x

2170 ? Ss 0:20 irqbalance

2208 ? Ssl 0:05 dbus-daemon --system

2220 ? Ss 0:00 /usr/sbin/hcid

2255 ? S< 0:00 [krfcommd]

2297 ? Ssl 1:51 pcscd

2323 ? Ss 0:00 /usr/bin/hidd --server

2347 ? Ssl 0:26 automount

2389 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

2610 ? S 0:41 nginx: worker process

2611 ? S 0:44 nginx: worker process

2666 ? S 0:04 [pdflush]

3230 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

4062 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

5548 ? Ss 6:46 /usr/sbin/exim -bd -q60m

5929 ? Ss 0:11 pure-ftpd (SERVER)

5931 ? S 0:02 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sb

5942 ? Ss 0:47 crond

6288 ? Ss 0:21 /usr/sbin/munin-node

6444 ? S 0:00 cpdavd - accepting connections on 2077 and 2078

6468 ? S 1:54 queueprocd - wait to process a task

6490 ? S 2:59 tailwatchd

6492 ? SN 0:00 cpanellogd - sleeping for logs

6530 ? Ss 0:00 avahi-daemon: running [dl.local]

6531 ? Ss 0:00 avahi-daemon: chroot helper

6537 ? S 0:50 cpsrvd - waiting for connections

6558 ? Ss 0:01 hald

6559 ? S 0:00 hald-runner

6570 ? S 0:00 hald-addon-keyboard: listening on /dev/input/event0

6715 ? Ss 0:00 /usr/sbin/portsentry -tcp

6840 ? Ssl 222:39 /usr/sbin/named -u named

7101 ? S 0:00 /usr/sbin/smartd -q never

7104 tty1 Ss+ 0:00 /sbin/mingetty tty1

7105 tty2 Ss+ 0:00 /sbin/mingetty tty2

7106 tty3 Ss+ 0:00 /sbin/mingetty tty3

7107 tty4 Ss+ 0:00 /sbin/mingetty tty4

7108 tty5 Ss+ 0:00 /sbin/mingetty tty5

7109 tty6 Ss+ 0:00 /sbin/mingetty tty6

7175 ? SN 0:15 /usr/bin/python -tt /usr/sbin/yum-updatesd

7177 ? SN 0:13 /usr/libexec/gam_server

7597 ? S 0:03 /usr/local/apache/bin/httpd -k start -DSSL

8638 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

9114 ? S 0:00 cpdavd - accepting connections on 2077 and 2078

9314 ? S 0:02 /usr/local/apache/bin/httpd -k start -DSSL

10502 ? Ss 1:11 lfd - sleeping

10512 ? S 0:00 lfd HTML messenger

10513 ? S 0:00 lfd TEXT messenger

12810 ? Ss 0:00 sshd: dest77 [priv]

12816 ? S 0:00 sshd: dest77@notty

12817 ? Ss 0:00 jailshell (dest77) [12824] ll -c /usr/libexec/opens

12824 ? S 0:00 /usr/libexec/openssh/sftp-server

13534 ? Ss 0:01 nginx: master process /usr/sbin/nginx -c /etc/nginx/n

16546 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

16557 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

16564 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

16573 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

16594 ? S 0:00 /usr/local/apache/bin/httpd -k start -DSSL

17566 ? S 0:11 /etc/authlib/authProg

18428 ? S 0:14 [pdflush]

18470 ? S 0:00 /usr/sbin/exim -q

19179 ? S 0:00 pure-ftpd (IDLE)

19180 ? S 0:00 pure-ftpd (PRIV)

21070 ? S 0:00 /usr/sbin/exim -q

21090 ? S 0:00 /usr/sbin/exim -q

22824 ? S 0:00 /usr/sbin/exim -q

22825 ? S 0:00 /usr/sbin/exim -q

22976 ? S 0:00 pure-ftpd (IDLE)

22977 ? S 0:00 pure-ftpd (PRIV)

23099 ? S 0:00 whostmgrd - serving 80.80.118.77

23149 ? Ss 0:00 sshd: root@pts/0

23167 ? Ss 0:29 /usr/local/apache/bin/httpd -k start -DSSL

23211 pts/0 Ss 0:00 -bash

23277 ? S 0:00 /usr/sbin/exim -MCS -MCP -MC dk_remote_smtp p.nsm.ctm

23278 ? S 0:00 /usr/sbin/exim -MCS -MCP -MC dk_remote_smtp p.nsm.ctm

23321 pts/0 R+ 0:00 ps ax

23513 ? Ss 0:00 /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/

23524 ? S 0:01 spamd child

23525 ? S 0:00 spamd child

26578 ? S 0:05 /usr/sbin/courierlogger -pid=/var/run/imapd.pid -star

26579 ? S 0:09 /usr/lib/courier-imap/libexec/couriertcpd -address=0

26585 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/imapd-ssl.pid -

26586 ? S 0:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0

26591 ? S 0:13 /usr/sbin/courierlogger -pid=/var/run/pop3d.pid -star

26592 ? S 0:22 /usr/lib/courier-imap/libexec/couriertcpd -address=0

26597 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/pop3d-ssl.pid -

26598 ? S 0:01 /usr/lib/courier-imap/libexec/couriertcpd -address=0

26603 ? S 0:00 /usr/sbin/courierlogger -pid=/var/spool/authdaemon/pi

26604 ? S 0:00 /usr/libexec/courier-authlib/authdaemond

26605 ? S 0:01 /usr/libexec/courier-authlib/authdaemond

26606 ? S 0:01 /usr/libexec/courier-authlib/authdaemond

26607 ? S 0:01 /usr/libexec/courier-authlib/authdaemond

26608 ? S 0:01 /usr/libexec/courier-authlib/authdaemond

26609 ? S 0:01 /usr/libexec/courier-authlib/authdaemond

26826 ? S 0:00 cpdavd - accepting connections on 2077 and 2078

27942 ? S 0:11 /etc/authlib/authProg

29432 ? S 0:05 /etc/authlib/authProg

30477 ? S 0:11 /etc/authlib/authProg

32246 ? S 0:05 /etc/authlib/authProg

32305 ? S 0:01 /usr/local/apache/bin/httpd -k start -DSSL

32412 ? S 0:00 /usr/sbin/exim -q

32642 ? Ss 0:01 /usr/sbin/sshd

[~]#