I just did a lsof command on a PID that was using 69% of cpu load
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
php-fpm 21135 nginx cwd DIR 8,2 4096 2 /
php-fpm 21135 nginx rtd DIR 8,2 4096 2 /
php-fpm 21135 nginx txt REG 8,2 4026396 4149118 /usr/sbin/php-fpm
php-fpm 21135 nginx mem REG 8,2 69316 4149130 /usr/lib/libXpm.so.4.11.0
php-fpm 21135 nginx mem REG 8,2 20092 4149145 /usr/lib/libXdmcp.so.6.0.0
php-fpm 21135 nginx mem REG 8,2 31992 4431933 /usr/lib/php/modules/json.so
php-fpm 21135 nginx mem REG 8,2 35816 4423701 /usr/lib/php/modules/mcrypt.so
php-fpm 21135 nginx mem REG 8,2 24004 4149115 /usr/lib/libltdl.so.3.1.4
php-fpm 21135 nginx mem REG 8,2 43032 4431971 /usr/lib/php/modules/mysql.so
php-fpm 21135 nginx mem REG 8,2 24492 4431973 /usr/lib/php/modules/pdo_mysql.so
php-fpm 21135 nginx mem REG 8,2 1842560 4431932 /usr/lib/php/modules/fileinfo.so
php-fpm 21135 nginx mem REG 8,2 320112 4431974 /usr/lib/php/modules/gd.so
php-fpm 21135 nginx mem REG 8,2 613460 4144068 /usr/lib/libkrb5.so.3.3
php-fpm 21135 nginx mem REG 8,2 20172 4431966 /usr/lib/php/modules/pdo_sqlite.so
php-fpm 21135 nginx mem REG 8,2 157336 4143486 /usr/lib/libk5crypto.so.3.1
php-fpm 21135 nginx mem REG 8,2 185896 4149073 /usr/lib/libmcrypt.so.4.4.8
php-fpm 21135 nginx mem REG 8,2 31224 4431968 /usr/lib/php/modules/wddx.so
php-fpm 21135 nginx mem REG 8,2 24316 4431969 /usr/lib/php/modules/xmlreader.so
php-fpm 21135 nginx mem REG 8,2 190712 4147632 /usr/lib/libgssapi_krb5.so.2.2
php-fpm 21135 nginx mem REG 8,2 293044 21858908 /lib/libssl.so.0.9.8e
php-fpm 21135 nginx mem REG 8,2 271532 4149119 /usr/lib/libt1.so.5.1.1
php-fpm 21135 nginx mem REG 8,2 90752 4431970 /usr/lib/php/modules/memcache.so
php-fpm 21135 nginx mem REG 8,2 113612 4431972 /usr/lib/php/modules/mysqli.so
php-fpm 21135 nginx mem REG 8,2 90076 4431965 /usr/lib/php/modules/pdo.so
php-fpm 21135 nginx mem REG 8,2 257508 4431934 /usr/lib/php/modules/phar.so
php-fpm 21135 nginx mem REG 8,2 37692 4431975 /usr/lib/php/modules/xmlwriter.so
php-fpm 21135 nginx mem REG 8,2 9412 4148802 /usr/lib/libXau.so.6.0.0
php-fpm 21135 nginx mem REG 8,2 108084 4423704 /usr/lib/php/modules/xcache.so
php-fpm 21135 nginx mem REG 8,2 387964 4149077 /usr/lib/libsqlite3.so.0.8.6
php-fpm 21135 nginx mem REG 8,2 61476 4431931 /usr/lib/php/modules/curl.so
php-fpm 21135 nginx mem REG 8,2 1250176 4144820 /usr/lib/libxml2.so.2.6.26
php-fpm 21135 nginx mem REG 8,2 1062108 4149146 /usr/lib/libX11.so.6.2.0
php-fpm 21135 nginx mem REG 8,2 24280 4431976 /usr/lib/php/modules/xsl.so
php-fpm 21135 nginx mem REG 8,2 78084 4431935 /usr/lib/php/modules/zip.so
php-fpm 21135 nginx mem REG 8,2 50848 21856295 /lib/libnss_files-2.5.so
php-fpm 21135 nginx mem REG 8,2 129900 21856273 /lib/ld-2.5.so
php-fpm 21135 nginx mem REG 8,2 7880 21858902 /lib/libkeyutils-1.2.so
php-fpm 21135 nginx mem REG 8,2 1693812 21856280 /lib/libc-2.5.so
php-fpm 21135 nginx mem REG 8,2 20668 21856308 /lib/libdl-2.5.so
php-fpm 21135 nginx mem REG 8,2 216544 21856468 /lib/libm-2.5.so
php-fpm 21135 nginx mem REG 8,2 137908 21856288 /lib/libpthread-2.5.so
php-fpm 21135 nginx mem REG 8,2 75028 4141546 /usr/lib/libz.so.1.2.3
php-fpm 21135 nginx mem REG 8,2 48156 21856290 /lib/librt-2.5.so
php-fpm 21135 nginx mem REG 8,2 245376 21858904 /lib/libsepol.so.1
php-fpm 21135 nginx mem REG 8,2 93508 21858905 /lib/libselinux.so.1
php-fpm 21135 nginx mem REG 8,2 109740 21856304 /lib/libnsl-2.5.so
php-fpm 21135 nginx mem REG 8,2 198584 4139996 /usr/lib/libidn.so.11.5.19
php-fpm 21135 nginx mem REG 8,2 881927 4139874 /usr/lib/sse2/libgmp.so.3.3.3
php-fpm 21135 nginx mem REG 8,2 45432 21857147 /lib/libcrypt-2.5.so
php-fpm 21135 nginx mem REG 8,2 248028 4139052 /usr/lib/libcurl.so.3.0.0
php-fpm 21135 nginx mem REG 8,2 80636 21858903 /lib/libresolv-2.5.so
php-fpm 21135 nginx mem REG 8,2 1296964 21858907 /lib/libcrypto.so.0.9.8e
php-fpm 21135 nginx mem REG 8,2 7748 21858906 /lib/libcom_err.so.2.1
php-fpm 21135 nginx mem REG 8,2 33712 4141888 /usr/lib/libkrb5support.so.0.1
php-fpm 21135 nginx mem REG 8,2 1452892 4457600 /usr/lib/mysql/libmysqlclient.so.15.0.0
php-fpm 21135 nginx mem REG 8,2 150132 4431964 /usr/lib/php/modules/dom.so
php-fpm 21135 nginx mem REG 8,2 2039728 4431967 /usr/lib/php/modules/mbstring.so
php-fpm 21135 nginx mem REG 8,2 526896 4149086 /usr/lib/libfreetype.so.6.3.10
php-fpm 21135 nginx mem REG 8,2 135716 4141806 /usr/lib/libjpeg.so.62.0.0
php-fpm 21135 nginx mem REG 8,2 153504 4142021 /usr/lib/libpng12.so.0.10.0
php-fpm 21135 nginx mem REG 8,2 71852 4141164 /usr/lib/libbz2.so.1.0.3
php-fpm 21135 nginx mem REG 8,2 214688 4143335 /usr/lib/libxslt.so.1.1.17
php-fpm 21135 nginx mem REG 8,2 13152 4145453 /usr/lib/libgpg-error.so.0.3.0
php-fpm 21135 nginx mem REG 8,2 525484 4139206 /usr/lib/libgcrypt.so.11.5.2
php-fpm 21135 nginx mem REG 8,2 70288 4144893 /usr/lib/libexslt.so.0.8.13
php-fpm 21135 nginx DEL REG 0,9 1216510 /dev/zero
php-fpm 21135 nginx mem REG 8,2 56426000 4148747 /usr/lib/locale/locale-archive
php-fpm 21135 nginx mem REG 8,2 25462 4227955 /usr/lib/gconv/gconv-modules.cache
php-fpm 21135 nginx DEL REG 0,9 1216565 /dev/zero
php-fpm 21135 nginx 0u IPv4 1216519 TCP localhost.localdomain:cslistener (LISTEN)
php-fpm 21135 nginx 1u CHR 1,3 3603 /dev/null
php-fpm 21135 nginx 2u CHR 1,3 3603 /dev/null
php-fpm 21135 nginx 3u REG 8,2 0 17629190 /tmp/.xcache.0.0.1804289383.lock (deleted)
php-fpm 21135 nginx 4u REG 8,2 0 17629191 /tmp/.xcache.0.1.846930886.lock (deleted)