User Process Tracking

firewallman · Post by **firewallman** » 26 Apr 2007, 17:36

You can set PT_USERPROC to send an email when X number of processes have been exceeded but there is no option to kill those excessive processes.

Suggest this option be included, similiar to the way PT_USERMEM and PT_USERTIME are setup.

Also it would be ideal if you could specify specific processes or exclude specific processes for PT_USERPROC by using the path to the executable.

For example if a process is giving trouble it would be nice to specify that only that process would be killed if it exceeded X number of instances.

Post by **chirpy** » 27 Apr 2007, 16:23

There is a kill option: PT_USERKILL in csf.conf

You can exclude specific executables in csf.pignore

firewallman · Post by **firewallman** » 27 Apr 2007, 20:26

Chirpy,

From csf.conf describing PT_USERKILL:

# If this option is set then processes detected by PT_USERMEM or PT_USERTIME
# are killed
PT_USERKILL =1

It does not state that processes detected by PT_USERPROC will be killed only PT_USERMEM or PT_USERTIME. Also in the description for PT_USERPROC it does not say you can kill excess processes, only that an email will be sent.

Here is description for PT_USERPROC:

# User Process Tracking. This option enables the tracking of the number of
# process any given cPanel account is running at one time. If the number of
# processes exceeds the value of the following setting an email alert is sent
# with details of those processes. A user is only reported once, so lfd must be
# restarted to reinstate checking of all users. If you specify a user in
# csf.pignore it will be ignored
#
# Set to 0 to disable this feature
PT_USERPROC = 15

Post by **chirpy** » 02 May 2007, 09:56

I'll have a look into that for the future.