|
If there is a user running a process on your server which you dont want them to run and you can see it in the command top or virtuozzo then login to your SSH. Type the command top Then when you see the process appear click ctrl+c, copy the process id and enter in this command ll/proc/*process id goes hear please remove the stars* this is usefull if your clients are running there own shoutcasts without your permission. Then you will see something like this dr-xr-xr-x 2403 root root 0 Feb 5 22:42 ../
-r-------- 1 root root 0 Feb 6 16:50 auxv
-r--r--r-- 1 root root 0 Feb 6 16:45 cmdline
lrwxrwxrwx 1 root root 0 Feb 6 16:50 cwd -> //
-r-------- 1 root root 0 Feb 6 16:50 environ
lrwxrwxrwx 1 root root 0 Feb 6 16:45 exe -> /sbin/init*
dr-x------ 2 root root 0 Feb 6 16:37 fd/
-r--r--r-- 1 root root 0 Feb 6 16:50 maps
-rw------- 1 root root 0 Feb 6 16:50 mem
-r--r--r-- 1 root root 0 Feb 6 16:50 mounts
-r-------- 1 root root 0 Feb 6 16:50 mountstats
lrwxrwxrwx 1 root root 0 Feb 6 16:50 root -> //
-r-------- 1 root root 0 Feb 6 16:50 smaps
-r--r--r-- 1 root root 0 Feb 6 16:45 stat
-r--r--r-- 1 root root 0 Feb 6 16:50 statm
-r--r--r-- 1 root root 0 Feb 6 16:45 status
dr-xr-xr-x 3 root root 0 Feb 6 16:50 task/
-r--r--r-- 1 root root 0 Feb 6 16:50 wchan the lrwxrwxrwx 1 root root 0 Feb 6 16:45 exe -> /sbin/init* is the file you want to look at. From that you can tell the the file is located in /sbin/init/ (if a user was running a process it would look like /home/user name/public_html/
| 
