CentOS suspicious process

Question

One of my web server is running on CentOS and I have been spotted that one of the processes is taking almost all swap memory. Mention process is:

/opt/opsware/agent/bin/pyton /opt/opsware/agent/pylibs/shadowbot/deamonbot.pyc --conf /etc/opt/opsware/agent/agent.args

I've tried to google it but I can't find anything.
Process is not using CPU only memory.
Do you know that I can kill it without affecting any of web services?

I've a similar issue, what is this process anyway? – Manikanta Naidu Kotte Oct 19 '16 at 06:55 — Manikanta Naidu Kotte, Oct 19 '16 at 06:55

score 5 · Answer 1 · answered Mar 15 '16 at 12:28

5

That looks like the agent for Opsware or HP's Server Automation software.

Are you responsible for this system? If not, can you see if the responsible party knows what is happening?

From here, it seems like the system you're working on is part of a larger environment, which may have some monitoring or deployment tools installed.

Look in /opt/opsware/ - This is well-known software that probably isn't there by accident or malicious means.

answered Mar 15 '16 at 12:28

ewwhite

197,159
92
443
809

Thanks I have already rise a ticket with hosting company. – Llucas Mar 15 '16 at 12:31

CentOS suspicious process

1 Answers1