Monitoring And Troubleshooting

I am on a freebsd semi managed dedicated server (semi managed in that they dont really do out lol i just dont have root access, ssh though) unsing DirectAdmin

I need to find a way where i can monitor the processes that each account is using.

In the Service Monitor its showing all the services thats running for example, at present httpd is showing this:

httpd httpd (pid 96703 96702 96700 96698 96697 96696 96695 96694 96693 96692 96691 96690 96689 96688 96687 96686 96685 96684 96683 96682 96662 )I need to find more info about each of the pid's as i would like to know who is using what. does that make sense?
The other day (above httpd is normal) there was at least 10 times that amount and the server was dead slow, but i could not find any information as to who was using what and what cause the server to die....

I also have a customer that usually uses about 400mb to 500mb bandwidth per day, since the 28th of march this has gone sky high to nearly 2gb, he says he does not have any attachments fro download, nothing new has been added and no extra traffic, yet this has happened, this is why i need to find more info about such things, I have had a look at the logs but again, i do not really understand what any of it means...

i read this somewhere, but i dont think it works on my server...

Quote:

Look at the PID of the process using the most resources. Then use "ls -alh /proc/PID".

Ya'll get something like:

root@server02 [/]# ls -alh /proc/10231
total 0
dr-xr-xr-x 3 nobody nobody 0 Jan 17 15:35 ./
dr-xr-xr-x 144 root root 0 Dec 29 09:48 ../
-r--r--r-- 1 root root 0 Jan 17 15:35 cmdline
-r--r--r-- 1 root root 0 Jan 17 15:35 cpu
lrwxrwxrwx 1 root root 0 Jan 17 15:35 cwd -> /home/USERNAME/public_html/
-r-------- 1 root root 0 Jan 17 15:35 environ
lrwxrwxrwx 1 root root 0 Jan 17 15:35 exe -> /usr/local/apache/bin/httpd*
dr-x------ 2 root root 0 Jan 17 15:35 fd/
-r-------- 1 root root 0 Jan 17 15:35 maps
-rw------- 1 root root 0 Jan 17 15:35 mem
-r--r--r-- 1 root root 0 Jan 17 15:35 mounts
lrwxrwxrwx 1 root root 0 Jan 17 15:35 root -> //
-r--r--r-- 1 root root 0 Jan 17 15:35 stat
-r--r--r-- 1 root root 0 Jan 17 15:35 statm
-r--r--r-- 1 root root 0 Jan 17 15:35 status

The cwd -> will tell you what folder is being accessed. That should let you know what user.

You can also from SSH on Cpanel boxes use something like "lynx localhost/whm-server-status" to see connections to specific URLs.