How can I identify the purpose of a process called “analog”?

Question

I had an unusual amount of memory being used in the server and when I logged in as root and ran "top" I got this line:

13778 global    34  19 1726m 857m  336 D  1.3 85.6   1:49.89 analog     

Anyone know what the "analog" command means?

Answer 1

A program named analog eats your memory.

Run ps auxwww | grep [a]nalog as root. This will give you path to the binary. This can give you some information (if it is in /opt/somepackage/bin/analog) or it may not (if it's in /usr/bin). If your distribution is rpm-based you can run rpm -qf /path/to/file to determine package to which the file belongs. Then rpm -qi packagename will give you package description.

It is also possible that somebody compiled some code, named the resulting binary analog and run it. Binary name doesn't tell much.

Answer 2

Looks like a cPanel process to monitor your website's traffic.

Trace with: ls -l /proc/13778