Unix help plz

[prog]

Goatfuckers have compromised jmac.org somehow, and I can't do much about it because houseguests. Am trying to hold server together until I can block out six contiguous hours to rebuild everything.

Tell me why this happens, o sages of the internet:

top tells me that I have a perl process that is taking up 98% of CPU. But when I ps that PID, I am told that it's httpd. Er.

What's the correct way to find out what exactly is being perl'd? (I kill -9'd all those processes for now, but trust they'll be running again presently, because they've been doing that.)

Comments

[radiotelescope.livejournal.com]

I don't know exactly why top and ps would disagree about the name of a process, but it's probably that an Apache thread has execed perl. (Not mod_perl, but /usr/bin/perl.)