A VPS running Ubuntu 14.04.5 LTS is consuming nearly 300% of CPU capacity.  It is identified running top as cER6XH.  Is there any way to track down what this process is and why it may be going rogue?
This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
Why does a query run slower in a Stored Procedure than in the Query window? First of all, I think this question is not duplicated, because I have tried all other solutions I found here, but nothing solved my problem.  I use Ubuntu 14.04 64 bit.  I have tried until now: sudo apt-get install skype -> It didn't work. The error was:   The following packages have unmet dependencies: skype : Depends: skype-bin E: Unable to correct problems, you have held broken packages.   I have tried sudo dpkg add-architecture &amp;&amp; sudo dpkg -i skype-ubuntu-precise_4.3.0.37-1_i386.deb but it didn't work either. The error was:  dpkg: dependency problems prevent configuration of skype: skype depends on libqt4-dbus (&gt;= 4:4.5.3); however: Package libqt4-dbus is not installed. skype depends on libqt4-network (&gt;= 4:4.8.0); however: Package libqt4-network:i386 is not installed. skype depends on libqt4-xml (&gt;= 4:4.5.3); however: Package libqt4-xml:i386 is not installed. skype depends on libqtcore4 (&gt;= 4:4.7.0~beta1); however: Package libqtcore4:i386 is not installed. skype depends on libqtgui4 (&gt;= 4:4.8.0); however: Package libqtgui4:i386 is not installed. skype depends on libqtwebkit4 (&gt;= 2.2~2011week36); however: skype depends on libstdc++6 (&gt;= 4.2.1); however: Package libstdc++6:i386 is not installed. skype depends on libx11-6; however: Package libx11-6:i386 is not installed. skype depends on libxext6; however: Package libxext6:i386 is not installed. skype depends on libxss1; however: Package libxss1:i386 is not installed. skype depends on libxv1; however: Package libxv1:i386 is not installed. skype depends on dpkg: error processing package skype (--install): dependency problems - leaving unconfigured Processing triggers for hicolor-icon-theme (0.13-1) ... Processing triggers for gnome-menus (3.10.1-0ubuntu2) ... Processing triggers for desktop-file-utils (0.22-1ubuntu1) ... Processing triggers for bamfdaemon (0.5.1+14.04.20140409-0ubuntu1) ... Rebuilding /usr/share/applications/bamf-2.index... Processing triggers for mime-support (3.54ubuntu1) ... Errors were encountered while processing: skype   I have tried to use after sudo apt-get -f install but it didn't solve the issue.  I have tried to install by using Gdebi. The error was:  Cannot install 'libqtwebkit4:i386'   I have tried to install using Ubuntu Software Center. The error was:  Cannot install 'libqtwebkit4:i386'   I have tried changing the server in "Software and Updates". I have tried to use "Main Server" and "Servers for United States". But it couldn't solve my problem.  Anyone has any idea how to solve that?  SOLVED  Well, I formatted my pc and I installed Skype first of all. Probably another installation that I had done before the Skype installation was the problem, i guess.  Thanks people! On Takodana,      the main characters and various bar patrons can see the planet Hosnian Prime being destroyed by Starkiller Base with their (respective) naked eyes. How did they see this? Is the Hosnian system close enough to see? If it's not very close and they could just see the explosion, how did the light from it reach them so quickly? Prevent Windows 10 from installing/updating a specific driver? It seems that the recent Synaptics driver update for Synaptics SMBus TouchPad on Windows 10 (build 100049) somehow doesn't see my middle-button. Uninstalling, and installing an older driver for Windows 8.1 from the HP site (my machine is HP EliteBook 8570w) restores the middle button functionality.    Few days later, the driver updates itself again, and I lose the middle-button.  I realize I'm running unsupported software, but is it possible to prevent updating this particular driver, without either disabling updates altogether or preventing other drivers from updating? Find the sum $\frac{1}{2\cdot 3}+\frac{1}{3\cdot 4}+\dots+\frac{1}{99\cdot 100}$ Please help me calculate the following sum     $$\frac{1}{2\cdot 3}+\frac{1}{3\cdot 4}+\dots+\frac{1}{99\cdot 100}$$ I'm new to Linux. I got the "Unix And Linux System Administration Handbook" It speaks of several verisons of linux and unix, and the commands for viewing linux man pages and not specific to ubuntu.   How do I view the manpages? Layover at Tokyo Narita airport: can I travel outside, and what kind of visa would I need? I am travelling from Singapore to San Francisco and the airline has a layover of 7.5 hours at Tokyo Airport (NRT). I am wondering if I would be allowed to go out to experience the city for a while in some form a visitor visa.  I know Singapore has such facilities, but does anyone know if I can do it in Tokyo? Any suggestions or pointers are welcome. Note - I do not have a visa for Japan yet, but I am hoping that 1 day visitor visa could be possible at airport. How to avoid the wrinkle at the poles of the UV sphere? I have done major updates to my website, and renamed all my URLs.  How can I tell Google that I have renamed these URLs and let Google refresh its index?  My website URL: http://www.pndmasr.com/  My sitemap: http://www.pndmasr.com/sitemap.xml  I have uploaded my sitemap via Google Webmaster Tools many times.  However, every time I search Google for "pndmasr", I still get results with old pages. I have waited more than 3 days but the problem remains. Any suggestions?  Is there a problem with my sitemap? Maximum length of a USB Cable? Prove that given $A\subseteq\mathbb{R}$, if has a maximum $a_0$, then $a_0$ must be the supremum.   In order to prove this, I have written the following:  Let $A\subseteq \mathbb{R}$, nonempty set because $a_{0}$ $\in A$ for hypotesis. Then, since $a_{0}$ $\in A$ is the largest element of the set $A$   (i.e. for each element $A$ of A we have that $ a\leq a_{0}$) $A$ is bounded above. Then, A has a supremum. Let $s$ be the least upper bound of $A,$ so we have that for each element $a$ of $A$, $a\leq s$, for being $s$ an upper bound. In particular, $a_0\leq s$, which implies that $s=a_0$.   Then, we have that $\sup(A)=\max(A)=a_0$, which is exactly what we wanted to prove.  Observation: this proof is true if $s \in A$   I'm not sure if my proof is correct. I will be thankful if someone tells me. Journey SMS Fails - Object reference not set? I have a Journey which sends the Subscriber SMS messages, 2/4 journey entries (all unique subscribers) don't receive the SMS.  The error displayed in the SMS activity in my Journey History is the following:      Failed - Object reference not set to an instance of an object.   Can anyone advise what this means? If it was configuration surely all subscribers wouldn't receive the message? I can confirm all subscribers have a mobile number and they use the same format and country code. Not sure if it helps but the entry source is Salesforce Data Entry.  Edit:  There can be entries where the Subscriber record does not exist in the AllSubscribers list as they do not have email addresses attached (only mobile numbers) but my journey only contains SMS message activities, no email. I have checked and even on some Subscribers that do have AllSubscribers records suffer the same activity error. What is the best way to get the names of all of the tables in a specific database on SQL Server? Is it normal for BibTeX to replace similar author names with "------"? In my .bib file, I have two entries with exactly the same author names:  @article{Seshadrinathan2010A-Subjective-St,     Author = {K. Seshadrinathan and R. Soundararajan and A. C. Bovik and L. K. Cormack}, ....  @article{Seshadrinathan2009Study-of-Subjec,     Author = {K. Seshadrinathan and R. Soundararajan and A. C. Bovik and L. K. Cormack}, ....   When cited after each other, and typeset with the IEEEtran bibliography style, the .bbl file reads:  \bibitem{Seshadrinathan2010A-Subjective-St} K.~Seshadrinathan, R.~Soundararajan, A.~C. Bovik, and L.~K. Cormack, ``A   subjective study to evaluate video quality assessment algorithms,''   \emph{SPIE Proceedings Human Vision and Electronic Imaging}, 2010.  \bibitem{Seshadrinathan2009Study-of-Subjec} ------, ``Study of subjective and objective quality assessment of video,''   \emph{IEEE Transactions on Image Processing}, 2009.   As you can see, the author names have been replaced with ------. It looks like this in the final PDF:    Is this normal behavior? Can a sql server table have two identity columns? I need to have one column as the primary key and another to auto increment an order number field. Is this possible?  EDIT: I think I'll just use a composite number as the order number. Thanks anyways. Compactness of  Multiplication Operator on $L^2$ Maximize $\mathrm{tr}(Q^TCQ)$ subject to $Q^TQ=I$ Let $C \in \mathbb{R}^{d \times d}$ be symmetric, and   $$Q = \begin{bmatrix}       \vert &amp; \vert &amp;    &amp; \vert \\       q_1   &amp; q_2   &amp; \dots &amp; q_K  \\       \vert &amp; \vert &amp;    &amp; \vert       \end{bmatrix} \in \mathbb{R}^{d\times K}$$  where $d \geq K$. Using Lagrange multipliers,   $$\begin{array}{ll} \text{maximize} &amp; \mbox{tr} \left( Q^T C Q \right)\\ \text{subject to} &amp; Q^T Q = I\end{array}$$    I am unfamiliar with these kind of constraints with this method, and after reading  I believe the same specific and simple result given is also applicable, and therefore the lagrangian would be:  $$\mathcal{L}(Q,\lambda)=\mathrm{tr}(Q^TCQ)-\left&lt;\lambda,Q^TQ-I\right&gt;$$  where $\lambda\in\mathbb{R}^{K\times K}$, and $\left&lt;\cdot,\cdot\right&gt;$ is the element wise inner product (what kind of makes sense to me since we're actually adding as many constraints as there are elements in these matrices.  In attempting to do that I start taking $\frac{\partial \mathcal{L}}{\partial Q}=O\in\mathbb{R}^{d\times K}$, and compute that LHS element by element; for the $(l,m)$ one:  \begin{equation} 0=\frac{\partial \mathcal{L}}{\partial Q_{lm}}=(CQ+C^TQ)_{lm}-\underbrace{\frac{\partial}{\partial Q_{lm}}\sum_{i,j}\lambda_{i,j}(Q^TQ-I)_{ij}}_{=\lambda_{lm}\frac{\partial (Q^TQ)_{lm}}{\partial Q_{lm}}}=2(CQ)_{lm}-\lambda_{lm}\frac{\partial (q_l^Tq_m)}{\partial q_m(l)} \tag{1}\end{equation}  where in the last step I've used the definition I made at the beginning for $Q$, and $q_m(l)$ denotes the $l$-th component of the column vector $q_m$.  In trying to compute the very last term:  $$\frac{\partial (q_l^Tq_m)}{\partial q_m(l)}=\frac{\partial \left[q_l(1)q_m(1)+ \ldots + q_l(d)q_m(d)\right]}{\partial q_m(l)}= \begin{cases}     q_l(l)\equiv Q_{ll}    &amp; \text{if } l\neq m\\     2q_l(l)\equiv 2Q_{ll}  &amp; \text{if} l=m \end{cases}$$  The whole equality (1) then can be written:  $$0=2(CQ)_{lm}-\lambda_{lm}Q_{ll}(1+\delta_{lm})$$  where $\delta_{lm}$ is the Kronecker delta.  The equation for the other stationary point of the lagrangian, $\frac{\partial \mathcal{L}}{\partial \lambda}=O\in\mathbb{R}^{K\times K}$, for the $(l,m)$ element as well:  $$ 0=\frac{\partial \mathcal L}{\partial \lambda_{lm}}= \frac{\partial }{\partial \lambda_{lm}}\sum_{i,j}\lambda_{i,j}(Q^TQ-I)_{ij}=(Q^TQ-I)_{lm}\tag{2}$$  what obviously leads to $(Q^TQ)_{lm}=\delta_{lm}$.  All this should tell that the columns of $Q$ are eventually the $K$ first eigenvectors of $C$, but I don't know how to continue from here to prove that, supposing I didn't make a mistake. Please I would sincerely appreciate any help.    Edit:  I have rewritten the inner product as a trace of a product of matrices (after seeing ):  $$\left&lt;\lambda,Q^TQ-I\right&gt;=\sum_{i,j}\lambda_{i,j}(Q^TQ-I)_{ij}=\mathrm{tr}(\lambda^TQ^TQ) $$  and have thus managed to do the derivative without losing the matrix format (using formulas from the ):  \begin{align} O=&amp;\frac{\partial \mathcal{L}}{\partial Q}=\frac{\partial}{\partial Q}\mathrm{tr}(Q^TCQ)-\frac{\partial}{\partial Q}\underbrace{\mathrm{tr}(\lambda^T(Q^TQ-I))}_{\mathrm{tr}(\lambda^TQ^TQ)-\mathrm{tr}(\lambda^T)}\\=&amp;(CQ+C^TQ)-(Q(\lambda^T)^T+Q\lambda^T)=2CQ+Q(\lambda+\lambda^T) \end{align}  And this leads to:  $$CQ=Q\underbrace{\left(-\frac{\lambda+\lambda^T}{2}\right)}_{:=\widetilde{\lambda}};\quad CQ=Q$$  If the defined matrix $\widetilde{\lambda}=Q^TCQ$ were diagonal we would already have the result. I'm looking for a fantasy book I read about 10 years ago. I don't remember a lot of it, but there are a few things I still know:   The setting was in medieval times. There was no traveling dimensions. I can't recall whether there was magic or not. It wasn't on Earth, but on some invented world. I believe it was a trilogy, with a focus on the son of some nobility. The goal for the characters was to collect a certain number of stones or gems (I believe there were 5 of them), all in certain colours. Every stone has a certain power attached to it. I believe it started out with one or two characters, but the group grew and every character had a certain colour stone at the end. What is important about the gems is that they are unique. It's not part of a bigger magic system, but they are artefacts from somewhere.   There are some minor incidents I can recall vividly:   They build up a fellowship with some stereotypical fantasy builds: an old school fighter, a minstrel, a female archer and probably more. At one point, they mention that if one of the guards in a country falls asleep on duty, he will be kept awake by his garrison/brothers in arms for seven days. At some point the minstrel falls asleep, and the old fighter teaches him how to stay awake. They travel through a forest full of leeches and other insects to reach one of the stones. Also, I seem to recall there was a member of an underground evil organisation among the nobility, who tried to poison someone and were able to do that because they built up an immunity to the poison.   Does anyone has a clue what this series might be?   Suggestions by kind people, but not what I'm looking for, are:   The Seventh Tower Deltora Quest Diadem Westria Sword of Heavens series Find out trace of a given matrix $A$ with entries from $\mathbb{Z}_{227}$ Let $A$ be a $227\times 227$ matrix with entries in $\mathbb{Z}_{227}$ such that all of its eigen values are distinct. What would be its trace? I think it is zero by adding all 227 elements but i am not sure.  Edited: Here I have assumed that eigenvalues are in a base field. The disk that contains Ubuntu on my computer is 115GB in size.  When the disk was 114.7GBfull.  I started deleting some files here and there to free up around 5GB.  But I noticed the disk was 114GB filled again. I thought it was some cache or swap thingy so didn't give it much thought and went ahead and freed around 40GBby shifting some media files out of the disk.  I have a notification in an hour or so that the disk is full yet again!! 40GB!!! All gone!  So I debugged the problem down to the /var/log/syslog file which was initially definitely less than 20GB. I know this because /var folder was 17GB before I cleared the memory.  /var/log/syslog file is currently 55.9GB!  Could someone be so gracious to explain this anomaly? Is this a bug? Or am I affected with some malware or virus?