killing over 90% CPU taking processes

[ratbs75]

Hi all,

Well , here is my poroblem, and still couldn't find a solution (searched over a few weeks now!)

I'm running NT terminal server and Citrix metaframe. Sometimes a process XYZ.EXE take CPU time over 90%...now the hard part: THIS process musst be AUTO-KILLED if it takes more then 90% of the CPU, over at least 5 seconds.... and here the other problem.... it must be user dependend, cause killing XYZ.EXE will cause all other XYZ.EXE processes to be killed... How could i automate it to kill THIS process FROM a certain user which take so much CPU at a time??? I asked this on Tek-net, even they couldn't solve it, or the right person didn't read my topic

thnks in advance

 

[ascotta]

Have a look at a product called AppSense. It can do that. I don't think you could do that anytime real soon with TS edition.

[blue]Arguably the best cat skinner around ! [/blue]

Cheers
Scott

 

[Binkie]

You could also use SysTrack from Lakeside Software. (

http://www.lakesidesoftware.com)

SysTrack helps to identify the run away process, and take action (kill the process)once the applicatoin/service has reached an unacceptable resource usage level.

Check it out when you have a chance, I think you will like it!

Good Luck

 

[kickinsand]

http://securityresponse.symantec.com/avcenter/venc/data/w32.wullik.b@mm.html

Is xyz.exe a known application? I've seen similar from worms on citrix servers where they start a new thread for every user that logs on, uses up most of your CPU.

 

[ascotta]

I think I may have found some scripts that can

Resource manager identifies processor hit
Scripts identify process and user id(WMI, VBScript, MFCom)
Message user notifying them of the issue
Terminate process after period of time
Give users time to save work and shut down application
Do nothing if process back to normal

Don't know how easy it will be to reproduce however. tIts on a powerpoint at moment.

Have you got resource manager ?


[blue]Arguably the best cat skinner around ! [/blue]

Cheers
Scott