Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

With commands like top and the gui based System Monitor I can see that at the moment I have several zombie processes.

What are zombie processes?

Do they affect the performance of the system or the application they are zombie to. Do they use too much memory or any memory at all?

share|improve this question
22  
They are processes that want to eat your cpu ;) –  Luis Alvarado Jun 13 '11 at 22:37
3  
for lunch... :) –  RolandiXor Jun 14 '11 at 1:57

2 Answers 2

up vote 83 down vote accepted

Zombies are DEAD processes. They can not be 'kill' (You cannot kill the DEAD). All processes eventually die, and when they do they become zombies. They consume almost no resources, which is to be expected because they are dead! The reason for zombies is so the zombie's parent (process) can retrieve the zombie's exit status and resource usage statistics. The parent signals the operating system that it no longer needs the zombie by using one of the wait() system calls.

When a process dies, its child processes all become children of process number 1, which is the init process. Init is ``always'' waiting for children to die, so that they don't remain as zombies.

If you have zombie processes it means those zombies have not been waited for by their parent (look at PPID displayed by ps -l). You have three choices: Fix the parent process (make it wait); kill the parent; or live with it. Remember that living with it is not so hard because zombies take up little more than one extra line in the output of ps.

Zombies can be identified in the output from the Unix ps command by the presence of a "Z" in the STAT column. Zombies that exist for more than a short period of time typically indicate a bug in the parent program. As with other leaks, the presence of a few zombies isn't worrisome in itself, but may indicate a problem that would grow serious under heavier loads.

To remove zombies from a system, the SIGCHLD signal can be sent to the parent manually, using the kill command. If the parent process still refuses to reap the zombie, the next step would be to remove the parent process. When a process loses its parent, init becomes its new parent. Init periodically executes the wait system call to reap any zombies with init as parent.

There are also orphan processes which are a computer process whose parent process has finished or terminated.

A process can become orphaned during remote invocation when the client process crashes after making a request of the server.

Orphans waste server resources and can potentially leave a server in trouble (This is the biggest resource difference between zombies and orphans (Except if you see some orphan zombie movie). However there are several solutions to the orphan process problem:

  1. Extermination is the most commonly used technique; in this case the orphan process is killed.

  2. Reincarnation is a technique in which machines periodically try to locate the parents of any remote computations; at which point orphaned processes are killed.

  3. Expiration is a technique where each process is allotted a certain amount of time to finish before being killed. If need be a process may "ask" for more time to finish before the allotted time expires.

A process can also be orphaned running on the same machine as its parent process. In a UNIX-like operating system any orphaned process will be immediately adopted by the special "init" system process. This operation is called re-parenting and occurs automatically. Even though technically the process has the "init" process as its parent, it is still called an orphan process since the process which originally created it no longer exists.

More Info:

http://wiki.answers.com/Q/What_is_Zombie_Process_and_Orphan_Process#ixzz1PCN9vojU

http://www.linuxsa.org.au/tips/zombies.html

http://www.brighthub.com/computing/linux/articles/79186.aspx

Best practice to identify and kill hanging process, when system hangs and reacts slowly on user input?

Killing a running process in an Ubuntu machine remotely from a windows machine which is in LAN

share|improve this answer
4  
Ekhm! You CAN kill the dead! You just have to aim for the head. Or have they been lying to us all the time? –  Marcin Kaminski Nov 29 '12 at 2:50
    
init calls wait on all its child processes be it, zombie, orphaned(adopted) and biological(self-spawned)? –  Bleeding Fingers Oct 18 '13 at 17:53
    
acc. to World War Z use camouflage :P –  عثمان غني Feb 11 at 6:10

Zombie processes (also show as <defunct>), aren't real processes at all. They are just entries in the kernel process table. This is the only resource they consume. They do not consume any CPU or RAM. The only danger of having zombies, is running out of space in process table (you can use cat /proc/sys/kernel/threads-max to see how many entries are allowed on your system).

They appear only when their parent process (i.e. process which fork()'ed them) is alive, but did not yet call wait() system function. Once parent dies, the zombies are wait()'ed for by init and disappear.

share|improve this answer
2  
The top `screenshot in this question seems to contradict you? There, the zombie appears to use 100% of 1 CPU, but no memory. –  Torben Gundtofte-Bruun Jul 22 '11 at 11:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.