I have a zombie process that I am trying to investigate.
When a process dies on Linux, it isn’t all removed from memory immediately — its process descriptor stays in memory (the process descriptor only takes a tiny amount of memory). The process’s status becomes EXIT_ZOMBIE and the process’s parent is notified that its child process has died with the SIGCHLD signal. The parent process is then supposed to execute the wait() system call to read the dead process’s exit status and other information. This allows the parent process to get information from the dead process. After wait() is called, the zombie process is completely removed from memory.
This normally happens very quickly, so you won’t see zombie processes accumulating on your system. However, if a parent process isn’t programmed properly and never calls wait(), its zombie children will stick around in memory until they’re cleaned up.
Source: https://www.howtogeek.com/119815/htg-explains-what-is-a-zombie-process-on-linux/
It is present after each reboot or startup.
andy 1235 0.0 0.0 0 0 ? Z 07:25 0:00 [xbrlapi] <defunct>
Process id is 1235.
Is there a way to determine what process or program is causing it?
