Security / provider overhead measurement
========================================

Started:       2026-08-28T12:28:04-04:00
Ended:         2026-08-28T13:46:40-04:00
Elapsed:       1.31 h (4716.8 s)
Logical CPUs:  64
Sample period: 2 s
Samples:       2356
RAM metric:    PSS when readable; RSS is also recorded

CPU interpretation: 100% of one core = one logical CPU continuously busy.
On this 64-CPU host, 100% of one core = 1.5625% of total machine CPU capacity.

Group                            CPU sec  Avg core %  Avg mach %  P95 core %  Peak core %  Avg PSS MiB    P95 PSS   Peak PSS     Read MB    Write MB
----------------------------------------------------------------------------------------------------------------------------------------------------
Imunify360                        1385.2       29.37      0.4588       58.56       111.99       1013.5     1066.6     1155.2       440.1      1103.8
Rustbolit                            0.0        0.00      0.0000        0.00         0.00          0.0        0.0        0.0         0.0         0.0
Acronis                            189.1        4.01      0.0627        8.50        77.98        332.8      505.8      556.8        28.4        23.3
OSSEC                               14.4        0.31      0.0048        1.00         2.50          8.7       11.1       11.1         3.7         1.7
Linux audit                         42.7        0.91      0.0141        3.00         5.50          0.6        0.6        0.6         0.0       330.8
ClamAV                               1.0        0.02      0.0003        0.00         4.50         83.6       83.9       84.0         1.0         2.5
WebPros 360 monitoring               7.8        0.17      0.0026        0.50        19.50         26.1       26.4       26.4         0.0         0.0
cPanel p0f                          20.9        0.44      0.0069        1.00         1.00          5.4        5.5        5.5         0.3         0.0
SECURITY TOTAL                    1632.5       34.61      0.5408       64.49       116.49       1439.2     1668.1     1754.6       473.3      1462.1
ADJACENT TOTAL                      28.7        0.61      0.0095        1.00        20.00         31.5       31.8       31.8         0.3         0.0

Notes
-----
* SECURITY TOTAL includes Imunify360, Rustbolit, Acronis, OSSEC, Linux audit, and ClamAV.
* WebPros 360 monitoring and cPanel p0f are reported separately as adjacent provider overhead.
* PSS is preferred for adding memory across processes because shared pages are proportionally counted.
* RSS is retained in samples.csv, but summing RSS can overstate memory because shared pages may be counted repeatedly.
* Very short-lived processes that start and finish entirely between samples can be missed. Use --interval 1 for a more aggressive capture.
* This measures direct process/kernel-audit resource use. Security hooks that charge CPU to nginx/httpd/MySQL or kernel paths may not appear here.
* PSS could not be read in 4815 process observations; run as root for complete PSS accounting.