How to use the SSH ps command

The SSH ps (process status) command displays the current processes running on your Linux hosting. In particular, it’s useful for monitoring what programs are active, how much resources they use, and which users own them. Furthermore, ps helps you identify processes that load or slow your machine – making it essential for troubleshooting, spotting abuse, or investigating possible DDoS activity.

View all running processes

To list every process on the system:

ps -A

This shows a concise list of all processes. On some systems, ps aux or ps -e gives similar results. The output includes process IDs (PIDs), terminal, time, and command name.

View full process details

To see more information including the user, parent process, and full command line:

ps -ef

The -e selects all processes; -f gives a full-format listing. Useful when you need to see the exact arguments passed to a program or trace parent-child relationships.

View all processes for every user

To list processes for all users with extra details and a tree-like view:

ps -auxf

This combines -a (all users), -u (user-oriented format with CPU and memory), and -f (full format). The -f at the end can show a forest-style hierarchy on some systems. Note: on BSD-style systems use ps aux without the leading dash.

Filter processes with grep

The SSH ps command is best used with grep to filter and search for specific processes. This makes it easier to find a single program among many:

ps -ef | grep nginx

Replace “nginx” with any process name – apache, php, mysql, or your application. You can also search by user: ps -ef | grep username. See our guide on the SSH grep command for more filtering options.

Common use cases

Typical uses for SSH ps command on a Linux hosting account:

• Monitoring server performance and identifying processes that consume CPU or memory
• Finding and stopping runaway or abusive processes
• Investigating possible DDoS attacks or unusual traffic patterns
• Troubleshooting issues with web servers, PHP, or database applications
• Checking which user or script started a particular process

To stop a process once you have its PID, use the kill command. For real-time monitoring, top or htop provide a live view that updates automatically.

Need more help?

Explore more SSH and hosting guides in our knowledgebase. JetHost web hosting includes SSH access for managing your server and monitoring processes directly.