memory – duplicated Linux and additional processes in the ps output

I'm using linux P.S. command to monitor the RSS size of the processes from inside a Docker container. If the total RSS exceeds a threshold, failures in the tests and start looking for memory regressions.

Here is the whole. P.S. Output from inside a Docker container.

    PID% CPU RSS Threads Command
1 0.0 2616 1 sh /test/Build/unittest.sh
7 3.3 44240 1 / usr / bin / Xvfb: 1 screen 0 ...
17 1.5 10824 1 / usr / bin / fluxbox
357 690 6292244 324 java -server -Xmx2g ...
490 0.4 7852 1 / usr / bin / python / usr / bin / dstat ...
491 0.7 7812 1 / usr / bin / python / usr / bin / dstat ...
1331 0.0 3040 1 / usr / bin / ps -AHww - format ...
1332 0.0 380 1 / usr / bin / ls --all ...
1333 0.0 6292248 1     [NDR-347]

The Java process (pid: 357) creates secondary processes of short duration. In the previous output, you can see 2 Python processes dstat, ps, ls and [NDR-347]"All these were created by the Java process.

Sometimes, I see a duplicate secondary process (that is, the same command) but a different process ID (not shown). Why do I see a duplicate secondary process? I imagine that this is a kind of Linux or Docker device. What is that artifact?

I have been monitoring P.S. Departure for more than a year. For the first time, I see an extra process "[NDR-347]"(pid: 1333) with almost the same RSS. The Java process (pid: 357) names the subprocesses" NDR- # ", so it seems strange to me that the command of a secondary process is the name of a subprocess of Java The additional process duplicates the RSS and generates a problem The problem is not reproducible This suggests to me that the PID 1333 is of very short duration and is not detected by P.S.. The total RSS is 12.07 GB and without the additional process it is 6.07 GB. What is this extra process? Why do you have such a large RSS?