When a service does not respond to signals or eats memory, ps
and top do not show what exactly process-and-pid is doing
right now. For that there is /proc/<pid>/* (a virtual FS with
everything the kernel knows about a process), lsof (what the process
has open), and strace (which syscalls it makes in real time).
strace needs the SYS_PTRACE capability, and it is already enabled
in this sandbox.