Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Results 1 to 3 of 3
  1. #1
    Member
    Join Date
    Jan 2003
    Posts
    23

    Default Server Overload -mysql+php problem.

    hi
    I have many problem with server.
    P4 2.8 Ghz 1GB Ram
    20 client websites with everytime 60-70 total visitors in all server
    I have dictionary attack everytime and exim+mailscanner eat memory with deny,spam, rullles, rejects

    My server pages some times not open (blank page) and some mail cilents can't connect to POP.
    whats wron bottom process......


    Code:
    root@alpha [~]# top -n 2 -b -c
    top - 23:21:00 up 1 day,  4:58,  1 user,  load average: 1.61, 1.44, 1.68
    Tasks: 249 total,   1 running, 247 sleeping,   0 stopped,   1 zombie
    Cpu(s): 12.7% us,  5.3% sy,  0.3% ni, 67.7% id, 13.8% wa,  0.1% hi,  0.0% si
    Mem:   1035592k total,   327856k used,   707736k free,     4408k buffers
    Swap:  2031608k total,    80716k used,  1950892k free,    51080k cached
    
      PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                       
    24742 root      16   0  2128 1004  684 R  3.9  0.1   0:00.02 top -n 2 -b -c                                                
      195 root      15   0     0    0    0 S  1.9  0.0   0:18.41 [kjournald]                                                   
     2503 mysql     16   0  221m  75m 1816 S  1.9  7.5   0:06.01 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
    32071 nobody    16   0  6684 2836 1744 S  1.9  0.3   0:03.88 /usr/local/apache/bin/httpd -DSSL                             
        1 root      16   0  2164  504  472 S  0.0  0.0   0:01.00 init [3]                                                      
        2 root      34  19     0    0    0 S  0.0  0.0   0:00.26 [ksoftirqd/0]                                                 
        3 root       5 -10     0    0    0 S  0.0  0.0   0:00.20 [events/0]                                                    
        4 root      12 -10     0    0    0 S  0.0  0.0   0:00.00 [khelper]                                                     
        5 root      15 -10     0    0    0 S  0.0  0.0   0:00.00 [kacpid]                                                      
       20 root       5 -10     0    0    0 S  0.0  0.0   0:00.00 [kblockd/0]                                                   
       33 root      15 -10     0    0    0 S  0.0  0.0   0:00.00 [aio/0]                                                       
       21 root      15   0     0    0    0 S  0.0  0.0   0:00.00 [khubd]                                                       
       32 root      15   0     0    0    0 S  0.0  0.0   0:38.66 [kswapd0]                                                     
      107 root      25   0     0    0    0 S  0.0  0.0   0:00.00 [kseriod]                                                     
      186 root       6 -10     0    0    0 S  0.0  0.0   0:00.00 [kmirrord]                                                    
      187 root       7 -10     0    0    0 S  0.0  0.0   0:00.00 [kmir_mon]                                                    
     1046 root       6 -10  2348  388  384 S  0.0  0.0   0:00.01 udevd                                                         
     1109 root      19   0     0    0    0 S  0.0  0.0   0:00.00 [shpchpd_event]                                               
     1234 root       6 -10     0    0    0 S  0.0  0.0   0:00.00 [kauditd]                                                     
     1897 root      16   0  3204  596  524 S  0.0  0.1   0:05.29 syslogd -m 0                                                  
     1901 root      16   0  3504  424  420 S  0.0  0.0   0:00.00 klogd -x                                                      
     1949 root      16   0  5100  828  796 S  0.0  0.1   0:00.00 rpc.idmapd                                                    
     2011 root      17   0  2940  660  500 S  0.0  0.1   0:00.00 /usr/sbin/smartd                                              
     2020 root      23   0  1788  472  468 S  0.0  0.0   0:00.00 /usr/sbin/acpid                                               
     6045 root      16   0  5456 1012  912 S  0.0  0.1   0:00.00 /usr/sbin/sshd                                                
     6058 root      16   0  3276  764  672 S  0.0  0.1   0:00.03 xinetd -stayalive -pidfile /var/run/xinetd.pid                
     6522 root      35  19 17868  11m 1336 S  0.0  1.1   0:25.02 cpanellogd - sleeping for logs                                
     6614 dbus      15   0  3912  580  576 S  0.0  0.1   0:00.02 dbus-daemon-1 --system                                        
     6641 root      16   0  6692 1372  728 S  0.0  0.1   0:00.81 hald                                                          
     6662 root      18   0  1516  428  424 S  0.0  0.0   0:00.00 /usr/sbin/portsentry -tcp                                     
     6847 root       0 -20     0    0    0 S  0.0  0.0   0:01.14 [loop0]                                                       
     6854 root      15   0     0    0    0 S  0.0  0.0   0:00.12 [kjournald]                                                   
     6859 root      17   0  1688  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty1                                           
     6860 root      18   0  2988  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty2                                           
     6861 root      18   0  1900  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty3                                           
     6862 root      18   0  2556  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty4                                           
     6863 root      18   0  3196  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty5                                           
     6864 root      18   0  1996  392  388 S  0.0  0.0   0:00.00 /sbin/mingetty tty6                                           
    13490 mailnull  16   0 10396 2208 1148 S  0.0  0.2   0:00.74 /usr/bin/perl /usr/local/cpanel/bin/eximstats                 
     3363 root      19   0  4408  912  908 S  0.0  0.1   0:00.01 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-fi
     3392 mysql     15   0  221m  75m 1816 S  0.0  7.5   0:12.46 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3397 mysql     16   0  221m  75m 1816 S  0.0  7.5   0:00.03 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3398 mysql     15   0  221m  75m 1816 S  0.0  7.5   0:17.22 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3399 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:47.31 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3429 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:56.07 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3468 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:52.15 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3472 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:51.62 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3611 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:53.02 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     3761 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:43.80 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     8818 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:58.72 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
    30683 mysql     16   0  221m  75m 1816 S  0.0  7.5   1:36.27 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
    30684 mysql     15   0  221m  75m 1816 S  0.0  7.5   1:49.38 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=m
     4986 root      15   0  6848 1324 1256 S  0.0  0.1   0:00.21 pure-ftpd (SERVER)                                            
     4989 root      16   0  6220  808  772 S  0.0  0.1   0:00.00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureau
    12070 named     19   0 41680 5780 1844 S  0.0  0.6   0:55.88 /usr/sbin/named -u named -t /var/named/chroot                 
    13861 root      15   0 10072 2792 1068 S  0.0  0.3   0:01.94 cppop - accepting on port 110                                 
    28879 root      16   0  4176  760  640 S  0.0  0.1   0:00.09 postsuexecinstall - searching for suexec problems (431 min rem
    28892 root      16   0  6536 2136 1600 S  0.0  0.2   0:00.89 /usr/local/apache/bin/httpd -DSSL                             
    24896 mailnull  15   0  8264 1680 1532 S  0.0  0.2   0:04.53 /usr/sbin/exim -bd                                            
    24903 mailnull  16   0  8588 1540 1468 S  0.0  0.1   0:00.00 /usr/sbin/exim -C /etc/exim_outgoing.conf -q120m              
    24909 mailnull  25   0  8020 1532 1528 S  0.0  0.1   0:00.00 /usr/sbin/exim -tls-on-connect -bd -oX 465                    
    24914 root      16   0  4508 1052  800 S  0.0  0.1   0:01.38 antirelayd                                                    
    
    
    pleaseee    check it   attached   proccess.htm   becasue too long
    Attached Files

  2. #2
    Member Murtaza_t's Avatar
    Join Date
    Jan 2005
    Location
    Earth
    Posts
    471

    Default

    You should try the script by Chirpy to deal with dictionary attack at :
    http://www.configserver.com/free/eximdeny.html

  3. #3
    Member
    Join Date
    Jan 2003
    Posts
    23

    Default

    thank you for reply


    I stile use eximdeny+mailscanner+msfe+bdf+apf
    mailscanner = delete all low score+highscore spam+virus

    I have dictionary attackers I thing maybe exim_deny make reject attacker IP but stile processor busy with reject process. This is make heavy traffic. Becasue dictionary attacker never stop target is CPU buffer over....

Similar Threads & Tags
Similar threads

  1. MySql overload
    By mm1250 in forum Optimization
    Replies: 4
    Last Post: 06-13-2008, 11:51 PM
  2. MySQL eating memory... server overload
    By dazmanultra in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 08-23-2005, 09:37 AM
  3. Big Problem, Mysql overload, 85% memory!!
    By gaby in forum cPanel and WHM Discussions
    Replies: 8
    Last Post: 06-24-2005, 08:48 PM
  4. Mysql Overload Problem
    By neuromancer in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 06-21-2005, 07:06 PM
  5. Mysql overload making apache fail problem.. help..
    By ramystyle in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 05-11-2004, 04:52 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube