FTP & cpsrvd crashing server

[RSCChris]

I have two servers with same specs, same OS (RHEL5.1), same configurations, and same cPanel builds, running the latest CURRENT release. Two days ago one of the servers started failing, and it has continued to fail randomly every few hours for the past two days. Prior to failure I'm getting emails of ftpd failure, usually followed by a failure of cpsrvd. /var/log/messages usually reads

May 28 17:11:02 hostname_xxx pure-ftpd: (?@ip_xxx) [INFO] Logout.
May 28 19:05:46 hostname_xxx syslogd 1.4.1: restart.

May 29 12:35:21 hostname_xxx pure-ftpd: (?@ip_xxx) [INFO] Logout.
May 29 12:53:34 hostname_xxx syslogd 1.4.1: restart.


May 29 16:20:42 hostname_xxx pure-ftpd: (?@ip_xxx) [INFO] Logout.
May 29 16:52:23 hostname_xxx syslogd 1.4.1: restart.

The server itself isn't crashing as we can ping the server, and as a result our server monitoring doesn't detect the server as down so I need to keep checking to see if I can connect to the services. The server itself apparently freezes, and the only way for me to connect either to WHM or SSH (or any of the services) is to reboot the machine after which it'll run for a few hours before crashing. Chkservd looks like the following:

[Thu May 29 14:03:23 2008] Service check ....cpsrvd [-Notification => email_xxx via EMAIL [level => 1]
Restarting cpsrvd....
system: /usr/local/cpanel/etc/init/stopstunnel
system: /usr/local/cpanel/etc/init/stopcpsrvd
system: /usr/local/cpanel/etc/init/startcpsrvd
system: /usr/local/cpanel/etc/init/startstunnel
]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Done
[Thu May 29 14:11:59 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 14:20:33 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 14:29:11 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 14:37:36 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 14:46:01 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 14:54:27 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:02:51 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:11:16 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:19:40 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:28:05 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:36:29 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:44:54 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 15:53:18 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 16:01:43 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 16:10:07 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
[Thu May 29 16:18:32 2008] Service check ....cpsrvd [+]...exim [+]...exim-26 [+]...ftpd [+]...httpd [+]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [+]...syslogd [+]...tailwatchd [+]...Do$
Loading services .....exim....cpsrvd....lfd....named....exim-26....httpd....pop....ftpd....mysql....imap....spamd....syslogd....tailwatchd..
[Thu May 29 16:53:05 2008] Service check ....cpsrvd [-Notification => email_xxx via EMAIL [level => 1]
Restarting cpsrvd....
system: /usr/local/cpanel/etc/init/stopstunnel
system: /usr/local/cpanel/etc/init/stopcpsrvd
system: /usr/local/cpanel/etc/init/startcpsrvd
system: /usr/local/cpanel/etc/init/startstunnel
]...exim [-Notification => email_xxx via EMAIL [level => 1]
Restarting exim....
Starting exim-26: [  OK  ]
Starting exim: [  OK  ]
Starting exim-smtps: [  OK  ]
Mail::SpamAssassin::Plugin::Rule2XSBody test passed: enabled
]...exim-26 [+]...ftpd [-Notification => email_xxx via EMAIL [level => 1]
Restarting ftpd....
system: /scripts/restartsrv_ftpserver
]...httpd [-Notification => email_xxx via EMAIL [level => 1]
Restarting httpd....
]...imap [+]...lfd [+]...mysql [+]...named [+]...pop [+]...spamd [-Notification => email_xxx via EMAIL [level => 1]
Restarting spamd....
Mail::SpamAssassin::Plugin::Rule2XSBody test passed: enabled
]...syslogd [+]...tailwatchd [+]...Done

We haven't made any changes to the machine other than the updates. The other server with identical config is not having these problems. Is anyone else experiencing anything similar?

[cpanelnick]

Please open a ticket @ https://tickets.cpanel.net/submit/

[muliahosting]

hello,

any update for this issue?

I have same problem with my cpanel server

Thank you

[cPanelDavidG]

hello,

any update for this issue?

I have same problem with my cpanel server

Thank you

I recommend submitting a support ticket about this so we can analyze this situation on your server as well. If we find any pattern to these situations, I'll post a response to this thread.