nestat causes high server loads

[prankstr25]

I noticed netstat is causing high resource usage:

User Domain %CPU %MEM Mysql Processes
root 19.29 16.07 1.9
Top Process %CPU 99.9 netstat -nlp
Top Process %CPU 94.0 netstat -nlp
Top Process %CPU 93.0 netstat -npl


I am running cpanel 10.2.0-R82 on Fedora 2. Any help qould be appreciated. I also have LSM running every 30 minutes, and PRM every 6 (don't know if that matters). Any other processes using netstat?

[jester.ro]

it's lsm's fault.

i had it installed on a busy server, it was ok during the first night, but in the morning it almost crashed the server.

one run of lsm took almost 10 minutes of 99% CPU usage

it's 23:59 on that server, and a netstat -atunlp|wc -l

yelds 1238

during the day there are about 5000.

so i'd sugest either making it run less often (maybe daily)

[PvUtrix]

If you search, before you post, you will find the solution quicker

http://forums.cpanel.net/showthread.php?t=35759

[prankstr25]

yeah, I had seen that post before I posted, and had applied the solution suggested there, but the problem persists...

[djmerlyn]

I thought I'd throw my $0.02 on this one...

I have the same issue but not because of anything suggested here...

Turns out the issue was SIM looking to eth0 instead of eth1 for netstat, which obviously returns bogus data or incorrect data, or nothing at all.

Changing that resolved the high netstat load. So basically, make sure anything using netstat is looking to the right device.

[noimad1]

I thought I'd throw my $0.02 on this one...

I have the same issue but not because of anything suggested here...

Turns out the issue was SIM looking to eth0 instead of eth1 for netstat, which obviously returns bogus data or incorrect data, or nothing at all.

Changing that resolved the high netstat load. So basically, make sure anything using netstat is looking to the right device.

Where in sim did you change this?

[chmod root]

I have this same issue.

I do not have SIM installed nor LSM installed.

What else could cause it?

root@server [/etc/cron.d]# ls
./ ../ ddos.cron spri sysstat

I do not use APF nor BFD. I use CFS/LFD instead

[chirpy]

Probably caused by SPRI then.

[chmod root]

How do I uninstall SPRI? Do you have an alternative for SPRI to recommend?