#1 (permalink)  
Old 05-15-2003, 04:54 AM
Registered User
 
Join Date: Feb 2002
Posts: 127
cosmin
Server load - 230 (!!!!!)

I have a strange problem. Sunday my server software was reinstalled. Monday server have more 200 server load and yesterday again.

It's a hardware problem? A normal server have a 30-60 days uptime not 24 hours...

Anyone can help me?

Thanks!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 05-15-2003, 08:12 AM
Registered User
 
Join Date: Mar 2003
Location: England, UK
Posts: 103
carlgm
Hello,

Can you login to SSH as 'root' and type:

top

please copy and paste that please firstly.
__________________
-- I live to support clients ---
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 05-15-2003, 08:15 AM
Registered User
 
Join Date: Feb 2002
Posts: 127
cosmin
3:14pm up 20:08, 1 user, load average: 0.34, 0.17, 0.16
155 processes: 154 sleeping, 1 running, 0 zombie, 0 stopped
CPU states: 5.8% user, 1.9% system, 0.3% nice, 32.6% idle
Mem: 1016368K av, 1002068K used, 14300K free, 0K shrd, 204504K buff
Swap: 522072K av, 3640K used, 518432K free 547720K cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
6997 root 16 0 1080 1080 824 R 7.3 0.1 0:00 top
7000 evrika 14 0 3480 3212 2412 S 1.8 0.3 0:00 cppop
5444 nobody 10 0 8120 8120 6432 S 0.9 0.7 0:00 httpd
5447 nobody 10 0 8156 8156 6440 S 0.9 0.8 0:00 httpd
6818 nobody 9 0 7176 7176 6452 S 0.9 0.7 0:00 httpd
1 root 0 0 480 480 416 S 0.0 0.0 0:04 init
2 root 9 0 0 0 0 SW 0.0 0.0 0:00 keventd
3 root 9 0 0 0 0 SW 0.0 0.0 0:00 kapmd
4 root 19 19 0 0 0 SWN 0.0 0.0 0:00 ksoftirqd_CPU0
5 root 9 0 0 0 0 SW 0.0 0.0 0:06 kswapd
6 root 9 0 0 0 0 SW 0.0 0.0 0:00 bdflush
7 root 9 0 0 0 0 SW 0.0 0.0 0:00 kupdated
9 root 9 0 0 0 0 SW 0.0 0.0 0:00 khubd
10 root -1 -20 0 0 0 SW< 0.0 0.0 0:00 mdrecoveryd
11 root 9 0 0 0 0 SW 0.0 0.0 0:00 kjournald
145 root 9 0 0 0 0 SW 0.0 0.0 0:00 kjournald
146 root 9 0 0 0 0 SW 0.0 0.0 0:02 kjournald







Now I have Server Load 0.xx...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 05-15-2003, 08:18 AM
Registered User
 
Join Date: Mar 2003
Location: England, UK
Posts: 103
carlgm
Quote:
Originally posted by cosmin

Now I have Server Load 0.xx...
That looks 'okay' although not that good. As far as loads. Just monitor the loads when you get a chance.
__________________
-- I live to support clients ---
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 05-16-2003, 01:31 PM
Registered User
 
Join Date: Jan 2003
Posts: 133
Creazioni
load average: 248.66, 206.62, 123.73

HOW IS POSSIBLE that i've a load so BIG

i can't enter into ssh therefore i can't reboot and control why this big problem (now load is 700)

There is a way to restart apache or stop apache if load is over 10?
or a script send email if load is so high??


THANKS
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 05-16-2003, 02:15 PM
Registered User
 
Join Date: Feb 2003
Posts: 291
mitul is on a distinguished road
What software where installed on server?

use 'ps -aux' & 'pstree' to see the the running process. 'Top' will increase the load on the server.

Don't logout from the server to see the running process when the server load increases.

Are you using tomcat on the server?
__________________
Mitul
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 05-16-2003, 02:30 PM
Registered User
 
Join Date: Jan 2003
Posts: 133
Creazioni
TOMCAT= no...i don't like it

i open ssh and i looked load so high
top and ps-aux did not running (so much load)

now NOC reboot server, i would like KNOW the problem, who or what go so high LOAD

now i go bad for 1 hour and then i work on it

thanks
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 05-16-2003, 02:59 PM
Registered User
 
Join Date: Feb 2002
Posts: 127
cosmin
NOC Support:
"The problem is not with the hardware -- the machine appears to be hacked with trojaned binaries (md5sum for the bins are different than what they are on the stock cd). "

I don't think so becouse my server was reinstalled last Sunday...

Any ideea?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #9 (permalink)  
Old 12-30-2003, 04:02 AM
Registered User
 
Join Date: Oct 2003
Posts: 3
wreak
Quote:
Originally posted by cosmin
NOC Support:
"The problem is not with the hardware -- the machine appears to be hacked with trojaned binaries (md5sum for the bins are different than what they are on the stock cd). "

I don't think so becouse my server was reinstalled last Sunday...

Any ideea?
But where I can find md5sum`s for binaries in cpanel ?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 11:47 AM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
© cPanel Inc