The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

httpd high memory use issue (domlogs?)

Discussion in 'General Discussion' started by redlorry919, Dec 13, 2005.

  1. redlorry919

    redlorry919 Well-Known Member

    Joined:
    Feb 14, 2004
    Messages:
    65
    Likes Received:
    0
    Trophy Points:
    6
    Hi all,

    I'm getting some strange things with one of my boxes and wondered whether you guys would be able to help track down the cause? Here's the issue:

    Recently the memory has been maxing out and as a result causing huge server loads, the box dying and me tearing all my hair out!

    Here's a 'top' for your info:

    CPU states: cpu user nice system irq softirq iowait idle
    total 1.9% 0.0% 1.4% 0.2% 1.3% 94.8% 0.0%
    cpu00 1.1% 0.0% 0.7% 0.5% 2.5% 94.8% 0.0%
    cpu01 2.7% 0.0% 2.1% 0.0% 0.1% 94.8% 0.0%
    Mem: 1024368k av, 1005492k used, 18876k free, 0k shrd, 14528k buff
    780476k actv, 145448k in_d, 11200k in_c
    Swap: 2040244k av, 1666452k used, 373792k free 45084k cached

    PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
    16954 nobody 15 0 19480 14M 1684 S 0.6 1.4 0:03 1 httpd
    18084 nobody 15 0 19460 15M 1696 S 0.5 1.5 0:01 1 httpd
    18059 nobody 16 0 19304 13M 1720 S 0.4 1.3 0:01 0 httpd
    16801 nobody 15 0 1134M 295M 1276 D 0.3 29.5 1:43 0 httpd
    7 root 15 0 0 0 0 SW 0.2 0.0 1:12 0 kswapd
    18082 nobody 15 0 988M 341M 1396 D 0.2 34.1 1:32 0 httpd
    8 root 15 0 0 0 0 SW 0.1 0.0 1:16 1 kscand
    16952 nobody 15 0 19724 15M 2048 S 0.1 1.5 0:01 1 httpd
    1 root 15 0 136 88 56 S 0.0 0.0 0:03 1 init
    2 root RT 0 0 0 0 SW 0.0 0.0 0:00 0 migration/0
    3 root RT 0 0 0 0 SW 0.0 0.0 0:00 1 migration/1
    4 root 15 0 0 0 0 SW 0.0 0.0 0:00 1 keventd
    5 root 34 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd/0
    6 root 34 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd/1
    9 root 15 0 0 0 0 SW 0.0 0.0 0:02 1 bdflush
    10 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kupdated
    11 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 mdrecoveryd
    19 root 25 0 0 0 0 SW 0.0 0.0 0:00 1 scsi_eh_0
    22 root 15 0 0 0 0 SW 0.0 0.0 0:00 1 kjournald
    543 root 23 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald


    You can see that there are some httpd processes which are causing the issue:

    16801 nobody 15 0 1134M 295M 1276 D 0.3 29.5 1:43 0 httpd
    18082 nobody 15 0 988M 341M 1396 D 0.2 34.1 1:32 0 httpd
    ...

    I've then gone into proc/16801 to view the details and it seems there are various links to apache but also a link to a users account. (should alarm bells be ringing?)

    Also, there is a directory which has a load of links, each linking to domlogs on the system.


    My question is therefore, is this more likely to be an issue with the processing of the domlogs or a security breach?

    Thanks in advance,
    Red.
     
    #1 redlorry919, Dec 13, 2005
    Last edited: Dec 13, 2005
Loading...

Share This Page