000

Well-Known Member
Jun 3, 2008
270
12
68
Hi,

My not found the URL:

WHM > Service Configuratioin > Apache Setup

Please, where I can found the URL [Load Averages] ???


Why?, becouse I have several process as this:
Code:
16978 nobody  20  0  180m 8512 3172 S  0.0  0.1  0:00.13 /usr/local/apache/bin/httpd -k start -DSSL
15785 nobody  20  0  180m 8432 3012 S  0.0  0.1  0:00.15 /usr/local/apache/bin/httpd -k start -DSSL
 2449 nobody  20  0  180m 8332 3052 S  0.0  0.1  0:00.23 /usr/local/apache/bin/httpd -k start -DSSL
29220 nobody  20  0  180m 8300 3008 S  0.0  0.1  0:00.07 /usr/local/apache/bin/httpd -k start -DSSL
30917 nobody  20  0  180m 8296 3008 S  0.0  0.1  0:00.04 /usr/local/apache/bin/httpd -k start -DSSL
27970 nobody  20  0  180m 8264 3000 S  0.0  0.1  0:00.08 /usr/local/apache/bin/httpd -k start -DSSL
20865 nobody  20  0  180m 8156 3012 S  0.0  0.1  0:00.11 /usr/local/apache/bin/httpd -k start -DSSL
17412 nobody  20  0  180m 8020 3008 S  0.0  0.1  0:00.14 /usr/local/apache/bin/httpd -k start -DSSL
 6387 nobody  20  0  180m 8004 3012 S  0.0  0.1  0:00.22 /usr/local/apache/bin/httpd -k start -DSSL
 2102 nobody  20  0  179m 7900 3008 S  0.0  0.1  0:00.03 /usr/local/apache/bin/httpd -k start -DSSL
30918 nobody  20  0  179m 7740 3008 S  0.0  0.1  0:00.04 /usr/local/apache/bin/httpd -k start -DSSL
 2146 nobody  20  0  179m 7736 3004 S  0.3  0.1  0:00.03 /usr/local/apache/bin/httpd -k start -DSSL
28165 nobody  20  0  179m 7736 3052 S  0.0  0.1  0:00.04 /usr/local/apache/bin/httpd -k start -DSSL
... what is this?

Why I have more of 100 process as this?

Thanks
 

24x7ss

Well-Known Member
Sep 30, 2014
272
17
68
India
cPanel Access Level
Root Administrator
Twitter
Check you server for attack. If there are lots of nobody connections then there must be attack or heavy traffic. I will suggest you to check how many apache connections you are having on server by using netstat command.

Also try to find out that nobody connections are coming from which IP and try to block IP in firewall or iptables.
 

000

Well-Known Member
Jun 3, 2008
270
12
68
Check you server for attack. If there are lots of nobody connections then there must be attack or heavy traffic. I will suggest you to check how many apache connections you are having on server by using netstat command.

Also try to find out that nobody connections are coming from which IP and try to block IP in firewall or iptables.
Thanks.

And...

Some idea about URL:

WHM > Service Configuratioin > Apache Setup ???

Please, where I can found the URL [Load Averages] ???
 

24x7ss

Well-Known Member
Sep 30, 2014
272
17
68
India
cPanel Access Level
Root Administrator
Twitter

000

Well-Known Member
Jun 3, 2008
270
12
68
Thanks.

What you think
Code:
[email protected] [~]# sar -q
Linux 2.6.32-431.5.1.el6.x86_64 (host.domain.com)  03/28/2015  _x86_64_  (8 CPU)

12:00:02 AM  runq-sz  plist-sz  ldavg-1  ldavg-5  ldavg-15
12:10:01 AM  2  266  0.12  0.19  0.33
12:20:01 AM  3  259  0.22  0.29  0.33
12:30:02 AM  4  267  0.32  0.25  0.28
12:40:01 AM  1  257  0.57  0.81  0.53
12:50:01 AM  3  258  0.12  0.22  0.33
01:00:01 AM  3  267  0.00  0.05  0.18
01:10:01 AM  4  265  0.46  0.14  0.13
01:20:01 AM  3  257  0.21  0.15  0.14
Average:  3  262  0.25  0.26  0.28
[email protected] [~]#
???

In any case, please:

what is
Code:
19477 nobody  20  0  179m 7824 3204 S  0.0  0.1  0:00.17 /usr/local/apache/bin/httpd -k start -DSSL
21158 nobody  20  0  179m 7760 3156 S  0.0  0.1  0:00.10 /usr/local/apache/bin/httpd -k start -DSSL
23059 nobody  20  0  179m 7736 3168 S  0.0  0.1  0:00.03 /usr/local/apache/bin/httpd -k start -DSSL
21658 nobody  20  0  179m 7596 2992 S  0.0  0.1  0:00.08 /usr/local/apache/bin/httpd -k start -DSSL
23455 nobody  20  0  179m 7560 2992 S  0.0  0.1  0:00.02 /usr/local/apache/bin/httpd -k start -DSSL
23618 nobody  20  0  179m 7556 2992 S  0.0  0.1  0:00.02 /usr/local/apache/bin/httpd -k start -DSSL
23464 nobody  20  0  179m 7552 2996 S  0.0  0.1  0:00.02 /usr/local/apache/bin/httpd -k start -DSSL
23494 nobody  20  0  179m 7548 2992 S  0.0  0.1  0:00.01 /usr/local/apache/bin/httpd -k start -DSSL
23760 nobody  20  0  179m 7540 2988 S  0.0  0.1  0:00.00 /usr/local/apache/bin/httpd -k start -DSSL
2372 root  20  0 85128 6896 4116 S  0.0  0.1  9:02.30 /usr/local/apache/bin/httpd -k start -DSSL
???

Is danger ?

Or samplely is normal users in web ?
 

24x7ss

Well-Known Member
Sep 30, 2014
272
17
68
India
cPanel Access Level
Root Administrator
Twitter
Load average is normal for your server so no issue with it. Regarding nobody connections it can be normal users or there may be a chance that from single IP lots of connections are hitting your server.

I will recommend you to check how much connections you are having on port 80 ? Are they from single IP or from multiple IP's ? If connections are from single IP then you can try blocking that IP.