The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Please HELP, Very High Load Very Slow server

Discussion in 'General Discussion' started by nzwebit, Sep 23, 2004.

  1. nzwebit

    nzwebit Registered

    Joined:
    Sep 22, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Hi everyone

    I'm experiencing a sudden extreme load and speed degration on a server runing Fedora i686, CPanel 7.7.7 R15.

    The load goes over 10.
    Every 30-60 minutes I get a message that Clamd Failed.
    Apache will also restart itself every hour or two.

    Here is what I got from TOP:

    Any help is VERY MUCH apreciated.

    02:14:16 up 5:31, 1 user, load average: 11.36, 7.98, 6.44
    136 processes: 129 sleeping, 2 running, 4 zombie, 1 stopped
    CPU states: cpu user nice system irq softirq iowait idle
    total 27.8% 0.0% 8.8% 0.0% 0.0% 0.0% 163.0%
    cpu00 15.5% 0.0% 5.3% 0.0% 0.0% 0.0% 79.0%
    cpu01 12.3% 0.0% 3.5% 0.0% 0.0% 0.0% 84.0%
    Mem: 512208k av, 507028k used, 5180k free, 0k shrd, 10860k buff
    47844k active, 423032k inactive
    Swap: 1052216k av, 44728k used, 1007488k free 355428k cached

    PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
    14752 brown352 14 0 6896 6896 4152 D 17.7 1.3 0:14 1 cppop
    7614 root 9 0 20876 20M 12836 S 1.9 4.0 0:01 0 spamd
    5 root 9 0 0 0 0 RW 1.3 0.0 0:54 1 kswapd
    2188 mailman 9 0 4612 4608 1864 S 0.9 0.8 0:00 0 python2
    15649 pointyst 11 0 5504 5500 4016 D 0.7 1.0 0:00 0 php
    14165 root 11 0 1184 1184 844 R 0.5 0.2 0:01 0 top
    15638 root 9 0 3372 3368 3292 S 0.5 0.6 0:00 0 exim
    2173 mailnull 9 0 4620 3096 1960 S 0.3 0.6 0:00 0 eximstats
    7646 root 8 0 11200 10M 10960 S 0.3 2.1 0:11 0 httpd
    7 root 9 0 0 0 0 SW 0.1 0.0 0:01 0 kupdated
    9922 isralove 9 0 5912 3020 2192 S 0.1 0.5 0:37 0 daemon.pl
    7605 root 9 0 1652 1644 1280 S 0.1 0.3 0:02 0 antirelayd
    15644 kindplan 9 0 0 0 0 Z 0.1 0.0 0:00 0 exim <defunct>
    1 root 8 0 384 356 332 S 0.0 0.0 0:04 0 init
    2 root 8 0 0 0 0 SW 0.0 0.0 0:00 0 keventd
    3 root 19 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd_CPU0
    4 root 18 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd_CPU1
    6 root 9 0 0 0 0 SW 0.0 0.0 0:00 0 bdflush
    8 root 9 0 0 0 0 SW 0.0 0.0 0:00 0 xfsbufd
    9 root 9 0 0 0 0 SW 0.0 0.0 0:00 0 xfslogd/0
    10 root 9 0 0 0 0 SW 0.0 0.0 0:00 1 xfslogd/1
    11 root 9 0 0 0 0 SW 0.0 0.0 0:00 0 xfsdatad/0
    12 root 9 0 0 0 0 SW 0.0 0.0 0:00 1 xfsdatad/1
    15 root 9 0 0 0 0 SW 0.0 0.0 0:00 1 khubd
    20 root -1 -20 0 0 0 SW< 0.0 0.0 0:00 1 mdrecoveryd
    21 root 9 0 0 0 0 SW 0.0 0.0 0:00 1 kjournald
     
  2. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
    stop exim and see:

    /etc/rc.d/init.d/exim stop

    then check for spamming. It must be spamming or a mailman issue.
     
  3. nzwebit

    nzwebit Registered

    Joined:
    Sep 22, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    I managed to get the load a bit down by suspending some users.
    But I can't get this Clamd up!

    Any ideas? please
     
  4. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
    How did you try to restart clamd ?
     
  5. nzwebit

    nzwebit Registered

    Joined:
    Sep 22, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    I have taken off Clamd.
    However I'm back to point one. the server load is sky rocketing again 5.54 now.
    Last night I kept watching it and it was between 0.30 to 1.30 now it's gone crazy again :(

    18:35:59 up 15:29, 1 user, load average: 4.46, 4.50, 4.04
    161 processes: 150 sleeping, 7 running, 4 zombie, 0 stopped
    19:05:44 up 15:59, 1 user, load average: 4.52, 4.01, 4.05
    159 processes: 150 sleeping, 1 running, 8 zombie, 0 stopped
    CPU states: cpu user nice system irq softirq iowait idle
    total 18.0% 0.0% 3.8% 0.0% 0.0% 0.0% 177.8%
    cpu00 8.5% 0.0% 1.5% 0.0% 0.0% 0.0% 89.8%
    cpu01 9.5% 0.0% 2.3% 0.0% 0.0% 0.0% 88.0%
    Mem: 512208k av, 500164k used, 12044k free, 0k shrd, 32180k buff
    279068k active, 167336k inactive
    Swap: 1052216k av, 78804k used, 973412k free 294352k cached

    PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
    22991 cpanel 13 0 7460 7456 4080 S 2.3 1.4 0:00 0 php
    22993 indieha 17 0 6676 6672 4028 S 1.7 1.3 0:00 0 php
    22988 isralove 9 0 0 0 0 Z 1.3 0.0 0:00 0 php <defunct>
    6701 root 8 0 12148 11M 11160 S 1.1 2.2 0:38 0 httpd
    22981 nzwebcom 9 0 5544 5536 3992 S 0.9 1.0 0:00 0 php
    863 mysql 9 0 25192 15M 9240 S 0.7 3.0 0:45 1 mysqld
    12883 root 11 0 1260 1260 844 R 0.5 0.2 0:12 1 top
    22990 cpanel 10 0 4784 3144 2468 S 0.3 0.6 0:00 1 cpsrvd
    137 root 9 0 0 0 0 SW 0.1 0.0 0:16 1 kjournald
    1 root 8 0 384 356 332 S 0.0 0.0 0:05 0 init
    2 root 8 0 0 0 0 SW 0.0 0.0 0:00 0 keventd
    3 root 19 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd_CPU
    4 root 19 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd_CPU
    5 root 9 0 0 0 0 SW 0.0 0.0 0:19 1 kswapd

    I have tried all the basics like, upgrade CPanel, update scripts, fix common ..

    Someone help please
     
  6. hostultra

    hostultra Well-Known Member

    Joined:
    Aug 21, 2002
    Messages:
    167
    Likes Received:
    0
    Trophy Points:
    16
    Find out what the user "isralove" is doing.
    Since that user is running a process both times.

    Look at the Apache Status and CPU/Memory/MySQL Usage in WHM for users with alot of activity.
     
  7. nzwebit

    nzwebit Registered

    Joined:
    Sep 22, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    here is the latest:
    d
    mysql 22200 0.0 2.4 39084 12648 ? S 08:21 0:00 \_ mysql
    d
    mysql 26708 0.0 2.4 39084 12648 ? S 08:35 0:00 \_ mysql
    d
    mysql 26953 0.0 2.4 39084 12648 ? S 08:35 0:00 \_ mysql
    d
    dbus 1478 0.0 0.0 1828 488 ? S Sep23 0:00 dbus-daemon-1
    root 1505 0.0 0.0 1440 364 ? S Sep23 0:00 portsentry
    root 1749 0.0 0.0 1404 276 tty1 S Sep23 0:00 mingetty
    root 1750 0.0 0.0 1404 276 tty2 S Sep23 0:00 mingetty
    root 1751 0.0 0.0 1404 276 tty3 S Sep23 0:00 mingetty
    root 1752 0.0 0.0 1404 276 tty4 S Sep23 0:00 mingetty
    root 1753 0.0 0.0 1404 276 tty5 S Sep23 0:00 mingetty
    root 1754 0.0 0.0 1404 276 tty6 S Sep23 0:00 mingetty
    root 5668 0.0 0.1 4880 608 ? S Sep23 0:00 pure-ftpd
    root 21381 0.0 0.1 5044 960 ? S 08:19 0:00 \_ pure-ftpd
    root 26000 0.0 0.1 5076 976 ? S 08:32 0:00 \_ pure-ftpd
    root 26627 0.0 0.1 4960 916 ? S 08:34 0:00 \_ pure-ftpd
    root 5684 0.0 0.0 4708 432 ? S Sep23 0:00 pure-authd
    mailnull 6015 0.0 0.2 6940 1260 ? S Sep23 0:09 exim
    mailnull 26501 0.1 0.5 7496 3060 ? S 08:34 0:00 \_ exim
    mailnull 26590 0.0 0.7 7612 3720 ? S 08:34 0:00 \_ exim
    mailnull 26607 0.0 0.0 0 0 ? Z 08:34 0:00 | \_ exim <def
    unct>
    mailnull 26967 0.0 0.3 6948 1572 ? S 08:35 0:00 \_ exim
    mailnull 26979 0.0 0.2 6948 1408 ? S 08:35 0:00 \_ exim
    mailnull 26981 0.0 0.2 6948 1408 ? S 08:35 0:00 \_ exim
    mailnull 6026 0.0 0.2 6900 1248 ? S Sep23 0:00 exim
    mailnull 6030 0.0 0.2 6904 1092 ? S Sep23 0:00 exim
    root 6114 0.2 0.3 3664 1544 ? S Sep23 4:01 antirelayd
    root 6141 0.0 0.8 25496 4108 ? S Sep23 0:11 spamd
    yours97 26932 0.1 1.7 26196 8912 ? S 08:35 0:00 \_ spamd
    root 6701 0.0 2.1 15240 11168 ? S Sep23 0:45 httpd
    nobody 10215 0.0 1.7 15284 9164 ? S 07:49 0:01 \_ httpd
    nobody 10336 0.0 1.7 15424 8920 ? S 07:49 0:01 \_ httpd
    nobody 10396 0.0 1.7 15424 8912 ? S 07:49 0:01 \_ httpd
    nobody 10403 0.0 1.6 15284 8588 ? S 07:49 0:01 \_ httpd
    nobody 10525 0.0 1.7 15428 9044 ? S 07:50 0:01 \_ httpd
    nobody 20683 0.0 2.2 15248 11280 ? S 08:17 0:00 \_ httpd
    nobody 20707 0.0 2.2 15248 11292 ? S 08:17 0:00 \_ httpd
    root 22186 0.0 0.7 5888 3916 ? S 08:21 0:00 \_ leechprotect
    nobody 22188 0.0 2.2 15252 11308 ? S 08:21 0:00 \_ httpd
    nobody 22189 0.0 2.2 15252 11312 ? S 08:21 0:00 \_ httpd
    isralove 26707 52.7 14.1 82936 72476 ? S 08:35 0:30 | \_ php
    nobody 22190 0.0 2.2 15252 11648 ? S 08:21 0:00 \_ httpd
    nobody 22191 0.0 2.2 15280 11360 ? S 08:21 0:00 \_ httpd
    takamine 26968 6.5 0.0 0 0 ? Z 08:35 0:00 | \_ php <defu
    nct>
    nobody 22192 0.0 2.2 15244 11636 ? S 08:21 0:00 \_ httpd
    nobody 22193 0.0 2.2 15248 11276 ? S 08:21 0:00 \_ httpd
    nobody 22203 0.0 2.2 15252 11300 ? S 08:21 0:00 \_ httpd
    nobody 22204 0.0 2.2 15252 11308 ? S 08:21 0:00 \_ httpd
    nzwebcom 26976 0.0 0.0 0 0 ? Z 08:35 0:00 | \_ php <defu
    nct>
    nobody 22206 0.0 2.4 18140 12628 ? S 08:21 0:00 \_ httpd
    nobody 22207 0.0 2.1 15244 11232 ? S 08:21 0:00 \_ httpd
    nobody 22209 0.0 2.2 15252 11292 ? S 08:21 0:00 \_ httpd
    nzwebcom 26977 0.0 0.0 0 0 ? Z 08:35 0:00 | \_ php <defu
    nct>
    nobody 22210 0.0 2.2 15244 11272 ? S 08:21 0:00 \_ httpd
    nobody 22214 0.0 2.2 15252 11308 ? S 08:21 0:00 \_ httpd
    nobody 22215 0.0 2.2 15252 11312 ? S 08:21 0:00 \_ httpd
    nobody 22302 0.0 2.2 15244 11644 ? S 08:21 0:00 \_ httpd
    isralove 26951 91.4 4.9 34784 25296 ? R 08:35 0:08 | \_ php
    nobody 24009 0.0 2.2 15252 11304 ? S 08:26 0:00 \_ httpd
    nobody 24384 0.0 2.2 15252 11300 ? S 08:28 0:00 \_ httpd
    nobody 24661 0.0 2.2 15244 11292 ? S 08:28 0:00 \_ httpd
    nobody 25824 0.0 2.2 15280 11356 ? S 08:31 0:00 \_ httpd
    nobody 26366 0.0 2.2 15256 11276 ? S 08:33 0:00 \_ httpd
    nobody 26426 0.0 2.1 15240 11244 ? S 08:33 0:00 \_ httpd
    nobody 26709 0.0 2.1 15240 11268 ? S 08:35 0:00 \_ httpd
    pointyst 26970 5.5 1.0 15076 5600 ? S 08:35 0:00 | \_ php
    nobody 26771 0.0 2.2 15248 11284 ? S 08:35 0:00 \_ httpd
    isralove 24052 0.1 0.5 7976 3020 ? S Sep23 3:11 daemon.pl
    mailnull 10210 0.0 0.6 6784 3204 ? S Sep23 0:16 eximstats
    root 10294 0.1 1.4 11392 7316 ? SN Sep23 3:01 cpanellogd
    wendyyy 26198 0.0 1.4 11392 7352 ? SN 08:33 0:00 \_ cpanellogd
    wendyyy 26225 0.0 0.1 2072 944 ? SN 08:33 0:00 \_ sh
    wendyyy 26226 0.0 0.0 1400 360 ? SN 08:33 0:00 \_ logru
    nner
    wendyyy 26227 0.0 0.1 2332 756 ? TN 08:33 0:00 \_ a
    nalog
    root 10322 0.0 0.3 6924 1976 ? S Sep23 0:54 cppop
    chow123 1973 22.1 8.2 50852 42068 ? R 07:23 16:00 \_ cppop
    nobody 10330 0.0 0.2 4260 1504 ? S Sep23 0:00 entropychat
    nobody 10335 0.0 0.0 1636 340 ? S Sep23 0:00 melange
    mailman 10372 0.0 0.2 7640 1124 ? S Sep23 0:00 mailmanctl
    mailman 10373 0.0 0.4 8544 2560 ? S Sep23 0:15 \_ python2
    mailman 10374 0.0 0.4 9020 2476 ? S Sep23 0:19 \_ python2
    mailman 10375 0.0 0.3 7440 2048 ? S Sep23 0:13 \_ python2
    mailman 10376 0.0 0.7 7900 3944 ? S Sep23 0:18 \_ python2
    mailman 10377 0.0 0.3 7528 2036 ? S Sep23 0:10 \_ python2
    mailman 10378 0.0 0.7 8000 4032 ? S Sep23 0:21 \_ python2
    mailman 10379 0.0 0.7 8036 3628 ? S Sep23 0:12 \_ python2
    mailman 10380 0.0 0.3 7488 1580 ? S Sep23 0:00 \_ python2
    cpanel 5020 0.0 0.3 4088 1648 ? S 05:55 0:00 stunnel-4.04loc
    cpanel 7586 0.0 0.3 4088 1648 ? S 06:06 0:00 \_ stunnel-4.04l
    oc
    root 5036 0.0 0.3 8088 1680 ? S 05:55 0:01 cpsrvd
    root 26548 0.0 0.5 8100 2792 ? S 08:34 0:00 \_ cpsrvd
    root 26549 0.0 0.5 8100 2792 ? S 08:34 0:00 \_ cpsrvd
    root 26550 0.0 0.5 8100 2792 ? S 08:34 0:00 \_ cpsrvd
    root 26073 0.0 0.6 7604 3468 ? S 08:32 0:00 exim
    mailnull 26134 0.0 0.6 7604 3524 ? S 08:33 0:00 \_ exim
    named 26715 0.0 0.8 16388 4340 ? S 08:35 0:00 named
    named 26716 0.0 0.8 16388 4340 ? S 08:35 0:00 \_ named
    named 26717 1.1 0.8 16388 4340 ? S 08:35 0:00 \_ named
    named 26718 0.1 0.8 16388 4340 ? S 08:35 0:00 \_ named
    named 26719 0.0 0.8 16388 4340 ? S 08:35 0:00 \_ named
    named 26720 0.0 0.8 16388 4340 ? S 08:35 0:00 \_ named
    root 26877 0.3 0.6 7476 3264 ? S 08:35 0:00 exim
    chow123 26880 0.0 0.6 7488 3304 ? S 08:35 0:00 \_ exim
    root 26903 1.2 0.6 7596 3284 ? S 08:35 0:00 exim
    yours97 26927 0.0 0.6 7596 3292 ? S 08:35 0:00 \_ exim
    mailnull 26928 0.0 0.3 6940 1608 ? S 08:35 0:00 \_ exim
    yours97 26929 0.0 0.6 7596 3288 ? S 08:35 0:00 \_ exim
    yours97 26930 0.0 0.0 1992 496 ? S 08:35 0:00 \_ spamc
    yours97 26931 0.0 0.0 0 0 ? Z 08:35 0:00 \_ exim <def
    unct>
    root 26942 0.2 0.6 7576 3284 ? S 08:35 0:00 exim
    chow123 26945 0.0 0.6 7588 3324 ? S 08:35 0:00 \_ exim
    root 26957 1.0 0.6 7468 3252 ? S 08:35 0:00 exim
    chow123 26960 0.0 0.6 7480 3300 ? S 08:35 0:00 \_ exim
     
  8. linux-image

    linux-image Well-Known Member

    Joined:
    Jun 8, 2004
    Messages:
    1,192
    Likes Received:
    1
    Trophy Points:
    38
    Location:
    India
    cPanel Access Level:
    Root Administrator
    somebody is running processes in the name of regular processes in your server and killing it. check who is doing this; and delete the guy.
     
  9. PbG

    PbG Well-Known Member

    Joined:
    Mar 11, 2003
    Messages:
    241
    Likes Received:
    0
    Trophy Points:
    16
    Suspend isralove (temporarily then check the load) and/or find out why they are running a seperate webmail server ...
     
  10. smoge

    smoge Well-Known Member

    Joined:
    Jul 2, 2004
    Messages:
    52
    Likes Received:
    0
    Trophy Points:
    6
    Ahh... how much RAM in this server?

    Does not look like much. ;)
     
  11. linkup

    linkup Active Member

    Joined:
    Jan 29, 2007
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    The link for CSF install isn't working.

    I am looking for help on dealing with the security warnings when doing a CSF security check. Wondering if they are all accurate and need to be fixed or if there are things the security check shows but might not need to be "fixed".

    Thanks.
     
  12. eth00

    eth00 Well-Known Member
    PartnerNOC

    Joined:
    Mar 30, 2003
    Messages:
    723
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    NC
    cPanel Access Level:
    Root Administrator
    If you are not sure if you should do them post the ones you have questions on and somebody can reply :)
     
  13. cPanelDon

    cPanelDon cPanel Quality Assurance Analyst
    Staff Member

    Joined:
    Nov 5, 2008
    Messages:
    2,557
    Likes Received:
    7
    Trophy Points:
    38
    Location:
    Houston, Texas, U.S.A.
    cPanel Access Level:
    DataCenter Provider
    Twitter:
    For in-depth assistance with CSF, I recommend referring to the vendor's official web site and their available support channels:
    http://www.configserver.com/cp/csf.html
    http://forum.configserver.com/
    http://www.configserver.com/contact.html
    http://www.configserver.com/support.html
     
Loading...

Share This Page