The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Zombie Hazard!

Discussion in 'General Discussion' started by cyberultra, Jan 22, 2005.

  1. cyberultra

    cyberultra Member

    Joined:
    Oct 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Hi all, I recently got a new server but some how it's having problem starting from yesterday.

    There are a lot of zombie processes and keep increasing. It was once more than 5000 before the kernel was upgraded and rebooted. However after the server reboot the same problem happened again.

    Other than that, process "init" is taking 100% of CPU and causing high load.

    Server specs is as below:
    Dual Xeon 2.80 w/ HT
    2GB RAM
    CentOS 3.3 (kernel v2.4.29)
    cPanel


    Here is the copy of "top"

    Any help would be much appreciated! Thanks in advance!
     
  2. K_aneda

    K_aneda Well-Known Member

    Joined:
    Feb 29, 2004
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Sydney, Australia
    Dosen't show which processes are going zombie, could you paste a full ps auxw ?
     
  3. cyberultra

    cyberultra Member

    Joined:
    Oct 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    I typed "ps -aux | grep Z", and below is part of what I got

    90% of the zombie processes are
    "mailnull 7019 0.0 0.0 0 0 ? Z 06:09 0:00 [exim <defunct>]"

    Anyone have any idea why process "init" is taking up that high load?

    Thanks.
     
  4. K_aneda

    K_aneda Well-Known Member

    Joined:
    Feb 29, 2004
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Sydney, Australia
    You getting a lot of e-mail lately (abnormal traffic) ?
     
  5. cyberultra

    cyberultra Member

    Joined:
    Oct 19, 2003
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    No, I guess the problem is for some reason zombie processes are not cleared and stack it up. As you can see there are a lot of zombie processes, normally is less than 5 or none.
     
  6. K_aneda

    K_aneda Well-Known Member

    Joined:
    Feb 29, 2004
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Sydney, Australia
    Yeah but not as many as you've stated.... and especially within the first hour of the machine being 'up'.
     
  7. Donna

    Donna BANNED

    Joined:
    Feb 15, 2003
    Messages:
    88
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Toronto, Canada
    Look for a file called links.cgi on your server. I had this issue with one of my servers and it turned out someone had used an insecure phplinks install to put a cgi with spam software on the server.

    They were literally using it to send thousands of spam emails per minute to the same account on the server (the one they'd gotten into) and it kept giving me a lot of exim zombies like you have.

    I found the file in question inside a "links" folder in his cgi-bin

    tail -f /var/log/exim_mainlog

    will give you an idea of the mail accounts being hit, I'd start my search with that persons domain account.
     

Share This Page