LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (http://www.linuxquestions.org/questions/linux-general-1/)
-   -   server over load cpu/memory usage (http://www.linuxquestions.org/questions/linux-general-1/server-over-load-cpu-memory-usage-266502/)

chadi 12-14-2004 09:55 PM

server over load cpu/memory usage
 
What's with spamassassin using all this overload?

This is a Dual Xeon 2.4GHz HT server (HP rackmount server) with 2GB ECC Buffered RAM.

It should handle this.

Specs:
cPanel / WHM 9.9.9 R-10
Dual Xeon 2.4GHz HT
2GB ECC RAM
Fedora Core 2

What's with the awstats overload, gzip and the httpd -DSL?

How do I control these?

Also, is it possible to remove awstats per domain? I could not find that.

I want to also remove gzip as I know it is buggy with Apache and expirimental. How do I remove it? I went to WHM's Update Apache and clicked "load previous config" gzip is not checked but I went to ssh root and did "locate gzip" and found these:

/bin/gzip/
/usr/bin/gzip
/usr/lib/python2.3/test/test_gzip.py
/usr/lib/python2.3/gzip.py
/usr/lib/python2.3/gzip.pyc
/usr/lib/python2.3/gzip.pyo
/usr/local/apache/libexec/mod_gzip.so

trickykid 12-14-2004 11:53 PM

Okay first of all, if your having load issues, we need more details? Output of top or free will help. Maybe even ps -aux.

Also if you give more details of who all uses this machine, how much mail comes thru, and anything else that might be related? Telling us the software being used won't tell us anything without the other details, cause sure, running what you said on an idle machine would be no problems, several users, no problems, 100+ could be problems.. maybe you catch my drift now!

chadi 12-14-2004 11:54 PM

I ran top and got this:

13040 nobody 16 0 21408 13m 12m R 85.9 0.7 0:04.92 /usr/local/apache/bin/httpd -DSSL
22266 root 16 0 195m 186m 1388 R 60.1 9.2 38:40.32 /usr/sbin/grpck
16859 mysql 20 0 47228 33m 3756 R 17.8 1.6 0:00.55 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6163 nobody 15 0 21232 13m 12m S 15.5 0.7 0:03.63 /usr/local/apache/bin/httpd -DSSL
6149 nobody 16 0 22496 14m 12m S 14.5 0.7 0:05.25 /usr/local/apache/bin/httpd -DSSL
6208 nobody 15 0 21392 13m 12m S 13.9 0.7 0:03.09 /usr/local/apache/bin/httpd -DSSL
22264 root 16 0 2380 1216 2200 R 13.2 0.1 11:16.05 /usr/bin/expect -- /scripts/grpck
6142 nobody 15 0 21668 13m 12m S 10.3 0.7 0:06.02 /usr/local/apache/bin/httpd -DSSL
16827 mysql 17 0 47228 33m 3756 S 8.7 1.6 0:00.34 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6170 nobody 15 0 21824 13m 12m S 8.1 0.7 0:05.07 /usr/local/apache/bin/httpd -DSSL
6164 nobody 16 0 21416 13m 12m S 4.8 0.7 0:05.90 /usr/local/apache/bin/httpd -DSSL
6938 root 15 0 2696 580 1300 D 4.5 0.0 5:39.53 syslogd -m 0
6152 nobody 15 0 21748 13m 12m S 4.2 0.7 0:14.16 /usr/local/apache/bin/httpd -DSSL
6132 nobody 15 0 21680 13m 12m S 3.2 0.7 0:04.01 /usr/local/apache/bin/httpd -DSSL

chadi 12-14-2004 11:57 PM

ps -aux shows (heavy cpu lines inserted here only)

rivey1 18143 27.1 1.0 25140 21440 ? S 00:55 0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root 22264 18.2 0.0 2380 1216 ? S Dec14 11:38 /usr/bin/expect -- /scripts/grpck
root 22266 62.8 9.1 200108 190672 pts/0 S Dec14 40:07 /usr/sbin/grpck

trickykid 12-15-2004 12:04 AM

Okay, first of all, do a ps -aux which will show all of your processes running.. and secondly, put it in the code tags on the forum so it actually spaces it how it looks normally in a terminal..

And if you still want help, include the other details I asked for.. number of users, emails coming thru.. more stats of any kind.. etc??

chadi 12-15-2004 12:07 AM

Code:

ps -aux shows (heavy cpu lines inserted here only)

rivey1  18143 27.1  1.0 25140 21440 ?      S    00:55  0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root    22264 18.2  0.0  2380 1216 ?        S    Dec14  11:38 /usr/bin/expect -- /scripts/grpck
root    22266 62.8  9.1 200108 190672 pts/0 S    Dec14  40:07 /usr/sbin/grpck

Users, 80 domain accounts.
Dual Xeon 2.4GHz HT
2GB ECC RAM

Awstats updates only at midnight once a day (was using nice load so I made it once a day only)

Mail quueue is about 15 emails only

chadi 12-15-2004 12:09 AM

-deleted-

see results below

chadi 12-15-2004 12:14 AM

Relayer stats:

Code:

User Domain Messages Sent Total Bytes Sent
nobody  10981 179510010


trickykid 12-15-2004 12:16 AM

Quote:

Originally posted by chadi
Code:

ps -aux shows (heavy cpu lines inserted here only)

rivey1  18143 27.1  1.0 25140 21440 ?      S    00:55  0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root    22264 18.2  0.0  2380 1216 ?        S    Dec14  11:38 /usr/bin/expect -- /scripts/grpck
root    22266 62.8  9.1 200108 190672 pts/0 S    Dec14  40:07 /usr/sbin/grpck

Users, 80 domain accounts.
Dual Xeon 2.4GHz HT
2GB ECC RAM

Awstats updates only at midnight once a day (was using nice load so I made it once a day only)

Mail quueue is about 15 emails only

15 emails an hour, day, minute.. I'm assuming these 80 domains have at least 80 users.. how many mail accounts total? You serving web pages I take it, is it web based email or pop, imap, etc?

I would say 80 Domains is alot for a machine like this, especially if each domain has their own email with users, etc...

If that's the case, you should really look into getting second servers for mail and possibly start looking into another server for domains... etc.

trickykid 12-15-2004 12:17 AM

Or at least get a second server to do some load balancing.. etc

chadi 12-15-2004 10:05 AM

Please help me here...now status shows these in red

Code:

User Domain %CPU %MEM Mysql Processes
root  93.41 29.11 2.0
Top Process %CPU 84.3 /usr/sbin/grpck
Top Process %CPU 84.2 /usr/sbin/grpck
Top Process %CPU 84.1 /usr/sbin/grpck
mysql  42.00 22.34 0.0
Top Process %CPU 99.9 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306
Top Process %CPU 97.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306

Something is causing the process to load high.
I believe someone is also attempting to spam from my server.
Yesterday the load was about 17k in queue, deleted them all,
and then this mornign about 7k in qeueue, deleted them all. I checked now again
and about 1500 in queue. How do I track this down?

I ran chkrootkit and rkhunter, both fine.

trickykid 12-15-2004 03:31 PM

Quote:

Originally posted by chadi
Please help me here...now status shows these in red

Code:

User Domain %CPU %MEM Mysql Processes
root  93.41 29.11 2.0
Top Process %CPU 84.3 /usr/sbin/grpck
Top Process %CPU 84.2 /usr/sbin/grpck
Top Process %CPU 84.1 /usr/sbin/grpck
mysql  42.00 22.34 0.0
Top Process %CPU 99.9 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306
Top Process %CPU 97.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306

Something is causing the process to load high.
I believe someone is also attempting to spam from my server.
Yesterday the load was about 17k in queue, deleted them all,
and then this mornign about 7k in qeueue, deleted them all. I checked now again
and about 1500 in queue. How do I track this down?

I ran chkrootkit and rkhunter, both fine.

What do your logs tell you? Is mail being delivered at all?


All times are GMT -5. The time now is 02:18 AM.