LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
LinkBack Search this Thread
Old 12-14-2004, 09:55 PM   #1
chadi
Member
 
Registered: Aug 2004
Posts: 96

Rep: Reputation: 15
server over load cpu/memory usage


What's with spamassassin using all this overload?

This is a Dual Xeon 2.4GHz HT server (HP rackmount server) with 2GB ECC Buffered RAM.

It should handle this.

Specs:
cPanel / WHM 9.9.9 R-10
Dual Xeon 2.4GHz HT
2GB ECC RAM
Fedora Core 2

What's with the awstats overload, gzip and the httpd -DSL?

How do I control these?

Also, is it possible to remove awstats per domain? I could not find that.

I want to also remove gzip as I know it is buggy with Apache and expirimental. How do I remove it? I went to WHM's Update Apache and clicked "load previous config" gzip is not checked but I went to ssh root and did "locate gzip" and found these:

/bin/gzip/
/usr/bin/gzip
/usr/lib/python2.3/test/test_gzip.py
/usr/lib/python2.3/gzip.py
/usr/lib/python2.3/gzip.pyc
/usr/lib/python2.3/gzip.pyo
/usr/local/apache/libexec/mod_gzip.so
 
Old 12-14-2004, 11:53 PM   #2
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 194Reputation: 194
Okay first of all, if your having load issues, we need more details? Output of top or free will help. Maybe even ps -aux.

Also if you give more details of who all uses this machine, how much mail comes thru, and anything else that might be related? Telling us the software being used won't tell us anything without the other details, cause sure, running what you said on an idle machine would be no problems, several users, no problems, 100+ could be problems.. maybe you catch my drift now!
 
Old 12-14-2004, 11:54 PM   #3
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
I ran top and got this:

13040 nobody 16 0 21408 13m 12m R 85.9 0.7 0:04.92 /usr/local/apache/bin/httpd -DSSL
22266 root 16 0 195m 186m 1388 R 60.1 9.2 38:40.32 /usr/sbin/grpck
16859 mysql 20 0 47228 33m 3756 R 17.8 1.6 0:00.55 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6163 nobody 15 0 21232 13m 12m S 15.5 0.7 0:03.63 /usr/local/apache/bin/httpd -DSSL
6149 nobody 16 0 22496 14m 12m S 14.5 0.7 0:05.25 /usr/local/apache/bin/httpd -DSSL
6208 nobody 15 0 21392 13m 12m S 13.9 0.7 0:03.09 /usr/local/apache/bin/httpd -DSSL
22264 root 16 0 2380 1216 2200 R 13.2 0.1 11:16.05 /usr/bin/expect -- /scripts/grpck
6142 nobody 15 0 21668 13m 12m S 10.3 0.7 0:06.02 /usr/local/apache/bin/httpd -DSSL
16827 mysql 17 0 47228 33m 3756 S 8.7 1.6 0:00.34 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6170 nobody 15 0 21824 13m 12m S 8.1 0.7 0:05.07 /usr/local/apache/bin/httpd -DSSL
6164 nobody 16 0 21416 13m 12m S 4.8 0.7 0:05.90 /usr/local/apache/bin/httpd -DSSL
6938 root 15 0 2696 580 1300 D 4.5 0.0 5:39.53 syslogd -m 0
6152 nobody 15 0 21748 13m 12m S 4.2 0.7 0:14.16 /usr/local/apache/bin/httpd -DSSL
6132 nobody 15 0 21680 13m 12m S 3.2 0.7 0:04.01 /usr/local/apache/bin/httpd -DSSL
 
Old 12-14-2004, 11:57 PM   #4
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
ps -aux shows (heavy cpu lines inserted here only)

rivey1 18143 27.1 1.0 25140 21440 ? S 00:55 0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root 22264 18.2 0.0 2380 1216 ? S Dec14 11:38 /usr/bin/expect -- /scripts/grpck
root 22266 62.8 9.1 200108 190672 pts/0 S Dec14 40:07 /usr/sbin/grpck
 
Old 12-15-2004, 12:04 AM   #5
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 194Reputation: 194
Okay, first of all, do a ps -aux which will show all of your processes running.. and secondly, put it in the code tags on the forum so it actually spaces it how it looks normally in a terminal..

And if you still want help, include the other details I asked for.. number of users, emails coming thru.. more stats of any kind.. etc??
 
Old 12-15-2004, 12:07 AM   #6
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
Code:
ps -aux shows (heavy cpu lines inserted here only)

rivey1   18143 27.1  1.0 25140 21440 ?       S    00:55   0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root     22264 18.2  0.0  2380 1216 ?        S    Dec14  11:38 /usr/bin/expect -- /scripts/grpck
root     22266 62.8  9.1 200108 190672 pts/0 S    Dec14  40:07 /usr/sbin/grpck
Users, 80 domain accounts.
Dual Xeon 2.4GHz HT
2GB ECC RAM

Awstats updates only at midnight once a day (was using nice load so I made it once a day only)

Mail quueue is about 15 emails only
 
Old 12-15-2004, 12:09 AM   #7
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
-deleted-

see results below

Last edited by chadi; 12-15-2004 at 10:08 AM.
 
Old 12-15-2004, 12:14 AM   #8
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
Relayer stats:

Code:
User Domain Messages Sent Total Bytes Sent 
nobody  10981 179510010
 
Old 12-15-2004, 12:16 AM   #9
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 194Reputation: 194
Quote:
Originally posted by chadi
Code:
ps -aux shows (heavy cpu lines inserted here only)

rivey1   18143 27.1  1.0 25140 21440 ?       S    00:55   0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root     22264 18.2  0.0  2380 1216 ?        S    Dec14  11:38 /usr/bin/expect -- /scripts/grpck
root     22266 62.8  9.1 200108 190672 pts/0 S    Dec14  40:07 /usr/sbin/grpck
Users, 80 domain accounts.
Dual Xeon 2.4GHz HT
2GB ECC RAM

Awstats updates only at midnight once a day (was using nice load so I made it once a day only)

Mail quueue is about 15 emails only
15 emails an hour, day, minute.. I'm assuming these 80 domains have at least 80 users.. how many mail accounts total? You serving web pages I take it, is it web based email or pop, imap, etc?

I would say 80 Domains is alot for a machine like this, especially if each domain has their own email with users, etc...

If that's the case, you should really look into getting second servers for mail and possibly start looking into another server for domains... etc.
 
Old 12-15-2004, 12:17 AM   #10
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 194Reputation: 194
Or at least get a second server to do some load balancing.. etc
 
Old 12-15-2004, 10:05 AM   #11
chadi
Member
 
Registered: Aug 2004
Posts: 96

Original Poster
Rep: Reputation: 15
Please help me here...now status shows these in red

Code:
User Domain %CPU %MEM Mysql Processes 
root  93.41 29.11 2.0 
Top Process %CPU 84.3 /usr/sbin/grpck 
Top Process %CPU 84.2 /usr/sbin/grpck 
Top Process %CPU 84.1 /usr/sbin/grpck 
mysql  42.00 22.34 0.0 
Top Process %CPU 99.9 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306 
Top Process %CPU 97.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306
Something is causing the process to load high.
I believe someone is also attempting to spam from my server.
Yesterday the load was about 17k in queue, deleted them all,
and then this mornign about 7k in qeueue, deleted them all. I checked now again
and about 1500 in queue. How do I track this down?

I ran chkrootkit and rkhunter, both fine.

Last edited by chadi; 12-15-2004 at 10:08 AM.
 
Old 12-15-2004, 03:31 PM   #12
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 194Reputation: 194
Quote:
Originally posted by chadi
Please help me here...now status shows these in red

Code:
User Domain %CPU %MEM Mysql Processes 
root  93.41 29.11 2.0 
Top Process %CPU 84.3 /usr/sbin/grpck 
Top Process %CPU 84.2 /usr/sbin/grpck 
Top Process %CPU 84.1 /usr/sbin/grpck 
mysql  42.00 22.34 0.0 
Top Process %CPU 99.9 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306 
Top Process %CPU 97.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/server.domain.com.pid --skip-locking --port3306
Something is causing the process to load high.
I believe someone is also attempting to spam from my server.
Yesterday the load was about 17k in queue, deleted them all,
and then this mornign about 7k in qeueue, deleted them all. I checked now again
and about 1500 in queue. How do I track this down?

I ran chkrootkit and rkhunter, both fine.
What do your logs tell you? Is mail being delivered at all?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
getting realtime info on memory usage-cpu and harddrive usage steering Linux - Newbie 5 03-03-2005 08:43 PM
will CPU affect memory usage blackzone Linux - Hardware 2 02-24-2005 05:52 AM
CPU and memory usage suguname Linux - Newbie 3 02-01-2005 01:45 PM
how to determine cpu usage, memory usage, I/O usage by a particular user logged on li rags2k Programming 4 08-21-2004 04:45 AM
Controlling CPU usage & memory usage Saravana babu Linux - Software 0 02-18-2004 05:55 AM


All times are GMT -5. The time now is 07:14 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration