Ive posted this same message on the cpanel forum but not getting any responses so looking to see if someone might have some ideas here since it is getting frustrating. Hopefully this forum is ok for this.

I'm getting the notice: ipaliases failed A restart was attempted automagically. Service Check Method: [check command] Number of Restart Attempts: 1 Cmd Service Check Raw Output: ipaliases has missing ips

over and over again at least a dozen times a day this is happening on my dedicated server running centos 5.8 with whm 11.30.6.

This just started happening over the last few days on the dedicated server. This server has been running for along time without any issues until now. Nothing has been modified or changed on it to my knowledge other than standard cpanel updates and so forth.

I've looked thru the logs and see nothing that tells me anything. But of course, I'm not an expert, just fair to middling skills so I might not know what to look for specifically.

I have 11 ips on the server, 10 dedicated to certain accounts with ssl. All of a sudden some of them will fail. Running /etc/rc.d/init.d/ipaliases restart you know will make everything normal again. For a WHILE. Then, zap, ipaliases fail again sometimes successively within minutes t a failure

I opened a support ticket with Cpanel. This was their analysis:
"The only errors I see are those reported by chkservd. This usually indicates an IP conflict. It looks like it's dying every 10 to 15 minutes which would make sense if there was an IP conflict on your network. My first suggestion is that you contact your datacenter or webhost and have them check their switch ARP logs and see if they are finding multiple MAC addresses arping with any of those IP addresses. If not there, I recommend that you disable csf to see if it happens then. It's possible that CSF is blocking the service checks for ipaliases. I'm fairly certain that you'll find it in one of those two places as the service check isn't able to connect to the IP addresses when the service is reported as down."

I had the NOC look into it and they've offered nothing, everything seems to be in order. We conducted a capture of eth0 using wireshark but nothing seems to be out of the ordinary. Of course, we have no way to see what is happening right at the moment of the failure since nothing seems to show up in the logs in that regard. I disabled CSF to see if that was causing the issue but it made no difference. I've checked all the associated files such as /etc/nameserverips, /etc/ips, /etc/init.d/ipaliases, chkconfig --list ipaliases and so forth... and nothing out of the ordinary. There have been over 20 failures today alone ad each time the server is unresponsive for a good while until it resets. Often it will reboot then ipaliases will fail again within minutes, sometimes no problem for awhile.

I'm totally at a loss here, some good ideas about what to check, or do would be most welcome.