server over load cpu/memory usage
 

What's with spamassassin using all this overload?

This is a Dual Xeon 2.4GHz HT server (HP rackmount server) with 2GB ECC Buffered RAM.

It should handle this.

Specs:
cPanel / WHM 9.9.9 R-10
Dual Xeon 2.4GHz HT
2GB ECC RAM
Fedora Core 2

What's with the awstats overload, gzip and the httpd -DSL?

How do I control these?

Also, is it possible to remove awstats per domain? I could not find that.

I want to also remove gzip as I know it is buggy with Apache and expirimental. How do I remove it? I went to WHM's Update Apache and clicked "load previous config" gzip is not checked but I went to ssh root and did "locate gzip" and found these:

/bin/gzip/
/usr/bin/gzip
/usr/lib/python2.3/test/test_gzip.py
/usr/lib/python2.3/gzip.py
/usr/lib/python2.3/gzip.pyc
/usr/lib/python2.3/gzip.pyo
/usr/local/apache/libexec/mod_gzip.so

Okay first of all, if your having load issues, we need more details? Output of top or free will help. Maybe even ps -aux.

Also if you give more details of who all uses this machine, how much mail comes thru, and anything else that might be related? Telling us the software being used won't tell us anything without the other details, cause sure, running what you said on an idle machine would be no problems, several users, no problems, 100+ could be problems.. maybe you catch my drift now!

I ran top and got this:

13040 nobody 16 0 21408 13m 12m R 85.9 0.7 0:04.92 /usr/local/apache/bin/httpd -DSSL
22266 root 16 0 195m 186m 1388 R 60.1 9.2 38:40.32 /usr/sbin/grpck
16859 mysql 20 0 47228 33m 3756 R 17.8 1.6 0:00.55 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6163 nobody 15 0 21232 13m 12m S 15.5 0.7 0:03.63 /usr/local/apache/bin/httpd -DSSL
6149 nobody 16 0 22496 14m 12m S 14.5 0.7 0:05.25 /usr/local/apache/bin/httpd -DSSL
6208 nobody 15 0 21392 13m 12m S 13.9 0.7 0:03.09 /usr/local/apache/bin/httpd -DSSL
22264 root 16 0 2380 1216 2200 R 13.2 0.1 11:16.05 /usr/bin/expect -- /scripts/grpck
6142 nobody 15 0 21668 13m 12m S 10.3 0.7 0:06.02 /usr/local/apache/bin/httpd -DSSL
16827 mysql 17 0 47228 33m 3756 S 8.7 1.6 0:00.34 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.domain.com.pid --skip
6170 nobody 15 0 21824 13m 12m S 8.1 0.7 0:05.07 /usr/local/apache/bin/httpd -DSSL
6164 nobody 16 0 21416 13m 12m S 4.8 0.7 0:05.90 /usr/local/apache/bin/httpd -DSSL
6938 root 15 0 2696 580 1300 D 4.5 0.0 5:39.53 syslogd -m 0
6152 nobody 15 0 21748 13m 12m S 4.2 0.7 0:14.16 /usr/local/apache/bin/httpd -DSSL
6132 nobody 15 0 21680 13m 12m S 3.2 0.7 0:04.01 /usr/local/apache/bin/httpd -DSSL

ps -aux shows (heavy cpu lines inserted here only)

rivey1 18143 27.1 1.0 25140 21440 ? S 00:55 0:02 /usr/bin/perl -T -w /usr/bin/spamassassin
root 22264 18.2 0.0 2380 1216 ? S Dec14 11:38 /usr/bin/expect -- /scripts/grpck
root 22266 62.8 9.1 200108 190672 pts/0 S Dec14 40:07 /usr/sbin/grpck

Okay, first of all, do a ps -aux which will show all of your processes running.. and secondly, put it in the code tags on the forum so it actually spaces it how it looks normally in a terminal..

And if you still want help, include the other details I asked for.. number of users, emails coming thru.. more stats of any kind.. etc??

Users, 80 domain accounts.
Dual Xeon 2.4GHz HT
2GB ECC RAM

Awstats updates only at midnight once a day (was using nice load so I made it once a day only)

Mail quueue is about 15 emails only

-deleted-

see results below

Relayer stats:

15 emails an hour, day, minute.. I'm assuming these 80 domains have at least 80 users.. how many mail accounts total? You serving web pages I take it, is it web based email or pop, imap, etc?

I would say 80 Domains is alot for a machine like this, especially if each domain has their own email with users, etc...

If that's the case, you should really look into getting second servers for mail and possibly start looking into another server for domains... etc.

Or at least get a second server to do some load balancing.. etc

Please help me here...now status shows these in red

Something is causing the process to load high.
I believe someone is also attempting to spam from my server.
Yesterday the load was about 17k in queue, deleted them all,
and then this mornign about 7k in qeueue, deleted them all. I checked now again
and about 1500 in queue. How do I track this down?

I ran chkrootkit and rkhunter, both fine.

What do your logs tell you? Is mail being delivered at all?