[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable
- Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable
- From: "Mike's List" <mikelist@xxxxxxx>
- Date: Fri Mar 21 09:59:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
check the customer ip89.216.127.49.myi:www --web site to see if there's
any porn or if it's hack or if your server is hack? Is the server
up-to-date w/all the patches, etc.?
did you installed the latest sendmail patch to prevent the exploit of
root access via bad header?
- Mike
On Fri, 21 Mar 2003, Matt wrote:
> I just did a "netstat -a" I and I did see an abnormal amount of RAW TCP
> connections;; This seems odd, but I do not know what it is..
>
> [admin admin]$ netstat -a
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address Foreign Address State
>
> tcp 0 0 ip89.216.127.49.myi:www host213-122-188-10:1866
> ESTABLISHED
> tcp 0 0 ip199.216.127.49.my:www inktomi4-ltn.serv:38436
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:81 216.127.51.50:11796
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10029
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10028
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24481
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1561
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www d44032c5.cable.wan:2009
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1303
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:pop3 web20604.mail.yah:46846
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1295
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20894
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20893
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20887
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20886
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20885
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20880
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20879
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20878
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20871
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1559
> FIN_WAIT2
> tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2847
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www webcacheh01a.cach:32934
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:www freeport-dialin272:3885 CLOSE
>
> tcp 0 0 genesis.parcom.net:www freeport-dialin272:3884 CLOSE
>
> tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24473
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www 204.60.92.227:61256 CLOSE
>
> tcp 0 0 ip89.216.127.49.myi:www res01446.rh.rit.ed:2032
> FIN_WAIT2
> tcp 0 0 ip89.216.127.49.myi:www 62.29.255.242:13508
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:pop3 ac86c436.ipt.aol.c:1674
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www 62.29.255.242:13489
> TIME_WAIT
> tcp 0 0 genesis.parcom.net:www dyn357-ele.nbw.tue:3133
> FIN_WAIT2
> tcp 0 0 genesis.parcom.net:ftp evrtwa1-ar8-4-62-0:1074
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:19540
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56401
> FIN_WAIT2
> tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56400
> FIN_WAIT2
> tcp 0 0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56400
> FIN_WAIT2
> tcp 0 0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2842
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24468
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10622
> TIME_WAIT
> tcp 0 0 ip89.216.127.49.myi:www cpe-24-160-20-204.:3112
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:pop3 66.50.225.21:14705
> ESTABLISHED
> tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1556
> FIN_WAIT2
> tcp 0 0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1991
> FIN_WAIT2
> tcp 0 0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1989
> FIN_WAIT2
> tcp 0 0 genesis.parcom.net:81 216.127.51.50:7408
> ESTABLISHED
> tcp 0 0 genesis.parcom.net:www 142.204.123.51:1366
> FIN_WAIT2
> tcp 0 0 genesis.parcom.net:www adsl-64-169-243-23:3034 CLOSE
>
> tcp 0 0 genesis.parcom.net:www 200-153-230-51.ds:39549
> TIME_WAIT
> tcp 0 25313 ip89.216.127.49.myi:www avelizy-101-1-3-22:1135 LAST_ACK
>
> tcp 0 0 ip89.216.127.49.myi:www res01446.rh.rit:cfinger
> ESTABLISHED
> tcp 1 56873 ip89.216.127.49.myi:www 62.29.255.242:60298
> CLOSE_WAIT
> tcp 0 164 genesis.parcom.n:telnet 216.127.51.50:6252
> ESTABLISHED
> tcp 0 0 *:mysql *:* LISTEN
>
> tcp 0 0 *:casp5100 *:* LISTEN
>
> tcp 0 0 *:casp5102 *:* LISTEN
>
> tcp 0 0 *:casp5101 *:* LISTEN
>
> tcp 0 0 *:casp3001 *:* LISTEN
>
> tcp 0 0 *:casp3000 *:* LISTEN
>
> tcp 0 0 *:www *:* LISTEN
>
> tcp 0 0 *:81 *:* LISTEN
>
> tcp 0 0 *:snpp *:* LISTEN
>
> tcp 0 0 *:imap2 *:* LISTEN
>
> tcp 0 0 *:pop3 *:* LISTEN
>
> tcp 0 0 *:telnet *:* LISTEN
>
> tcp 0 0 *:ftp *:* LISTEN
>
> tcp 0 0 *:6006 *:* LISTEN
>
> raw 5808 0 *:tcp *:* 7
>
> raw 27616 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 880 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 26560 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 10816 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 7424 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 27616 0 *:tcp *:* 7
>
> raw 5808 0 *:tcp *:* 7
>
> raw 2576 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 7424 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 1200 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 23808 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 15328 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 7008 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 10320 0 *:tcp *:* 7
>
> raw 2080 0 *:tcp *:* 7
>
> raw 1520 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 28816 0 *:tcp *:* 7
>
> raw 28816 0 *:tcp *:* 7
>
> raw 1200 0 *:tcp *:* 7
>
> raw 29968 0 *:tcp *:* 7
>
> raw 1152 0 *:tcp *:* 7
>
> raw 8160 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 29968 0 *:tcp *:* 7
>
> raw 23264 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 1152 0 *:tcp *:* 7
>
> raw 11472 0 *:tcp *:* 7
>
> raw 2352 0 *:tcp *:* 7
>
> raw 192 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 10768 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 15776 0 *:tcp *:* 7
>
> raw 32576 0 *:tcp *:* 7
>
> raw 2800 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 3760 0 *:tcp *:* 7
>
> raw 2800 0 *:tcp *:* 7
>
> raw 29264 0 *:tcp *:* 7
>
> raw 272 0 *:tcp *:* 7
>
> raw 4960 0 *:tcp *:* 7
>
> raw 32576 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 4160 0 *:tcp *:* 7
>
> raw 25872 0 *:tcp *:* 7
>
> raw 272 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 3440 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 4960 0 *:tcp *:* 7
>
> raw 9792 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 3248 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 32640 0 *:tcp *:* 7
>
> raw 5600 0 *:tcp *:* 7
>
> raw 9792 0 *:tcp *:* 7
>
> raw 32080 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 32400 0 *:tcp *:* 7
>
> raw 480 0 *:tcp *:* 7
>
> raw 14544 0 *:tcp *:* 7
>
> raw 2112 0 *:tcp *:* 7
>
> raw 35712 0 *:tcp *:* 7
>
> raw 45728 0 *:tcp *:* 7
>
> raw 35712 0 *:tcp *:* 7
>
> raw 59136 0 *:tcp *:* 7
>
> raw 35712 0 *:tcp *:* 7
>
> raw 34016 0 *:tcp *:* 7
>
> raw 3968 0 *:tcp *:* 7
>
> raw 9216 0 *:tcp *:* 7
>
> raw 7440 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 19872 0 *:tcp *:* 7
>
> raw 33040 0 *:tcp *:* 7
>
> raw 27552 0 *:tcp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> raw 33040 0 *:tcp *:* 7
>
> raw 37968 0 *:tcp *:* 7
>
> raw 18656 0 *:tcp *:* 7
>
> raw 640 0 *:tcp *:* 7
>
> raw 36352 0 *:tcp *:* 7
>
> raw 18656 0 *:tcp *:* 7
>
> raw 1792 0 *:tcp *:* 7
>
> raw 2752 0 *:tcp *:* 7
>
> raw 42976 0 *:tcp *:* 7
>
> raw 10096 0 *:tcp *:* 7
>
> raw 18656 0 *:tcp *:* 7
>
> raw 43456 0 *:tcp *:* 7
>
> raw 46928 0 *:tcp *:* 7
>
> raw 0 0 *:icmp *:* 7
>
> raw 0 0 *:tcp *:* 7
>
> Active UNIX domain sockets (servers and established)
> Proto RefCnt Flags Type State I-Node Path
> unix 1 [ W ] STREAM CONNECTED 31058 @00000783
> unix 1 [ W ] STREAM CONNECTED 30902 @0000077c
> unix 1 [ W ] STREAM CONNECTED 30829 @0000076d
> unix 1 [ W ] STREAM CONNECTED 31062 @00000784
> unix 1 [ W ] STREAM CONNECTED 30904 @0000077d
> unix 1 [ W ] STREAM CONNECTED 30868 @00000779
> unix 3 [ ] DGRAM 351 /dev/log
> unix 1 [ W ] STREAM CONNECTED 31064 @00000785
> unix 1 [ W ] STREAM CONNECTED 30942 @0000077e
> unix 1 [ W ] STREAM CONNECTED 30867 @00000778
> unix 1 [ W ] STREAM CONNECTED 30847 @0000076f
> unix 1 [ W ] STREAM CONNECTED 31065 @00000786
> unix 1 [ W ] STREAM CONNECTED 30978 @0000077f
> unix 1 [ W ] STREAM CONNECTED 30866 @00000777
> unix 1 [ W ] STREAM CONNECTED 30716 @00000768
> unix 0 [ ACC ] STREAM LISTENING 1338
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 29012 @000006d7
> unix 0 [ ACC ] STREAM LISTENING 609 /tmp/.s.PGSQL.5432
> unix 1 [ W ] STREAM CONNECTED 31013 @00000780
> unix 1 [ W ] STREAM CONNECTED 30881 @0000077a
> unix 1 [ W ] STREAM CONNECTED 31042 @00000782
> unix 1 [ W ] STREAM CONNECTED 30885 @0000077b
> unix 1 [ W ] STREAM CONNECTED 30813 @0000076a
> unix 1 [ W ] STREAM CONNECTED 30861 @00000772
> unix 1 [ W ] STREAM CONNECTED 30860 @00000771
> unix 1 [ ] STREAM CONNECTED 30651 @00000762
> unix 1 [ W ] STREAM CONNECTED 30858 @00000770
> unix 1 [ W ] STREAM CONNECTED 30865 @00000776
> unix 1 [ ] STREAM CONNECTED 30093 @00000732
> unix 1 [ W ] STREAM CONNECTED 30864 @00000775
> unix 1 [ W ] STREAM CONNECTED 30863 @00000774
> unix 1 [ W ] STREAM CONNECTED 30862 @00000773
> unix 1 [ ] STREAM CONNECTING 0
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTING 0
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTING 0
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTING 0
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 31043
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 31014
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30979
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30975
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30974
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30969
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30961
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30920
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30915
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30914
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30911
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30909
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30895
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30894
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30890
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30886
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30882
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30859
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30848
> /var/lib/mysql/mysql.sock
> unix 0 [ ] STREAM CONNECTED 30843
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30830
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30814
> /var/lib/mysql/mysql.sock
> unix 0 [ ] DGRAM 30801
> unix 1 [ ] STREAM CONNECTED 30781
> /var/lib/mysql/mysql.sock
> unix 1 [ ] STREAM CONNECTED 30652
> /var/lib/mysql/mysql.sock
> unix 1 [ W ] STREAM CONNECTED 30094 /tmp/.s.PGSQL.5432
> unix 1 [ W ] STREAM CONNECTED 29019
> /var/lib/mysql/mysql.sock
> unix 0 [ ] DGRAM 25424
> unix 0 [ ] DGRAM 361
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> Sent: Friday, March 21, 2003 9:39 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
> server is un-usable
>
>
> One more thing on the "top" command-- Is what you see on the page when you
> run the command all you get? Or are they more processes below what you can
> see live? I mean that is just why I usually run the "ps -aux" command. It
> will show a snapshot of "top" right?
>
> Matt
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> Sent: Friday, March 21, 2003 9:32 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
> server is un-usable
>
>
> Alright I just went ahead and posted evertyhing I could.
>
> "top"
>
> 9:36am up 2:12, 1 user, load average: 57.69, 69.60, 79.08 93 processes:
> 87 sleeping, 6 running, 0 zombie, 0 stopped CPU states: 89.4% user, 10.5%
> system, 0.0% nice, 0.0% idle
> Mem: 517104K av, 394120K used, 122984K free, 367596K shrd, 20008K
> buff
> Swap: 131448K av, 0K used, 131448K free 170748K
> cached
>
> PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND
> 12238 root 20 0 920 920 672 R 0 5.3 0.1 0:00
> in.qpopper
> 12246 mysql 19 0 15452 15M 1468 R 0 4.5 2.9 0:00 mysqld
> 12215 mysql 19 0 15452 15M 1468 R 0 4.3 2.9 0:00 mysqld
> 1695 httpd 18 0 13088 12M 8840 R 0 3.7 2.5 0:23 httpd
> 996 httpd 3 0 13924 13M 8832 S 0 2.6 2.6 0:26 httpd
> 6055 httpd 3 0 13296 12M 8860 S 0 2.4 2.5 0:19 httpd
> 12231 admin 12 0 900 900 676 R 0 2.0 0.1 0:00 top
> 1364 httpd 8 0 13560 13M 8920 S 0 1.8 2.6 0:39 httpd
> 664 httpd 1 0 12668 12M 8856 S 0 0.5 2.4 0:24 httpd
> 11957 httpd 2 0 11068 10M 9284 S 0 0.4 2.1 0:00 httpd
> 12255 root 16 0 796 796 724 S 0 0.3 0.1 0:00 lcdstop
> 4056 httpd 1 0 12660 12M 8860 S 0 0.2 2.4 0:20 httpd
> 670 httpd 0 0 12388 12M 8852 S 0 0.1 2.3 0:23 httpd
> 1691 httpd 3 0 13560 13M 8852 S 0 0.1 2.6 0:28 httpd
> 5238 httpd 1 0 13360 13M 8908 S 0 0.1 2.5 0:17 httpd
> 11018 root 0 0 764 764 608 S 0 0.1 0.1 0:00
> in.telnetd
> 12257 root 18 0 332 332 268 R 0 0.1 0.0 0:00 pidof
> 1 root 0 0 472 472 400 S 0 0.0 0.0 0:04 init
> 2 root 0 0 0 0 0 SW 0 0.0 0.0 0:00 kflushd
> 3 root 0 0 0 0 0 SW 0 0.0 0.0 0:00 kupdate
> 4 root 0 0 0 0 0 SW 0 0.0 0.0 0:00 kswapd
> 5 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
> mdrecoveryd
> 6 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00 raid1d
> 7 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00 raid1d
> 8 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00 raid1d
> 9 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00 raid1d
> 493 root 0 0 524 524 424 S 0 0.0 0.1 0:06 syslogd
> 502 root 0 0 768 768 384 S 0 0.0 0.1 0:00 klogd
> 556 root 0 0 616 616 508 S 0 0.0 0.1 0:00 crond
> 568 root 1 0 484 484 412 S 0 0.0 0.0 0:00 inetd
> 580 root 0 0 5884 5884 4832 S 0 0.0 1.1 0:01
> httpd.admsrv
> 603 root 0 0 6492 6492 5164 S 0 0.0 1.2 0:00
> httpd.admsrv
> 604 root 0 0 9152 9152 8868 S 0 0.0 1.7 0:01 httpd
> 662 httpd 0 0 13744 13M 8720 S 0 0.0 2.6 0:23 httpd
> 663 httpd 0 0 12956 12M 8848 S 0 0.0 2.5 0:26 httpd
> 667 httpd 0 0 12852 12M 8852 S 0 0.0 2.4 0:33 httpd
> 668 httpd 0 0 14212 13M 8848 S 0 0.0 2.7 0:35 httpd
> 669 httpd 0 0 13264 12M 8844 S 0 0.0 2.5 0:24 httpd
> 671 httpd 0 0 13840 13M 8856 S 0 0.0 2.6 0:33 httpd
> 672 httpd 1 0 14172 13M 8852 S 0 0.0 2.7 0:26 httpd
> 673 httpd 0 0 13092 12M 8836 S 0 0.0 2.5 0:27 httpd
> 675 postgres 5 5 1332 1332 948 S N 0 0.0 0.2 0:00
> postmaster
> 759 httpd 0 0 13500 13M 8828 S 0 0.0 2.6 0:25 httpd
> 849 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> 850 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> 851 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> 858 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 866 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 867 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 868 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 869 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 870 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 871 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 872 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00 caspeng
> 1317 root 0 0 664 664 496 S 0 0.0 0.1 0:00 admdog
> 1318 root 0 0 664 664 496 S 0 0.0 0.1 0:00 admdog
> 1319 root 0 0 664 664 496 S 0 0.0 0.1 0:00 admdog
> 1325 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00 admeng
> 1328 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00 admeng
> 1329 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00 admeng
> 1330 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00 admeng
>
>
> Matt
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Greg Hewitt-Long
> Sent: Friday, March 21, 2003 8:17 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
> server is un-usable
>
>
> >Yes, it my last email to the list I stated that I did this-
> >
> >"Also, I forgot to mention that I have been watching TOP and have found
> >no one process that is using more than 1% or 1.0 of the CPU. Oh,, and I
> >have been using the command ps -aux to try and find a runaway process
> >that way and it pretty much showed me the same thing as TOP."
> >
> >How about something else?
>
>
> CPU maxes out on the RAQs when RAM is maxxed out and they are swapping - how
> about posting the first 10 lines of your top output?
>
> regards
>
> Greg Hewitt-Long
>
> >Thank You,
> >
> >Matt
> --
> http://www.webyourbusiness.com/
> Providers of E-Commerce Software &
> Web Design Consultancy and Services.
> PH: (970) 266-0195 FAX: (970) 266-0158
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>