[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable



Ok,,

I just installed this package and did a reboot just for good measure!
Hopefully this fixes it ;-)))

Matt

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Mike's List
Sent: Friday, March 21, 2003 11:13 AM
To: Matt
Cc: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
server is un-usable


Go to
http://sunsolve.sun.com/pub-cgi/show.pl?target=cobalt/index&nav=patchpage/
select your server (Raq4?)
http://sunsolve.sun.com/pub-cgi/show.pl?target=cobalt/raq4.eng&nav=patchpage
look and see what patches you haven't apply??? where does it stops, etc. and
apply the patch bottom-up.

Looks like the CGIWRAP Update is the only one not install???
RaQ4-All-Security-2.0.1-16261.pkg


- Mike

On Fri, 21 Mar 2003, Matt wrote:

> Mike,
> 
> IP89 is the local IP- The server IP, so I think that should be ok.
> 
> Also here is a list of the patches that are installed on the server:
> 
> Software on the Sun Cobalt Server
>  
> Sun Chili!Soft ASP Release 3.6.2
> CMU-SNMP Update Release 3.7.1
> Relational Database Server and Client tools by InterBase. Release V6.0 
> Cobalt MySQL Release 3.23.37-1 
> OpenSSH Release 3.4p1-PM4 
> Open WebMail Release 1.65-20020701 
> Cobalt OS Release 6.0
> PHP Release 4.1.2-3 
> RaQ4-All-Kernel Release 2.0.1-2.2.16C33III
> RaQ4-All-Security Release 2.0.1-1-14936
> RaQ4-All-Security Release 2.0.1-1-15673
> RaQ4-All-Security Release 2.0.1-13323
> RaQ4-All-Security Release 2.0.1-13453
> RaQ4-All-Security Release 2.0.1-14039
> RaQ4-All-Security Release 2.0.1-14559
> RaQ4-All-Security Release 2.0.1-14997
> RaQ4-All-Security Release 2.0.1-15417
> RaQ4-All-Security Release 2.0.1-15823
> RaQ4-All-Security Release 2.0.1-2-15787
> RaQ4-All-System Release 2.0.1-12854
> RaQ4-All-System Release 2.0.1-13993
> RaQ4-en-OSUpdateRelease 2.0
> RaQ4 Java Developer Kit Release 1.3
> Sendmail Release 8.10.2-PM1 
> Webalizer Release 2.01.10-1 
> 
> 
> Matt
>  
> 
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Mike's List
> Sent: Friday, March 21, 2003 9:58 AM
> To: Matt
> Cc: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up 
> till server is un-usable
> 
> 
> check the customer ip89.216.127.49.myi:www --web site to see if 
> there's any porn or if it's hack or if your server is hack?  Is the 
> server up-to-date w/all the patches, etc.?
> 
> did you installed the latest sendmail patch to prevent the exploit of 
> root access via bad header?
> 
> 
> - Mike
> 
> On Fri, 21 Mar 2003, Matt wrote:
> 
> > I just did a "netstat -a" I and I did see an abnormal amount of RAW
> > TCP connections;; This seems odd, but I do not know what it is..
> > 
> > [admin admin]$ netstat -a
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address           Foreign Address
State
> > 
> > tcp        0      0 ip89.216.127.49.myi:www host213-122-188-10:1866
> > ESTABLISHED 
> > tcp        0      0 ip199.216.127.49.my:www inktomi4-ltn.serv:38436
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:81   216.127.51.50:11796
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www adsl-solo-40-155.:10029
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www adsl-solo-40-155.:10028
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www 66.80-202-241.nex:24481
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1561
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www d44032c5.cable.wan:2009
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1303
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:pop3 web20604.mail.yah:46846
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1295
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20894
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20893
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20887
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20886
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20885
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20880
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20879
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20878
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:20871
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1559
> > FIN_WAIT2   
> > tcp        0      0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2847
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www webcacheh01a.cach:32934
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:www  freeport-dialin272:3885
CLOSE
> > 
> > tcp        0      0 genesis.parcom.net:www  freeport-dialin272:3884
CLOSE
> > 
> > tcp        0      0 ip89.216.127.49.myi:www 66.80-202-241.nex:24473
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www 204.60.92.227:61256
CLOSE
> > 
> > tcp        0      0 ip89.216.127.49.myi:www res01446.rh.rit.ed:2032
> > FIN_WAIT2   
> > tcp        0      0 ip89.216.127.49.myi:www 62.29.255.242:13508
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:pop3 ac86c436.ipt.aol.c:1674
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www 62.29.255.242:13489
> > TIME_WAIT   
> > tcp        0      0 genesis.parcom.net:www  dyn357-ele.nbw.tue:3133
> > FIN_WAIT2   
> > tcp        0      0 genesis.parcom.net:ftp  evrtwa1-ar8-4-62-0:1074
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www h139-142-157-226.:19540
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www host81-132-152-23:56401
> > FIN_WAIT2   
> > tcp        0      0 ip89.216.127.49.myi:www host81-132-152-23:56400
> > FIN_WAIT2   
> > tcp        0      0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www host81-132-152-23:56400
> > FIN_WAIT2   
> > tcp        0      0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2842
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www 66.80-202-241.nex:24468
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www adsl-solo-40-155.:10622
> > TIME_WAIT   
> > tcp        0      0 ip89.216.127.49.myi:www cpe-24-160-20-204.:3112
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:pop3 66.50.225.21:14705
> > ESTABLISHED 
> > tcp        0      0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1556
> > FIN_WAIT2   
> > tcp        0      0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1991
> > FIN_WAIT2   
> > tcp        0      0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1989
> > FIN_WAIT2   
> > tcp        0      0 genesis.parcom.net:81   216.127.51.50:7408
> > ESTABLISHED 
> > tcp        0      0 genesis.parcom.net:www  142.204.123.51:1366
> > FIN_WAIT2   
> > tcp        0      0 genesis.parcom.net:www  adsl-64-169-243-23:3034
CLOSE
> > 
> > tcp        0      0 genesis.parcom.net:www  200-153-230-51.ds:39549
> > TIME_WAIT   
> > tcp        0  25313 ip89.216.127.49.myi:www avelizy-101-1-3-22:1135
> LAST_ACK
> > 
> > tcp        0      0 ip89.216.127.49.myi:www res01446.rh.rit:cfinger
> > ESTABLISHED 
> > tcp        1  56873 ip89.216.127.49.myi:www 62.29.255.242:60298
> > CLOSE_WAIT  
> > tcp        0    164 genesis.parcom.n:telnet 216.127.51.50:6252
> > ESTABLISHED 
> > tcp        0      0 *:mysql                 *:*
LISTEN
> > 
> > tcp        0      0 *:casp5100              *:*
LISTEN
> > 
> > tcp        0      0 *:casp5102              *:*
LISTEN
> > 
> > tcp        0      0 *:casp5101              *:*
LISTEN
> > 
> > tcp        0      0 *:casp3001              *:*
LISTEN
> > 
> > tcp        0      0 *:casp3000              *:*
LISTEN
> > 
> > tcp        0      0 *:www                   *:*
LISTEN
> > 
> > tcp        0      0 *:81                    *:*
LISTEN
> > 
> > tcp        0      0 *:snpp                  *:*
LISTEN
> > 
> > tcp        0      0 *:imap2                 *:*
LISTEN
> > 
> > tcp        0      0 *:pop3                  *:*
LISTEN
> > 
> > tcp        0      0 *:telnet                *:*
LISTEN
> > 
> > tcp        0      0 *:ftp                   *:*
LISTEN
> > 
> > tcp        0      0 *:6006                  *:*
LISTEN
> > 
> > raw     5808      0 *:tcp                   *:*                     7
> > 
> > raw    27616      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw      880      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    26560      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    10816      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     7424      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    27616      0 *:tcp                   *:*                     7
> > 
> > raw     5808      0 *:tcp                   *:*                     7
> > 
> > raw     2576      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     7424      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     1200      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    23808      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    15328      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     7008      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    10320      0 *:tcp                   *:*                     7
> > 
> > raw     2080      0 *:tcp                   *:*                     7
> > 
> > raw     1520      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    28816      0 *:tcp                   *:*                     7
> > 
> > raw    28816      0 *:tcp                   *:*                     7
> > 
> > raw     1200      0 *:tcp                   *:*                     7
> > 
> > raw    29968      0 *:tcp                   *:*                     7
> > 
> > raw     1152      0 *:tcp                   *:*                     7
> > 
> > raw     8160      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    29968      0 *:tcp                   *:*                     7
> > 
> > raw    23264      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     1152      0 *:tcp                   *:*                     7
> > 
> > raw    11472      0 *:tcp                   *:*                     7
> > 
> > raw     2352      0 *:tcp                   *:*                     7
> > 
> > raw      192      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    10768      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    15776      0 *:tcp                   *:*                     7
> > 
> > raw    32576      0 *:tcp                   *:*                     7
> > 
> > raw     2800      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     3760      0 *:tcp                   *:*                     7
> > 
> > raw     2800      0 *:tcp                   *:*                     7
> > 
> > raw    29264      0 *:tcp                   *:*                     7
> > 
> > raw      272      0 *:tcp                   *:*                     7
> > 
> > raw     4960      0 *:tcp                   *:*                     7
> > 
> > raw    32576      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     4160      0 *:tcp                   *:*                     7
> > 
> > raw    25872      0 *:tcp                   *:*                     7
> > 
> > raw      272      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     3440      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     4960      0 *:tcp                   *:*                     7
> > 
> > raw     9792      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw     3248      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    32640      0 *:tcp                   *:*                     7
> > 
> > raw     5600      0 *:tcp                   *:*                     7
> > 
> > raw     9792      0 *:tcp                   *:*                     7
> > 
> > raw    32080      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    32400      0 *:tcp                   *:*                     7
> > 
> > raw      480      0 *:tcp                   *:*                     7
> > 
> > raw    14544      0 *:tcp                   *:*                     7
> > 
> > raw     2112      0 *:tcp                   *:*                     7
> > 
> > raw    35712      0 *:tcp                   *:*                     7
> > 
> > raw    45728      0 *:tcp                   *:*                     7
> > 
> > raw    35712      0 *:tcp                   *:*                     7
> > 
> > raw    59136      0 *:tcp                   *:*                     7
> > 
> > raw    35712      0 *:tcp                   *:*                     7
> > 
> > raw    34016      0 *:tcp                   *:*                     7
> > 
> > raw     3968      0 *:tcp                   *:*                     7
> > 
> > raw     9216      0 *:tcp                   *:*                     7
> > 
> > raw     7440      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    19872      0 *:tcp                   *:*                     7
> > 
> > raw    33040      0 *:tcp                   *:*                     7
> > 
> > raw    27552      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > raw    33040      0 *:tcp                   *:*                     7
> > 
> > raw    37968      0 *:tcp                   *:*                     7
> > 
> > raw    18656      0 *:tcp                   *:*                     7
> > 
> > raw      640      0 *:tcp                   *:*                     7
> > 
> > raw    36352      0 *:tcp                   *:*                     7
> > 
> > raw    18656      0 *:tcp                   *:*                     7
> > 
> > raw     1792      0 *:tcp                   *:*                     7
> > 
> > raw     2752      0 *:tcp                   *:*                     7
> > 
> > raw    42976      0 *:tcp                   *:*                     7
> > 
> > raw    10096      0 *:tcp                   *:*                     7
> > 
> > raw    18656      0 *:tcp                   *:*                     7
> > 
> > raw    43456      0 *:tcp                   *:*                     7
> > 
> > raw    46928      0 *:tcp                   *:*                     7
> > 
> > raw        0      0 *:icmp                  *:*                     7
> > 
> > raw        0      0 *:tcp                   *:*                     7
> > 
> > Active UNIX domain sockets (servers and established)
> > Proto RefCnt Flags       Type       State         I-Node Path
> > unix  1      [ W ]       STREAM     CONNECTED     31058  @00000783
> > unix  1      [ W ]       STREAM     CONNECTED     30902  @0000077c
> > unix  1      [ W ]       STREAM     CONNECTED     30829  @0000076d
> > unix  1      [ W ]       STREAM     CONNECTED     31062  @00000784
> > unix  1      [ W ]       STREAM     CONNECTED     30904  @0000077d
> > unix  1      [ W ]       STREAM     CONNECTED     30868  @00000779
> > unix  3      [ ]         DGRAM                    351    /dev/log
> > unix  1      [ W ]       STREAM     CONNECTED     31064  @00000785
> > unix  1      [ W ]       STREAM     CONNECTED     30942  @0000077e
> > unix  1      [ W ]       STREAM     CONNECTED     30867  @00000778
> > unix  1      [ W ]       STREAM     CONNECTED     30847  @0000076f
> > unix  1      [ W ]       STREAM     CONNECTED     31065  @00000786
> > unix  1      [ W ]       STREAM     CONNECTED     30978  @0000077f
> > unix  1      [ W ]       STREAM     CONNECTED     30866  @00000777
> > unix  1      [ W ]       STREAM     CONNECTED     30716  @00000768
> > unix  0      [ ACC ]     STREAM     LISTENING     1338
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     29012  @000006d7
> > unix  0      [ ACC ]     STREAM     LISTENING     609
> /tmp/.s.PGSQL.5432
> > unix  1      [ W ]       STREAM     CONNECTED     31013  @00000780
> > unix  1      [ W ]       STREAM     CONNECTED     30881  @0000077a
> > unix  1      [ W ]       STREAM     CONNECTED     31042  @00000782
> > unix  1      [ W ]       STREAM     CONNECTED     30885  @0000077b
> > unix  1      [ W ]       STREAM     CONNECTED     30813  @0000076a
> > unix  1      [ W ]       STREAM     CONNECTED     30861  @00000772
> > unix  1      [ W ]       STREAM     CONNECTED     30860  @00000771
> > unix  1      [ ]         STREAM     CONNECTED     30651  @00000762
> > unix  1      [ W ]       STREAM     CONNECTED     30858  @00000770
> > unix  1      [ W ]       STREAM     CONNECTED     30865  @00000776
> > unix  1      [ ]         STREAM     CONNECTED     30093  @00000732
> > unix  1      [ W ]       STREAM     CONNECTED     30864  @00000775
> > unix  1      [ W ]       STREAM     CONNECTED     30863  @00000774
> > unix  1      [ W ]       STREAM     CONNECTED     30862  @00000773
> > unix  1      [ ]         STREAM     CONNECTING    0
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTING    0
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTING    0
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTING    0
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     31043
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     31014
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30979
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30975
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30974
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30969
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30961
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30920
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30915
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30914
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30911
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30909
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30895
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30894
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30890
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30886
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30882
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30859
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30848
> > /var/lib/mysql/mysql.sock
> > unix  0      [ ]         STREAM     CONNECTED     30843
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30830
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30814
> > /var/lib/mysql/mysql.sock
> > unix  0      [ ]         DGRAM                    30801  
> > unix  1      [ ]         STREAM     CONNECTED     30781
> > /var/lib/mysql/mysql.sock
> > unix  1      [ ]         STREAM     CONNECTED     30652
> > /var/lib/mysql/mysql.sock
> > unix  1      [ W ]       STREAM     CONNECTED     30094
> /tmp/.s.PGSQL.5432
> > unix  1      [ W ]       STREAM     CONNECTED     29019
> > /var/lib/mysql/mysql.sock
> > unix  0      [ ]         DGRAM                    25424  
> > unix  0      [ ]         DGRAM                    361    
> > 
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> > Sent: Friday, March 21, 2003 9:39 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps 
> > up
> > till server is un-usable
> > 
> > 
> > One more thing on the "top" command-- Is what you see on the page 
> > when
> > you run the command all you get? Or are they more processes below what 
> > you can see live? I mean that is just why I usually run the "ps -aux" 
> > command. It will show a snapshot of "top" right?
> > 
> > Matt
> > 
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> > Sent: Friday, March 21, 2003 9:32 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps 
> > up
> > till server is un-usable
> > 
> > 
> > Alright I just went ahead and posted evertyhing I could.
> > 
> > "top"
> > 
> >  9:36am  up  2:12,  1 user,  load average: 57.69, 69.60, 79.08 93
> > processes: 87 sleeping, 6 running, 0 zombie, 0 stopped CPU states: 
> > 89.4% user, 10.5% system,  0.0% nice,  0.0% idle
> > Mem:   517104K av,  394120K used,  122984K free,  367596K shrd,   20008K
> > buff
> > Swap:  131448K av,       0K used,  131448K free                  170748K
> > cached
> > 
> >   PID USER     PRI  NI  SIZE  RSS SHARE STAT  LIB %CPU %MEM   TIME
COMMAND
> > 12238 root      20   0   920  920   672 R       0  5.3  0.1   0:00
> > in.qpopper
> > 12246 mysql     19   0 15452  15M  1468 R       0  4.5  2.9   0:00
mysqld
> > 12215 mysql     19   0 15452  15M  1468 R       0  4.3  2.9   0:00
mysqld
> >  1695 httpd     18   0 13088  12M  8840 R       0  3.7  2.5   0:23 httpd
> >   996 httpd      3   0 13924  13M  8832 S       0  2.6  2.6   0:26 httpd
> >  6055 httpd      3   0 13296  12M  8860 S       0  2.4  2.5   0:19 httpd
> > 12231 admin     12   0   900  900   676 R       0  2.0  0.1   0:00 top
> >  1364 httpd      8   0 13560  13M  8920 S       0  1.8  2.6   0:39 httpd
> >   664 httpd      1   0 12668  12M  8856 S       0  0.5  2.4   0:24 httpd
> > 11957 httpd      2   0 11068  10M  9284 S       0  0.4  2.1   0:00 httpd
> > 12255 root      16   0   796  796   724 S       0  0.3  0.1   0:00
lcdstop
> >  4056 httpd      1   0 12660  12M  8860 S       0  0.2  2.4   0:20 httpd
> >   670 httpd      0   0 12388  12M  8852 S       0  0.1  2.3   0:23 httpd
> >  1691 httpd      3   0 13560  13M  8852 S       0  0.1  2.6   0:28 httpd
> >  5238 httpd      1   0 13360  13M  8908 S       0  0.1  2.5   0:17 httpd
> > 11018 root       0   0   764  764   608 S       0  0.1  0.1   0:00
> > in.telnetd
> > 12257 root      18   0   332  332   268 R       0  0.1  0.0   0:00 pidof
> >     1 root       0   0   472  472   400 S       0  0.0  0.0   0:04 init
> >     2 root       0   0     0    0     0 SW      0  0.0  0.0   0:00
kflushd
> >     3 root       0   0     0    0     0 SW      0  0.0  0.0   0:00
kupdate
> >     4 root       0   0     0    0     0 SW      0  0.0  0.0   0:00
kswapd
> >     5 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
> > mdrecoveryd
> >     6 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
raid1d
> >     7 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
raid1d
> >     8 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
raid1d
> >     9 root     -20 -20     0    0     0 SW<     0  0.0  0.0   0:00
raid1d
> >   493 root       0   0   524  524   424 S       0  0.0  0.1   0:06
syslogd
> >   502 root       0   0   768  768   384 S       0  0.0  0.1   0:00 klogd
> >   556 root       0   0   616  616   508 S       0  0.0  0.1   0:00 crond
> >   568 root       1   0   484  484   412 S       0  0.0  0.0   0:00 inetd
> >   580 root       0   0  5884 5884  4832 S       0  0.0  1.1   0:01
> > httpd.admsrv
> >   603 root       0   0  6492 6492  5164 S       0  0.0  1.2   0:00
> > httpd.admsrv
> >   604 root       0   0  9152 9152  8868 S       0  0.0  1.7   0:01 httpd
> >   662 httpd      0   0 13744  13M  8720 S       0  0.0  2.6   0:23 httpd
> >   663 httpd      0   0 12956  12M  8848 S       0  0.0  2.5   0:26 httpd
> >   667 httpd      0   0 12852  12M  8852 S       0  0.0  2.4   0:33 httpd
> >   668 httpd      0   0 14212  13M  8848 S       0  0.0  2.7   0:35 httpd
> >   669 httpd      0   0 13264  12M  8844 S       0  0.0  2.5   0:24 httpd
> >   671 httpd      0   0 13840  13M  8856 S       0  0.0  2.6   0:33 httpd
> >   672 httpd      1   0 14172  13M  8852 S       0  0.0  2.7   0:26 httpd
> >   673 httpd      0   0 13092  12M  8836 S       0  0.0  2.5   0:27 httpd
> >   675 postgres   5   5  1332 1332   948 S N     0  0.0  0.2   0:00
> > postmaster
> >   759 httpd      0   0 13500  13M  8828 S       0  0.0  2.6   0:25 httpd
> >   849 root       0   0   672  672   496 S       0  0.0  0.1   0:00 caspd
> >   850 root       0   0   672  672   496 S       0  0.0  0.1   0:00 caspd
> >   851 root       0   0   672  672   496 S       0  0.0  0.1   0:00 caspd
> >   858 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   866 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   867 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   868 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   869 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   870 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   871 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >   872 root       0   0  6060 6060  3232 S       0  0.0  1.1   0:00
caspeng
> >  1317 root       0   0   664  664   496 S       0  0.0  0.1   0:00
admdog
> >  1318 root       0   0   664  664   496 S       0  0.0  0.1   0:00
admdog
> >  1319 root       0   0   664  664   496 S       0  0.0  0.1   0:00
admdog
> >  1325 root       0   0  5944 5944  3204 S       0  0.0  1.1   0:00
admeng
> >  1328 root       0   0  5944 5944  3204 S       0  0.0  1.1   0:00
admeng
> >  1329 root       0   0  5944 5944  3204 S       0  0.0  1.1   0:00
admeng
> >  1330 root       0   0  5944 5944  3204 S       0  0.0  1.1   0:00
admeng
> > 
> > 
> > Matt
> > 
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Greg
> > Hewitt-Long
> > Sent: Friday, March 21, 2003 8:17 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up
till
> > server is un-usable
> > 
> > 
> > >Yes, it my last email to the list I stated that I did this-
> > >
> > >"Also, I forgot to mention that I have been watching TOP and have
> > >found
> > >no one process that is using more than 1% or 1.0 of the CPU. Oh,, and I

> > >have been using the command ps -aux to try and find a runaway process 
> > >that way and it pretty much showed me the same thing as TOP."
> > >
> > >How about something else?
> > 
> > 
> > CPU maxes out on the RAQs when RAM is maxxed out and they are 
> > swapping
> > - how about posting the first 10 lines of your top output?
> > 
> > regards
> > 
> > Greg Hewitt-Long
> > 
> > >Thank You,
> > >
> > >Matt
> > --
> > http://www.webyourbusiness.com/
> > Providers of E-Commerce Software &
> > Web Design Consultancy and Services.
> > PH: (970) 266-0195   FAX: (970) 266-0158
> > 
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> > 
> > 
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> > 
> > 
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> > 
> > 
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> > 
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to: 
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to: 
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users