[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable
- Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable
- From: "Matt" <mattm@xxxxxxxxxx>
- Date: Fri Mar 21 13:49:01 2003
- Organization: Parcom Internet Web Hosting
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
Alright, I checked the server after I installed the CGI Wrap patch and the
CPU is still out of control.
I will work on what Jean suggested now.
Thank You,
Matt
-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
Sent: Friday, March 21, 2003 12:16 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
server is un-usable
Ok,,
I just installed this package and did a reboot just for good measure!
Hopefully this fixes it ;-)))
Matt
-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Mike's List
Sent: Friday, March 21, 2003 11:13 AM
To: Matt
Cc: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till
server is un-usable
Go to
http://sunsolve.sun.com/pub-cgi/show.pl?target=cobalt/index&nav=patchpage/
select your server (Raq4?)
http://sunsolve.sun.com/pub-cgi/show.pl?target=cobalt/raq4.eng&nav=patchpage
look and see what patches you haven't apply??? where does it stops, etc. and
apply the patch bottom-up.
Looks like the CGIWRAP Update is the only one not install???
RaQ4-All-Security-2.0.1-16261.pkg
- Mike
On Fri, 21 Mar 2003, Matt wrote:
> Mike,
>
> IP89 is the local IP- The server IP, so I think that should be ok.
>
> Also here is a list of the patches that are installed on the server:
>
> Software on the Sun Cobalt Server
>
> Sun Chili!Soft ASP Release 3.6.2
> CMU-SNMP Update Release 3.7.1
> Relational Database Server and Client tools by InterBase. Release V6.0
> Cobalt MySQL Release 3.23.37-1
> OpenSSH Release 3.4p1-PM4
> Open WebMail Release 1.65-20020701
> Cobalt OS Release 6.0
> PHP Release 4.1.2-3
> RaQ4-All-Kernel Release 2.0.1-2.2.16C33III
> RaQ4-All-Security Release 2.0.1-1-14936
> RaQ4-All-Security Release 2.0.1-1-15673
> RaQ4-All-Security Release 2.0.1-13323
> RaQ4-All-Security Release 2.0.1-13453
> RaQ4-All-Security Release 2.0.1-14039
> RaQ4-All-Security Release 2.0.1-14559
> RaQ4-All-Security Release 2.0.1-14997
> RaQ4-All-Security Release 2.0.1-15417
> RaQ4-All-Security Release 2.0.1-15823
> RaQ4-All-Security Release 2.0.1-2-15787
> RaQ4-All-System Release 2.0.1-12854
> RaQ4-All-System Release 2.0.1-13993
> RaQ4-en-OSUpdateRelease 2.0
> RaQ4 Java Developer Kit Release 1.3
> Sendmail Release 8.10.2-PM1
> Webalizer Release 2.01.10-1
>
>
> Matt
>
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Mike's List
> Sent: Friday, March 21, 2003 9:58 AM
> To: Matt
> Cc: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up
> till server is un-usable
>
>
> check the customer ip89.216.127.49.myi:www --web site to see if
> there's any porn or if it's hack or if your server is hack? Is the
> server up-to-date w/all the patches, etc.?
>
> did you installed the latest sendmail patch to prevent the exploit of
> root access via bad header?
>
>
> - Mike
>
> On Fri, 21 Mar 2003, Matt wrote:
>
> > I just did a "netstat -a" I and I did see an abnormal amount of RAW
> > TCP connections;; This seems odd, but I do not know what it is..
> >
> > [admin admin]$ netstat -a
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address Foreign Address
State
> >
> > tcp 0 0 ip89.216.127.49.myi:www host213-122-188-10:1866
> > ESTABLISHED
> > tcp 0 0 ip199.216.127.49.my:www inktomi4-ltn.serv:38436
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:81 216.127.51.50:11796
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10029
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10028
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24481
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2849
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1561
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www d44032c5.cable.wan:2009
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1303
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:pop3 web20604.mail.yah:46846
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www ip68-102-186-9.ks.:1295
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20900
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20894
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20893
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20887
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20886
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20885
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20880
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20879
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20878
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:20871
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1559
> > FIN_WAIT2
> > tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2847
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www webcacheh01a.cach:32934
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:www freeport-dialin272:3885
CLOSE
> >
> > tcp 0 0 genesis.parcom.net:www freeport-dialin272:3884
CLOSE
> >
> > tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24473
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www 204.60.92.227:61256
CLOSE
> >
> > tcp 0 0 ip89.216.127.49.myi:www res01446.rh.rit.ed:2032
> > FIN_WAIT2
> > tcp 0 0 ip89.216.127.49.myi:www 62.29.255.242:13508
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:pop3 ac86c436.ipt.aol.c:1674
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www 62.29.255.242:13489
> > TIME_WAIT
> > tcp 0 0 genesis.parcom.net:www dyn357-ele.nbw.tue:3133
> > FIN_WAIT2
> > tcp 0 0 genesis.parcom.net:ftp evrtwa1-ar8-4-62-0:1074
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www h139-142-157-226.:19540
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56401
> > FIN_WAIT2
> > tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56400
> > FIN_WAIT2
> > tcp 0 0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www host81-132-152-23:56400
> > FIN_WAIT2
> > tcp 0 0 genesis.parcom.net:pop3 du157236.lew.ptd.n:3317
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www druid.ceti.pl:4103
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www ssb8107.chem.sfu.c:2842
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www 66.80-202-241.nex:24468
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www adsl-solo-40-155.:10622
> > TIME_WAIT
> > tcp 0 0 ip89.216.127.49.myi:www cpe-24-160-20-204.:3112
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:pop3 66.50.225.21:14705
> > ESTABLISHED
> > tcp 0 0 ip89.216.127.49.myi:www isdn-b215.oa-a.ntn:1556
> > FIN_WAIT2
> > tcp 0 0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1991
> > FIN_WAIT2
> > tcp 0 0 ip89.216.127.49.myi:www 212-246-60-2.adsl.:1989
> > FIN_WAIT2
> > tcp 0 0 genesis.parcom.net:81 216.127.51.50:7408
> > ESTABLISHED
> > tcp 0 0 genesis.parcom.net:www 142.204.123.51:1366
> > FIN_WAIT2
> > tcp 0 0 genesis.parcom.net:www adsl-64-169-243-23:3034
CLOSE
> >
> > tcp 0 0 genesis.parcom.net:www 200-153-230-51.ds:39549
> > TIME_WAIT
> > tcp 0 25313 ip89.216.127.49.myi:www avelizy-101-1-3-22:1135
> LAST_ACK
> >
> > tcp 0 0 ip89.216.127.49.myi:www res01446.rh.rit:cfinger
> > ESTABLISHED
> > tcp 1 56873 ip89.216.127.49.myi:www 62.29.255.242:60298
> > CLOSE_WAIT
> > tcp 0 164 genesis.parcom.n:telnet 216.127.51.50:6252
> > ESTABLISHED
> > tcp 0 0 *:mysql *:*
LISTEN
> >
> > tcp 0 0 *:casp5100 *:*
LISTEN
> >
> > tcp 0 0 *:casp5102 *:*
LISTEN
> >
> > tcp 0 0 *:casp5101 *:*
LISTEN
> >
> > tcp 0 0 *:casp3001 *:*
LISTEN
> >
> > tcp 0 0 *:casp3000 *:*
LISTEN
> >
> > tcp 0 0 *:www *:*
LISTEN
> >
> > tcp 0 0 *:81 *:*
LISTEN
> >
> > tcp 0 0 *:snpp *:*
LISTEN
> >
> > tcp 0 0 *:imap2 *:*
LISTEN
> >
> > tcp 0 0 *:pop3 *:*
LISTEN
> >
> > tcp 0 0 *:telnet *:*
LISTEN
> >
> > tcp 0 0 *:ftp *:*
LISTEN
> >
> > tcp 0 0 *:6006 *:*
LISTEN
> >
> > raw 5808 0 *:tcp *:* 7
> >
> > raw 27616 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 880 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 26560 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 10816 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 7424 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 27616 0 *:tcp *:* 7
> >
> > raw 5808 0 *:tcp *:* 7
> >
> > raw 2576 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 7424 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 1200 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 23808 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 15328 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 7008 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 10320 0 *:tcp *:* 7
> >
> > raw 2080 0 *:tcp *:* 7
> >
> > raw 1520 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 28816 0 *:tcp *:* 7
> >
> > raw 28816 0 *:tcp *:* 7
> >
> > raw 1200 0 *:tcp *:* 7
> >
> > raw 29968 0 *:tcp *:* 7
> >
> > raw 1152 0 *:tcp *:* 7
> >
> > raw 8160 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 29968 0 *:tcp *:* 7
> >
> > raw 23264 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 1152 0 *:tcp *:* 7
> >
> > raw 11472 0 *:tcp *:* 7
> >
> > raw 2352 0 *:tcp *:* 7
> >
> > raw 192 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 10768 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 15776 0 *:tcp *:* 7
> >
> > raw 32576 0 *:tcp *:* 7
> >
> > raw 2800 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 3760 0 *:tcp *:* 7
> >
> > raw 2800 0 *:tcp *:* 7
> >
> > raw 29264 0 *:tcp *:* 7
> >
> > raw 272 0 *:tcp *:* 7
> >
> > raw 4960 0 *:tcp *:* 7
> >
> > raw 32576 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 4160 0 *:tcp *:* 7
> >
> > raw 25872 0 *:tcp *:* 7
> >
> > raw 272 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 3440 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 4960 0 *:tcp *:* 7
> >
> > raw 9792 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 3248 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 32640 0 *:tcp *:* 7
> >
> > raw 5600 0 *:tcp *:* 7
> >
> > raw 9792 0 *:tcp *:* 7
> >
> > raw 32080 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 32400 0 *:tcp *:* 7
> >
> > raw 480 0 *:tcp *:* 7
> >
> > raw 14544 0 *:tcp *:* 7
> >
> > raw 2112 0 *:tcp *:* 7
> >
> > raw 35712 0 *:tcp *:* 7
> >
> > raw 45728 0 *:tcp *:* 7
> >
> > raw 35712 0 *:tcp *:* 7
> >
> > raw 59136 0 *:tcp *:* 7
> >
> > raw 35712 0 *:tcp *:* 7
> >
> > raw 34016 0 *:tcp *:* 7
> >
> > raw 3968 0 *:tcp *:* 7
> >
> > raw 9216 0 *:tcp *:* 7
> >
> > raw 7440 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 19872 0 *:tcp *:* 7
> >
> > raw 33040 0 *:tcp *:* 7
> >
> > raw 27552 0 *:tcp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > raw 33040 0 *:tcp *:* 7
> >
> > raw 37968 0 *:tcp *:* 7
> >
> > raw 18656 0 *:tcp *:* 7
> >
> > raw 640 0 *:tcp *:* 7
> >
> > raw 36352 0 *:tcp *:* 7
> >
> > raw 18656 0 *:tcp *:* 7
> >
> > raw 1792 0 *:tcp *:* 7
> >
> > raw 2752 0 *:tcp *:* 7
> >
> > raw 42976 0 *:tcp *:* 7
> >
> > raw 10096 0 *:tcp *:* 7
> >
> > raw 18656 0 *:tcp *:* 7
> >
> > raw 43456 0 *:tcp *:* 7
> >
> > raw 46928 0 *:tcp *:* 7
> >
> > raw 0 0 *:icmp *:* 7
> >
> > raw 0 0 *:tcp *:* 7
> >
> > Active UNIX domain sockets (servers and established)
> > Proto RefCnt Flags Type State I-Node Path
> > unix 1 [ W ] STREAM CONNECTED 31058 @00000783
> > unix 1 [ W ] STREAM CONNECTED 30902 @0000077c
> > unix 1 [ W ] STREAM CONNECTED 30829 @0000076d
> > unix 1 [ W ] STREAM CONNECTED 31062 @00000784
> > unix 1 [ W ] STREAM CONNECTED 30904 @0000077d
> > unix 1 [ W ] STREAM CONNECTED 30868 @00000779
> > unix 3 [ ] DGRAM 351 /dev/log
> > unix 1 [ W ] STREAM CONNECTED 31064 @00000785
> > unix 1 [ W ] STREAM CONNECTED 30942 @0000077e
> > unix 1 [ W ] STREAM CONNECTED 30867 @00000778
> > unix 1 [ W ] STREAM CONNECTED 30847 @0000076f
> > unix 1 [ W ] STREAM CONNECTED 31065 @00000786
> > unix 1 [ W ] STREAM CONNECTED 30978 @0000077f
> > unix 1 [ W ] STREAM CONNECTED 30866 @00000777
> > unix 1 [ W ] STREAM CONNECTED 30716 @00000768
> > unix 0 [ ACC ] STREAM LISTENING 1338
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 29012 @000006d7
> > unix 0 [ ACC ] STREAM LISTENING 609
> /tmp/.s.PGSQL.5432
> > unix 1 [ W ] STREAM CONNECTED 31013 @00000780
> > unix 1 [ W ] STREAM CONNECTED 30881 @0000077a
> > unix 1 [ W ] STREAM CONNECTED 31042 @00000782
> > unix 1 [ W ] STREAM CONNECTED 30885 @0000077b
> > unix 1 [ W ] STREAM CONNECTED 30813 @0000076a
> > unix 1 [ W ] STREAM CONNECTED 30861 @00000772
> > unix 1 [ W ] STREAM CONNECTED 30860 @00000771
> > unix 1 [ ] STREAM CONNECTED 30651 @00000762
> > unix 1 [ W ] STREAM CONNECTED 30858 @00000770
> > unix 1 [ W ] STREAM CONNECTED 30865 @00000776
> > unix 1 [ ] STREAM CONNECTED 30093 @00000732
> > unix 1 [ W ] STREAM CONNECTED 30864 @00000775
> > unix 1 [ W ] STREAM CONNECTED 30863 @00000774
> > unix 1 [ W ] STREAM CONNECTED 30862 @00000773
> > unix 1 [ ] STREAM CONNECTING 0
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTING 0
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTING 0
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTING 0
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 31043
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 31014
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30979
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30975
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30974
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30969
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30961
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30920
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30915
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30914
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30911
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30909
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30895
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30894
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30890
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30886
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30882
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30859
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30848
> > /var/lib/mysql/mysql.sock
> > unix 0 [ ] STREAM CONNECTED 30843
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30830
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30814
> > /var/lib/mysql/mysql.sock
> > unix 0 [ ] DGRAM 30801
> > unix 1 [ ] STREAM CONNECTED 30781
> > /var/lib/mysql/mysql.sock
> > unix 1 [ ] STREAM CONNECTED 30652
> > /var/lib/mysql/mysql.sock
> > unix 1 [ W ] STREAM CONNECTED 30094
> /tmp/.s.PGSQL.5432
> > unix 1 [ W ] STREAM CONNECTED 29019
> > /var/lib/mysql/mysql.sock
> > unix 0 [ ] DGRAM 25424
> > unix 0 [ ] DGRAM 361
> >
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> > Sent: Friday, March 21, 2003 9:39 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps
> > up
> > till server is un-usable
> >
> >
> > One more thing on the "top" command-- Is what you see on the page
> > when
> > you run the command all you get? Or are they more processes below what
> > you can see live? I mean that is just why I usually run the "ps -aux"
> > command. It will show a snapshot of "top" right?
> >
> > Matt
> >
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Matt
> > Sent: Friday, March 21, 2003 9:32 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps
> > up
> > till server is un-usable
> >
> >
> > Alright I just went ahead and posted evertyhing I could.
> >
> > "top"
> >
> > 9:36am up 2:12, 1 user, load average: 57.69, 69.60, 79.08 93
> > processes: 87 sleeping, 6 running, 0 zombie, 0 stopped CPU states:
> > 89.4% user, 10.5% system, 0.0% nice, 0.0% idle
> > Mem: 517104K av, 394120K used, 122984K free, 367596K shrd, 20008K
> > buff
> > Swap: 131448K av, 0K used, 131448K free 170748K
> > cached
> >
> > PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME
COMMAND
> > 12238 root 20 0 920 920 672 R 0 5.3 0.1 0:00
> > in.qpopper
> > 12246 mysql 19 0 15452 15M 1468 R 0 4.5 2.9 0:00
mysqld
> > 12215 mysql 19 0 15452 15M 1468 R 0 4.3 2.9 0:00
mysqld
> > 1695 httpd 18 0 13088 12M 8840 R 0 3.7 2.5 0:23 httpd
> > 996 httpd 3 0 13924 13M 8832 S 0 2.6 2.6 0:26 httpd
> > 6055 httpd 3 0 13296 12M 8860 S 0 2.4 2.5 0:19 httpd
> > 12231 admin 12 0 900 900 676 R 0 2.0 0.1 0:00 top
> > 1364 httpd 8 0 13560 13M 8920 S 0 1.8 2.6 0:39 httpd
> > 664 httpd 1 0 12668 12M 8856 S 0 0.5 2.4 0:24 httpd
> > 11957 httpd 2 0 11068 10M 9284 S 0 0.4 2.1 0:00 httpd
> > 12255 root 16 0 796 796 724 S 0 0.3 0.1 0:00
lcdstop
> > 4056 httpd 1 0 12660 12M 8860 S 0 0.2 2.4 0:20 httpd
> > 670 httpd 0 0 12388 12M 8852 S 0 0.1 2.3 0:23 httpd
> > 1691 httpd 3 0 13560 13M 8852 S 0 0.1 2.6 0:28 httpd
> > 5238 httpd 1 0 13360 13M 8908 S 0 0.1 2.5 0:17 httpd
> > 11018 root 0 0 764 764 608 S 0 0.1 0.1 0:00
> > in.telnetd
> > 12257 root 18 0 332 332 268 R 0 0.1 0.0 0:00 pidof
> > 1 root 0 0 472 472 400 S 0 0.0 0.0 0:04 init
> > 2 root 0 0 0 0 0 SW 0 0.0 0.0 0:00
kflushd
> > 3 root 0 0 0 0 0 SW 0 0.0 0.0 0:00
kupdate
> > 4 root 0 0 0 0 0 SW 0 0.0 0.0 0:00
kswapd
> > 5 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
> > mdrecoveryd
> > 6 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
raid1d
> > 7 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
raid1d
> > 8 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
raid1d
> > 9 root -20 -20 0 0 0 SW< 0 0.0 0.0 0:00
raid1d
> > 493 root 0 0 524 524 424 S 0 0.0 0.1 0:06
syslogd
> > 502 root 0 0 768 768 384 S 0 0.0 0.1 0:00 klogd
> > 556 root 0 0 616 616 508 S 0 0.0 0.1 0:00 crond
> > 568 root 1 0 484 484 412 S 0 0.0 0.0 0:00 inetd
> > 580 root 0 0 5884 5884 4832 S 0 0.0 1.1 0:01
> > httpd.admsrv
> > 603 root 0 0 6492 6492 5164 S 0 0.0 1.2 0:00
> > httpd.admsrv
> > 604 root 0 0 9152 9152 8868 S 0 0.0 1.7 0:01 httpd
> > 662 httpd 0 0 13744 13M 8720 S 0 0.0 2.6 0:23 httpd
> > 663 httpd 0 0 12956 12M 8848 S 0 0.0 2.5 0:26 httpd
> > 667 httpd 0 0 12852 12M 8852 S 0 0.0 2.4 0:33 httpd
> > 668 httpd 0 0 14212 13M 8848 S 0 0.0 2.7 0:35 httpd
> > 669 httpd 0 0 13264 12M 8844 S 0 0.0 2.5 0:24 httpd
> > 671 httpd 0 0 13840 13M 8856 S 0 0.0 2.6 0:33 httpd
> > 672 httpd 1 0 14172 13M 8852 S 0 0.0 2.7 0:26 httpd
> > 673 httpd 0 0 13092 12M 8836 S 0 0.0 2.5 0:27 httpd
> > 675 postgres 5 5 1332 1332 948 S N 0 0.0 0.2 0:00
> > postmaster
> > 759 httpd 0 0 13500 13M 8828 S 0 0.0 2.6 0:25 httpd
> > 849 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> > 850 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> > 851 root 0 0 672 672 496 S 0 0.0 0.1 0:00 caspd
> > 858 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 866 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 867 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 868 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 869 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 870 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 871 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 872 root 0 0 6060 6060 3232 S 0 0.0 1.1 0:00
caspeng
> > 1317 root 0 0 664 664 496 S 0 0.0 0.1 0:00
admdog
> > 1318 root 0 0 664 664 496 S 0 0.0 0.1 0:00
admdog
> > 1319 root 0 0 664 664 496 S 0 0.0 0.1 0:00
admdog
> > 1325 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00
admeng
> > 1328 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00
admeng
> > 1329 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00
admeng
> > 1330 root 0 0 5944 5944 3204 S 0 0.0 1.1 0:00
admeng
> >
> >
> > Matt
> >
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Greg
> > Hewitt-Long
> > Sent: Friday, March 21, 2003 8:17 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps
> > up
till
> > server is un-usable
> >
> >
> > >Yes, it my last email to the list I stated that I did this-
> > >
> > >"Also, I forgot to mention that I have been watching TOP and have
> > >found no one process that is using more than 1% or 1.0 of the CPU.
> > >Oh,, and I
> > >have been using the command ps -aux to try and find a runaway
> > >process
> > >that way and it pretty much showed me the same thing as TOP."
> > >
> > >How about something else?
> >
> >
> > CPU maxes out on the RAQs when RAM is maxxed out and they are
> > swapping
> > - how about posting the first 10 lines of your top output?
> >
> > regards
> >
> > Greg Hewitt-Long
> >
> > >Thank You,
> > >
> > >Matt
> > --
> > http://www.webyourbusiness.com/
> > Providers of E-Commerce Software &
> > Web Design Consultancy and Services.
> > PH: (970) 266-0195 FAX: (970) 266-0158
> >
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> >
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> >
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> >
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users
_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users