Strange server load problem / Server Optimisation request [Archive]

RaZor Edge

Tue 17th Jan '06, 11:39am

I've got a really strange problem with my server load.

My site is running really fast for about 10/15 minutes... and than, a sudden high server load happen for about 1 minutes. In this period of time (1 minute), my server load will look something like this:

Example: 0.40 - 1.50 - 3.00 - 5.35 - 4.20 - 3.50 - 1.27 - 0.60...

So my website is normally fast... but within 1 minute... it will slow down... and then come back to normal.

This not seems related to the number of people on my website (90% of my website activity is related to vbulletin, so I can easily watch number of user on my site) or peak time. This happen at random time.

By example, my normal peak time is 17:00 - 19:00 (GMT -5). I've watch my server load at these hours with unix top command, and my server load was between 0.27 and 1.20... without the problem I mention.

On the other side, this morning between 9:00 and 11:30.. were there was very few people on my site... the problem I have describe was there and appear with 5/15 minutes intervals... (this can happen at the middle of the night... were there is no more than 5-10 person on my website -- the vast majority of my visitors came from the same country)

I've contact my webhost... they installed me eAccelerator, optimized PHP and MySQL... but it dont work...

I really don't known what to do with this... so, here's my stats:

----------------------------------------------------------

1. Is this on dedicated or shared virual server.

RedHat Linux Virtual Private Server (VPS)

2- Server specs:

Hardware (As told by my host):

Dual Xeon 3.0ghz chips, with 1mb cache and 800mhz FSB, or equivalent.
8GB of DDR400 ECC registered RAM.
SCSI and SATA drives, which all have hot-swap functionality and are placed in a RAID 10 array.

My VPS

Apache/1.3.34 (Unix)
PHP/4.4.1
MySQL-4.0.25
Operating System: RedHat 9 i686 Linux
Control Panel: cPanel
Hard Drive Space: 20 GB
Bandwidth: 300 GB
Guaranteed RAM: 384 MB
Burstable RAM: 2 GB

3- Innodb
No. Innodb is not enable.

4- Mysql
I don't really known... but I would say that it was installed with cpanel

5- Top stats

17:36:26 up 10:05, 1 user, load average: 0.22, 0.29, 0.43
99 processes: 98 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 7.1% user 1.0% system 0.0% nice 0.0% iowait 91.2% idle
CPU1 states: 5.2% user 0.4% system 0.0% nice 0.0% iowait 93.2% idle
CPU2 states: 5.0% user 0.3% system 0.0% nice 0.0% iowait 94.0% idle
CPU3 states: 7.1% user 3.0% system 0.0% nice 0.0% iowait 89.2% idle
Mem: 6197856k av, 6129808k used, 68048k free, 0k shrd, 889692k buff
3282048k active, 2338328k inactive
Swap: 8193140k av, 1639224k used, 6553916k free 1588816k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
21242 root 4 0 5436 5268 5192 S 22.0 0.0 25:04 3 httpd
22004 root 15 0 1108 1108 748 R 2.5 0.0 0:04 3 top
22484 mysql 9 0 52928 51M 1524 S 1.3 0.8 24:00 0 mysqld
1 root 8 0 476 476 428 S 0.0 0.0 0:00 3 init
18860 root 9 0 552 552 468 S 0.0 0.0 0:00 1 syslogd
19200 root 9 0 1472 1392 1276 S 0.0 0.0 0:00 2 sshd
19213 root 9 0 852 820 708 S 0.0 0.0 0:00 0 xinetd
20368 root 8 0 7812 3012 1480 S 0.0 0.0 0:01 0 chkservd
20865 mailnull 8 0 1820 1652 1488 S 0.0 0.0 0:00 0 exim
20870 mailnull 9 0 1796 1628 1472 S 0.0 0.0 0:00 2 exim
20875 root 9 0 1432 1396 1128 S 0.0 0.0 0:05 2 antirelayd
21313 root 8 0 580 580 512 S 0.0 0.0 0:00 3 crond
22080 root 9 0 1060 1060 896 S 0.0 0.0 0:00 3 mysqld_safe
23008 mailnull 9 0 3948 2672 1580 S 0.0 0.0 0:05 2 eximstats
24576 root 19 19 12928 11M 1860 S N 0.0 0.1 0:07 0 cpanellogd
25648 cpanel 9 0 1604 1468 1332 S 0.0 0.0 0:00 3 stunnel-4.04loc
27102 root 9 0 1728 1680 1456 S 0.0 0.0 0:00 0 pure-ftpd
27136 root 9 0 864 864 692 S 0.0 0.0 0:00 1 pure-authd
27151 root 9 0 480 476 416 S 0.0 0.0 0:00 2 portsentry
27225 named 9 0 3020 2920 2140 S 0.0 0.0 0:02 1 named
27486 root 8 0 10060 6496 5200 S 0.0 0.1 0:00 2 cpsrvd
27496 root 9 0 6496 5628 2220 S 0.0 0.0 0:00 2 cppop
15496 root 9 0 1308 1308 984 S 0.0 0.0 0:00 3 bash

Top command 4 minutes after...

17:40:38 up 10:10, 2 users, load average: 2.43, 0.78, 0.55
103 processes: 101 sleeping, 2 running, 0 zombie, 0 stopped
CPU0 states: 8.2% user 2.1% system 0.0% nice 0.0% iowait 89.0% idle
CPU1 states: 5.0% user 0.2% system 0.0% nice 0.0% iowait 94.1% idle
CPU2 states: 6.0% user 2.0% system 0.0% nice 0.0% iowait 91.3% idle
CPU3 states: 8.0% user 1.0% system 0.0% nice 0.0% iowait 90.3% idle
Mem: 6197856k av, 6085464k used, 112392k free, 0k shrd, 890996k buff
3244752k active, 2330944k inactive
Swap: 8193140k av, 1642356k used, 6550784k free 1532028k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
21242 root 9 0 5436 5268 5144 S 22.0 0.0 25:26 1 httpd
22004 root 15 0 1108 1108 748 R 2.3 0.0 0:09 0 top
22484 mysql 9 0 52940 51M 1524 S 0.5 0.8 24:06 3 mysqld
1 root 8 0 476 476 428 S 0.0 0.0 0:00 1 init
18860 root 9 0 552 552 468 S 0.0 0.0 0:00 1 syslogd
19200 root 9 0 1472 1392 1276 S 0.0 0.0 0:00 1 sshd
19213 root 9 0 852 820 708 S 0.0 0.0 0:00 3 xinetd
20368 root 8 0 7812 3012 1480 S 0.0 0.0 0:01 1 chkservd
20865 mailnull 8 0 1820 1652 1488 S 0.0 0.0 0:00 2 exim
20870 mailnull 9 0 1796 1628 1472 S 0.0 0.0 0:00 2 exim
20875 root 9 0 1432 1396 1128 S 0.0 0.0 0:05 3 antirelayd
21313 root 7 0 580 580 512 S 0.0 0.0 0:00 1 crond
22080 root 9 0 1060 1060 896 S 0.0 0.0 0:00 3 mysqld_safe
23008 mailnull 9 0 3948 2672 1580 S 0.0 0.0 0:05 1 eximstats
24576 root 19 19 12928 11M 1860 S N 0.0 0.1 0:07 1 cpanellogd
25648 cpanel 9 0 1604 1468 1332 S 0.0 0.0 0:00 3 stunnel-4.04loc
27102 root 9 0 1728 1680 1456 S 0.0 0.0 0:00 2 pure-ftpd
27136 root 9 0 864 864 692 S 0.0 0.0 0:00 1 pure-authd
27151 root 9 0 480 476 416 S 0.0 0.0 0:00 2 portsentry
27225 named 9 0 3020 2920 2140 S 0.0 0.0 0:02 1 named
27486 root 8 0 10060 6496 5200 S 0.0 0.1 0:00 3 cpsrvd
27496 root 9 0 6496 5628 2220 S 0.0 0.0 0:00 1 cppop
15496 root 9 0 1308 1308 984 S 0.0 0.0 0:00 3 bash
29623 root 9 0 1320 1320 984 S 0.0 0.0 0:00 0 bash

6- mysql configuration variables

[mysqld]
set-variable = max_connections=350
safe-show-database
socket=/var/lib/mysql/mysql.sock
skip-locking
skip-innodb
query_cache_limit=1M
query_cache_size=32M
query_cache_type=1
max_connections=350
interactive_timeout=100
wait_timeout=100
connect_timeout=10
thread_cache_size=128
key_buffer=16M
join_buffer=1M
max_allowed_packet=16M
table_cache=1024
record_buffer=1M
sort_buffer_size=2M
read_buffer_size=2M
max_connect_errors=10
thread_concurrency=4
myisam_sort_buffer_size=64M
log-bin
server-id=1
log_slow_queries=
long_query_time=2
[mysql.server]
user=mysql
basedir=/var/lib
[safe_mysqld]
err-log=/var/log/mysqld.log
open_files_limit=8192
bind-address=127.0.0.1
[mysqldump]
quick
max_allowed_packet=16M
[mysql]
no-auto-rehash
#safe-updates
[isamchk]
key_buffer=64M
sort_buffer=64M
read_buffer=16M
write_buffer=16M
[myisamchk]
key_buffer=64M
sort_buffer=64M
read_buffer=16M
write_buffer=16M
[mysqlhotcopy]
interactive-timeout

7- mysql extended-status

+--------------------------+------------+
| Variable_name | Value |
+--------------------------+------------+
| Aborted_clients | 52 |
| Aborted_connects | 0 |
| Bytes_received | 83891814 |
| Bytes_sent | 4267808780 |
| Com_admin_commands | 0 |
| Com_alter_table | 0 |
| Com_analyze | 0 |
| Com_backup_table | 0 |
| Com_begin | 183 |
| Com_change_db | 24417 |
| Com_change_master | 0 |
| Com_check | 0 |
| Com_commit | 179 |
| Com_create_db | 0 |
| Com_create_function | 0 |
| Com_create_index | 0 |
| Com_create_table | 0 |
| Com_delete | 575 |
| Com_delete_multi | 0 |
| Com_drop_db | 0 |
| Com_drop_function | 0 |
| Com_drop_index | 0 |
| Com_drop_table | 0 |
| Com_flush | 0 |
| Com_grant | 0 |
| Com_ha_close | 0 |
| Com_ha_open | 0 |
| Com_ha_read | 0 |
| Com_insert | 8121 |
| Com_insert_select | 107 |
| Com_kill | 0 |
| Com_load | 0 |
| Com_load_master_data | 0 |
| Com_load_master_table | 0 |
| Com_lock_tables | 204 |
| Com_optimize | 0 |
| Com_purge | 0 |
| Com_rename_table | 0 |
| Com_repair | 0 |
| Com_replace | 801 |
| Com_replace_select | 0 |
| Com_reset | 0 |
| Com_restore_table | 0 |
| Com_revoke | 0 |
| Com_rollback | 0 |
| Com_savepoint | 0 |
| Com_select | 77090 |
| Com_set_option | 171 |
| Com_show_binlog_events | 0 |
| Com_show_binlogs | 3 |
| Com_show_create | 0 |
| Com_show_databases | 3 |
| Com_show_fields | 0 |
| Com_show_grants | 0 |
| Com_show_keys | 0 |
| Com_show_logs | 0 |
| Com_show_master_status | 0 |
| Com_show_new_master | 0 |
| Com_show_open_tables | 0 |
| Com_show_processlist | 198 |
| Com_show_slave_hosts | 0 |
| Com_show_slave_status | 0 |
| Com_show_status | 105 |
| Com_show_innodb_status | 0 |
| Com_show_tables | 31 |
| Com_show_variables | 3 |
| Com_slave_start | 0 |
| Com_slave_stop | 0 |
| Com_truncate | 0 |
| Com_unlock_tables | 204 |
| Com_update | 27808 |
| Com_update_multi | 10 |
| Connections | 24555 |
| Created_tmp_disk_tables | 1803 |
| Created_tmp_tables | 5671 |
| Created_tmp_files | 0 |
| Delayed_insert_threads | 0 |
| Delayed_writes | 0 |
| Delayed_errors | 0 |
| Flush_commands | 1 |
| Handler_commit | 0 |
| Handler_delete | 5165 |
| Handler_read_first | 2663 |
| Handler_read_key | 10374918 |
| Handler_read_next | 17956395 |
| Handler_read_prev | 18696 |
| Handler_read_rnd | 1761890 |
| Handler_read_rnd_next | 346834715 |
| Handler_rollback | 0 |
| Handler_update | 2533527 |
| Handler_write | 2157859 |
| Key_blocks_used | 15586 |
| Key_read_requests | 19104953 |
| Key_reads | 8752 |
| Key_write_requests | 852682 |
| Key_writes | 24207 |
| Max_used_connections | 35 |
| Not_flushed_key_blocks | 0 |
| Not_flushed_delayed_rows | 0 |
| Open_tables | 446 |
| Open_files | 654 |
| Open_streams | 0 |
| Opened_tables | 452 |
| Questions | 300434 |
| Qcache_queries_in_cache | 3770 |
| Qcache_inserts | 74223 |
| Qcache_hits | 135695 |
| Qcache_lowmem_prunes | 0 |
| Qcache_not_cached | 2867 |
| Qcache_free_memory | 10645928 |
| Qcache_free_blocks | 768 |
| Qcache_total_blocks | 8828 |
| Rpl_status | NULL |
| Select_full_join | 338 |
| Select_full_range_join | 6 |
| Select_range | 14118 |
| Select_range_check | 0 |
| Select_scan | 19471 |
| Slave_open_temp_tables | 0 |
| Slave_running | OFF |
| Slow_launch_threads | 0 |
| Slow_queries | 710 |
| Sort_merge_passes | 0 |
| Sort_range | 11769 |
| Sort_rows | 16959225 |
| Sort_scan | 12510 |
| Table_locks_immediate | 225170 |
| Table_locks_waited | 1734 |
| Threads_cached | 35 |
| Threads_created | 36 |
| Threads_connected | 1 |
| Threads_running | 1 |
| Uptime | 39484 |
+--------------------------+------------+

8- Is your vB the only thing on the server? or other scripts & sites which utilise php and mysql?

Vbulletin is the main part of my website. I'm using vb 3.06... but i'm planning to upgrade it to 3.5x very soon.

I also have Vbadvanced and a review script named Censura.

I'm planning to use Mediawiki really soon

9. how many average and max concurrent users on your vB forum ? and what your cookie timeout is ?

Cookie stetting: 1250

Average: 20/30users, 60 guest

Max: 50/60users, 100 guest

I think there something somewhere that make my guest number more high that it really be...

10- Phpinfo

http://www.fnnation.com/phpinfo.php

11- Apache

KeepAlive On
MaxKeepAliveRequests 50
KeepAliveTimeout 10
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 256
MaxRequestsPerChild 0

12- VB version

VB 3.06 (with patch)

I will upgrade my forum very soon to the last 3.5x.

13- Log files

Search return no files

Let me known if you need anything else!

Thank you for your help.

eva2000

Thu 19th Jan '06, 4:23am

I'd do the following as i'm unfamiliar with how VPS work, the load could be not related to your web site since your server is shared still.

Do you have any cronjobs or scheduled backups done by your or your web host or scheduled via WHM control panel ? type

crontab -e

and post the output you get minus any passwords

1. Remove eaccelerator from php.ini and web server
2. Edit /etc/my.cnf and place the following mysql server settings in /etc/my.cnf and restart mysql server afterwards

[mysqld]
socket=/var/lib/mysql/mysql.sock
safe-show-database
skip-innodb
max_connections = 500
key_buffer = 16M
myisam_sort_buffer_size = 64M
join_buffer_size = 1M
read_buffer_size = 1M
sort_buffer_size = 2M
table_cache = 1800
thread_cache_size = 384
wait_timeout = 120
connect_timeout = 10
tmp_table_size = 32M
max_allowed_packet = 64M
max_connect_errors = 10
read_rnd_buffer_size = 524288
bulk_insert_buffer_size = 8M
thread_concurrency = 4
query_cache_limit = 1M
query_cache_size = 64M
query_cache_type = 1
query_prealloc_size = 16384
query_alloc_block_size = 16384

[mysql.server]
user=mysql
basedir=/var/lib

[mysqld_safe]
err-log=/var/log/mysqld.log
bind-address=127.0.0.1
open_files_limit = 8192

[mysqldump]
quick
max_allowed_packet = 16M

[myisamchk]
key_buffer = 64M
sort_buffer = 64M
read_buffer = 16M
write_buffer = 16M

[mysqlhotcopy]
interactive-timeout

3. Install APC Cache lastest version from http://pecl.php.net/package/APC. Read install guide at http://www.vbulletin.com/forum/showthread.php?t=165367

4. Upgrade to vB 3.0.12 http://www.vbulletin.com/forum/showthread.php?t=166389 only hold off on vB 3.5.x for now

5. Change httpd.conf from

KeepAlive On
MaxKeepAliveRequests 50
KeepAliveTimeout 10
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 256
MaxRequestsPerChild 0

to

KeepAlive Off
MaxKeepAliveRequests 100
KeepAliveTimeout 10
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 500

restart apache server

6. ensure usepconnect = 0 in vB config.php

let that run for a few days and repost back the output of these commands

top

mysqladmin -u root -p ext stat

RaZor Edge

Thu 19th Jan '06, 10:38am

I'd do the following as i'm unfamiliar with how VPS work, the load could be not related to your web site since your server is shared still.

Do you have any cronjobs or scheduled backups done by your or your web host or scheduled via WHM control panel ? type

crontab -e

and post the output you get minus any passwords

Hi Eva2000,

Thank you for your help!

Here's the output you ask:

0 1 * * * /scripts/upcp
0 1 * * * /scripts/cpbackup
*/15 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
2,58 * * * * /usr/local/bandmin/bandmin
0 0 * * * /usr/local/bandmin/ipaddrmap
0 6 * * * /scripts/exim_tidydb > /dev/null 2>&1
*/5 * * * * /usr/local/cpanel/bin/dcpumon >/dev/null 2>&1

I willl repost back soon with the results!

RaZor Edge

Thu 19th Jan '06, 12:03pm

4. Upgrade to vB 3.0.12 http://www.vbulletin.com/forum/showthread.php?t=166389 only hold off on vB 3.5.x for now

Do you think vB 3.5.x use more ressources than 3.0.x?

Scott MacVicar

Thu 19th Jan '06, 12:52pm

Turn off searching for guests, we've found that some bots are doing searches and sending the load up.

RaZor Edge

Thu 19th Jan '06, 2:58pm

Turn off searching for guests, we've found that some bots are doing searches and sending the load up.
Hi Scott,

Is this a problem that have been reported on some vbulletin websites, or you are talking specificaly about my forum?

My guest number is indeed really hight (20 members vs 103 guests)

AWS

Thu 19th Jan '06, 3:22pm

See this thread http://www.vbulletin.com/forum/bugs35.php?do=view&bugid=2070 in the 3.5 bug tracker. That is what Scott is refering too.

RaZor Edge

Thu 19th Jan '06, 5:34pm

See this thread http://www.vbulletin.com/forum/bugs35.php?do=view&bugid=2070 in the 3.5 bug tracker. That is what Scott is refering too.
Ok! Thank you AWS!

eva2000

Fri 20th Jan '06, 9:35am

Hi Eva2000,

Thank you for your help!

Here's the output you ask:

0 1 * * * /scripts/upcp
0 1 * * * /scripts/cpbackup
*/15 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
2,58 * * * * /usr/local/bandmin/bandmin
0 0 * * * /usr/local/bandmin/ipaddrmap
0 6 * * * /scripts/exim_tidydb > /dev/null 2>&1
*/5 * * * * /usr/local/cpanel/bin/dcpumon >/dev/null 2>&1

I willl repost back soon with the results!
maybe change the time of these 2 cronjobs to not have them run at same time

0 1 * * * /scripts/upcp
0 1 * * * /scripts/cpbackup

but yes 3.5.3 will use more resources like memory than 3.0.12

RaZor Edge

Fri 20th Jan '06, 10:31am

I found that php was not 4.4.1 as I think.... it was 4.3.11.

As asked in the APC install instructions, I upgraded it to 4.4.1.

RaZor Edge

Fri 20th Jan '06, 11:53am

Look at the results of a netstat command:

root@nation [~]# netstat -nap | grep :80 | wc -l
258
root@nation [~]# netstat -nap | grep :80 | wc -l
211
root@nation [~]# netstat -nap | grep :80 | wc -l
378
root@nation [~]# netstat -nap | grep :80 | wc -l
496
root@nation [~]# netstat -nap | grep :80 | wc -l
803
root@nation [~]# netstat -nap | grep :80 | wc -l
245

I don't think theses are normal. There is no more than 60 users (members and guest) on my forum right now

CPU States run for 1% / 5% (+95% idle) for some times and then go to 100% use for +/-5 seconds.

Can this be related to some bad coding (in a hack by example)?

Many of theses connections come's from the same IP when I look at root@nation [~]# netstat -

root@nation [~]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1634 SYN_RECV
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:3332 SYN_RECV
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15000 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15001 ESTABLISHED
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15002 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4996 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15003 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15004 ESTABLISHED
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15005 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15006 ESTABLISHED
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15007 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14992 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14993 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14994 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14995 ESTABLISHED
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14996 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14997 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14998 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14999 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14990 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:14991 TIME_WAIT
tcp 0 0 nation.fnnation.co:http cache-prs-aa07.pr:46836 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15032 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15033 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15034 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15035 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15036 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15037 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15038 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15039 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15024 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15025 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15026 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15027 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15028 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15030 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15031 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15016 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15017 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15018 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15019 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15020 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15021 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15022 TIME_WAIT
tcp 0 0 nation.fnnation.co:http cache-prs-ac09.pr:51348 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15023 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15023 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15008 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15009 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15010 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15011 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15012 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15013 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15014 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15064 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15065 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15066 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15067 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15068 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15069 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15070 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15071 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15056 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15057 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15058 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15059 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15060 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15061 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15062 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15063 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60754 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15048 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60755 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60752 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60753 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15051 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60758 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15052 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60759 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15053 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60756 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15054 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60757 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15055 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60762 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15040 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60763 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15041 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60760 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15042 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60761 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60766 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15044 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60767 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15045 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60764 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15046 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60765 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15047 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60770 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60768 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60769 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60774 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60775 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60772 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60773 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60778 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60779 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60776 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60782 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60783 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60781 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:2294 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60784 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60785 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60790 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60791 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60788 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60789 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15072 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60794 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15073 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60795 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15074 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15075 ESTABLISHED
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15076 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60798 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable168.79-:15077 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60796 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable073.200:60797 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4892 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:2332 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4900 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4911 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4910 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4935 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4933 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4932 TIME_WAIT
tcp 0 0 nation.fnnation.co:http spider-prs-td084.:44650 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4944 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4952 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4952 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4966 TIME_WAIT
tcp 0 0 nation.fnnation.co:http HSE-Ottawa-ppp1606:4964 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable064.45-3:1385 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable064.45-3:1387 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable064.45-3:1386 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable064.45-3:1389 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19496 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19499 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19502 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19488 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19517 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19516 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19519 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19516 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19519 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19507 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19508 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19465 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19467 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19466 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19469 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19471 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19470 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19457 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19456 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19459 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19458 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19461 TIME_WAIT
tcp 0 0 nation.fnnation.co:http cust-217-131.dsl.v:1526 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19463 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19462 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19481 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19482 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19487 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19473 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19472 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19474 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19477 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19476 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19479 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19478 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1635 TIME_WAIT
tcp 0 21900 nation.fnnation.co:http ACaen-251-1-65-169:1634 ESTABLISHED
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1633 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1632 TIME_WAIT
tcp 0 0 nation.fnnation.co:http cache-prs-aa10.pr:47798 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1611 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1610 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1609 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1608 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1615 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1614 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1613 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1612 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19523 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19524 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1627 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1626 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1625 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1624 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1631 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1630 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1629 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1619 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1618 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1617 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1616 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1623 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1622 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1621 TIME_WAIT
tcp 0 0 nation.fnnation.co:http ACaen-251-1-65-169:1620 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1248 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19625 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1250 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1251 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1252 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1253 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1254 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1255 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1256 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19360 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1259 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1260 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1261 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19364 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1262 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1263 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1264 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19385 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1265 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19384 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1266 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19643 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1267 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19642 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19386 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19389 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19645 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19390 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19646 TIME_WAIT
tcp 0 2512 nation.fnnation.com:ssh 142.213.254.2:4192 ESTABLISHED
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19377 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19635 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19380 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19636 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19613 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19359 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1245 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1245 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1246 TIME_WAIT
tcp 0 0 nation.fnnation.co:http modemcable237.107-:1247 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19689 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19688 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19432 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19435 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19690 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19437 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19436 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19439 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19438 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19694 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19681 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19680 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19427 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19682 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19429 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19685 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19684 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19431 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19687 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19430 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19448 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19455 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19454 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19441 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19440 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19699 ESTABLISHED
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19443 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19442 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19445 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19401 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19659 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19402 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19405 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19661 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19660 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19407 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19663 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19406 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19662 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19393 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19395 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19394 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19653 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19652 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19399 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19399 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19398 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19673 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19672 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19416 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19419 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19418 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19420 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19423 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19422 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19408 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19667 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19411 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19410 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19668 TIME_WAIT
tcp 0 0 nation.fnnation.co:http 206.167.80.240:19414 TIME_WAIT
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 7 [ ] DGRAM 102541737 /dev/log
unix 3 [ ] STREAM CONNECTED 143634250
unix 4 [ ] STREAM CONNECTED 143634249
unix 3 [ ] STREAM CONNECTED 143634248
unix 3 [ ] STREAM CONNECTED 143634247
unix 2 [ ] STREAM CONNECTED 141680877
unix 2 [ ] DGRAM 103265819
unix 2 [ ] DGRAM 102551229
unix 2 [ ] DGRAM 102548873
unix 2 [ ] DGRAM 102543707
unix 2 [ ] DGRAM 102541783

RaZor Edge

Fri 20th Jan '06, 3:17pm

Seems like my website is the target of an DoS attack...

This explain a lot of things!!!!

My host have installed Antidos + APF firewall and it seems to work well for the moment!!! let me known if you have others ideas to react to a threat like this!

eva2000

Sat 21st Jan '06, 8:29am

Ouch i'd definitely update to vB 3.0.12 as well

RaZor Edge

Mon 23rd Jan '06, 4:41pm

Well... seems like the DDoS theory was wrong...

The IP's that are show by netstat are legetimate ones. The problem is that each time someone open a connections... it open 5 - 20 or 40 connections in time_wait status!!!

This happen with every php pages (vbulletin, mediawiki and other scripts not related with each others).

Example:

root@nation [~]# mysqladmin processlist |wc -l
6

root@nation [~]# netstat -an |grep :80 |wc -l
912

tcp 0 0 207.210.86.85:80 216.18.121.226:48388 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:53401 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15676 TIME_WAIT
tcp 0 0 207.210.86.85:80 216.18.121.226:48387 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2364 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15677 TIME_WAIT
tcp 0 0 207.210.86.85:80 216.18.121.226:48386 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15678 TIME_WAIT
tcp 0 0 207.210.86.85:80 216.18.121.226:48385 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2366 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15679 TIME_WAIT
tcp 0 0 207.210.86.85:80 216.18.121.226:48384 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15664 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2352 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.203.132.55:1537 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.203.132.55:1536 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15666 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2354 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15667 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:53649 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.203.132.55:1538 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2356 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15670 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2358 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15671 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15656 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2344 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15657 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15658 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2346 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15659 TIME_WAIT
tcp 0 11520 207.210.86.85:80 65.92.254.111:3247 ESTABLISHED
tcp 0 0 207.210.86.85:80 70.81.79.168:15660 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2348 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15661 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15662 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2350 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15663 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15648 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:51586 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15649 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15650 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15651 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15652 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2340 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15653 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15654 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2342 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15655 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2204 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:52474 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2392 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2205 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2206 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2394 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2207 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2200 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2396 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2201 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2202 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2203 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15696 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2196 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2384 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15697 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15698 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2198 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2386 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15699 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2199 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15700 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2388 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15701 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2193 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15702 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2390 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15688 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2376 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15689 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2189 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15690 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2190 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2378 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15691 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2191 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15692 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2380 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15693 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2185 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15694 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:53484 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2382 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2187 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15680 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15681 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15682 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2370 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2371 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15684 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2372 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2372 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15685 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15686 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2374 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15687 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:53723 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2426 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15739 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15740 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15741 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15742 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2430 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15743 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2417 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.81.79.168:15730 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2419 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2421 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2423 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:54485 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2409 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2411 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2413 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2400 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2401 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2403 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2209 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2405 TIME_WAIT
tcp 0 0 207.210.86.85:80 66.249.65.172:51399 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2210 TIME_WAIT
tcp 0 0 207.210.86.85:80 200.77.136.183:2211 TIME_WAIT
tcp 0 0 207.210.86.85:80 84.6.26.85:2407 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3122 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63975 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61671 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61671 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3123 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3120 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62693 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3121 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3126 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64227 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61667 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3124 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63969 TIME_WAIT
tcp 0 0 207.210.86.85:80 207.96.176.72:28494 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3125 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3130 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63727 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3131 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3129 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3134 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37215 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63979 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3135 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3132 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3133 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64247 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63991 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63733 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59517 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63741 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63995 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3119 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59514 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.122.86.198:2276 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.122.86.198:2278 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63941 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63173 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.122.86.198:2279 TIME_WAIT
tcp 0 13140 207.210.86.85:80 24.122.86.198:2284 ESTABLISHED
tcp 0 0 207.210.86.85:80 24.37.76.94:63439 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62927 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63695 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.122.86.198:2280 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.122.86.198:2281 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63447 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37216 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63441 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62685 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63193 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3186 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3187 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63193 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3186 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3187 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3184 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3185 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3190 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3191 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3188 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3189 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3194 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3195 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63663 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3192 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3193 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3198 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37151 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3199 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37148 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3196 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37149 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3197 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63913 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3170 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3171 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3168 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3174 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3175 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3172 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3173 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3178 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3179 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63423 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3176 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3182 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3183 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63931 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3180 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3181 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64185 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4744 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3154 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37171 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3155 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4746 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3152 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4747 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3153 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63621 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4728 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37174 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3158 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4729 TIME_WAIT
tcp 0 0 207.210.86.85:80 207.96.176.72:28460 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3159 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64131 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63619 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4750 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4730 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37172 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3156 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4751 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37173 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3157 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4736 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4724 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37178 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3162 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4737 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37179 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3163 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4738 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3160 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4739 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37177 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3161 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3161 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63885 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4740 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3166 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4741 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3167 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61579 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4742 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37180 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59657 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3164 TIME_WAIT
tcp 0 0 207.210.86.85:80 81.220.200.42:4224 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3165 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61833 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63625 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4760 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3138 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4761 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37155 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3139 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4762 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37152 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4763 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37153 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3137 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3142 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3143 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63891 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37156 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3140 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3141 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63889 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4752 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3146 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4753 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3147 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64159 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4754 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3144 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4755 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3145 TIME_WAIT
tcp 0 0 207.210.86.85:80 205.151.16.4:37166 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3150 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4757 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3151 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63131 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64155 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4758 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3148 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4759 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3149 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63641 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59623 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4935 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63847 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4934 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4933 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4766 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4932 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4767 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4931 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4930 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4761 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4929 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4762 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.201.144.144:2159 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4943 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4756 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.201.144.144:2157 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4941 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4758 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63597 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64109 TIME_WAIT
tcp 0 0 207.210.86.85:80 207.96.176.72:29378 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4940 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4939 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4938 TIME_WAIT
tcp 0 0 207.210.86.85:80 207.96.176.72:29636 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59625 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4937 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4754 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4936 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4951 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4748 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4749 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4949 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4948 TIME_WAIT
tcp 0 0 207.210.86.85:80 81.220.200.42:4220 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4744 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4732 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.201.144.144:2161 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4945 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4746 TIME_WAIT
tcp 0 0 207.210.86.85:80 81.220.200.42:4217 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4734 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4944 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4747 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.36.56:4735 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4959 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4958 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4741 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4957 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4742 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4742 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61821 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63869 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4956 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4743 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4955 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4954 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4953 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4952 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4967 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4796 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4966 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4965 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4798 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4964 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4963 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4792 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63299 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4962 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4961 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4794 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4960 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59599 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4975 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4788 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59598 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4974 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4973 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4790 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4972 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4971 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4784 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63563 ESTABLISHED
tcp 0 0 207.210.86.85:80 83.153.243.131:4970 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4969 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4786 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64073 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4968 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3202 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4780 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63831 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3200 TIME_WAIT
tcp 0 0 207.210.86.85:80 70.82.202.132:3201 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4783 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4776 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4778 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63569 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63569 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4976 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:65375 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4773 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4774 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63069 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61789 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4770 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59559 TIME_WAIT
tcp 0 1004 207.210.86.85:80 83.113.142.50:4829 FIN_WAIT1
tcp 0 1003 207.210.86.85:80 83.113.142.50:4831 FIN_WAIT1
tcp 0 0 207.210.86.85:80 83.113.142.50:4824 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4826 FIN_WAIT2
tcp 0 0 207.210.86.85:80 24.37.76.94:63777 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:61985 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4820 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4822 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62765 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4816 TIME_WAIT
tcp 0 0 207.210.86.85:80 64.42.217.69:59562 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4818 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4812 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4813 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4814 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4808 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64051 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4804 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62527 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4806 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4800 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62523 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.113.142.50:4802 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63545 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63801 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4903 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1691 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64007 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1689 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:64005 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62467 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4911 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1682 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4910 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63503 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4909 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4908 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1686 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4906 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1684 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4905 TIME_WAIT
tcp 0 1440 207.210.86.85:22 142.213.254.2:2326 ESTABLISHED
tcp 0 0 207.210.86.85:80 67.68.132.148:1685 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4904 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63753 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4919 TIME_WAIT
tcp 0 0 207.210.86.85:80 207.96.176.72:29369 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4918 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4917 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4916 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:63253 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4915 TIME_WAIT
tcp 0 0 207.210.86.85:80 67.68.132.148:1677 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4912 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4926 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4925 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4924 TIME_WAIT
tcp 0 0 207.210.86.85:80 24.37.76.94:62237 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4923 TIME_WAIT
tcp 0 462 207.210.86.85:80 83.113.142.50:4832 FIN_WAIT1
tcp 0 0 207.210.86.85:80 83.153.243.131:4922 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4921 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4920 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4922 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4921 TIME_WAIT
tcp 0 0 207.210.86.85:80 83.153.243.131:4920 TIME_WAIT

And it continues like that...

http://www.fnnation.com/phpinfo.php

Have you ever seen something like that?

Is it normal that each IP can have 20 or more connections at the same time??? I have searched the web and I have'nt found anything useful... :(

Dave#

Mon 23rd Jan '06, 5:21pm

TIME_WAIT is normal.

I also don;t see a problem with your loadaverages. The figure you need to look at is idle CPU as this is the only true rpresentation of CPU load and you have loads.

eva2000

Tue 24th Jan '06, 8:40am

what's current load averages like ?

RaZor Edge

Tue 24th Jan '06, 11:42am

Hi eva2000,

Now, there is +/- 24 members / 50 guests on my forum:

20:00:58 up 23:23, 1 user, load average: 2.50, 1.33, 0.95
79 processes: 78 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 0.0% user 0.1% system 0.0% nice 0.0% iowait 99.3% idle
CPU1 states: 0.0% user 1.0% system 0.0% nice 0.0% iowait 98.4% idle
CPU2 states: 0.0% user 0.0% system 0.0% nice 0.0% iowait 100.0% idle
CPU3 states: 0.1% user 0.0% system 0.0% nice 0.0% iowait 99.3% idle
Mem: 8268440k av, 8115340k used, 153100k free, 0k shrd, 137680k buff
4408848k active, 3115948k inactive
Swap: 8193140k av, 675360k used, 7517780k free 2885648k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
22203 root 0 0 5240 4152 4088 S 99.9 0.0 2:04 3 httpd
16551 root 19 0 1088 1088 748 R 1.1 0.0 0:02 1 top
1 root 8 0 476 476 428 S 0.0 0.0 0:01 1 init
...

root@nation [~]# uptime
20:02:39 up 23:24, 1 user, load average: 0.69, 1.02, 0.87

20:06:07 up 23:28, 1 user, load average: 5.24, 1.89, 1.18
176 processes: 172 sleeping, 3 running, 1 zombie, 0 stopped
CPU0 states: 14.1% user 3.0% system 0.0% nice 0.0% iowait 82.1% idle
CPU1 states: 15.0% user 4.0% system 0.0% nice 0.0% iowait 80.1% idle
CPU2 states: 26.0% user 6.2% system 0.0% nice 0.0% iowait 67.0% idle
CPU3 states: 26.2% user 4.1% system 0.0% nice 0.0% iowait 68.1% idle
Mem: 8268440k av, 8208980k used, 59460k free, 0k shrd, 141816k buff
4453960k active, 3159472k inactive
Swap: 8193140k av, 675872k used, 7517268k free 2934448k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
22912 mysql 9 0 40428 35M 1644 S 24.8 0.4 108:38 2 mysqld
22203 root 8 0 5240 4152 4088 S 23.9 0.0 2:07 2 httpd
7449 root 14 0 1172 1172 748 R 2.1 0.0 0:00 2 top
13888 nobody 9 0 0 0 0 Z 0.1 0.0 0:00 2 httpd <defunct>
1 root 8 0 476 476 428 S 0.0 0.0 0:01 1 init
11251 root 9 0 552 524 468 S 0.0 0.0 0:00 1 syslogd

20:19:09 up 23:41, 1 user, load average: 0.22, 0.59, 0.88
58 processes: 56 sleeping, 2 running, 0 zombie, 0 stopped
CPU0 states: 2.2% user 0.4% system 0.0% nice 0.0% iowait 96.2% idle
CPU1 states: 6.2% user 1.0% system 0.0% nice 0.0% iowait 92.1% idle
CPU2 states: 1.2% user 0.3% system 0.0% nice 0.0% iowait 97.3% idle
CPU3 states: 3.1% user 1.0% system 0.0% nice 0.0% iowait 95.2% idle
Mem: 8268440k av, 8202032k used, 66408k free, 0k shrd, 147720k buff
4498452k active, 3115116k inactive
Swap: 8193140k av, 672128k used, 7521012k free 2994204k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
22203 root 14 0 5240 4152 4096 S 99.9 0.0 2:04 0 httpd
28908 nobody 12 0 6744 6092 4256 R 1.5 0.0 0:00 1 httpd
22912 mysql 9 0 39416 34M 1660 S 0.5 0.4 109:19 2 mysqld
27136 root 12 0 1060 1060 748 R 0.5 0.0 0:00 3 top
1 root 9 0 476 476 428 S 0.0 0.0 0:01 3 init

root@nation [~]# uptime
20:24:28 up 23:46, 1 user, load average: 0.34, 0.88, 0.98

Seems like number of process have a great influence on the load!!!

root@nation [~]# mysqladmin -u root -p ext stat
+--------------------------+------------+
| Variable_name | Value |
+--------------------------+------------+
| Aborted_clients | 80 |
| Aborted_connects | 0 |
| Bytes_received | 237789978 |
| Bytes_sent | 3628737925 |
| Com_admin_commands | 0 |
| Com_alter_table | 0 |
| Com_analyze | 0 |
| Com_backup_table | 0 |
| Com_begin | 449 |
| Com_change_db | 71022 |
| Com_change_master | 0 |
| Com_check | 0 |
| Com_commit | 434 |
| Com_create_db | 0 |
| Com_create_function | 0 |
| Com_create_index | 0 |
| Com_create_table | 0 |
| Com_delete | 1601 |
| Com_delete_multi | 0 |
| Com_drop_db | 0 |
| Com_drop_function | 0 |
| Com_drop_index | 0 |
| Com_drop_table | 0 |
| Com_flush | 0 |
| Com_grant | 0 |
| Com_ha_close | 0 |
| Com_ha_open | 0 |
| Com_ha_read | 0 |
| Com_insert | 22426 |
| Com_insert_select | 330 |
| Com_kill | 0 |
| Com_load | 0 |
| Com_load_master_data | 0 |
| Com_load_master_table | 0 |
| Com_lock_tables | 317 |
| Com_optimize | 0 |
| Com_purge | 0 |
| Com_rename_table | 0 |
| Com_repair | 0 |
| Com_replace | 2342 |
| Com_replace_select | 0 |
| Com_reset | 0 |
| Com_restore_table | 0 |
| Com_revoke | 0 |
| Com_rollback | 0 |
| Com_savepoint | 0 |
| Com_select | 216970 |
| Com_set_option | 329 |
| Com_show_binlog_events | 0 |
| Com_show_binlogs | 0 |
| Com_show_create | 0 |
| Com_show_databases | 0 |
| Com_show_fields | 69 |
| Com_show_grants | 0 |
| Com_show_keys | 46 |
| Com_show_logs | 0 |
| Com_show_master_status | 0 |
| Com_show_new_master | 0 |
| Com_show_open_tables | 0 |
| Com_show_processlist | 520 |
| Com_show_slave_hosts | 0 |
| Com_show_slave_status | 0 |
| Com_show_status | 236 |
| Com_show_innodb_status | 0 |
| Com_show_tables | 0 |
| Com_show_variables | 0 |
| Com_slave_start | 0 |
| Com_slave_stop | 0 |
| Com_truncate | 0 |
| Com_unlock_tables | 317 |
| Com_update | 83231 |
| Com_update_multi | 20 |
| Connections | 71332 |
| Created_tmp_disk_tables | 5265 |
| Created_tmp_tables | 19051 |
| Created_tmp_files | 0 |
| Delayed_insert_threads | 0 |
| Delayed_writes | 0 |
| Delayed_errors | 0 |
| Flush_commands | 1 |
| Handler_commit | 0 |
| Handler_delete | 12745 |
| Handler_read_first | 7171 |
| Handler_read_key | 34406892 |
| Handler_read_next | 66896494 |
| Handler_read_prev | 60028 |
| Handler_read_rnd | 4377678 |
| Handler_read_rnd_next | 1623430246 |
| Handler_rollback | 0 |
| Handler_update | 10813838 |
| Handler_write | 7861954 |
| Key_blocks_used | 15586 |
| Key_read_requests | 55838031 |
| Key_reads | 11840 |
| Key_write_requests | 2610427 |
| Key_writes | 67512 |
| Max_used_connections | 16 |
| Not_flushed_key_blocks | 0 |
| Not_flushed_delayed_rows | 0 |
| Open_tables | 278 |
| Open_files | 425 |
| Open_streams | 0 |
| Opened_tables | 284 |
| Questions | 842931 |
| Qcache_queries_in_cache | 1075 |
| Qcache_inserts | 208243 |
| Qcache_hits | 370983 |
| Qcache_lowmem_prunes | 9792 |
| Qcache_not_cached | 8727 |
| Qcache_free_memory | 4509760 |
| Qcache_free_blocks | 773 |
| Qcache_total_blocks | 3420 |
| Rpl_status | NULL |
| Select_full_join | 1089 |
| Select_full_range_join | 48 |
| Select_range | 39723 |
| Select_range_check | 0 |
| Select_scan | 58558 |
| Slave_open_temp_tables | 0 |
| Slave_running | OFF |
| Slow_launch_threads | 0 |
| Slow_queries | 43 |
| Sort_merge_passes | 0 |
| Sort_range | 32695 |
| Sort_rows | 72468740 |
| Sort_scan | 40859 |
| Table_locks_immediate | 626242 |
| Table_locks_waited | 2011 |
| Threads_cached | 15 |
| Threads_created | 17 |
| Threads_connected | 2 |
| Threads_running | 1 |
| Uptime | 91852 |
+--------------------------+------------+
Uptime: 91852 Threads: 2 Questions: 842932 Slow queries: 43 Opens: 284 Flush tables: 1 Open tables: 278 Queries per second avg: 9.177

1- eAccelerator have been deleted form php.ini but is still on the server. (Is it necessary to complety remove it from the server?)
2- APC Cache have been installed

From the original recommendations you gave me: I have asked my host to made the change you have recommend. I have told them that they can change things if they think it could be better (seems you have said that you're less familiar with VPS).

I've just take a look at it and here's the informations that differ from your original recommendation in httpd.conf:

#
MaxKeepAliveRequests 200 (you:100)
MaxRequestsPerChild 20 (you:500)

In My.cnf, there is many differences from your original recommandation:

[mysqld]
max_connections = 400
key_buffer = 16M
myisam_sort_buffer_size = 32M
join_buffer_size = 1M
read_buffer_size = 1M
sort_buffer_size = 2M
table_cache = 1024
thread_cache_size = 286
interactive_timeout = 25
wait_timeout = 1000
connect_timeout = 10
max_allowed_packet = 16M
max_connect_errors = 10
query_cache_limit = 1M
query_cache_size = 16M
query_cache_type = 1
tmp_table_size = 16M
skip-innodb
[mysqld_safe]
open_files_limit = 8192
[mysqldump]
quick
max_allowed_packet = 16M
[myisamchk]
key_buffer = 32M
sort_buffer = 32M
read_buffer = 16M
write_buffer = 16M

Is this seems ok? Or do you think I must stick with your original recommandation?

Thank you so musch for taking time to help vb users like this! It's really cool and really appreciated!

Dave#

Tue 24th Jan '06, 5:28pm

MaxRequestsPerChild 20 (you:500)

yikes that means apache is forking a new child overy 20 requests - no wonder your cpu is buzy. You should only set max requests per shild if you are having memory issues or if you are getting occassional segfaults

RaZor Edge

Tue 24th Jan '06, 5:50pm

yikes that means apache is forking a new child overy 20 requests - no wonder your cpu is buzy. You should only set max requests per shild if you are having memory issues or if you are getting occassional segfaults

Ho!!!

So what are you suggesting for this value? 0? 500?

Thank you Dave for your help!

Dave#

Tue 24th Jan '06, 5:52pm

Unless you are haing issues I would set it to 0

RaZor Edge

Thu 26th Jan '06, 12:17pm

Unless you are haing issues I would set it to 0

Since I have changed MaxRequestsPerChild, server load is much better now!!

I have set this to 500 to begin. I have read about MaxRequestsPerChild on Google and for a beginner like me... seems a little bit risky to set this to 0 (in case there is a memory leak or something like that)

Thank you Dave!

RaZor Edge

Mon 30th Jan '06, 10:37am

Server configuration I'm using:
http://www.vbulletin.com/forum/showpost.php?p=1056717&postcount=2

Since I have apply the change you suggest, seems like i'm using more swap memory. Do you think this is "normal"?

Top:

19:27:57 up 4 days, 14:20, 1 user, load average: 0.62, 0.84, 0.91
65 processes: 63 sleeping, 2 running, 0 zombie, 0 stopped
CPU0 states: 3.2% user 0.4% system 0.0% nice 0.0% iowait 95.3% idle
CPU1 states: 2.3% user 1.2% system 0.0% nice 0.0% iowait 95.3% idle
CPU2 states: 3.3% user 2.3% system 0.0% nice 0.0% iowait 93.2% idle
CPU3 states: 4.0% user 1.0% system 0.0% nice 0.0% iowait 94.4% idle
Mem: 8268324k av, 8233904k used, 34420k free, 0k shrd, 820652k buff
4273628k active, 3243472k inactive
Swap: 8193140k av, 2313792k used, 5879348k free 3895004k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
7746 root 8 0 4028 1844 1788 S 11.8 0.0 3:32 3 httpd
11617 mysql 9 0 74708 72M 1488 S 2.9 0.9 72:26 1 mysqld
6433 root 19 0 944 944 748 R 2.7 0.0 0:00 2 top
7147 root 9 0 1436 1356 1176 S 0.1 0.0 1:00 0 antirelayd
1 root 8 0 476 448 428 S 0.0 0.0 0:09 2 init
32288 root 9 0 548 516 468 S 0.0 0.0 0:04 3 syslogd
6308 named 9 0 2720 2328 1880 S 0.0 0.0 0:35 3 named
6327 root 9 0 1456 1316 1240 S 0.0 0.0 0:13 1 sshd
6649 root 9 0 816 736 668 S 0.0 0.0 0:00 3 xinetd
7042 root 8 0 7784 2052 1456 S 0.0 0.0 0:19 3 chkservd
7122 mailnull 8 0 1824 1564 1488 S 0.0 0.0 0:03 3 exim
7133 mailnull 9 0 1788 1468 1468 S 0.0 0.0 0:00 1 exim
7754 root 8 0 592 580 536 S 0.0 0.0 0:02 1 crond
8992 mailnull 9 0 3956 2568 1576 S 0.0 0.0 1:00 3 eximstats
9419 root 19 19 14068 12M 4136 S N 0.0 0.1 1:30 0 cpanellogd
9475 root 9 0 5688 2680 1656 S 0.0 0.0 0:03 2 cppop
10460 root 9 0 456 396 396 S 0.0 0.0 0:00 0 portsentry
13738 root 9 0 1604 1392 1340 S 0.0 0.0 0:01 1 pure-ftpd
13741 root 8 0 856 684 684 S 0.0 0.0 0:00 0 pure-authd
11404 root 9 0 1060 1060 896 S 0.0 0.0 0:00 2 mysqld_safe
13568 cpanel 9 0 1620 1616 1348 S 0.0 0.0 0:00 0 stunnel-4.04loc
14436 root 9 0 10052 9.8M 4968 S 0.0 0.1 0:00 1 cpsrvd
9138 root 9 0 1348 1348 984 S 0.0 0.0 0:00 1 bash

Free m

root@nation [~]# free m
total used free shared buffers cached
Mem: 8268324 8255620 12704 0 831020 3924896
-/+ buffers/cache: 3499704 4768620
Swap: 8193140 2323628 5869512

Mysql extended:

root@nation [~]# mysqladmin -u root -p ext stat
+--------------------------+------------+
| Variable_name | Value |
+--------------------------+------------+
| Aborted_clients | 108 |
| Aborted_connects | 0 |
| Bytes_received | 239900484 |
| Bytes_sent | 2104084280 |
| Com_admin_commands | 0 |
| Com_alter_table | 0 |
| Com_analyze | 0 |
| Com_backup_table | 0 |
| Com_begin | 596 |
| Com_change_db | 54411 |
| Com_change_master | 0 |
| Com_check | 0 |
| Com_commit | 573 |
| Com_create_db | 0 |
| Com_create_function | 0 |
| Com_create_index | 0 |
| Com_create_table | 0 |
| Com_delete | 106524 |
| Com_delete_multi | 0 |
| Com_drop_db | 0 |
| Com_drop_function | 0 |
| Com_drop_index | 0 |
| Com_drop_table | 0 |
| Com_flush | 0 |
| Com_grant | 0 |
| Com_ha_close | 0 |
| Com_ha_open | 0 |
| Com_ha_read | 0 |
| Com_insert | 22454 |
| Com_insert_select | 325 |
| Com_kill | 0 |
| Com_load | 0 |
| Com_load_master_data | 0 |
| Com_load_master_table | 0 |
| Com_lock_tables | 156 |
| Com_optimize | 0 |
| Com_purge | 0 |
| Com_rename_table | 0 |
| Com_repair | 0 |
| Com_replace | 2194 |
| Com_replace_select | 0 |
| Com_reset | 0 |
| Com_restore_table | 0 |
| Com_revoke | 0 |
| Com_rollback | 0 |
| Com_savepoint | 0 |
| Com_select | 312328 |
| Com_set_option | 258 |
| Com_show_binlog_events | 0 |
| Com_show_binlogs | 0 |
| Com_show_create | 0 |
| Com_show_databases | 0 |
| Com_show_fields | 0 |
| Com_show_grants | 0 |
| Com_show_keys | 0 |
| Com_show_logs | 0 |
| Com_show_master_status | 0 |
| Com_show_new_master | 0 |
| Com_show_open_tables | 0 |
| Com_show_processlist | 379 |
| Com_show_slave_hosts | 0 |
| Com_show_slave_status | 0 |
| Com_show_status | 333 |
| Com_show_innodb_status | 0 |
| Com_show_tables | 11 |
| Com_show_variables | 14 |
| Com_slave_start | 0 |
| Com_slave_stop | 0 |
| Com_truncate | 0 |
| Com_unlock_tables | 156 |
| Com_update | 60790 |
| Com_update_multi | 15 |
| Connections | 54645 |
| Created_tmp_disk_tables | 3839 |
| Created_tmp_tables | 12726 |
| Created_tmp_files | 0 |
| Delayed_insert_threads | 0 |
| Delayed_writes | 0 |
| Delayed_errors | 0 |
| Flush_commands | 1 |
| Handler_commit | 0 |
| Handler_delete | 84482 |
| Handler_read_first | 5165 |
| Handler_read_key | 26687491 |
| Handler_read_next | 43991945 |
| Handler_read_prev | 49001 |
| Handler_read_rnd | 2999747 |
| Handler_read_rnd_next | 759947846 |
| Handler_rollback | 0 |
| Handler_update | 5169760 |
| Handler_write | 5269386 |
| Key_blocks_used | 15586 |
| Key_read_requests | 58340900 |
| Key_reads | 21832 |
| Key_write_requests | 2654698 |
| Key_writes | 164479 |
| Max_used_connections | 21 |
| Not_flushed_key_blocks | 0 |
| Not_flushed_delayed_rows | 0 |
| Open_tables | 445 |
| Open_files | 713 |
| Open_streams | 0 |
| Opened_tables | 451 |
| Questions | 909025 |
| Qcache_queries_in_cache | 4480 |
| Qcache_inserts | 301700 |
| Qcache_hits | 292919 |
| Qcache_lowmem_prunes | 0 |
| Qcache_not_cached | 10628 |
| Qcache_free_memory | 39820520 |
| Qcache_free_blocks | 1024 |
| Qcache_total_blocks | 10557 |
| Rpl_status | NULL |
| Select_full_join | 506 |
| Select_full_range_join | 15 |
| Select_range | 101360 |
| Select_range_check | 0 |
| Select_scan | 40956 |
| Slave_open_temp_tables | 0 |
| Slave_running | OFF |
| Slow_launch_threads | 0 |
| Slow_queries | 22 |
| Sort_merge_passes | 0 |
| Sort_range | 26766 |
| Sort_rows | 38782093 |
| Sort_scan | 28129 |
| Table_locks_immediate | 754410 |
| Table_locks_waited | 1689 |
| Threads_cached | 21 |
| Threads_created | 22 |
| Threads_connected | 1 |
| Threads_running | 1 |
| Uptime | 62688 |
+--------------------------+------------+
Uptime: 62688 Threads: 1 Questions: 909026 Slow queries: 22 Opens: 451 Flush tables: 1 Open tables: 445 Queries per second avg: 14.501

eva2000

Mon 30th Jan '06, 10:56am

definitely not normal.... IF it was normal server... but VPS servers always use alot of swap for some reason...

i'd probably just request host to move you to a less crowded VPS server

RaZor Edge

Mon 30th Jan '06, 3:48pm

definitely not normal.... IF it was normal server... but VPS servers always use alot of swap for some reason...

i'd probably just request host to move you to a less crowded VPS server

Thank you Eva2000. In case you want to known (an any other person hosted in a VPS), here's what my host told me about this situation:

...what you are seeing there is the RAM and swap usage of the entire server, not just of your VPS. Also, due to how linux works, once swap space has been used, the server will just keep those swap pages in use unless there isn't enough additional swap space available. It does that so that in case the swap pages are requested again, the server can access them very fast. So for instance if the server uses 5mb swap on day 1, and 10 days later it uses another 5mb, then it'll seem like 10mb is being used. But that other 5mb won't be used anymore by that time, but until the server gets rebooted it'll just keep those pages in the swap (since there is plenty of swap space available there's not really a need to flush it).

Furthermore, your guaranteed ram will never use swap, it always uses ram. I can assure you that none of our servers are overbooked, we do not oversell any guaranteed ram.

http://www.dehe.com/showpost.php?p=1810&postcount=3

eva2000

Tue 31st Jan '06, 1:57am

Yes what you see is for entire server

Really i don't get VPS heh... as it just means at one stage in your server's uptime, 8GB of ram in total on server wasn't enough server wide and had to swap to disk... so all VPS a/cs on the server as a whole used more ram than it was guaranteed ?

anyway as long as cpu loads are low and site/forum performance doesn't suffer, swapping to disk should be okay.. but you are still at the mercy of being on a shared server where resources aren't entirely for your own use

RaZor Edge

Sun 12th Mar '06, 12:11am

Hi Eva2000,

I would like to have your opinion about mysql behavior on my VPS...

Here's what happen, normally, when mysql start, there is +/-50 process running and mysql MEM % is around 1/2. With time, mysql will make proccess going really high and MEM % going below 10.

Here's what happen:

1- Process are high and mysql % MEM too...

19:49:21 up 2 days, 22:43, 1 user, load average: 0.52, 0.84, 0.74
90 processes: 88 sleeping, 2 running, 0 zombie, 0 stopped
CPU0 states: 18.0% user 4.3% system 0.0% nice 0.1% iowait 76.4% idle
CPU1 states: 1.2% user 0.4% system 0.0% nice 0.1% iowait 97.3% idle
Mem: 524288k av, 154740k used, 369548k free, 0k shrd, 0k buff
1541892k active, 347080k inactive
Swap: 0k av, 18014394214528008k used, 4294953976k free 0k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND

23641 root 16 0 2052 1056 1936 S 0.0 0.2 0:00 1 mysqld_safe
23667 mysql 16 0 108M 49M 3760 S 0.0 9.5 0:00 1 mysqld
root@nation [~]# service mysql restart

2- I kill Mysql and look what is happening...

Killing mysqld with pid 23670

19:50:15 up 2 days, 22:44, 1 user, load average: 0.58, 0.79, 0.72
47 processes: 46 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 0.1% user 0.1% system 0.0% nice 1.0% iowait 96.0% idle
CPU1 states: 0.1% user 1.0% system 0.0% nice 1.0% iowait 95.0% idle
Mem: 524288k av, 136832k used, 387456k free, 0k shrd, 0k buff
1519200k active, 335092k inactive
Swap: 0k av, 18014394214523128k used, 4294958856k free 0k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
6104 root 18 0 2052 1060 1936 S 0.0 0.2 0:00 0 mysqld_safe
6129 mysql 16 0 88580 7424 3760 S 0.0 1.4 0:00 0 mysqld

19:56:27 up 2 days, 22:50, 1 user, load average: 0.22, 0.43, 0.57
49 processes: 48 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 0.3% user 0.3% system 0.0% nice 0.1% iowait 98.3% idle
CPU1 states: 1.0% user 0.1% system 0.0% nice 0.0% iowait 98.3% idle
Mem: 524288k av, 139568k used, 384720k free, 0k shrd, 0k buff
1571712k active, 258788k inactive
Swap: 0k av, 18014394214523124k used, 4294958860k free 0k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND

6104 root 18 0 2052 1060 1936 S 0.0 0.2 0:00 0 mysqld_safe
6129 mysql 15 0 90476 14M 3760 S 0.0 2.8 0:00 0 mysqld

20:17:32 up 2 days, 23:11, 1 user, load average: 0.38, 0.32, 0.38
45 processes: 44 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 0.2% user 0.3% system 0.0% nice 0.0% iowait 99.0% idle
CPU1 states: 1.0% user 0.1% system 0.0% nice 0.0% iowait 98.3% idle
Mem: 524288k av, 97396k used, 426892k free, 0k shrd, 0k buff
1546968k active, 339932k inactive
Swap: 0k av, 18014394214523120k used, 4294958864k free 0k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND

6104 root 18 0 2052 1060 1936 S 0.0 0.2 0:00 0 mysqld_safe
6129 mysql 15 0 90880 21M 3760 S 0.0 4.1 0:00 0 mysqld

22:03:32 up 3 days, 57 min, 1 user, load average: 0.68, 0.49, 0.51
50 processes: 49 sleeping, 1 running, 0 zombie, 0 stopped
CPU0 states: 6.3% user 1.3% system 0.0% nice 1.3% iowait 90.0% idle
CPU1 states: 9.0% user 1.3% system 0.0% nice 1.1% iowait 88.0% idle
Mem: 524288k av, 132448k used, 391840k free, 0k shrd, 0k buff
1476316k active, 395288k inactive
Swap: 0k av, 18014394214523144k used, 4294958840k free 0k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND

6104 root 18 0 2052 1060 1936 S 0.0 0.2 0:00 0 mysqld_safe
6129 mysql 15 0 96332 35M 3760 S 0.0 6.9 0:00 1 mysqld

00:34:52 up 3 days, 3:28, 1 user, load average: 0.45, 0.63, 0.92
57 processes: 55 sleeping, 2 running, 0 zombie, 0 stopped
CPU0 states: 16.1% user 2.4% system 0.0% nice 0.0% iowait 80.3% idle
CPU1 states: 20.1% user 6.1% system 0.0% nice 0.0% iowait 73.1% idle
Mem: 524288k av, 166340k used, 357948k free, 0k shrd, 0k buff
1399748k active, 275028k inactive
Swap: 0k av, 18014394214523440k used, 4294958544k free 0k cac