Help!!!!!!!

[The Realist]

I have a raq4 and running only php on there. I have just received 3 emails saying the following:

Over the past fifteen minutes, the CPU has been heavily loaded.

This will result in noticible performace loss. Consider moving some of the services to other Cobalt servers, or reduce the complexity of the CGI scripts running on the Cobalt server itself.

1 minute load average: 19.00
5 minute load average: 10.58
15 minute load average: 5.30


Can someone please explain what this is, why its happening and what can be done to cure it.

I'm not running any cgi scripts at all.

Thanks,

:mad:

[The Realist]

Come on guys, someone possible can help me here.

:confused:

[JamesUS]

If it was only a brief thing, you might have been subject to either particularly heavy traffic, or some kind of DoS attack.
Either way, if the load has gone down now (to check, go into telnet/ssh and type 'uptime'), then there isn't really anything to worry about. Unless it happens again, in which case you could have a bigger problem.

[The Realist]

Its happening all the time now....... any help or anyone I can trust like a mod who can have a look for me.

Thanks,

Brian :confused:

[The Realist]

Ran uptime:
9:17pm up 1:07, 3 users, load average: 5.56, 4.98, 8.20

I re booted the server, as you can see at that time I have a low usage but very heavy load.

Lost, confused and pi** o**

I was told to run: ps -auxfw in telenet and it came back with a load of info that did not make a clue.

Again lost!

:(

[The Realist]

Here is a pic of top.

[eva2000]

could be a number of things

1. DOS attacks
2. your raq server processing large log files
3. email/mail related processes?

[Steve Machol]

2.7% of memory used for each mysql process seems a bit excessive. Is it possible that mySQL needs to be optimized?

[The Realist]

It has been, well suposed to of been anyway.

:confused:

[The Prohacker]

When you ran that top, what user where you? If you weren't root, someone as root was running top, and it had 97% of the cpu, possibly a run away session?

[Steve Machol]

D'oh! Good catch.

Try logging is as root and run 'ps x'. If you see this process, you can kill it by entering:

kill -9 3476