Have you checked for large numbers of files in frequently accessed
directories? That has been our number one cause of situations similar to
what you are reporting. Log directories for Declude and Sniffer need to be
archived periodically.
Darin.
-----Original Message-----
From: Daniel Ivey
Sent: Thursday, September 19, 2013 8:12 AM
To: [email protected]
Subject: [MBF]Re: high cpu usage
Markus,
I have followed your suggestion and done the following, which only seemed to
help temporary.
1. Lowered the HiJack thresholds for HOLD2.
2. Increased my threads in the Declude.cfg file from 100 to 350.
3. Powered off an unused XP workstation on that VM server.
4. Rebooted the server.
After following these steps, the server did well until about 3:42AM this
morning when the high CPU alarm came back and has not yet cleared. This
alarm appears when the VM detects that the CPU usage is over 90% for 5
minutes.
The strange thing is that the server is keeping up. Does anyone else have
any suggestions or ideas as to what my issue may be? I am running an older
version of Symantec Antivirus 10 on this server as well.
Daniel
-----Original Message-----
From: Markus Gufler | Limitis [mailto:[email protected]]
Sent: Wednesday, September 18, 2013 11:13 AM
To: [email protected]
Subject: [MBF]AW: high cpu usage
Keep in mind that on virtualized environments not only load can vary, but
also the (virtual) CPU capacity.
So other VMs on the same host, having a huge load could cause "high" CPU
loads on your AntiSpam-VM. Not because your apps create it but because 100%
is relative (lower) then it was before.
If you have configured multiple external modules (invURIBL, Sniffer, ...) it
would help to use Sysinternals Process-Explorer instead of the original task
manager. Add the CPU History column to your view and look what constantly
creates a lot of load.
Eventually keep an eye on processes hanging around with 100% of one CPU
core. I know about certain message types being able to crush invURIBL and
let it run forever with 100% of one CPU-core. Some of this rare message
types re-appeared around two weeks ago.
Markus
-----Original Message-----
From: Daniel Ivey
Sent: Wednesday, September 18, 2013 9:19 AM
To: [email protected]
Subject: [MBF]high cpu usage
I have a virtualized Windows 2000 Server that has all of a sudden starting
having high CPU usage (according to Vmware). When I check the CPU usage in
Performance in Windows Task Manager, it bounces up to about 98% at times,
but quickly backs down and has been as low as 20%. When I go under
processes and see what is using most of the CPU, it is either
decludeproc.exe (I am running version 4.12.02) or SNFServer.exe constantly.
I have tightened my restraints on HiJack to see if someone was coming in
under my thresholds, but have not gotten any alerts to that being the
problem. The server is keeping up with only around 70 - 100 items in the
PROC folder when I check it using DecludeCount.exe. Occasionally, it will
get up to 150 in the PROC folder but then comes back down. The server seems
to be processing about 300 messages every 15 seconds according to
DecludeCount.exe.
I was just wondering if anyone had ran into this issue and if so, what the
fix was or if anyone had any suggestions for settings to tweak? Any help is
greatly appreciated, as I want to nip this in the bud before it becomes a
larger problem.
Daniel
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to
<[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to
<[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to
<[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to
<[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
