RE: Great load average...

[David T. Ashley]

Hi again! 

 

I'LL WRITE IN ALL CAPS BECAUSE OF YOUR HTML WHICH MAKES IT HARD FOR ME TO REPLY IN THE NORMAL FASHION.

For for 10th day now my mail server has a great!!! load average!!! I've checked the logs

but i can't find any signs of any kind of attack...except some some tries on my port 80

which are like http://...../WINNT/cmd.exe etc.... 

 

THOSE ARE WINDOWS VIRUSES TRYING TO PROPAGATE.  THAT DOES NOT AFFECT YOU AND YOUR LINUX BOX.

 

also i have a proccess named compress running..and i don't know what it is? ( :\ almost new to linux ) 

 

WHAT YOU WANT TO DO WITH COMPRESS IS USE THE "ps -Af" COMMAND AND FIGURE OUT WHAT IS SPAWNING THE COMPRESS COMMAND.  TO FIGURE OUT WHAT IS SPAWNING IT, YOU NEED TO TRACE BACK TO THE PARENT PROCESS USING THE PIDS.  YOU HAVE NOT INCLUDED ENOUGH INFORMATION FOR US BELOW.  IT IS MOST LIKELY THAT YOU HAVE A CRON JOB OF SOME KIND THAT RUNS PERIODICALLY.

 

THE COMPRESS COMMAND IS RUNNING AS ROOT, SO IT AIN'T YOUR USERS.

 

ALSO, DID YOU INHERIT THE BOX OR SET IT UP YOURSELF?

 

ADDITIONALLY, THE QMAIL LIST IS NOT QUITE THE RIGHT PLACE FOR THAT KIND OF QUESTION.  WHY DON'T YOU SUBSCRIBE TO A NEWSGROUP SERVICE (FOR EXAMPLE, WWW.USENETGROUPS.COM) AND POST SUCH QUESTIONS TO ALT.OS.LINUX OR A SIMILAR GROUP.

 

DAVE.