Hi,
  you might try "pstree -a | less" to show you the command line arguments and 
paths
of all running processes. This might give you a clue at least to where the 
source
file can be found!


On 13/01/2011 11:06 AM, Mike Canty wrote:
Eric,
        Is it still a DoS attack, when I can get someone to run "top" find
the PID and kill that single process to restore connectivity?

Cheers

-----Original Message-----
From: Eric Shubert [mailto:e...@shubes.net]
Sent: Thursday, 13 January 2011 9:55 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Apache issues

On 01/12/2011 03:16 PM, Mike Canty wrote:
To all,

I have a server that is having some problems with some "apache"
services.The machine appears to have a runaway process that takes up
just over 20% of the CPU, but this is enough to stop all mail and to a
certain extent network as well.

The problem for me is this machine is at a remote site. When this
process runs away, I cannot connect to the network remotely, to resolve
the issue, I need to get someone internally to log on to the server
itself and kill the process.

When I say "Apache", that is the user listed against the process, so it
must be some form of web service.The command at fault is either "std" or
"s", although I have seen a "perl" command giving issues as well, but
not to the same effect.

Does anyone have any idea what may be causing this?Or what I can do to
rectify?

Cheers

Mike Canty

   From what you've said, it sounds a little like a DoS attack. It sounds
as though the problem process is saturating the network.

What sort of firewall, internal to QMT as well as external, is involved?


--
best wishes
  Tony White

Yea Computing Services
http://www.ycs.com.au
4 The Crescent
Yea
Victoria
Australia 3717

Telephone No's
VIC : 03 5797 3344
VIC : 03 9008 5614
TAS : 03 6107 9099
NT  : 08 8921 4049
SA  : 08 7123 0847
NSW : 02 8014 5547
QLD : 07 3123 6647
WA  : 08 6365 2199
FAX : 03 9008 5610 (FAX2Email)
FAX : 03 5797-3288



IMPORTANT NOTICE

This communication including any file attachments is intended solely for
the use of the individual or entity to whom it is addressed. If you are
not the intended recipient, or the person responsible for delivering
this communication to the intended recipient, please immediately notify
the sender by email and delete the original transmission and its
contents. Any unauthorised use, dissemination, forwarding, printing or
copying of this communication including file attachments is prohibited.
It is your responsibility to scan this communication including any file
attachments for viruses and other defects. To the extent permitted by
law, Yea Computing Services and its associates will not be liable for
any loss or damage arising in any way from this communication including
any file attachments.


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Reply via email to