Portal Home > Knowledgebase > Articles Database > big server load
big server load
| Posted by kteo, 09-28-2009, 11:34 AM |
| in the prossecs manager i have these result
13800 nobody 4 67.8 0.5 /usr/local/apache/bin/httpd -k start -DSSL
14846 nobody 4 67.1 0.4 /usr/local/apache/bin/httpd -k start -DSSL
14724 nobody 4 65.8 0.4 /usr/local/apache/bin/httpd -k start -DSSL
15689 nobody 4 65.7 0.4 /usr/local/apache/bin/httpd -k start -DSSL
15692 nobody 4 64.9 0.5 /usr/local/apache/bin/httpd -k start -DSSL
14777 nobody 4 63.6 0.4 /usr/local/apache/bin/httpd -k start -DSSL
who is user nobody? why i have big server load?what i must do?
|
| Posted by yajur, 09-28-2009, 11:49 AM |
| nobody is apache it normal can u give us the output of top -c command
|
| Posted by david510, 09-28-2009, 01:23 PM |
| Use the following script to get the apache connections from different IPs to the server and block IPs that make more number of connections.
|
| Posted by adminpaul, 09-28-2009, 03:05 PM |
| Click on the server-status link in whm to get an idea about the number of access to each site.
|
| Posted by WHR-Abner, 09-29-2009, 03:05 AM |
| Use the command
"netstat -alpn | grep :80 | awk '{print $4}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -n"
to see if you are under DOS/DDOS attack.
Manually blocking the IPs is a tedious process. I would suggest you to install dos_evasive along with APF or iptables to automatically block the attacking IPs.
There are other tweaks too.. PM me if you need more details.
|
Add to Favourites 
Print this Article
Also Read
For Resellers (Views: 524)