Portal Home > Knowledgebase > Articles Database > CPanel - server hangs - swpused 100%
CPanel - server hangs - swpused 100%
| Posted by MarkJohnson, 04-13-2010, 06:33 AM |
| Hello all,
For some reason once in a while when I wake up in the morning I find my server frozen.
'sar -r' showed:
/var/log/messages says:
So what is causing the server to hang, and what do I need to do to prevent that happening?
The server does have plenty of memory and CPU power to cope with the running applications and the load.
Many thanks
|
| Posted by OpenInternet-Vince, 04-13-2010, 06:40 AM |
| Memory / swap full usually means a malicious app is being run on your server.
One of the more common cause is a proxy script. Run top and see what file is being called.
Also check /tmp for any unusual files.
|
| Posted by ServerSitters_Paul, 04-13-2010, 08:10 AM |
| I'd suggest running a ps -aux
Use that to look for services/scripts that are using up a lot of memory. If they're malicious kill them off and secure the server. If they're regular services I would try shutting down the service, kill off any hanging processes, and then restart the service. This will usually free up memory.
|
| Posted by MarkJohnson, 04-13-2010, 08:29 AM |
| This only tends to happen overnight. All other times the server seems to behave normally.
according to ps -aux there don't seem to be any malicious script running nor is there any certain process that is taking up too much CPU or RAM. It is running perfectly normal as always. Only once in a while something happens to it that brings it to a halt.
Is there anyway I can find out what suddenly caused swap to be utilised by 100% between 9am to 9:40 am?
/tmp seems to have all the normal files:
aquota.user*
eaccelerator/
.htaccess
.ICE-unix/
lost+found/
mt-throttle.db
mysql.sock@
lots of session files
spamd-20109-init/
ssh-cESyHl9190/
Any more clues?
|
| Posted by ServerSitters_Paul, 04-13-2010, 08:44 AM |
| I would setup a system snapshot that runs every minute or so and logs the current usage, processes, connections, etc... When this happens again you can view the logs to determine the exact cause.
|
| Posted by mabnux, 04-13-2010, 09:10 AM |
| how is the mysql service holding up
try mysqladmin proc
|
Add to Favourites 
Print this Article
Also Read
