Steve Basford schrieb:
> Hi All,
> 
> My webhost disabled sanesecurity.com due to high cpu usage, they could
> only give me the following infomation.... which doesn't mean a lot to me,
> but does this sound high?
> 
> Swap:  4096564k total,   408264k used,  3688300k free,   801468k cached
> 
>  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
> 713 xxxxxxxx  16   0     0    0    0 Z  0.8  0.0   0:00.10 [php] <defunct>
> 692 xxxxxxxx  18   0 18416 7376 4660 D  0.7  0.4   0:00.10 /usr/php4/bin/php
> 844 xxxxxxxx  16   0 51184  12m 9736 R  0.7  0.6   0:00.06 /usr/php4/bin/php
> 599 xxxxxxxx  18   0 18416 7364 4664 D  0.6  0.4   0:00.10 /usr/php4/bin/php
> 614 xxxxxxxx  18   0 18416 7308 4632 D  0.6  0.4   0:00.09 /usr/php4/bin/php
> 666 xxxxxxxx  16   0 51184  28m  25m R  0.6  1.4   0:00.09 /usr/php4/bin/php
> 671 xxxxxxxx  16   0 51184  35m  33m R  0.6  1.8   0:00.09 /usr/php4/bin/php
> 673 xxxxxxxx  16   0 51184  36m  33m R  0.6  1.8   0:00.09 /usr/php4/bin/php
> 675 xxxxxxxx  16   0 51184  29m  27m R  0.6  1.5   0:00.08 /usr/php4/bin/php
> 759 xxxxxxxx  18   0 18416 7376 4660 D  0.6  0.4   0:00.09 /usr/php4/bin/php
> 846 xxxxxxxx  16   0 51184  10m 8532 R  0.6  0.5   0:00.05 /usr/php4/bin/php
> 847 xxxxxxxx  16   0 51184  13m  11m R  0.6  0.7   0:00.05
> /usr/php4/bin/php                                                         
>      627 wdmxfam   18   0 49412 4528 3384 D  0.5  0.2   0:00.04
> /usr/php4/bin/php
> 636 xxxxxxxx  18   0 49412 4472 3352 D  0.5  0.2   0:00.04 /usr/php4/bin/php
> 637 xxxxxxxx  18   0 18416 7308 4632 D  0.5  0.4   0:00.09 /usr/php4/bin/php
> 640 xxxxxxxx  18   0 18416 7376 4660 D  0.5  0.4   0:00.09 /usr/php4/bin/php
> 644 xxxxxxxx  18   0 49412 4472 3352 D  0.5  0.2   0:00.04 /usr/php4/bin/php
> 646 xxxxxxxx  18   0 49412 4528 3380 D  0.5  0.2   0:00.04 /usr/php4/bin/php
> 
> As as result, I've had to disable the download URL Rotator script, as I'm
> guessing that's the script that's causing the problem
> (http://www.ljscripts.com/freescripts/)  Can anyone recommend a free URL
> Rotator script other that the above one.
> 
> I'm basically thinking that the problem is because I'm using a shared web
> host package... and should be using a dedicated server host, due to the
> number of users running the url script??
> 
> Sorry this is rushed... currently doing my normal day job :)
> 
> Cheers in advance for any help,
> 
> Steve
> Sanesecurity
> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml

Hi Steve
using loadbalancers, mirrors
dediacated root servers etc should solve your Problem
these top messages dont give info enough to analyse whats happening
web server logs would be better
but i think , you have wild running http clients which
procced in starting lots of new process requests, after all you shouldnt
use php4 anymore, its not longer security supported
and maybe the script you use has known bugs so these are trying hacks
or your site is targetted cause sanesecurity.com
gives spammers a hard time
perhaps cheap dns loadbalancing will solve your problem
( if you allready have mirrors ) as a workaround
you may also use some loadbalancing software like balance
on a root host to spread to mirrors
what are doing with the script exactly?
is it only for your website, and not for your clam db ?
I download your antivir db via rsync script three times a day
that works nice
-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to