Jose Luis Martinez escribió:
Hi,
We detected high load on a server, and looks like two qpsmtpd-forkserver
processes were munging up the CPU, and looks like they had been there
for a long time :S
It happened again!
This time there were a lot more processes (10 or so)... all doing the same!
output from top
user001 20019 29.3 0.4 22572 17856 ? R Apr19 404:33
/usr/bin/qpsmtpd-forkserver [194.51.3.49 : bow.rain.fr : 19:10:19
2008-04-19]
user001 25779 28.2 0.4 22572 17856 ? R Apr19 384:56
/usr/bin/qpsmtpd-forkserver [194.51.3.49 : bow.rain.fr : 19:27:47
2008-04-19]
strace -p 20019
--- SIGPIPE (Broken pipe) @ 0 (0) ---
write(7, "\27\3\1\0000\275\254\315\275\33C\v=o\201\332;1(\331\201"...,
53) = -1 EPIPE (Broken pipe)
--- SIGPIPE (Broken pipe) @ 0 (0) ---
write(7, "\27\3\1\0000\275\254\315\275\33C\v=o\201\332;1(\331\201"...,
53) = -1 EPIPE (Broken pipe)
--- SIGPIPE (Broken pipe) @ 0 (0) ---
write(7, "\27\3\1\0000\275\254\315\275\33C\v=o\201\332;1(\331\201"...,
53) = -1 EPIPE (Broken pipe)
This time I got to take a look at the file descriptors!
ll /proc/20019/fd/
total 5
lrwx------ 1 root root 64 2008-04-20 17:48 0 -> socket:[121951650]
lrwx------ 1 root root 64 2008-04-20 17:48 1 -> socket:[121951650]
l-wx------ 1 root root 64 2008-04-20 17:48 2 -> pipe:[8128]
lr-x------ 1 root root 64 2008-04-20 17:48 3 -> /usr/bin/qpsmtpd-forkserver
lrwx------ 1 root root 64 2008-04-20 17:48 7 -> socket:[121951650]
FD 7 is the same socket as 0 and 1... I understand that these sockets
are the ones that are used to talk to the client. Could this have to do
with the TLS plugin.
Running qp 0.40 with forkserver on Debian Etch. Relevant plugins are tls
and qmail-queue. Any ideas on how to find the guilty plugin? Just seems
like it's ignoring SIGPIPEs wh en writing. And what could cause it?
Funny thing is that the two connections where from the same provider O_O.
Any ideas?
Jose Luis Martinez
[EMAIL PROTECTED]
