Web Hosting Talk







View Full Version : Raq4 - Help! CPU Overload (klogd) - Experts needed


troff
08-24-2004, 04:33 AM
My Raq was behaving very slow and sick past 2 weeks (web, database and admin slow or inaccessible - thank god SSH was still up)

Finally I went in and did a top and found that the command 'klogd' was taking up 97.4% of the CPU!

I've read this in other posts but all have no resolution or solutions...

The only solution I've read is to have a cron job to restart the Raq every night at 3.00am but I don't think this is the correct way to deal with this...

Anyone want to have a shot at this?

BrianHawley
08-24-2004, 06:58 AM
Do you have all the latest patches? I seem to remember there was a security vulnerability in klogd that had something to do with feeding it a badly formatted string.

troff
08-24-2004, 01:12 PM
Yup all patched to latest (but avoided that PHP killer patch).

I dun recall reading anything about a patch that specifically addressed the klogd issue but I assure you I'm patched ok...

BrianHawley
08-25-2004, 04:55 AM
Found it!

It was RaQ1-All-Security-3.0.1-8008.pkg

"This update fixes a format string vulnerability in klogd that can be used to gain root access locally and in certain exceptional cases remotely. "

Although I doubt it is related to your problem. Looks more like klogd is either corrupt or is choking on something.

Klogd sorts out the operating system level messages into priority levels and processes them - so it may be that something at operating system level is flooding it with junk.

Probably it generates a log you can look at, but we are getting out of my area of experience. Help anyone?

pcaidit
08-29-2004, 06:36 AM
It was *** RaQ1-All-Security-3.0.1-8008.pkg ****

IS a RAQ 1 Package - Dont install it

BrianHawley
08-29-2004, 06:45 AM
As I said, not related to the problem.