Web Hosting Talk







View Full Version : Odd... Some weird thing is causing HUGE loads...


FortressHost.Com
09-22-2004, 12:06 PM
Hello all.

I'm having an odd problem...

This morning my servers load was 100.07 - I usually average about 0.0 to 0.15 load.

There is this weird thing that keeps on running in the servers process's, it opens a new process (pid) every 30 minutes or so, and it just keeps on going... It never stops... It just keeps on going, and going, and going. lol. I've killed it about 300 times with in a 24 to 48 hour span.

So I rebooted the server and the load averaged out to 0.10

But it just keeps on opening another process, etc... - And guess what... The server load starts to climb...

It's named/dir: /usr/lib/sa/sadc11/var/log/sa/sa22

I have now disabled it... I renamed the file/dir that is was using and it has seemed to finally stop...

I have no clue what it's for... I have searched google. I have gotten nothing...

Can anyone help me here? Shed some light? Anything?

Thank you!

maxhest
09-22-2004, 12:09 PM
Is it a cron job? Check into that. I wouldn't know why its in the log file folder. Maybe try deleting it?

crucialx
09-22-2004, 12:10 PM
I suggest running chkrootkit to check if you have a rootkit installed on your server. If so I suggest contacting a server admin company (such as Rack911) to fix the problem.

Also you may want to check your crontab to check if there is cronjob running which is trying to run that app.

meknow
09-22-2004, 12:21 PM
Agree. Best option is consult with professianl on that matter.

FortressHost.Com
09-22-2004, 01:02 PM
thank you for your input.

aodat2
09-22-2004, 01:29 PM
Originally posted by FortressHost.Com
thank you for your input.

I could tell you for a fact that it is a CRON job... All you have to do is basically KILL of the CRON jobs and not let any start.

I had the exact same problem this morning and I was checking it over and over and found the cause eventually.

If you need help. Please do not hesitate to msg me on Yahoo/MSN/AIM with the username : aodat2.

Take care. Hope you get it all done.

spulis
09-22-2004, 01:34 PM
Check out the cpanel forum for more info regarding this.

http://forums.cpanel.net/showthread.php?t=28935&highlight=sadc

FortressHost.Com
09-22-2004, 04:43 PM
Ok. Thanks Suplis! This makes me feel alot better that it wasn't just my server. lol.