Hi all

i received this email from my server last night


IMPORTANT: Do not ignore this email.
This is cPanel stats runner on name.my-domain.com
While processing the log files for user pnsm, the cpu has been
maxed out for more then a 6 hour period. The current load/uptime line on the server at the time of
this email is
08:03:16 up 10 days, 7:26, 0 users, load average: 1.02, 0.88, 0.78
You should check the server to see why the load is so high and take
steps to lower the load. If you want stats to continue to run even with a high load; Edit
/var/cpanel/cpanel.config and change extracpus to a number larger then 0 (run
/usr/local/cpanel/startup afterwards to pickup the changes).


i know that the problem its with this user pnsm , i want to know if there is away to correct this or see what is make high server load.

Any help to a newbiee will be welcome.

thz in advanced
Mario Vital

1.02 Load is not a thing much that you should worry about. If the user has a very large domlog, its quite possible that load is rising, if you suspect of any other thing you can run top on the machine, when the load is high and see which process is eating up resources.

sometimes with this user i have 5 or more of load server.
and the top process is always from search in is forum...

what can i do or wich way is the correct way ... talk to client , chance some configuration ...

Thz in advanced
Mario Vital

How could you understand that the top process is Search in the forum, when you run top, i do not guess any process named Search will show up :)

Type top in root or enter Show Current Cpu usage in WHM and see the output.

CPanel CPUwatch is a bit buggy. It almost always gives a false positive.

However if you have issues with a certain user, you should check what scripts it is that is causing the load. Then you would be able to audit the scripts if you desire to see if it is abusing the resources (or simply asking the user to clean up his act or face the boot)

as u can see i do Show Current Cpu in WHM and this are the top processes for today :

pnsm portugalnoseumelhor.com 3.63 1.13 0.3
Top Process %CPU 25.0 httpd [www.portugalnoseumelhor.com] [/forum/viewtopic.php?t1281]
Top Process %CPU 24.0 httpd [www.portugalnoseumelhor.com] [/index.php?showpic1607]
Top Process %CPU 20.0 httpd [www.portugalnoseumelhor.com] [/?showpic2542]



any sugestion ?

And tonight received this automatic email from WHM Statscheck



This is cPanel stats runner on vital.do-host.com!
While processing the log files for user pnsm, the cpu has been
maxed out for more then a 6 hour period. The current load/uptime line on the server at the time of
this email is
08:07:46 up 11 days, 7:30, 0 users, load average: 13.02, 12.62, 13.03




any help will be apreciated

Thz all

The WHM's process list is not too much trustable, however if it is httpd, there can be many reasons that can increase balance. If it is a script you should look what is going bad on error logs. Or maybe Apache has been configured bad.

Do a "top" on shell, if it is httpd, post the config part of your httpd.conf and do a tail command on the error log when the balance is at peak. Or in WHM see Apache status to check if everything is fine or there are some anonymous connections flooding like. These are coming to my mind firstly.

i do a top from ssh and is the results :


20897 root 20 0 1560 1560 1236 S 99.9 0.3 0:00 0 exim
440 mysql 15 0 23068 9916 1392 S 9.9 2.0 6:58 0 mysqld
15873 root 19 0 4248 320 232 S 5.1 0.0 9:31 0 httpd
21810 root 15 0 1232 1232 868 R 0.3 0.2 0:00 0 top
32171 root 15 0 460 416 324 S 0.1 0.0 0:02 0 pure-ftpd
1 root 15 0 112 80 56 S 0.0 0.0 0:07 0 init
2 root 15 0 0 0 0 SW 0.0 0.0 0:01 0 keventd
3 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kapmd
4 root 34 19 0 0 0 SWN 0.0 0.0 0:02 0 ksoftirqd_CPU0
9 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 bdflush
5 root 15 0 0 0 0 SW 0.0 0.0 0:23 0 kswapd
6 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kscand/DMA
7 root 15 0 0 0 0 SW 0.0 0.0 16:14 0 kscand/Normal
8 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kscand/HighMem
10 root 15 0 0 0 0 SW 0.0 0.0 0:01 0 kupdated
11 root 24 0 0 0 0 SW 0.0 0.0 0:00 0 mdrecoveryd
15 root 15 0 0 0 0 SW 0.0 0.0 2:29 0 kjournald
73 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
2797 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
2798 root 15 0 0 0 0 SW 0.0 0.0 0:04 0 kjournald
3169 root 15 0 232 200 152 S 0.0 0.0 0:32 0 syslogd
3173 root 15 0 60 4 0 S 0.0 0.0 0:00 0 klogd

20897 root 20 0 1560 1560 1236 S 99.9 0.3 0:00 0 exim
440 mysql 15 0 23068 9916 1392 S 9.9 2.0 6:58 0 mysqld
15873 root 19 0 4248 320 232 S 5.1 0.0 9:31 0 httpd
21810 root 15 0 1232 1232 868 R 0.3 0.2 0:00 0 top
32171 root 15 0 460 416 324 S 0.1 0.0 0:02 0 pure-ftpd
1 root 15 0 112 80 56 S 0.0 0.0 0:07 0 init
2 root 15 0 0 0 0 SW 0.0 0.0 0:01 0 keventd
3 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kapmd
4 root 34 19 0 0 0 SWN 0.0 0.0 0:02 0 ksoftirqd_CPU0
9 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 bdflush
5 root 15 0 0 0 0 SW 0.0 0.0 0:23 0 kswapd
6 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kscand/DMA
7 root 15 0 0 0 0 SW 0.0 0.0 16:14 0 kscand/Normal
8 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kscand/HighMem
10 root 15 0 0 0 0 SW 0.0 0.0 0:01 0 kupdated
11 root 24 0 0 0 0 SW 0.0 0.0 0:00 0 mdrecoveryd
15 root 15 0 0 0 0 SW 0.0 0.0 2:29 0 kjournald
73 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
2797 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
2798 root 15 0 0 0 0 SW 0.0 0.0 0:04 0 kjournald
3169 root 15 0 232 200 152 S 0.0 0.0 0:32 0 syslogd
3173 root 15 0 60 4 0 S 0.0 0.0 0:00 0 klogd




my apache from WHM tell me this :


Server Version: Apache/1.3.31 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.8 FrontPage/5.0.2.2634a mod_ssl/2.8.18 OpenSSL/0.9.7a
Server Built: Jul 15 2004 21:33:15

--------------------------------------------------------------------------------
Current Time: Thursday, 30-Sep-2004 11:15:50 WEST
Restart Time: Sunday, 26-Sep-2004 16:15:20 WEST
Parent Server Generation: 21
Server uptime: 3 days 19 hours 30 seconds
Total accesses: 305254 - Total Traffic: 2.2 GB
CPU Usage: u14.34 s2.28 cu.04 cs.02 - .00509% CPU load
.932 requests/sec - 7.0 kB/second - 7.5 kB/request
9 requests currently being processed, 3 idle servers
L.LKWWW..WW___.......K..........................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"L" Logging, "G" Gracefully finishing, "." Open slot with no current process


Srv PID Acc M CPU SS Req Conn Child Slot Host VHost Request
0-21 23406 0/0/18485 L 0.00 1 0 0.0 0.00 127.95 81.193.66.77 www.portugalnoseumelhor.com GET /pic.php?d=t&name=auportao.jpg HTTP/1.1
1-21 - 0/0/17430 . 0.92 1 0 0.0 0.00 118.16 212.113.164.98 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
2-21 23408 0/0/17853 L 0.60 1 0 0.0 0.00 124.34 81.193.66.77 www.portugalnoseumelhor.com GET /ads/adjs.php?n=911266947&what=zone:3&exclude=, HTTP/1.1
3-21 23322 7/7/16971 K 0.01 4 1149 171.5 0.17 124.20 82.155.27.144 www.mitoferreira.com GET /Imagens/especiais_1.jpg HTTP/1.1
4-21 23409 0/0/15708 W 0.02 1 0 0.0 0.00 111.59 193.137.220.77 www.portugalnoseumelhor.com GET /forum/ HTTP/1.0
5-21 19499 0/0/14708 W 0.16 752 0 0.0 0.00 97.83 195.57.165.180 www.portugalnoseumelhor.com GET /forum/viewtopic.php?t=517 HTTP/1.1
6-21 23410 0/0/14100 W 0.00 1 0 0.0 0.00 96.48 127.0.0.1 vital.do-host.com GET /whm-server-status/ HTTP/1.0
7-21 - 0/0/13304 . 0.15 2 0 0.0 0.00 91.06 81.193.66.77 www.portugalnoseumelhor.com GET /pic.php?d=t&name=cali09.jpg HTTP/1.1
8-21 - 0/0/12445 . 0.04 2 0 0.0 0.00 87.66 212.113.164.98 www.portugalnoseumelhor.com GET /ads/adjs.php?n=479595215&what=zone:3&exclude=, HTTP/1.1
9-21 23403 0/0/11595 W 0.26 2 0 0.0 0.00 83.45 81.193.165.227 www.lmilani.com GET /mambo/index.php?option=com_events&task=view_detail&agid=1&
10-21 23124 0/0/11250 W 0.00 47 0 0.0 0.00 80.52 192.91.147.35 www.portugalnoseumelhor.com GET /ads/adview.php?what=zone:1&n=a78112d8 HTTP/1.0
11-21 23411 0/0/10796 _ 0.00 1 0 0.0 0.00 76.75 212.113.164.98 (unavailable) GET /ads/adjs.php?n=940469696&what=zone:3&exclude=, HTTP/1.1
12-21 23412 0/0/9683 _ 0.31 1 0 0.0 0.00 72.11 193.126.92.12 (unavailable) GET /img/7.gif HTTP/1.0
13-21 23413 0/0/9310 _ 0.14 1 0 0.0 0.00 71.14 217.129.15.163 (unavailable) GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
14-21 - 0/0/8558 . 0.19 11 0 0.0 0.00 69.36 213.13.17.11 www.portugalnoseumelhor.com GET /slider.swf?totalitems=1696&activeitem=139 HTTP/1.1
15-21 - 0/0/7456 . 0.00 9 0 0.0 0.00 57.63 213.13.17.11 www.portugalnoseumelhor.com GET /pic.php?d=t&name=gnr_com_kit_de_potncia_no_jipe___e_no_san
16-21 - 0/0/7181 . 0.20 9 0 0.0 0.00 54.31 213.13.17.11 www.portugalnoseumelhor.com GET /ads/adjs.php?n=801208626&what=zone:3&exclude=, HTTP/1.1
17-21 - 0/0/6994 . 0.22 10 0 0.0 0.00 55.88 213.13.17.11 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
18-21 - 0/0/6163 . 0.25 10 0 0.0 0.00 50.31 193.126.92.12 www.portugalnoseumelhor.com GET /ads/adjs.php?n=596144521&what=zone:3&exclude=, HTTP/1.0
19-21 - 0/0/5962 . 0.00 10 0 0.0 0.00 48.75 81.193.66.77 www.portugalnoseumelhor.com GET /index.php?id=1092&vote=10 HTTP/1.1
20-21 - 0/0/5694 . 0.01 4 0 0.0 0.00 50.95 81.193.66.77 www.portugalnoseumelhor.com GET /index.php?showpic=1066 HTTP/1.1
21-21 23290 12/12/5991 K 0.03 5 1 225.9 0.22 45.07 82.155.27.144 www.mitoferreira.com GET /Imagens/especiais_2.jpg HTTP/1.1
22-21 - 0/0/4940 . 0.28 5 0 0.0 0.00 42.89 212.113.164.98 www.portugalnoseumelhor.com GET /slider.swf?totalitems=1696&activeitem=1692 HTTP/1.1
23-21 - 0/0/4613 . 0.19 10 0 0.0 0.00 38.51 193.126.92.12 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
24-21 - 0/0/4407 . 0.27 7 0 0.0 0.00 35.88 212.113.164.98 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=8&clientid=12&zoneid=1&source=&bloc
25-21 - 0/0/4075 . 0.21 10 0 0.0 0.00 36.86 193.126.92.12 www.portugalnoseumelhor.com GET /img/spacer.gif HTTP/1.0
26-21 - 0/0/3712 . 0.15 4 0 0.0 0.00 34.17 212.113.164.98 www.portugalnoseumelhor.com GET /?showpic=3072 HTTP/1.1
27-21 - 0/0/3279 . 0.27 29 0 0.0 0.00 30.08 82.154.66.43 (unavailable) GET /img/2.gif HTTP/1.1
28-21 - 0/0/3146 . 0.23 106 0 0.0 0.00 27.65 82.154.66.43 www.portugalnoseumelhor.com GET /img/3.gif HTTP/1.1
29-21 - 0/0/2496 . 0.24 106 0 0.0 0.00 23.02 82.154.66.43 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
30-21 - 0/0/2440 . 0.24 106 0 0.0 0.00 20.20 82.154.66.43 www.portugalnoseumelhor.com GET /img/5.gif HTTP/1.1
31-21 - 0/0/1923 . 0.01 106 0 0.0 0.00 20.87 82.154.66.43 www.portugalnoseumelhor.com GET /img/6.gif HTTP/1.1
32-21 - 0/0/2016 . 0.01 106 0 0.0 0.00 18.84 82.154.66.43 www.portugalnoseumelhor.com GET /img/7.gif HTTP/1.1
33-21 - 0/0/2101 . 0.20 106 0 0.0 0.00 17.98 82.154.66.43 www.portugalnoseumelhor.com GET /img/9.gif HTTP/1.1
34-21 - 0/0/1470 . 0.00 106 0 0.0 0.00 10.51 82.154.66.43 www.portugalnoseumelhor.com GET /img/10.gif HTTP/1.1
35-21 - 0/0/1731 . 0.15 106 0 0.0 0.00 9.56 82.154.66.43 www.portugalnoseumelhor.com GET /ads/adjs.php?n=897233548&what=zone:3&exclude=, HTTP/1.1
36-21 - 0/0/1616 . 0.69 102 0 0.0 0.00 11.13 62.48.250.87 www.portugalnoseumelhor.com GET /index.php?showpic=230 HTTP/1.0
37-21 - 0/0/1433 . 0.23 106 0 0.0 0.00 8.77 82.154.66.43 www.portugalnoseumelhor.com GET /img/spacer.gif HTTP/1.1
38-21 - 0/0/1356 . 0.24 102 0 0.0 0.00 8.57 194.65.46.9 www.portugalnoseumelhor.com GET /ads/adjs.php?n=973106741&what=zone:1&blockcampaign=1&exclu
39-21 - 0/0/978 . 0.25 101 0 0.0 0.00 4.63 62.48.250.87 www.portugalnoseumelhor.com GET /templates/styles.css HTTP/1.0
40-21 - 0/0/1377 . 0.03 106 0 0.0 0.00 6.90 62.48.250.87 www.portugalnoseumelhor.com GET /img/logo1.gif HTTP/1.0
41-21 - 0/0/1201 . 0.01 106 0 0.0 0.00 6.57 62.48.250.87 www.portugalnoseumelhor.com GET /ads/adjs.php?n=267985138&what=zone:1&exclude=, HTTP/1.0
42-21 - 0/0/1067 . 0.00 106 0 0.0 0.00 6.06 62.48.250.87 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=13&clientid=20&zoneid=1&source=&blo
43-21 - 0/0/766 . 0.11 106 0 0.0 0.00 4.56 62.48.250.87 www.portugalnoseumelhor.com GET /img/logo2.gif HTTP/1.0
44-21 - 0/0/667 . 0.01 106 0 0.0 0.00 3.81 213.13.205.140 (unavailable) GET /ads/adlog.php?bannerid=8&clientid=12&zoneid=1&source=&bloc
45-21 - 0/0/759 . 0.01 106 0 0.0 0.00 3.52 80.91.81.249 (unavailable) GET /?showpic=995 HTTP/1.1
46-21 - 0/0/663 . 0.00 460 0 0.0 0.00 3.22 194.82.122.79 (unavailable) GET /forum/templates/pnsm/images/icon_minipost.gif HTTP/1.0
47-21 - 0/0/649 . 0.01 460 0 0.0 0.00 2.65 213.13.17.11 (unavailable) GET /pic.php?d=t&name=tabua.jpg HTTP/1.1
48-21 - 0/0/426 . 0.01 745 0 0.0 0.00 2.04 194.117.20.2 (unavailable) GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
49-21 - 0/0/259 . 0.01 1173 0 0.0 0.00 1.43 81.193.66.77 (unavailable) GET /ads/adjs.php?n=727553831&what=zone:1&exclude=, HTTP/1.1
50-21 - 0/0/319 . 0.00 1812 0 0.0 0.00 1.28 195.23.58.120 (unavailable) GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
51-21 - 0/0/195 . 0.01 1869 0 0.0 0.00 1.35 213.13.228.139 (unavailable) GET /templates/styles.css HTTP/1.1
52-21 - 0/0/172 . 0.02 2181 0 0.0 0.00 1.13 62.48.201.97 www.portugalnoseumelhor.com GET /forum/viewtopic.php?t=1743&view=next HTTP/1.1
53-21 - 0/0/213 . 0.03 2186 0 0.0 0.00 1.13 213.13.228.139 www.portugalnoseumelhor.com GET /ads/adjs.php?n=264769845&what=zone:1&exclude=, HTTP/1.1
54-21 - 0/0/214 . 0.01 2186 0 0.0 0.00 1.51 195.23.58.120 (unavailable) GET /img/4.gif HTTP/1.1
55-21 - 0/0/147 . 0.01 2529 0 0.0 0.00 0.95 213.58.162.34 (unavailable) GET /pic.php?d=t&name=dsc07840.jpg HTTP/1.0
56-21 - 0/0/147 . 0.00 2529 0 0.0 0.00 0.85 213.13.97.78 (unavailable) GET /ads/adlog.php?bannerid=14&clientid=20&zoneid=3&source=&blo
57-21 - 0/0/143 . 0.00 3365 0 0.0 0.00 0.71 213.58.162.34 www.portugalnoseumelhor.com GET /ads/adlog.php?bannerid=13&clientid=20&zoneid=1&source=&blo
58-21 - 0/0/40 . 0.00 3365 0 0.0 0.00 0.12 82.120.160.182 www.portugalnoseumelhor.com GET /forum/images/smiles/icon_biggrin.gif HTTP/1.1
59-21 - 0/0/37 . 0.00 3365 0 0.0 0.00 0.32 82.120.160.182 www.portugalnoseumelhor.com GET /forum/images/smiles/icon_cool.gif HTTP/1.1
60-21 - 0/0/78 . 0.02 3362 0 0.0 0.00 0.27 213.58.162.34 www.portugalnoseumelhor.com GET /pic.php?d=t&name=dsc02218.jpg HTTP/1.0
61-21 - 0/0/49 . 0.00 3362 1 0.0 0.00 0.08 212.113.164.98 www.clan5q.com GET /modules/team/index.php?PHPSESSID=04dc999cecbc267b34cbad0ac
62-21 - 0/0/16 . 0.00 3362 1 0.0 0.00 0.00 212.113.164.98 www.clan5q.com GET /modules/team/index.php?teamid=1&start=30&PHPSESSID=12e6196
63-21 - 0/0/24 . 0.01 3362 1 0.0 0.00 1.16 212.113.164.98 www.clan5q.com GET /modules/team/index.php?teamid=1&start=30&PHPSESSID=e6f2bc7
64-21 - 0/0/10 . 0.66 3365 0 0.0 0.00 0.06 81.193.92.246 (unavailable) GET /ads/adjs.php?n=174960879&what=zone:1&exclude=, HTTP/1.1
65-21 - 0/0/17 . 0.73 3365 0 0.0 0.00 0.19 81.193.92.246 (unavailable) GET /ads/adlog.php?bannerid=7&clientid=10&zoneid=1&source=&bloc
66-21 - 0/0/6 . 0.35 4220 0 0.0 0.00 0.06 81.193.92.246 www.portugalnoseumelhor.com GET /slider.swf?totalitems=1696&activeitem=1693 HTTP/1.1
67-21 - 0/0/37 . 0.00 4220 1 0.0 0.00 0.37 212.113.164.98 www.clan5q.com GET /modules/mydownloads/visit.php?cid=1&lid=3&PHPSESSID=fcc19b
68-21 - 0/0/6 . 0.42 4220 0 0.0 0.00 0.04 81.193.68.191 (unavailable) GET /ads/adjs.php?n=845745831&what=zone:1&exclude=, HTTP/1.1
69-21 - 0/0/16 . 0.37 4220 0 0.0 0.00 0.04 213.13.30.67 (unavailable) GET /slider.swf?totalitems=1696&activeitem=1679 HTTP/1.1
70-21 - 0/0/20 . 0.14 4220 0 0.0 0.00 0.12 81.193.68.191 (unavailable) GET /ads/adlog.php?bannerid=6&clientid=9&zoneid=1&source=&block
71-21 - 0/0/6 . 0.16 4220 0 0.0 0.00 0.00 212.113.164.98 (unavailable) GET /modules/mydownloads/visit.php?cid=1&lid=8&PHPSESSID=329085
72-21 - 0/0/13 . 0.00 4220 0 0.0 0.00 0.08 81.193.68.191 (unavailable) GET /pic.php?d=t&name=dsc01097p.jpg HTTP/1.1
73-21 - 0/0/27 . 0.02 4220 0 0.0 0.00 0.000 217.129.106.112 (unavailable) GET /portal/modules/XForum/images/smilies/cake.gif HTTP/1.1
74-21 - 0/0/18 . 2.66 4659 0 0.0 0.00 0.14 212.113.164.98 (unavailable) GET /modules/articles/index.php?PHPSESSID=633ec6fe8029eabbc4cfd
75-21 - 0/0/7 . 1.16 4659 0 0.0 0.00 0.07 212.113.164.98 (unavailable) GET /modules/mydownloads/whocares?PHPSESSID=fad852bd20caada60ee
76-21 - 0/0/1 . 0.05 4716 0 0.0 0.00 0.000 212.113.164.98 (unavailable) GET /modules/myguestbook/sign.php?PHPSESSID=fad852bd20caada60ee
77-21 - 0/0/4 . 0.40 4716 0 0.0 0.00 0.04 212.113.164.98 (unavailable) GET /modules/articles/comment_reply.php?com_itemid=4&com_order=
78-21 - 0/0/1 . 0.01 4716 0 0.0 0.00 0.000 81.193.248.115 (unavailable) GET /?showpic=412 HTTP/1.1
79-21 - 0/0/16 . 0.00 4716 0 0.0 0.00 0.05 81.193.248.115 (unavailable) GET /?showpic=412 HTTP/1.1
80-21 - 0/0/4 . 0.15 5200 8173 0.0 0.00 0.000 212.113.164.98 www.clan5q.com GET /modules/mydownloads/visit.php?cid=1&lid=8&PHPSESSID=fa8b17
81-21 - 0/0/2 . 0.00 5227 0 0.0 0.00 0.00 213.13.201.97 (unavailable) GET /forum/viewtopic.php?p=7317 HTTP/1.1
82-21 - 0/0/40 . 1.27 5160 2716 0.0 0.00 0.29 212.113.164.98 www.clan5q.com GET /modules/news/index.php?storytopic=0&start=50&PHPSESSID=fa8
83-21 - 0/0/1 . 0.00 5206 0 0.0 0.00 0.00 81.193.18.117 www.portugalnoseumelhor.com GET /ads/adjs.php?n=826348809&what=zone:1&exclude=, HTTP/1.1
84-21 - 0/0/1 . 0.00 5227 0 0.0 0.00 0.00 212.55.154.158 (unavailable) GET /ads/adjs.php?n=685094371&what=zone:5&exclude=, HTTP/1.0
86-21 - 0/0/1 . 0.16 5227 0 0.0 0.00 0.01 207.46.98.127 (unavailable) GET /index.php?showpic=1286 HTTP/1.0
89-21 - 0/0/2 . 0.15 5227 0 0.0 0.00 0.01 207.46.98.127 (unavailable) GET /?showpic=1462 HTTP/1.0
91-21 - 0/0/1 . 0.14 5227 0 0.0 0.00 0.01 207.46.98.127 (unavailable) GET /?showpic=1462 HTTP/1.0




im new at all of this ...

The problem is with Exim. It may be stuck in a loop or trying to send something from a script not regularly written. You may do
# /usr/sbin/exiwhat

and see what is been going on or

# tail -f /var/log/exim_mainlog

for any activity that seems weird than usual.

Try to restart Exim also and see if that will do any better on the load.

# /scripts/restartsrv_exim

thz i will try and give u the results

errrr what is that all about?

the problem persists and with all about the processing the logs ...
have some clients with logs larger than 5/6gb its normal ???
There is any way to remove / change the logs , for how long the server stores the logs for each client ,

Some doubts i would like to take off...

What is your server configuration?

Well, from the output screen of your top process command, there was no log process, but the exim was using %99.9 CPU. There is surely something not on its way there.

You may also have a problem with log processing but that is a partial problem on your daily processing times of your cpanel's analog/webalizer.

Regarding your question: Logs are generally already in a rotation to be zipped and backed up. See the file "/etc/logrotate.conf" to change your timeframe period of the rotation and for a specific service log configuration see the directory "/etc/logrotate.d"

It's better also you check the Exim problem if it is still continuing after a service restart. I am not too much expert on it, but %99.9 seems not fine.

Thats my server information rishidude


Processor #1 Vendor: GenuineIntel
Processor #1 Name: Intel(R) Celeron(R) CPU 1.70GHz
Processor #1 speed: 1699.967 MHz
Processor #1 cache size: 128 KB


Memory InformationMemory: 479020k/491456k available (1359k kernel code, 9876k reserved, 1004k data, 132k init, 0k highmem)

System InformationLinux server.my-domain.com 2.4.20-28.9 #1 Thu Dec 18 13:45:22 EST 2003 i686 i686 i386 GNU/Linux



i will take a look at the logs config fcarsenal

Thz for all guys ,