Results 1 to 4 of 4
  1. #1
    Join Date
    Sep 2004
    Posts
    53

    * CURL problem, Curl is taking the server load to 40+ Help Please!

    Hi,

    I really hope you guys can give me a hand in this issue.
    I have had this box hacked 3 days ago, we installed a new OS and fresh CPanel/WHM installation.
    I recompiled Apache as well with CURL.
    The problem is that the server is going in enormous loads (never before went over 2, now it is reaching 40s

    The server is 3.2GH HT with 1GB RAM, Fedora i686

    Here is the output of top:

    ysql 30923 0.0 3.0 51396 29624 ? S 19:14 0:00 \
    mysql 6718 0.0 3.0 51396 29624 ? S 20:29 0:00 \
    top - 06:01:51 up 16:08, 1 user, load average: 16.77, 17.94, 17.22
    Tasks: 198 total, 17 running, 179 sleeping, 2 stopped, 0 zombie
    Cpu(s): 21.1% us, 74.8% sy, 0.0% ni, 0.0% id, 4.1% wa, 0.0% hi, 0.0% si
    Mem: 967480k total, 822292k used, 145188k free, 105808k buffers
    Swap: 2096440k total, 219260k used, 1877180k free, 184632k cached

    PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
    32398 nobody 25 0 5740 1556 1276 R 16.6 0.2 74:17.83 curl
    22915 nobody 25 0 5736 1648 1372 R 16.6 0.2 4:06.88 curl
    28412 nobody 25 0 5744 1652 1372 R 16.6 0.2 0:03.71 curl
    6328 nobody 25 0 5744 1584 1372 R 16.3 0.2 33:32.20 curl
    20591 nobody 25 0 5744 1656 1372 R 14.6 0.2 6:18.01 curl
    20500 nobody 25 0 5740 1532 1372 R 13.9 0.2 6:24.46 curl
    11519 nobody 25 0 5744 1652 1372 R 13.6 0.2 24:35.18 curl
    22173 nobody 25 0 5740 1652 1372 R 13.6 0.2 5:01.58 curl
    23987 nobody 25 0 5744 1656 1372 R 13.6 0.2 3:03.21 curl
    19538 nobody 25 0 5740 1652 1372 R 13.3 0.2 7:53.54 curl
    20889 nobody 25 0 5740 1652 1372 R 13.3 0.2 5:57.47 curl
    21356 nobody 25 0 5744 1656 1372 R 13.3 0.2 5:34.26 curl
    24390 nobody 25 0 5736 1648 1372 R 13.3 0.2 2:36.02 curl
    6079 nobody 16 0 31152 21m 5040 S 2.0 2.3 0:06.73 httpd
    1458 nobody 15 0 26868 17m 4988 S 0.7 1.9 0:14.94 httpd
    27902 root 16 0 1964 992 732 R 0.7 0.1 0:00.44 top
    28385 nobody 15 0 22032 12m 4520 S 0.3 1.3 0:00.03 httpd
    1 root 16 0 1472 424 404 S 0.0 0.0 0:00.95 init
    2 root RT 0 0 0 0 S 0.0 0.0 0:00.17 migration/0
    3 root 34 19 0 0 0 S 0.0 0.0 0:00.06 ksoftirqd/0
    4 root RT 0 0 0 0 S 0.0 0.0 0:00.11 migration/1
    5 root 34 19 0 0 0 S 0.0 0.0 0:00.15 ksoftirqd/1
    6 root 5 -10 0 0 0 S 0.0 0.0 0:00.00 events/0
    7 root 5 -10 0 0 0 S 0.0 0.0 0:00.00 events/1
    8 root 5 -10 0 0 0 S 0.0 0.0 0:00.02 khelper
    21 root 6 -10 0 0 0 S 0.0 0.0 0:00.00 kacpid
    85 root 5 -10 0 0 0 S 0.0 0.0 0:14.05 kblockd/0
    86 root 5 -10 0 0 0 S 0.0 0.0 0:01.64 kblockd/1
    99 root 15 0 0 0 0 S 0.0 0.0 0:00.00 khubd
    209 root 7 -10 0 0 0 S 0.0 0.0 0:00.00 aio/0
    208 root 16 0 0 0 0 S 0.0 0.0 1:09.76 kswapd0

    Look at the amount of CURL in there!


    What can I do to fix it? if any information is required please ask and I will post it.

    Regards and thanks to all who takes the time and effort to help.


    I DEEPLY APOLOGIES, I HAVE POSTED THIS IN THE WRONG PLACE. MODERATOR PLEASE KINDLY FEEL FREE TO DELETE THE POST AND I WILL POST IT IN THE CORRECT FORUM.

  2. #2
    Join Date
    Oct 2004
    Location
    India
    Posts
    491
    curl is a command line tool to transfer files using FTP, FTPS, HTTP, HTTPS etc. Enquire those process id so that you know who exactly is doing what.
    ESC :wq!

  3. #3
    Join Date
    Sep 2004
    Posts
    53
    Well I found out what is causing it but I still don't know how to fix it.
    It turned to be our own website is causing it, we are using modernbill that uses CURL.

    The problem is that everytime someone uses modernbill or place an order a CURL process will start and it will not stop!

    I have seen some of them for over 12 hours.

    I restart Apache and they will all die, but again any customer uses modernbill or place an order and here they come again.

    I have restarted Apache over 20 times today, tried recompiling it, forcing new CPanel etc.. I cannot figure out a fix.

    I have even upgraded modernbill, no luck at all

    Any help would be very appreciated, I'm sure there are a lot of experts and smart guys here that can give me a hand.

    Thank you

  4. #4
    Join Date
    Dec 2002
    Location
    The Shadows
    Posts
    2,913
    What version of modernbill?
    Dan Sheppard ~ Freelance whatever

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •