I use CSF on a VPS with 512 RAM and 1024 Busrt and the other day I received the below notification. My hostsaid it was Mailman and since I don't use mailing lists the recommendationwas to disable it. So I did. I'm curious tho as to why this happened in the first place.


Time: Wed Mar 19 17:53:33 2008
1 Min Load Avg: 11.41
5 Min Load Avg: 6.37
15 Min Load Avg: 2.70
Running/Total Processes: 12/94

Output from ps:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.1 1624 592 ? Ss 2007 0:01 init [3]
root 25613 0.0 0.1 1532 536 ? Ss 2007 0:15 syslogd -m 0
root 25664 0.0 0.0 1456 384 ? S 2007 0:00 /usr/sbin/courierlogger -pid=/var/spool/authdaemon/pid -facility=mail -start /usr/libexec/courier-authlib/authdaemond
root 25666 0.0 0.1 1804 608 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 25667 0.0 0.0 1804 372 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 3144 0.0 0.6 4972 3348 ? S Jan17 0:32 | \_ /etc/authlib/authProg
root 25668 0.0 0.0 1804 372 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 19857 0.0 0.7 6444 3800 ? S Mar02 0:06 | \_ /etc/authlib/authProg
root 25669 0.0 0.0 1804 372 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 29870 0.0 0.9 6668 5032 ? S Jan14 0:40 | \_ /etc/authlib/authProg
root 25670 0.0 0.0 1804 372 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 11536 0.0 0.6 4972 3348 ? S Jan17 0:30 | \_ /etc/authlib/authProg
root 25671 0.0 0.0 1804 372 ? S 2007 0:00 \_ /usr/libexec/courier-authlib/authdaemond
root 3636 0.0 0.6 4972 3344 ? S Jan17 0:32 \_ /etc/authlib/authProg
root 25700 0.0 0.1 2080 792 ? Ss 2007 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 25838 0.0 0.0 1460 388 ? S 2007 0:00 /usr/sbin/courierlogger -pid=/var/run/imapd.pid -start -name=imapd /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 143 /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
root 25839 0.0 0.0 1568 508 ? S 2007 0:00 \_ /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 143 /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
root 25847 0.0 0.0 1460 296 ? S 2007 0:00 /usr/sbin/courierlogger -pid=/var/run/imapd-ssl.pid -start -name=imapd-ssl /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 993 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
root 25848 0.0 0.0 1568 484 ? S 2007 0:00 \_ /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 993 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
root 25856 0.0 0.0 1460 388 ? S 2007 0:04 /usr/sbin/courierlogger -pid=/var/run/pop3d.pid -start -name=pop3d /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 110 /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
root 25857 0.0 0.0 1568 508 ? S 2007 0:03 \_ /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 110 /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
root 25863 0.0 0.0 1460 296 ? S 2007 0:00 /usr/sbin/courierlogger -pid=/var/run/pop3d-ssl.pid -start -name=pop3d-ssl /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 995 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
root 25864 0.0 0.0 1568 484 ? S 2007 0:00 \_ /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 995 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
root 26072 0.0 0.8 6088 4512 ? Ss 2007 0:56 /usr/sbin/munin-node
root 20120 0.0 0.7 6088 4096 ? S 17:50 0:00 \_ /usr/sbin/munin-node
root 26617 0.0 0.0 1488 392 ? Ss 2007 0:00 /usr/sbin/portsentry -tcp
root 7922 0.0 0.1 4020 1032 ? Ss 2007 0:00 /usr/sbin/sshd
root 20393 0.0 0.1 2484 916 ? Ss 2007 0:06 crond
root 17648 0.0 0.2 3040 1164 ? S 17:50 0:00 \_ crond
munin 17657 0.0 0.1 2104 944 ? Ss 17:50 0:00 \_ /bin/sh /usr/bin/munin-cron
munin 20018 0.0 0.8 6232 4716 ? S 17:50 0:00 \_ /usr/bin/perl -w /usr/share/munin/munin-update
munin 20091 0.0 0.8 6408 4572 ? S 17:50 0:00 \_ /usr/share/munin/munin-update [secure.domainsrnames.com]
root 9240 0.0 0.2 2152 1108 ? S 2007 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/secure.x***********.pid
mysql 9262 0.0 3.5 120184 18788 ? Sl 2007 1:54 \_ /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/secure.x***********.pid --skip-external-locking
named 22013 0.0 0.8 48520 4656 ? Ssl Jan28 1:05 /usr/sbin/named -u named
root 25661 0.0 2.4 38452 13092 ? Ss Jan28 0:04 /usr/local/apache/bin/httpd -k start -DSSL
root 3896 0.0 0.9 7464 5032 ? S Mar10 0:00 \_ /usr/local/cpanel/bin/leechprotect
root 3909 0.0 1.5 19516 8248 ? S Mar10 0:00 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 11877 0.0 3.2 41240 17064 ? S Mar13 2:04 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 23688 0.0 3.5 40740 18844 ? S Mar13 0:01 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 13420 0.0 4.2 45384 22316 ? R Mar14 1:18 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 23842 0.0 3.3 42752 17328 ? R Mar14 2:23 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 23856 0.0 4.3 44180 23016 ? R Mar14 2:35 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 23857 0.0 4.1 43872 21912 ? S Mar14 3:26 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 12070 0.0 4.1 43584 21560 ? R Mar14 0:58 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 3969 0.0 3.4 42608 17848 ? R Mar17 0:15 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 5258 0.0 3.5 43452 18540 ? R Mar17 0:11 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 29765 0.0 2.9 40264 15544 ? S Mar17 0:00 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 15786 0.0 2.0 38584 10788 ? S 17:48 0:00 \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody 16203 0.0 2.0 38584 10788 ? S 17:49 0:00 \_ /usr/local/apache/bin/httpd -k start -DSSL
root 15663 0.0 0.2 3844 1344 ? Ss Feb19 0:00 pure-ftpd (SERVER)
root 15666 0.0 0.1 3580 928 ? S Feb19 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth
root 29804 0.0 1.1 7748 5840 ? S Mar06 1:14 lfd - sleeping
root 21726 0.0 1.0 7748 5448 ? S 17:51 0:00 \_ lfd - (child) checking load...
root 22408 0.0 0.1 2308 796 ? R 17:52 0:00 \_ /bin/ps axuf
root 9360 0.0 0.8 5888 4224 ? S Mar10 0:00 cpbandwd
root 9572 0.0 1.3 9868 7128 ? RN Mar10 0:12 cpanellogd - seperating xferlog - locking /usr/local/apache/domlogs/ftpxferlog.offsetftpsep
mailnull 9637 0.0 0.8 7340 4708 ? S Mar10 0:00 eximstats
mailman 11264 0.0 0.9 10288 5004 ? Ss Mar10 0:00 /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start
mailman 11424 0.0 1.2 10080 6656 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman 11429 0.0 1.2 10080 6664 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
mailman 11435 0.0 1.2 10052 6664 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman 11521 0.0 1.2 10116 6656 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
mailman 11527 0.0 1.2 10060 6680 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman 11533 0.0 1.2 10080 6724 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
mailman 11546 0.0 1.2 10080 6652 ? S Mar10 0:01 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman 11553 0.0 1.2 10080 6652 ? S Mar10 0:00 \_ /usr/local/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root 13442 0.0 1.2 9620 6436 ? Ss Mar10 0:00 cPhulkd - processor
root 13552 0.0 1.4 13664 7420 ? S Mar10 0:00 cpdavd - accepting connections on 2077 and 2078
mailnull 28252 0.0 0.2 7416 1188 ? Ss Mar17 0:00 /usr/sbin/exim -bd -q60m
mailnull 28256 0.0 0.2 7416 1140 ? Ss Mar17 0:00 /usr/sbin/exim -tls-on-connect -bd -oX 465
root 28295 0.0 0.2 3528 1500 ? S Mar17 0:00 antirelayd
mailnull 28492 0.0 0.2 7416 1136 ? Ss Mar17 0:00 /usr/sbin/exim -oX 26 -bd
root 28517 0.0 0.7 5680 4096 ? S Mar17 0:01 chkservd
root 8076 0.0 1.7 18584 9060 ? S 02:54 0:00 cpsrvd - waiting for connections

Output from vmstat:
procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu----
r b swpd free buff cache si so bi bo in cs us sy id wa
11 1 0 295900 0 0 0 0 0 0 0 2 0 0 97 2