I have a FreeBSD server crashing a few times per week sometimes 2 or 3 times in one day, then 3 days fine sometimes each other day...
/var/log/messages shows nothing related to the reboot when looking at the server screen after a crash, it showed kernel panic
any ideas on how to troubleshoot that with the minimum downtime possible? DC already tried swapping memory, but it didn't solve
I am on a freebsd semi managed dedicated server (semi managed in that they dont really do out lol i just dont have root access, ssh though) unsing DirectAdmin
I need to find a way where i can monitor the processes that each account is using.
In the Service Monitor its showing all the services thats running for example, at present httpd is showing this:
httpd httpd (pid 96703 96702 96700 96698 96697 96696 96695 96694 96693 96692 96691 96690 96689 96688 96687 96686 96685 96684 96683 96682 96662 )I need to find more info about each of the pid's as i would like to know who is using what. does that make sense?
The other day (above httpd is normal) there was at least 10 times that amount and the server was dead slow, but i could not find any information as to who was using what and what cause the server to die....
I also have a customer that usually uses about 400mb to 500mb bandwidth per day, since the 28th of march this has gone sky high to nearly 2gb, he says he does not have any attachments fro download, nothing new has been added and no extra traffic, yet this has happened, this is why i need to find more info about such things, I have had a look at the logs but again, i do not really understand what any of it means...
i read this somewhere, but i dont think it works on my server...
Quote:
Look at the PID of the process using the most resources. Then use "ls -alh /proc/PID".
Ya'll get something like:
root@server02 [/]# ls -alh /proc/10231
total 0
dr-xr-xr-x 3 nobody nobody 0 Jan 17 15:35 ./
dr-xr-xr-x 144 root root 0 Dec 29 09:48 ../
-r--r--r-- 1 root root 0 Jan 17 15:35 cmdline
-r--r--r-- 1 root root 0 Jan 17 15:35 cpu
lrwxrwxrwx 1 root root 0 Jan 17 15:35 cwd -> /home/USERNAME/public_html/
-r-------- 1 root root 0 Jan 17 15:35 environ
lrwxrwxrwx 1 root root 0 Jan 17 15:35 exe -> /usr/local/apache/bin/httpd*
dr-x------ 2 root root 0 Jan 17 15:35 fd/
-r-------- 1 root root 0 Jan 17 15:35 maps
-rw------- 1 root root 0 Jan 17 15:35 mem
-r--r--r-- 1 root root 0 Jan 17 15:35 mounts
lrwxrwxrwx 1 root root 0 Jan 17 15:35 root -> //
-r--r--r-- 1 root root 0 Jan 17 15:35 stat
-r--r--r-- 1 root root 0 Jan 17 15:35 statm
-r--r--r-- 1 root root 0 Jan 17 15:35 status
The cwd -> will tell you what folder is being accessed. That should let you know what user.
You can also from SSH on Cpanel boxes use something like "lynx localhost/whm-server-status" to see connections to specific URLs.
I've been concerned that my cPanel email address on my dedicated server hasn't been receiving emails. This was confirmed when an email sent by request from a friend did not arrive. The address is fosterd(***at***)pcfastlane.com if anyone would like to send me a test email.
What are the steps I can take to see if my cPanel email software is running correctly? I have already looked into my mail statistics, and it seems as though there are messages not being delivered, a fair amount which seem to be spam, but others that may not be.
I noticed all of my sites were down earlier.. so I tried restarting apache via WHM.. and that didn't work, said the following:
Waiting for httpd to restart.... . . . . . . . . . . finished.
httpd status
root 8103 0.5 0.8 30892 29264 ? S 12:28 0:00 /usr/local/cpanel/whostmgr/bin/whostmgr ./reshttpd
httpd has failed, please contact the sysadmin.
I tried rebooting.. same issue.
how to troubleshoot this? This is very bad!
I have a VPS over at futurehosting, and I'm having some issues with my PHP/MySQL sites loading slowly after a few days of uptime. A restart of the various services (apache/mysql) fixes the issue, but I'd like the issue to not start in the first place.
I know very little of server administration (I'm still learning) so just let me know what info you need to see to do the troubleshooting and I'll get it to you.
Customer wants to move his website in-house along with his email. The hardware guy installed a windows 2003 64-bit exchange server. I logged in with logmein and created a directory c:Inetputwwwroot hewebsite. Copied iisstart.html to the new dir. Put the company name in the iisstart file. Opened IIS6. Went to properties of the default website and pointed to the new directory on the home dir page. Added iisstart.html the Documents page and moved it to the top. Closed everything. Opened Internet Explorer 7 and put in http://localhost. All worked well. Brought up the new start page. Opened IE7 on my pc and put there ip address in and it also brought up the new webpage (tested the port 80 in the router). Said we were ready to go.
The hardware guy sent me an email stating that he was having problems with the 64-bit version and took the server back to the 32-bit version of windows exchange server. I logged back in with logmein and followed the same exact steps as above but it will not show the new webpage. Am getting a page not found error.
I have done the above on several 2003 servers and several xp pro machines. Always works.
Have done one 2003 exchange server. Went to a couple of those servers and made sure the default website settings were exactly the same as the ones that work. Still no help.
Downloaded an iis6 troubleshooting program from microsoft but cannot locate the error. I have been studying the II6 documentation and 2003 exchange server documentation. Went thru all the tutorials in google on iis6 and exchange I can find no help.
If you receive the following errors while trying to install a Perl Module through the WHM ...
View 1 Replies View Relatedwe have one box in hivelocity.net that has been down so many times this month that we were forced to remove links to siteuptime where we were once so proud of having a 99.7% uptime for 3 years in theplanet.
syslog shows that just before crashing, these entries were made:
kernel: kernel BUG at mm/rmap.c:479
kernel: invalid operand:0000 [#1]
dmesg also shows this:
...
Brought up 2 CPUs
zapping low mappings.
checking if image is initramfs... it is
Freeing initrd memory: 482k freed
NET: Registered protocol family 16
PCI: PCI BIOS revision 2.10 entry at 0xf9f20, last bus=1
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
mtrr: your CPUs had inconsistent fixed MTRR settings
mtrr: probably your BIOS does not setup all CPUs.
mtrr: corrected configuration.
...
i've googled these messages and they point to ram problems.
hivelocity.net claims to have done diagnostics on the box and that there were no problems reported.
they said this is a result of a sys configuration problem made by us.
any ideas?
running centos/virtuozzo 2.6.18-028stab062.3
when i configure vmware it asks at one point for kernel header files. where would i find them to match the current kernel?
i asked at parallels forums but help there is very scarce. i checked openVZ repositories and they dont yet have headers for this version.
what are my options? i have one last windows machine left and want to run it in VMware.
Last year I ordered a new server with Centos 4.3 and it had the kernel kernel 2.6.9-34.0.2ELsmp installed. It runned fine and I didn't update any packages since then.
Today I started getting a problem where both mysqld and kswapd0 uses very high amounts of CPU, spiking up to 100% and my memory usage is at 99% all the time. The problem seems exactly the same as the one mentioned in this thread.
In that thread the exact same kernel is said to be insecure and to cause this problem. I also came across a centOS bug that reports this problem with high cpu, mem usage and mysql & kswapd0 consuming all resources.
In the linked thread the person solved the problem by upgrading to kernel 2.6.9-42 using rpms but others recommended a newer kernel or a custom compiled kernel for CentOS.
Apparently when they used yum it said 34.0.2 was the latest kernel.
What should I do to upgrade the kernel, which version should i upgrade to, and where do I get it from? I won't be able to compile a custom kernel and I've only installed basic rpm packages before.
I am trying to install the kernel source.
I have downloaded kernel-2.6.20-1.2948.fc6.src.rpm
I am using fedora 6 64bit.
here are my current kernels:
kernel-headers-2.6.20-1.2948.fc6
kernel-devel-2.6.20-1.2944.fc6
yum-kernel-module-1.0.3-1.fc6
kernel-2.6.20-1.2944.fc6
kernel-devel-2.6.20-1.2948.fc6
kernel-2.6.20-1.2948.fc6
here is what I seen when I installed kernel-2.6.20-1.2948.fc6.src.rpm
rpm -ivh kernel-2.6.20-1.2948.fc6.src.rpm
1:kernel warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
warning: user brewbuilder does not exist - using root
########################################### [100%]
warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
then when I ran:
rpmbuild -bp --target=$(uname -m) /usr/src/redhat/SPECS/kernel-2.6.spec
I seen this error:
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
In file included from /usr/include/sys/socket.h:35,
from /usr/include/netinet/in.h:24,
from /usr/include/arpa/inet.h:23,
from scripts/basic/fixdep.c:117:
/usr/include/bits/socket.h:310:24: error: asm/socket.h: No such file or directory
make[1]: *** [scripts/basic/fixdep] Error 1
make: *** [scripts_basic] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.93770 (%prep)
I need to have this installed to get a app installed etc...
suggestions or ideas?
thanks
I have a Xen VPS. I started with a Debian 4 image and have since upgraded to Debian 5. Firstly was this advisable? Secondly what Kernel version should I be running, or rather is it set by my installation or by the Xen server?
View 3 Replies View RelatedDoes it take 2 hours to have a new kernel up and running? The tech is taking forever to finish.
View 11 Replies View Relatedas part of a project I have lately been looking into various aspects of kernel tuning. Most notably lately tuning the TCP stack for more efficient memory usage/throughput.
Thought I would start this thread to mention some of the tools I'd found for doing testing and see what anyone else had to recommend.
So far my favorite of the bunch is nuttcp. Its easy to use and gives a very good idea of how much of your bandwidth you are able to utilize.
A few interesting web pages are as follows for anyone interested in the topic:
[url]- Tuning TCP for High Bandwidth Delay networks
[url]- TCP Tuning Cook book, some interesting information in there as well
[url]...formanceTuning - Performance Tuning TWiki. Has a list of useful tools, flags for existing tools and ways to monitor network performance from a system level, along with some suggestions of things to correct
What is the best way to find out which filesystems and harddrive drivers you can remove? Obviously, i need ext2,3 but how do you find which HD you only need?
View 1 Replies View Relatedrecently,my dedicated server down frequently,
i can not find any important info from /var/log/messages
but i find some records many time on it,those like
----------------------------------
Jun 15 05:30:40 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
Jun 15 05:30:40 server kernel: ata1.00: (irq_stat 0x40000001)
Jun 15 05:30:40 server kernel: ata1.00: cmd 25/00:08:42:23:d2/00:00:2c:00:00/e0 tag 0 cdb 0x0 data 4096 in
Jun 15 05:30:40 server kernel: res 51/40:00:42:23:d2/00:00:2c:00:00/e0 Emask 0x9 (media error)
Jun 15 05:30:40 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:30:40 server kernel: ata1: EH complete
Jun 15 05:30:42 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
Jun 15 05:30:42 server kernel: ata1.00: (irq_stat 0x40000001)
Jun 15 05:30:42 server kernel: ata1.00: cmd 25/00:08:42:23:d2/00:00:2c:00:00/e0 tag 0 cdb 0x0 data 4096 in
Jun 15 05:30:42 server kernel: res 51/40:00:42:23:d2/00:00:2c:00:00/e0 Emask 0x9 (media error)
Jun 15 05:30:42 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:30:42 server kernel: ata1: EH complete
Jun 15 05:30:44 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
Jun 15 05:30:51 server kernel: ata1.00: (irq_stat 0x40000001)
Jun 15 05:30:51 server kernel: ata1.00: cmd 25/00:08:42:23:d2/00:00:2c:00:00/e0 tag 0 cdb 0x0 data 4096 in
Jun 15 05:30:51 server kernel: res 51/40:00:42:23:d2/00:00:2c:00:00/e0 Emask 0x9 (media error)
Jun 15 05:30:51 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:30:51 server kernel: ata1: EH complete
Jun 15 05:30:51 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
Jun 15 05:30:51 server kernel: ata1.00: (irq_stat 0x40000001)
Jun 15 05:30:51 server kernel: ata1.00: cmd 25/00:08:42:23:d2/00:00:2c:00:00/e0 tag 0 cdb 0x0 data 4096 in
Jun 15 05:30:51 server kernel: res 51/40:00:42:23:d2/00:00:2c:00:00/e0 Emask 0x9 (media error)
Jun 15 05:30:51 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:30:51 server kernel: ata1: EH complete
Jun 15 05:30:51 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
Jun 15 05:30:51 server kernel: ata1.00: (irq_stat 0x40000001)
Jun 15 05:30:51 server kernel: ata1.00: cmd 25/00:08:42:23:d2/00:00:2c:00:00/e0 tag 0 cdb 0x0 data 4096 in
Jun 15 05:30:51 server kernel: res 51/40:00:42:23:d2/00:00:2c:00:00/e0 Emask 0x9 (media error)
Jun 15 05:30:51 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:30:52 server kernel: ata1: EH complete
Jun 15 05:31:26 server kernel: ata1.00: configured for UDMA/133
Jun 15 05:31:30 server kernel: sd 0:0:0:0: SCSI error: return code = 0x08000002
Jun 15 05:31:33 server kernel: sda: Current [descriptor]: sense key: Medium Error
Jun 15 05:31:36 server kernel: Add. Sense: Unrecovered read error - auto reallocate failed
Jun 15 05:31:36 server kernel:
Jun 15 05:31:39 server kernel: Descriptor sense data with sense descriptors (in hex):
Jun 15 05:31:46 server kernel: 72 03 11 04 00 00 00 0c 00 0a 80 00 00 00 00 00
Jun 15 05:31:51 server kernel: 2c d2 23 42
Jun 15 05:31:56 server kernel: end_request: I/O error, dev sda, sector 751969090
Jun 15 05:31:57 server kernel: ata1: EH complete
Jun 15 05:31:57 server kernel: SCSI device sda: 976773168 512-byte hdwr sectors (500108 MB)
Jun 15 05:31:58 server kernel: sda: Write Protect is off
Jun 15 05:31:58 server kernel: SCSI device sda: drive cache: write back
Jun 15 05:31:59 server kernel: SCSI device sda: 976773168 512-byte hdwr sectors (500108 MB)
Jun 15 05:32:03 server kernel: sda: Write Protect is off
Jun 15 05:32:04 server kernel: SCSI device sda: drive cache: write back
-------------------
is it safe ? or any hardware error?
can i upgrade my kernel?
yum cant find any new update but my kernel version is 2.6.18-128.1.1.el5.028stab062.3PAE
I have following error in kernel update with yum:
Downloading Packages:
Running rpm_check_debug
ERROR with rpm_check_debug vs depsolve:
Package kernel conflicts with ecryptfs-utils < 44.
Complete!
So kernel not updated yet.
I copied the default config file and renamed it as .config but I get this:
Code:
WARNING: No module dm-mem-cache found for kernel 2.6.27.10-grsec, continuing anyway
WARNING: No module dm-region_hash found for kernel 2.6.27.10-grsec, continuing anyway
WARNING: No module dm-message found for kernel 2.6.27.10-grsec, continuing anyway
WARNING: No module dm-raid45 found for kernel 2.6.27.10-grsec, continuing anyway
My current kernel version is "2.6.9-42.0.10.ELsmp #1 SMP Fri Feb 16 17:17:21 EST 2007 i686 athlon i386 GNU/Linux". I want it to be upgraded since it is old. I have been told by our server management company that the latest kernel distributed from yum is kernel.i686 0:2.6.9-78.0.22.E. Can anyone tell me if this version is safe and secure enough? It is a CentOS release 4.7 (Final) server with cPanel installed.
View 2 Replies View Relatedi have a dedicated server with Centos 5.2 32bit.
my cpu is 64bit but for some software, datacenter install 32bit for me.
i need more ram and order to datacenter, before my ram was 4 Gig and now my ram is 6 gig . but cpu just use 3 gig of ram.
i install kernel-PAE with "yum install kernel-PAE " command and my ram down to 2.5 Gig. now my server used just 2.5 gig of ram.
i can not reformat server because of i have some vps in this server ( Xen vps )
when doing 2.6.26+ or w/e it is, how do you enable conntrack, what options do i need to enable under make menuconfig?
net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_generic_timeout = 120
error: "net.netfilter.nf_conntrack_icmp_timeout" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_close" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_time_wait" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_last_ack" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_close_wait" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_fin_wait" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_established" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_syn_recv" is an unknown key
error: "net.netfilter.nf_conntrack_tcp_timeout_syn_sent" is an unknown key
error: "net.netfilter.nf_conntrack_udp_timeout" is an unknown key
error: "net.netfilter.nf_conntrack_udp_timeout_stream" is an unknown key
net.netfilter.nf_conntrack_max = 262144
and how do i know which hardware/devices that i can remove?
I am using centos 4.6 on 2.6.9-67smp kernel
I need to update the kernel to 2.6.25.3
is that possible ?
I've never actually compiled a kernel before, and wanted to know the basics when it comes to compiling for a standard CPanel/Centos 32bit system.
View 10 Replies View Relatedi compiled my kernel and i have problem.. i dont have lilo on my server so i dont know how to change the grub.conf file to boot my new kernel..
View 7 Replies View RelatedHow Can i translate An Kernel Exploit to secure my server like that
[url]
how can i now what i do to my server if i see any exploit
I have always used RPM kernels from the RedHat Network, in this time I need to compile an SMP kernel in a server that is used to serve common webhosting traffic (web, ftp, email, etc) with cPanel.
I have compiled kernels from source in desktops stations, but never in remote servers.. do you have any recommendations to do this at a Dual Xeon 3.2 RHE 5 + cPanel server? Oh.. almost forgot.. I will also compile it with GRsecurity.
Should I use a src kernel from RedHat, or a kernel.org latest kernel?
I installed CentOS 5 on a server with 2 quad core CPU's and 4GB of RAM. After the installation is done and during boot I see a warning that says "Warning only 3GB will be used".
So, just to check, I installed CentOS 4.4 and it sees all 4GB of RAM.
Are there any memory limitations on the distro? or could it be that the desktop kernels made their way into the iso's from upstream?
I am recompiling the kernel with the src rpm. I haven't been able to get any kernel to boot properly since i got this server.
I really could use some help, below i posted lspci, lsmod and cat interrupts. What I really need help with is which kernel modules are necessary for my server.
lspci: [url]
lsmod: [url]
interrupts: [url]
I have already tried a kernel with ext3, and sata support compiled in but it never boots.
For everyone out there who have dedicated servers with linux kernel, do you use a kernel patch like GrSecurity for extra security and piece of mind or not and why?
I am using mostly VPS with huge resources for hosting sites because I didn't have the budget for Raid 5, Data Redundancy and managed servers. But now I just leased my first Dedicated running Centos (for better compatibility with CPanel) and I am concerned about the kernel's security issues.
I am using Grsecurity on a labrat (home server) for testing purposes but I dont know if it is the right option for a Production Live server.
I just got 2 'kernel panic' crashes in a row (about 1 hr between them). During that time
I cannot access ssh, I need to contact the datacenter for manual reboot.
I checked logs, and I cannot see anything abnormal. I am also not sure what I should be looking for.
I'm really scarred that this is going to keep hapening.
I actually may have found something in logs:
Nov 1 13:20:43 punky kernel: audit(:0): major=252 name_count=0: freeing multiple contexts (1)
lov 1 13:20:43 punky kernel: audit(:0): major=316 name_count=0: freeing multiple contexts (2)
lov 1 13:20:50 punky pure-ftpd: (shont@84.201.220.8) [INFO] Logout.
Nov 1 13:45:04 punky syslogd 1.4.1: restart.
But I still don't know what this means.
I use CentOS.