[Dxspider-support] /spider/src/client eating CPU

[Alex Savenok]

Hi!

I found today that my server was out of disk space

The log file /var/log/secure was pumped up with tons of messages like:
...
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
...

The top -c command shows me that /spider/src/client eating CPU:

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
31518 root      20   0  6180  300  228 R 46.2  0.0   6575:03 tcpd
/spider/src/client login telnet
31460 root      20   0  6152  448  360 R 44.2  0.0   6579:07 tcpd
/spider/src/client login telnet
27023 root      20   0  8388  756  624 R 43.9  0.0   6846:06 tcpd
/spider/src/client login telnet
27024 root      20   0     8    4    0 R 42.9  0.0   6844:32 [tcpd]
27025 root      20   0  8388  752  624 R 42.2  0.0   6844:06 tcpd
/spider/src/client login telnet
27026 root      20   0  8388  756  624 R 41.9  0.0   6844:47 tcpd
/spider/src/client login telnet
31442 root      20   0  6152  516  412 R 41.9  0.0   6580:27 tcpd
/spider/src/client login telnet
27022 root      20   0  8388  752  624 R 41.6  0.0   6845:01 tcpd
/spider/src/client login telnet
31483 root      20   0   272   88   60 R 41.6  0.0   6575:51 tcpd
/spider/src/client login telnet
  912 root      20   0  242m 1300  736 S 10.9  0.0   2726:00 /sbin/rsyslogd
-i /var/run/syslogd.pid -c 4
 1344 cqplanet  20   0  215m  62m 2624 S  1.0  2.1 584:20.95 /usr/bin/perl
-w /spider/perl/cluster.pl

Currently I killed all clients, but how to prevent this in the future?
Why does it happen?

Thanks!
Alex, sysop of 4z5lz-2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20120529/9b279c30/attachment.html>