[Dxspider-support] /spider/src/client eating CPU

[Alex Savenok]

any idea?

On Tue, May 29, 2012 at 4:12 PM, Alex Savenok <sawenok at gmail.com> wrote:

> Hi!
>
> I found today that my server was out of disk space
>
> The log file /var/log/secure was pumped up with tons of messages like:
> ...
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> May 29 08:52:28 svm211 tcpd[27023]: connect from unknown (unknown)
> ...
>
> The top -c command shows me that /spider/src/client eating CPU:
>
>   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
> 31518 root      20   0  6180  300  228 R 46.2  0.0   6575:03 tcpd
> /spider/src/client login telnet
> 31460 root      20   0  6152  448  360 R 44.2  0.0   6579:07 tcpd
> /spider/src/client login telnet
> 27023 root      20   0  8388  756  624 R 43.9  0.0   6846:06 tcpd
> /spider/src/client login telnet
> 27024 root      20   0     8    4    0 R 42.9  0.0   6844:32 [tcpd]
> 27025 root      20   0  8388  752  624 R 42.2  0.0   6844:06 tcpd
> /spider/src/client login telnet
> 27026 root      20   0  8388  756  624 R 41.9  0.0   6844:47 tcpd
> /spider/src/client login telnet
> 31442 root      20   0  6152  516  412 R 41.9  0.0   6580:27 tcpd
> /spider/src/client login telnet
> 27022 root      20   0  8388  752  624 R 41.6  0.0   6845:01 tcpd
> /spider/src/client login telnet
> 31483 root      20   0   272   88   60 R 41.6  0.0   6575:51 tcpd
> /spider/src/client login telnet
>   912 root      20   0  242m 1300  736 S 10.9  0.0   2726:00
> /sbin/rsyslogd -i /var/run/syslogd.pid -c 4
>  1344 cqplanet  20   0  215m  62m 2624 S  1.0  2.1 584:20.95 /usr/bin/perl
> -w /spider/perl/cluster.pl
>
> Currently I killed all clients, but how to prevent this in the future?
> Why does it happen?
>
> Thanks!
> Alex, sysop of 4z5lz-2
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20120529/bf1ef08f/attachment.html>