[Hidden-tech] Linux Security Troubleshooting

Rich Roth webmaster at hidden-tech.net
Fri Jun 27 14:20:22 EDT 2014


The place to start is:
     1) run sar to see what/when load is happening

     2) run some simple stats on the server logs to see if there are many or few IPs involved
         how timing relates to load, is it related to database accesses or other tasks

     3) make sure no hang tasks - sometimes cron'd jobs never complete and you will see a 
number of run of the same cron open

Thats a place to start
Rich

On 6/27/2014 12:12 PM, Tad Puckett wrote:
>
>
> Just to clarify exactly what is going on with the mem usage. The server is allocated for 
> 2GB of physical mem and 4GB swap (virtual mem for Windows users). The other hosts are 
> all on the same RAID of HDDs. The server is spiking on mem usage and then tapping into 
> the swap. The I/O usage of accessing that swap mem is obviously affecting the other 
> servers being hosted on the RAID. They have no direct access to the server, so they are 
> under the assumption that there is something malicious running on the server. I hope 
> that helps somewhat.
>
>
>
>     >
>     >
>     > On Wed, Jun 25, 2014 at 3:18 PM, Daniel Lieberman <daniell at incommn.com
>     <mailto:daniell at incommn.com>>
>     > wrote:
>     >
>     > >    ** Be sure to fill out the survey/skills inventory in the member's area.
>     > >    ** If you did, we all thank you.
>     > >
>     > >
>     > >
>     > > We're having a problem with excessive memory use on a cloud server at
>     > > Rackspace which hosts a website of ours. The tech support people at
>     > > Rackspace suggest that there's some kind of attack going on, and we need
>     > > someone to help us identify and cure the problem(s).
>     > >
>     > > Anyone with Linux expertise out there interested in taking this on?
>     > >
>     > > Sincerely yours,
>     > >
>     > > Daniel Lieberman
>     > > InCommN, LLC
>     > > 413 489 1818 <tel:413%20489%201818>
>     > > http://incommn.com
>     > >
>     > > _______________________________________________
>     > >
>


-- 
Rich Roth
Webmaster/Steering Committee Member
Hidden-tech http://www.hidden-tech.net
The Talent you need is right here,
Join and share your skills
((Sponsored by Thrives Media))
http://www.thrivesmedia.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20140627/ac060869/attachment.html 


Google

More information about the Hidden-discuss mailing list