The place to start is: 1) run sar to see what/when load is happening 2) run some simple stats on the server logs to see if there are many or few IPs involved how timing relates to load, is it related to database accesses or other tasks 3) make sure no hang tasks - sometimes cron'd jobs never complete and you will see a number of run of the same cron open Thats a place to start Rich On 6/27/2014 12:12 PM, Tad Puckett wrote: > > > Just to clarify exactly what is going on with the mem usage. The server is allocated for > 2GB of physical mem and 4GB swap (virtual mem for Windows users). The other hosts are > all on the same RAID of HDDs. The server is spiking on mem usage and then tapping into > the swap. The I/O usage of accessing that swap mem is obviously affecting the other > servers being hosted on the RAID. They have no direct access to the server, so they are > under the assumption that there is something malicious running on the server. I hope > that helps somewhat. > > > > > > > > > On Wed, Jun 25, 2014 at 3:18 PM, Daniel Lieberman <daniell at incommn.com > <mailto:daniell at incommn.com>> > > wrote: > > > > > ** Be sure to fill out the survey/skills inventory in the member's area. > > > ** If you did, we all thank you. > > > > > > > > > > > > We're having a problem with excessive memory use on a cloud server at > > > Rackspace which hosts a website of ours. The tech support people at > > > Rackspace suggest that there's some kind of attack going on, and we need > > > someone to help us identify and cure the problem(s). > > > > > > Anyone with Linux expertise out there interested in taking this on? > > > > > > Sincerely yours, > > > > > > Daniel Lieberman > > > InCommN, LLC > > > 413 489 1818 <tel:413%20489%201818> > > > http://incommn.com > > > > > > _______________________________________________ > > > > -- Rich Roth Webmaster/Steering Committee Member Hidden-tech http://www.hidden-tech.net The Talent you need is right here, Join and share your skills ((Sponsored by Thrives Media)) http://www.thrivesmedia.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20140627/ac060869/attachment.html