Thanks for the reply, Chris. I always forget netstat... We have an SMTP gateway, yes. It is responsible for all mail coming to the box from outside the firewall. An ever-growing number of systems within the firewall connect to it, but I can identify them by IP rather easily. The connections to the server are almost all 1352 client connections. There are a few web access connections and the expected SMTP connections. There is a strange group of connections, though, at least to me. There are connections from the server to its own IP address. Is that normal? Of course, as I'm looking at netstat, there's no problems in evidence, either. I'll have to try again when it's going crazy. I did finally see something strange in the logs last time it acted up. Lots of "send failed (did not timeout) Remote server no longer responding" to the SMTP gateway. I was on the phone with the admin of the gateway at the time -- they were up and running and not particularly busy at the time, so he had no idea why I might not be able to connect to his servers... Patrick Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> Sent by: domino400-bounces+ptrapp=nex-tech.com@xxxxxxxxxxxx 08/17/2005 02:20 PM Please respond to Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx> To Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx> cc Subject Re: CPU Spiking You can always check netstat and see if there are odd connections coming in to your box. Do you have a SMTP gateway that sends all incoming mail to your box? If so that should be one of the only ones coming to yourserver... Chris Whisonant Comporium Senior Mid-Range Systems Administrator IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2 IBM Certified System Administrator - Lotus Notes and Domino 6/6.5 803.326.7270 | 803.326.6142 fax http://cwhisonant.blogspot.com/ domino400-bounces+chris.whisonant=comporium.com@xxxxxxxxxxxx wrote on 08/17/2005 03:15:40 PM: > > Domino 6.5.4 server on iSeries V5R2 > > The last couple of days we are seeing SMTP process spikes that are pushing > the CPU to 98%+. SMTP task was at 86% for quite a while yesterday. So > far, the only thing I've had any luck with is ending the SMTP task and > restarting it. We are not seeing any indications of what might be causing > this, but I'm not sure I know what to look for. > > Since I've been watching, I've seen the process spike briefly several > times, but generally not long enough to cause the entire server to grind to > a halt like it did yesterday. My boss is concerned that this is the result > of some sort of attack on our system. > > Any suggestions would be much appreciated. > > Patrick > > _______________________________________________ > This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list > To post a message email: Domino400@xxxxxxxxxxxx > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/domino400 > or email: Domino400-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives > at http://archive.midrange.com/domino400. > _______________________________________________ This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list To post a message email: Domino400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/domino400 or email: Domino400-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/domino400.