Re: CPU Spiking

Thanks for the reply, Chris.  I always forget netstat...

We have an SMTP gateway, yes.  It is responsible for all mail coming to 
the box from outside the firewall.  An ever-growing number of systems 
within the firewall connect to it, but I can identify them by IP rather 
easily. 

The connections to the server are almost all 1352 client connections. 
There are a few web access connections and the expected SMTP connections. 
There is a strange group of connections, though, at least to me.  There 
are connections from the server to its own IP address.  Is that normal? Of 
course, as I'm looking at netstat, there's no problems in evidence, 
either.  I'll have to try again when it's going crazy.

I did finally see something strange in the logs last time it acted up. 
Lots of "send failed (did not timeout) Remote server no longer responding" 
to the SMTP gateway.  I was on the phone with the admin of the gateway at 
the time -- they were up and running and not particularly busy at the 
time, so he had no idea why I might not be able to connect to his 
servers...

Patrick




Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
Sent by: domino400-bounces+ptrapp=nex-tech.com@xxxxxxxxxxxx
08/17/2005 02:20 PM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: CPU Spiking






You can always check netstat and see if there are odd connections coming 
in to your box. 

Do you have a SMTP gateway that sends all incoming mail to your box? If so 

that should be one of the only ones coming to yourserver...

Chris Whisonant
Comporium
Senior Mid-Range Systems Administrator
IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5
803.326.7270 | 803.326.6142 fax
http://cwhisonant.blogspot.com/

domino400-bounces+chris.whisonant=comporium.com@xxxxxxxxxxxx wrote on 
08/17/2005 03:15:40 PM:

> 
> Domino 6.5.4 server on iSeries V5R2
> 
> The last couple of days we are seeing SMTP process spikes that are 
pushing
> the CPU to 98%+.  SMTP task was at 86% for quite a while yesterday.  So
> far, the only thing I've had any luck with is ending the SMTP task and
> restarting it.  We are not seeing any indications of what might be 
causing
> this, but I'm not sure I know what to look for.
> 
> Since I've been watching, I've seen the process spike briefly several
> times, but generally not long enough to cause the entire server to grind 

to
> a halt like it did yesterday.  My boss is concerned that this is the 
result
> of some sort of attack on our system.
> 
> Any suggestions would be much appreciated.
> 
> Patrick
> 
> _______________________________________________
> This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
> To post a message email: Domino400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/domino400.
> 
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.