Portal Home > Knowledgebase > Articles Database > High Load
High Load
| Posted by smrtalex, 12-30-2007, 05:59 PM |
| How can you tell if your server was a victim of a DDOS attack? Server load goes so high that you cannot get in via SSH, and the server has to be power cycled to get back online. When it comes back online, load goes back up, we shut apache down, and the let the load come back down and then restart apache and everything is fine. Any way to determine what caused the load to skyrocket? System has APF, BFD, and mod_evasive installed. Any suggestions?
|
| Posted by david510, 12-30-2007, 08:31 PM |
| You can execute the following command from ssh to see the IPs and number of connections from each IP to port 80.
You can see the processes that took more cpu/memory from the top logs. They reside in the directory /var/log/dcpumon.
|
| Posted by smrtalex, 12-30-2007, 09:08 PM |
| Thanks! I would need to issue that command when the server is under the heavy load, correct?
I do not have a /var/log/dpcumon directory. The is a RedHat EL Box if that makes a difference.
|
| Posted by zacharooni, 12-30-2007, 10:51 PM |
| Have a look through /var/log/messages for any critical events, and /var/log/secure to see if there are any recent bruteforce attempts or iptables drops added.
|
Add to Favourites 
Print this Article
Also Read
Eleven2 UK (Views: 9439)
Shared Hosting
Shared Hosting
