Submitted by jimdunn on Wed, 01/25/2017 - 14:45 Pro Licensee
##############################################################################
# main.cf #
##############################################################################
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
readme_directory = no
smtpd_tls_cert_file = /etc/postfix/postfix.cert.pem
smtpd_tls_key_file = /etc/postfix/postfix.key.pem
smtpd_use_tls=yes
#smtpd_tls_auth_only=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
myhostname = server.example.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = example.com, server.example.com, localhost.example.com, localhost, server
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols=ipv4
virtual_alias_maps = hash:/etc/postfix/virtual
sender_bcc_maps = hash:/etc/postfix/bcc
home_mailbox = Maildir/
smtpd_sasl_auth_enable = yes
allow_percent_hack = no
smtpd_helo_required = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
invalid_hostname_reject_code = 554
multi_recipient_bounce_reject_code = 554
non_fqdn_reject_code = 554
relay_domains_reject_code = 554
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
smtpd_helo_restrictions =
permit_mynetworks,
reject_invalid_hostname,
regexp:/etc/postfix/helo.regexp,
reject_rhsbl_helo zen.spamhaus.org,
permit
smtpd_data_restrictions =
reject_unauth_pipelining,
permit
smtpd_client_restrictions =
permit_mynetworks,
permit_tls_all_clientcerts,
reject_rhsbl_sender dsn.rfc-ignorant.org,
permit
# reject_unknown_client_hostname
# reject_unknown_reverse_client_hostname
# reject_unknown_client
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_hostname,
reject_unauth_destination,
reject_unauth_pipelining,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_rbl_client bl.spamcop.net,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client zen.spamhaus.org,
permit
# reject_unknown_client (WILL BLOCK TOO MUCH)
# reject_non_fqdn_hostname (WILL CRASH AUTH SMTP)
smtpd_sender_restrictions =
permit_mynetworks,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_rhsbl_sender dsn.rfc-ignorant.org,
permit
# reject_unknown_sender_domain (WILL BLOCK TOO MUCH)
smtpd_sasl_authenticated_header = yes
message_size_limit = 26214400
smtpd_tls_security_level = may
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,TLSv1
smtpd_tls_protocols = !SSLv2,!SSLv3
smtp_tls_protocols = !SSLv2,!SSLv3
smtpd_tls_mandatory_ciphers = high
sender_dependent_default_transport_maps = hash:/etc/postfix/dependent
recipient_bcc_maps = hash:/etc/postfix/bccin
smtpd_tls_CAfile = /etc/postfix/postfix.ca.pem
##############################################################################
# master.cf #
##############################################################################
smtp inet n - - - - smtpd -o smtpd_sasl_auth_enable=yes
# -o smtpd_enforce_tls=yes
submission inet n - - - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
smtps inet n - - - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
#smtp inet n - - - 1 postscreen
#smtpd pass - - - - - smtpd
#dnsblog unix - - - - 0 dnsblog
#tlsproxy unix - - - - 0 tlsproxy
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
-o smtp_fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
smtp-13464253011645 unix - - - - - smtp -o smtp_bind_address=123.45.67.89
... (over 100 entries deleted here) ...
smtp-134630993018661 unix - - - - - smtp -o smtp_bind_address=123.45.67.89
Parent issue:
Status:
Closed (fixed)
Comments
Submitted by andreychek on Wed, 01/25/2017 - 15:56 Comment #1
Howdy -- you could be seeing an autoreply loop, where your user is being sent an auto-reply, responding to that, and it's responding back, and so forth.
Does your server load go back to normal if you disable the autoreply on that account?
Submitted by jimdunn on Wed, 01/25/2017 - 18:30 Pro Licensee Comment #2
So far I've been unable to disable the autoreply (SLA with reseller).
But, a reboot causes "back to normal" for a week or so.
I would love the ability to disallow the autoreply if the message contained the word "bounce". : )
Submitted by andreychek on Wed, 01/25/2017 - 22:21 Comment #3
What is the output of the command "mailq | tail -1" on your server?
What you could try though, is in Edit Users -> USERNAME -> Auto-reply Options, try going into the "Minimum time between autoreplies" option and set that to something like "30".
That will make it so that one particular sender won't receive more than one auto-reply in a 30 minute time period, which is usually more than plenty.
That should help prevent any auto-reply loops.
Submitted by jimdunn on Thu, 01/26/2017 - 13:26 Pro Licensee Comment #4
Hey, thanks for the auto-reply option suggestion, I'll try it.
Also, the "mailq | tail -1" output took 15 minutes to get:
2425 Kbytes in 204 Requests
And, just an FYI, during the "load average at 115" stage today, I would get these emails:
"Error: Failed to lock file /etc/webmin/status/oldstatus after 5 minutes."
Also, I just checked the uptime, which is:
14:12:54 up 2 days, 20:45, 2 users, load average: 170.30, 167.51, 153.37
But ps shows this, almost NO CPU usage:
S www-data 7223 2924 0 80 0 34560 165700 ? 11:00 ? 00:00:36 /usr/sbin/apache2 -k start
D www-data 7340 2924 0 80 0 37156 168032 ? 11:01 ? 00:00:35 /usr/sbin/apache2 -k start
D www-data 7516 2924 0 80 0 41284 167904 ? 11:02 ? 00:00:36 /usr/sbin/apache2 -k start
S www-data 6906 2924 0 80 0 40284 167115 ? 10:59 ? 00:00:48 /usr/sbin/apache2 -k start
S www-data 6755 2924 0 80 0 37380 168026 ? 10:57 ? 00:01:15 /usr/sbin/apache2 -k start
D www-data 6754 2924 0 80 0 36540 167512 ? 10:57 ? 00:01:28 /usr/sbin/apache2 -k start
S www-data 6573 2924 0 80 0 43480 167365 ? 10:56 ? 00:01:41 /usr/sbin/apache2 -k start
D www-data 5863 2924 1 80 0 37148 172115 ? 10:49 ? 00:02:04 /usr/sbin/apache2 -k start
R user 18040 18035 1 80 0 1644 3968 - 14:12 pts/1 00:00:00 ps -efly --sort=pcpu
S mysql 30572 30159 1 80 0 42944 196620 ? Jan25 ? 00:30:20 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306
ps ax, however, showed CPUTIME as 30 for mysql:
18142 ? D 0:00 /usr/bin/lsof -w -l +d /var/lib/php5
18143 ? S 0:00 awk -- { if (NR > 1) { print $9; } }
18145 ? S 0:00 /usr/bin/lsof -w -l +d /var/lib/php5
18146 ? D 0:00 lfd - scanning log files
18147 ? D 0:00 lfd - (child) connection tracking...
22092 ? S 0:04 spamd child
30159 ? S 0:00 /bin/sh /usr/bin/mysqld_safe
30572 ? Sl 30:20 /usr/sbin/mysqld --basedir=/usr --datadir=...
30573 ? S 0:00 logger -t mysqld -p daemon.error
The emails I get say that spamassassin is having a problem, but it appears that mysqld is having a problem...
At this point I don't know what is causing the high LOAD AVERAGE... maybe hard drive access???
Submitted by andreychek on Thu, 01/26/2017 - 14:36 Comment #5
Hmm, none of that is too unusual in your process list.
It does sound like your resource usage is pretty high at the moment though.
If you go into Webmin -> Servers -> Postfix -> Mail Queue, are the emails in your mail queue mostly to or from the user that had the auto-reply enabled?
Also, what is the output of the command "ps auxw"?
Submitted by jimdunn on Thu, 01/26/2017 - 15:55 Pro Licensee Comment #6
Yes, most of the mailq is them.
I rebooted, but when it came up, it flew up to load average of 126+ again.
"ps auxw" shown below:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 10656 548 ? Rs 15:27 0:00 init [2]
root 2 0.0 0.0 0 0 ? S 15:27 0:00 [kthreadd]
root 3 0.2 0.0 0 0 ? R 15:27 0:11 [ksoftirqd/0]
root 5 0.0 0.0 0 0 ? S 15:27 0:00 [kworker/u:0]
root 6 0.0 0.0 0 0 ? S 15:27 0:00 [migration/0]
root 7 0.0 0.0 0 0 ? S 15:27 0:00 [watchdog/0]
root 8 0.0 0.0 0 0 ? S 15:27 0:00 [migration/1]
root 10 0.0 0.0 0 0 ? S 15:27 0:01 [ksoftirqd/1]
root 12 0.0 0.0 0 0 ? S 15:27 0:00 [watchdog/1]
root 13 0.0 0.0 0 0 ? S< 15:27 0:00 [cpuset]
root 14 0.0 0.0 0 0 ? S< 15:27 0:00 [khelper]
root 15 0.0 0.0 0 0 ? S 15:27 0:00 [kdevtmpfs]
root 16 0.0 0.0 0 0 ? S< 15:27 0:00 [netns]
root 17 0.0 0.0 0 0 ? S 15:27 0:00 [sync_supers]
root 18 0.0 0.0 0 0 ? S 15:27 0:00 [bdi-default]
root 19 0.0 0.0 0 0 ? S< 15:27 0:00 [kintegrityd]
root 20 0.0 0.0 0 0 ? S< 15:27 0:00 [kblockd]
root 22 0.0 0.0 0 0 ? S 15:27 0:00 [khungtaskd]
root 23 0.9 0.0 0 0 ? R 15:27 0:48 [kswapd0]
root 24 0.0 0.0 0 0 ? S< 15:27 0:00 [vmstat]
root 25 0.0 0.0 0 0 ? SN 15:27 0:00 [ksmd]
root 26 0.0 0.0 0 0 ? SN 15:27 0:00 [khugepaged]
root 27 0.0 0.0 0 0 ? S 15:27 0:00 [fsnotify_mark]
root 28 0.0 0.0 0 0 ? S< 15:27 0:00 [crypto]
root 101 0.0 0.0 0 0 ? S 15:27 0:00 [khubd]
root 109 0.0 0.0 0 0 ? S< 15:27 0:00 [ata_sff]
root 113 0.0 0.0 0 0 ? S 15:27 0:00 [scsi_eh_0]
root 124 0.0 0.0 0 0 ? S 15:27 0:00 [scsi_eh_1]
root 125 0.0 0.0 0 0 ? S 15:27 0:00 [kworker/u:1]
root 130 0.0 0.0 0 0 ? S 15:27 0:00 [scsi_eh_2]
root 131 0.0 0.0 0 0 ? S 15:27 0:00 [scsi_eh_3]
root 159 0.0 0.0 0 0 ? S< 15:27 0:00 [md]
root 166 0.0 0.0 0 0 ? S 15:27 0:00 [md0_raid1]
root 173 0.1 0.0 0 0 ? D 15:27 0:08 [md1_raid1]
root 180 0.0 0.0 0 0 ? S 15:27 0:00 [md2_raid1]
root 193 0.0 0.0 0 0 ? D 15:27 0:01 [jbd2/md2-8]
root 194 0.0 0.0 0 0 ? S< 15:27 0:00 [ext4-dio-unwrit]
root 337 0.0 0.0 21376 596 ? Ss 15:27 0:00 udevd --daemon
root 473 0.0 0.0 0 0 ? S< 15:27 0:00 [edac-poller]
root 475 0.0 0.0 0 0 ? S< 15:27 0:00 [kpsmoused]
root 1447 0.0 0.0 0 0 ? S 15:27 0:00 [jbd2/md0-8]
root 1448 0.0 0.0 0 0 ? S< 15:27 0:00 [ext4-dio-unwrit]
root 1781 0.0 0.0 21304 228 ? S 15:28 0:00 udevd --daemon
root 1782 0.0 0.0 21304 4 ? S 15:28 0:00 udevd --daemon
root 1888 0.0 0.0 0 0 ? D 15:28 0:01 [flush-9:2]
root 2300 0.0 0.0 65084 1112 ? Ss 15:28 0:00 /usr/sbin/saslauthd -a pam -m /var/spool/postfix/var/run/saslauthd
root 2301 0.0 0.0 65084 828 ? S 15:28 0:00 /usr/sbin/saslauthd -a pam -m /var/spool/postfix/var/run/saslauthd
root 2302 0.0 0.0 65084 1064 ? S 15:28 0:00 /usr/sbin/saslauthd -a pam -m /var/spool/postfix/var/run/saslauthd
root 2303 0.0 0.0 65084 904 ? S 15:28 0:00 /usr/sbin/saslauthd -a pam -m /var/spool/postfix/var/run/saslauthd
root 2304 0.0 0.0 65084 1176 ? S 15:28 0:00 /usr/sbin/saslauthd -a pam -m /var/spool/postfix/var/run/saslauthd
root 2359 0.0 0.0 52936 1008 ? Sl 15:28 0:01 /usr/sbin/rsyslogd -c5
daemon 2403 0.0 0.0 16680 152 ? Ss 15:28 0:00 /usr/sbin/atd
root 2430 0.0 0.0 4124 396 ? Ss 15:28 0:00 /usr/sbin/acpid
bind 2720 0.1 0.2 198448 10436 ? Ssl 15:28 0:07 /usr/sbin/named -u bind
108 2832 0.0 0.0 29812 88 ? Ss 15:28 0:00 /usr/bin/dbus-daemon --system
root 2850 0.1 0.1 68108 6592 ? Rs 15:28 0:08 lfd - scanning log files
root 2879 0.0 0.0 83600 1260 ? Ss 15:28 0:00 /usr/share/webmin/virtual-server/lookup-domain-daemon.pl
clamav 2893 0.0 0.4 645600 17816 ? Ssl 15:28 0:02 /usr/sbin/clamd -c /etc/clamav/clamd.conf --pid=/run/clamav/clamd.p
root 2934 0.0 0.1 636732 5384 ? Ss 15:28 0:01 /usr/sbin/apache2 -k start
root 3021 0.0 0.0 20416 712 ? Ss 15:28 0:00 /usr/sbin/cron
clamav 3106 0.1 0.0 76048 1120 ? Ss 15:28 0:06 /usr/bin/freshclam -d --quiet --config-file=/etc/clamav/freshclam.c
www-data 3126 0.0 0.0 224060 2812 ? S 15:28 0:01 /usr/sbin/apache2 -k start
list 3132 0.0 0.0 61412 500 ? Ss 15:28 0:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
list 3133 0.0 0.0 52856 1992 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:
list 3134 0.0 0.0 52896 2044 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:
list 3135 0.0 0.0 52908 2000 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner
list 3136 0.0 0.0 52900 2020 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunne
list 3137 0.0 0.0 52876 1996 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:
list 3138 0.0 0.0 52856 2036 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunne
list 3139 0.0 0.0 52812 2008 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:
list 3140 0.0 0.0 52812 1908 ? S 15:28 0:00 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0
root 3225 0.0 0.0 13128 392 ? Ss 15:28 0:00 /sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise
root 3282 0.0 0.0 4188 428 ? S 15:28 0:00 /bin/sh /usr/bin/mysqld_safe
ntp 3293 0.0 0.0 39096 1448 ? Ss 15:28 0:02 /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:116
mysql 3714 0.6 0.9 977516 37800 ? Sl 15:28 0:31 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-d
root 3715 0.0 0.0 4096 464 ? S 15:28 0:00 logger -t mysqld -p daemon.error
proftpd 3797 0.0 0.0 95360 600 ? Ss 15:28 0:00 proftpd: (accepting connections)
root 3841 0.0 0.0 139536 3496 ? Ss 15:28 0:03 /usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -
www-data 3844 0.1 1.1 684160 48388 ? D 15:28 0:05 /usr/sbin/apache2 -k start
www-data 3846 0.5 0.7 690172 30008 ? D 15:28 0:29 /usr/sbin/apache2 -k start
www-data 3847 0.3 0.8 684624 32868 ? S 15:28 0:17 /usr/sbin/apache2 -k start
www-data 3905 0.5 0.6 684936 24784 ? D 15:29 0:29 /usr/sbin/apache2 -k start
www-data 3907 0.6 0.9 691032 38168 ? D 15:29 0:31 /usr/sbin/apache2 -k start
root 4005 0.0 0.0 210772 1724 ? S 15:29 0:02 spamd child
root 4015 0.0 0.0 21528 364 ? Ss 15:29 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf
dovecot 4067 0.0 0.0 13056 380 ? S 15:29 0:00 dovecot/anvil
root 4068 0.0 0.0 13184 604 ? S 15:29 0:00 dovecot/log
root 4131 0.0 0.0 38028 1644 ? Ss 15:29 0:00 /usr/lib/postfix/master
postfix 4147 0.0 0.0 39964 1612 ? S 15:29 0:00 pickup -l -t fifo -u -c
postfix 4148 0.0 0.0 40300 1988 ? D 15:29 0:01 qmgr -l -t fifo -u
root 4184 0.0 0.0 49952 440 ? Ss 15:29 0:00 /usr/sbin/sshd
postfix 4236 0.0 0.0 42592 2028 ? S 15:29 0:00 tlsmgr -l -t unix -u -c
postfix 4237 0.0 0.0 39964 1600 ? S 15:29 0:00 anvil -l -t unix -u -c
root 4248 0.0 0.0 73868 1484 ? Ss 15:29 0:00 /usr/bin/perl /usr/share/usermin/miniserv.pl /etc/usermin/miniserv.
www-data 4307 0.3 0.7 690312 31616 ? D 15:29 0:17 /usr/sbin/apache2 -k start
www-data 4313 0.3 0.9 690784 39716 ? D 15:29 0:17 /usr/sbin/apache2 -k start
www-data 4314 0.0 0.6 681020 28188 ? S 15:29 0:02 /usr/sbin/apache2 -k start
www-data 4315 0.0 0.6 676688 26892 ? S 15:29 0:02 /usr/sbin/apache2 -k start
www-data 4316 0.3 0.9 687844 37140 ? D 15:29 0:16 /usr/sbin/apache2 -k start
www-data 4335 0.3 1.0 689768 41472 ? D 15:29 0:18 /usr/sbin/apache2 -k start
www-data 4336 0.3 0.8 690040 34292 ? D 15:29 0:16 /usr/sbin/apache2 -k start
www-data 4337 0.3 0.7 690596 31960 ? D 15:29 0:16 /usr/sbin/apache2 -k start
root 4338 0.0 0.1 123732 4384 ? Ss 15:29 0:00 /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.co
www-data 4341 0.3 0.9 691008 37684 ? D 15:29 0:17 /usr/sbin/apache2 -k start
www-data 4343 0.0 0.7 678852 30468 ? S 15:29 0:02 /usr/sbin/apache2 -k start
www-data 4344 0.3 0.7 691716 32012 ? D 15:29 0:17 /usr/sbin/apache2 -k start
root 4374 0.0 0.0 16264 628 tty1 Ss+ 15:29 0:00 /sbin/getty 38400 tty1
root 4375 0.0 0.0 16264 628 tty2 Ss+ 15:29 0:00 /sbin/getty 38400 tty2
root 4376 0.0 0.0 16264 628 tty3 Ss+ 15:29 0:00 /sbin/getty 38400 tty3
root 4377 0.0 0.0 16264 628 tty4 Ss+ 15:29 0:00 /sbin/getty 38400 tty4
root 4378 0.0 0.0 16264 628 tty5 Ss+ 15:29 0:00 /sbin/getty 38400 tty5
root 4379 0.0 0.0 16264 628 tty6 Ss+ 15:29 0:00 /sbin/getty 38400 tty6
www-data 4411 0.5 0.7 693404 31548 ? D 15:29 0:28 /usr/sbin/apache2 -k start
www-data 4483 0.3 1.0 687768 41384 ? D 15:29 0:17 /usr/sbin/apache2 -k start
www-data 4484 0.3 0.6 665064 26264 ? S 15:29 0:15 /usr/sbin/apache2 -k start
www-data 4497 0.2 0.4 665612 16476 ? S 15:29 0:14 /usr/sbin/apache2 -k start
www-data 4498 0.3 1.0 688724 42836 ? D 15:29 0:16 /usr/sbin/apache2 -k start
www-data 4631 0.3 0.7 666412 31136 ? D 15:30 0:14 /usr/sbin/apache2 -k start
www-data 4632 0.3 1.1 690148 47592 ? D 15:30 0:17 /usr/sbin/apache2 -k start
www-data 4636 0.0 0.9 685132 39792 ? D 15:30 0:03 /usr/sbin/apache2 -k start
www-data 4866 0.3 0.9 689948 37212 ? D 15:30 0:17 /usr/sbin/apache2 -k start
www-data 5089 0.3 0.7 689784 30104 ? S 15:30 0:17 /usr/sbin/apache2 -k start
www-data 5403 0.3 0.8 690076 33508 ? D 15:30 0:16 /usr/sbin/apache2 -k start
www-data 5562 0.3 0.8 690084 36224 ? D 15:31 0:16 /usr/sbin/apache2 -k start
www-data 5567 0.3 1.0 670984 40928 ? D 15:31 0:15 /usr/sbin/apache2 -k start
www-data 5574 0.3 0.8 690100 34848 ? D 15:31 0:16 /usr/sbin/apache2 -k start
www-data 5610 0.0 0.9 657176 39352 ? S 15:31 0:00 /usr/sbin/apache2 -k start
www-data 5612 0.3 0.7 688688 32148 ? D 15:31 0:16 /usr/sbin/apache2 -k start
www-data 5639 0.3 1.0 687528 40808 ? D 15:32 0:16 /usr/sbin/apache2 -k start
www-data 5645 0.3 1.1 689664 48128 ? D 15:32 0:14 /usr/sbin/apache2 -k start
www-data 5646 0.3 0.5 663232 22948 ? S 15:32 0:14 /usr/sbin/apache2 -k start
www-data 5657 0.1 0.8 689292 32572 ? S 15:32 0:05 /usr/sbin/apache2 -k start
www-data 5660 0.2 1.0 688744 42320 ? D 15:32 0:14 /usr/sbin/apache2 -k start
www-data 5661 0.0 0.9 688504 39324 ? D 15:32 0:03 /usr/sbin/apache2 -k start
www-data 5665 0.1 0.8 686924 34892 ? D 15:32 0:05 /usr/sbin/apache2 -k start
www-data 5676 0.3 0.8 690332 34432 ? D 15:32 0:16 /usr/sbin/apache2 -k start
www-data 5678 0.3 0.8 690596 33680 ? D 15:32 0:17 /usr/sbin/apache2 -k start
www-data 5680 0.0 0.8 663496 32596 ? S 15:32 0:01 /usr/sbin/apache2 -k start
www-data 5682 0.3 0.9 665180 37612 ? S 15:32 0:15 /usr/sbin/apache2 -k start
www-data 5688 0.0 0.9 684140 37620 ? D 15:32 0:03 /usr/sbin/apache2 -k start
www-data 5710 0.3 0.8 692248 32652 ? S 15:32 0:16 /usr/sbin/apache2 -k start
www-data 5718 0.1 0.8 689192 34068 ? D 15:33 0:05 /usr/sbin/apache2 -k start
www-data 5743 0.0 1.0 687056 44256 ? S 15:33 0:02 /usr/sbin/apache2 -k start
www-data 5751 0.2 1.0 686644 40940 ? D 15:33 0:13 /usr/sbin/apache2 -k start
www-data 5752 0.1 0.7 689052 31068 ? S 15:33 0:04 /usr/sbin/apache2 -k start
www-data 5754 0.0 0.8 685352 35908 ? D 15:33 0:03 /usr/sbin/apache2 -k start
www-data 5755 0.0 0.7 678956 29932 ? S 15:33 0:02 /usr/sbin/apache2 -k start
www-data 5756 0.1 0.7 688968 31212 ? D 15:33 0:04 /usr/sbin/apache2 -k start
www-data 5758 0.1 1.0 686668 42976 ? D 15:33 0:05 /usr/sbin/apache2 -k start
www-data 5759 0.1 0.8 688408 32884 ? S 15:33 0:05 /usr/sbin/apache2 -k start
www-data 5760 0.1 0.8 689412 32584 ? D 15:33 0:04 /usr/sbin/apache2 -k start
www-data 5761 0.1 0.7 691876 31104 ? D 15:33 0:04 /usr/sbin/apache2 -k start
www-data 5764 0.0 1.1 685300 47180 ? S 15:33 0:02 /usr/sbin/apache2 -k start
www-data 5765 0.1 1.0 682232 42572 ? D 15:33 0:05 /usr/sbin/apache2 -k start
www-data 5767 0.0 0.6 676468 26328 ? S 15:33 0:02 /usr/sbin/apache2 -k start
www-data 5768 0.0 0.6 675436 25808 ? S 15:33 0:02 /usr/sbin/apache2 -k start
www-data 5769 0.3 1.1 691188 46492 ? D 15:33 0:14 /usr/sbin/apache2 -k start
www-data 5824 0.0 0.5 666316 24064 ? S 15:33 0:03 /usr/sbin/apache2 -k start
www-data 5831 0.3 1.0 689308 42708 ? D 15:33 0:14 /usr/sbin/apache2 -k start
www-data 5845 0.0 0.6 679624 26912 ? S 15:34 0:02 /usr/sbin/apache2 -k start
www-data 5846 0.1 0.7 689536 31904 ? S 15:34 0:04 /usr/sbin/apache2 -k start
www-data 5853 0.3 1.2 688120 50068 ? D 15:34 0:15 /usr/sbin/apache2 -k start
www-data 5855 0.3 0.9 686316 38316 ? S 15:34 0:14 /usr/sbin/apache2 -k start
www-data 5856 0.3 1.0 688104 43708 ? S 15:34 0:14 /usr/sbin/apache2 -k start
www-data 5880 0.0 1.1 685884 45496 ? D 15:34 0:03 /usr/sbin/apache2 -k start
www-data 5881 0.1 1.0 682360 41128 ? D 15:34 0:05 /usr/sbin/apache2 -k start
www-data 5882 0.1 0.7 688324 32244 ? D 15:34 0:05 /usr/sbin/apache2 -k start
www-data 5883 0.1 0.8 689080 32512 ? D 15:34 0:05 /usr/sbin/apache2 -k start
www-data 5899 0.3 0.9 691728 38448 ? D 15:34 0:15 /usr/sbin/apache2 -k start
www-data 5901 0.1 0.8 664832 35084 ? S 15:34 0:05 /usr/sbin/apache2 -k start
www-data 5902 0.2 0.7 676496 28852 ? S 15:34 0:12 /usr/sbin/apache2 -k start
www-data 5904 0.0 1.0 662404 44004 ? S 15:34 0:01 /usr/sbin/apache2 -k start
www-data 5905 0.1 0.8 686592 35928 ? S 15:34 0:04 /usr/sbin/apache2 -k start
www-data 5906 0.3 0.7 665324 29408 ? S 15:34 0:14 /usr/sbin/apache2 -k start
www-data 5909 0.1 0.7 689732 29832 ? D 15:34 0:04 /usr/sbin/apache2 -k start
www-data 5921 0.3 0.8 690096 34296 ? S 15:34 0:15 /usr/sbin/apache2 -k start
www-data 5926 0.0 0.7 688228 31324 ? D 15:34 0:02 /usr/sbin/apache2 -k start
www-data 6016 0.1 0.8 689592 32988 ? D 15:35 0:04 /usr/sbin/apache2 -k start
www-data 6028 0.0 0.5 647900 21132 ? S 15:35 0:00 /usr/sbin/apache2 -k start
www-data 6060 0.3 0.9 688192 37600 ? D 15:35 0:14 /usr/sbin/apache2 -k start
www-data 6065 0.3 0.9 689248 39976 ? D 15:35 0:14 /usr/sbin/apache2 -k start
www-data 6077 0.1 0.8 688856 34424 ? D 15:35 0:04 /usr/sbin/apache2 -k start
www-data 6079 0.1 0.8 689392 35480 ? D 15:35 0:05 /usr/sbin/apache2 -k start
www-data 6080 0.0 0.6 676456 27232 ? S 15:35 0:02 /usr/sbin/apache2 -k start
www-data 6082 0.3 1.0 689232 42072 ? D 15:35 0:14 /usr/sbin/apache2 -k start
www-data 6151 0.3 0.7 690224 32196 ? D 15:36 0:16 /usr/sbin/apache2 -k start
www-data 6152 0.2 0.8 683504 33516 ? S 15:36 0:13 /usr/sbin/apache2 -k start
www-data 6157 0.0 0.9 684240 36704 ? S 15:36 0:02 /usr/sbin/apache2 -k start
www-data 6162 0.0 0.4 647084 18876 ? S 15:36 0:00 /usr/sbin/apache2 -k start
www-data 6163 0.3 0.9 690116 36996 ? D 15:36 0:15 /usr/sbin/apache2 -k start
www-data 6164 0.1 0.9 687832 37276 ? D 15:36 0:05 /usr/sbin/apache2 -k start
www-data 6165 0.3 1.0 687604 43652 ? D 15:36 0:15 /usr/sbin/apache2 -k start
www-data 6175 0.3 1.0 688444 44100 ? D 15:36 0:14 /usr/sbin/apache2 -k start
www-data 6178 0.3 1.0 664772 42860 ? D 15:36 0:15 /usr/sbin/apache2 -k start
www-data 6179 0.0 1.0 687720 44052 ? D 15:36 0:03 /usr/sbin/apache2 -k start
www-data 6180 0.0 0.8 680312 34344 ? S 15:36 0:01 /usr/sbin/apache2 -k start
www-data 6181 0.0 0.7 680848 29824 ? S 15:36 0:02 /usr/sbin/apache2 -k start
www-data 6182 0.3 0.7 692280 32300 ? D 15:36 0:14 /usr/sbin/apache2 -k start
www-data 6190 0.0 0.8 679000 32844 ? S 15:36 0:01 /usr/sbin/apache2 -k start
www-data 6192 0.1 0.9 687324 38696 ? D 15:36 0:04 /usr/sbin/apache2 -k start
www-data 6194 0.0 1.0 684272 42940 ? S 15:37 0:02 /usr/sbin/apache2 -k start
www-data 6196 0.0 0.2 639716 10564 ? D 15:37 0:00 /usr/sbin/apache2 -k start
www-data 6198 0.2 0.7 681860 31052 ? S 15:37 0:12 /usr/sbin/apache2 -k start
www-data 6200 0.0 0.9 660344 40356 ? S 15:37 0:01 /usr/sbin/apache2 -k start
www-data 6237 0.1 0.8 686804 34396 ? D 15:37 0:04 /usr/sbin/apache2 -k start
www-data 6238 0.3 1.0 688556 41692 ? D 15:37 0:14 /usr/sbin/apache2 -k start
www-data 6239 0.1 1.0 689240 44356 ? D 15:37 0:04 /usr/sbin/apache2 -k start
www-data 6240 0.0 0.8 683512 34616 ? D 15:37 0:02 /usr/sbin/apache2 -k start
www-data 6241 0.3 0.8 689972 33548 ? S 15:37 0:15 /usr/sbin/apache2 -k start
www-data 6242 0.1 0.8 687056 32880 ? D 15:37 0:04 /usr/sbin/apache2 -k start
www-data 6243 0.3 0.8 690880 36032 ? D 15:37 0:16 /usr/sbin/apache2 -k start
www-data 6271 0.1 0.9 689100 36736 ? D 15:38 0:05 /usr/sbin/apache2 -k start
www-data 6272 0.3 0.8 689892 36128 ? D 15:38 0:15 /usr/sbin/apache2 -k start
www-data 6273 0.0 0.2 639816 12020 ? S 15:38 0:00 /usr/sbin/apache2 -k start
www-data 6288 0.0 0.9 685504 39424 ? D 15:38 0:03 /usr/sbin/apache2 -k start
www-data 6289 0.2 0.6 684492 28088 ? S 15:38 0:13 /usr/sbin/apache2 -k start
www-data 6291 0.3 0.7 690340 30108 ? D 15:38 0:15 /usr/sbin/apache2 -k start
www-data 6295 0.3 1.0 669540 40864 ? D 15:38 0:16 /usr/sbin/apache2 -k start
www-data 6296 0.3 0.8 690340 33564 ? S 15:38 0:15 /usr/sbin/apache2 -k start
www-data 6336 0.0 0.3 674252 15960 ? S 15:38 0:01 /usr/sbin/apache2 -k start
www-data 6338 0.0 0.9 660380 40100 ? S 15:38 0:01 /usr/sbin/apache2 -k start
root 6376 0.0 0.1 146952 5104 ? S 15:39 0:02 spamd child
www-data 6486 0.0 1.0 686636 43080 ? D 15:39 0:03 /usr/sbin/apache2 -k start
www-data 6492 0.1 0.8 689500 34620 ? S 15:39 0:05 /usr/sbin/apache2 -k start
www-data 6498 0.0 1.0 687164 43724 ? D 15:40 0:03 /usr/sbin/apache2 -k start
www-data 6500 0.0 1.1 690860 45272 ? S 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6501 0.3 1.0 689492 44432 ? D 15:40 0:15 /usr/sbin/apache2 -k start
www-data 6508 0.3 1.1 689300 45460 ? D 15:40 0:14 /usr/sbin/apache2 -k start
www-data 6582 0.2 0.7 682200 32072 ? S 15:40 0:12 /usr/sbin/apache2 -k start
www-data 6583 0.0 0.8 682504 34148 ? S 15:40 0:03 /usr/sbin/apache2 -k start
www-data 6584 0.0 0.9 685992 38780 ? D 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6586 0.3 0.6 679328 26908 ? D 15:40 0:13 /usr/sbin/apache2 -k start
www-data 6587 0.0 0.8 673996 33252 ? D 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6588 0.3 0.7 672012 30400 ? S 15:40 0:14 /usr/sbin/apache2 -k start
www-data 6589 0.0 1.1 687912 47464 ? S 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6596 0.0 0.9 684360 36832 ? S 15:40 0:01 /usr/sbin/apache2 -k start
www-data 6597 0.3 0.7 682972 32324 ? S 15:40 0:13 /usr/sbin/apache2 -k start
www-data 6605 0.1 0.9 689764 39484 ? D 15:40 0:04 /usr/sbin/apache2 -k start
www-data 6606 0.0 0.6 675664 25176 ? D 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6607 0.0 1.2 688968 49024 ? D 15:40 0:02 /usr/sbin/apache2 -k start
www-data 6626 0.0 0.9 656924 39152 ? S 15:40 0:00 /usr/sbin/apache2 -k start
www-data 6629 0.3 0.7 680904 28440 ? S 15:40 0:12 /usr/sbin/apache2 -k start
www-data 6630 0.3 0.7 679308 30248 ? D 15:40 0:13 /usr/sbin/apache2 -k start
www-data 6683 0.0 1.0 662604 42464 ? S 15:41 0:00 /usr/sbin/apache2 -k start
www-data 6690 0.0 0.7 676692 28680 ? S 15:41 0:02 /usr/sbin/apache2 -k start
www-data 6709 0.0 0.8 680332 36336 ? D 15:42 0:02 /usr/sbin/apache2 -k start
www-data 6710 0.3 1.2 689764 49852 ? D 15:42 0:14 /usr/sbin/apache2 -k start
postfix 6967 0.0 0.0 40212 2056 ? S 15:46 0:00 local -t unix
root 7397 0.0 0.0 54584 1604 ? Ss 15:53 0:00 sshd: user [priv]
user 7413 0.0 0.0 54584 712 ? S 15:53 0:00 sshd: user@pts/0
root 7431 0.0 0.0 19268 804 ? S 15:53 0:00 dovecot/ssl-params
postfix 7439 0.0 0.0 40212 2104 ? S 15:53 0:00 local -t unix
user 7459 0.0 0.0 20556 692 pts/0 Ss 15:53 0:00 -bash
root 7606 0.0 0.0 35660 780 pts/0 S 15:54 0:00 su -
root 7609 0.0 0.0 21112 1068 pts/0 S 15:54 0:00 -su
root 8150 0.0 0.0 33196 728 ? S 16:00 0:00 /USR/SBIN/CRON
root 8179 0.0 0.0 4188 472 ? Ss 16:00 0:00 /bin/sh -c test -x /usr/sbin/tigercron && { [ -r "$DEFAULT" ] &&
root 8180 0.0 0.0 4188 512 ? SN 16:00 0:00 /bin/sh /usr/sbin/tigercron -q
root 8524 0.0 0.0 4188 284 ? SN 16:02 0:00 /bin/sh /usr/sbin/tigercron -q
root 8525 0.0 0.0 4188 264 ? SN 16:02 0:00 /bin/sh /usr/sbin/tigercron -q
root 10018 0.0 0.0 4192 524 ? SN 16:08 0:00 /bin/sh /usr/lib/tiger/scripts/check_rootkit
root 10503 0.0 0.0 4488 608 ? SN 16:11 0:00 /bin/sh /usr/sbin/chkrootkit -q
root 10504 0.0 0.0 4192 0 ? SN 16:11 0:00 /bin/sh /usr/lib/tiger/scripts/check_rootkit
root 10529 0.0 0.2 133796 11720 ? S 16:12 0:00 /usr/share/webmin/webmincron/webmincron.pl
root 10940 0.2 1.7 194116 70076 ? S 16:16 0:04 /usr/share/webmin/virtual-server/collectinfo.pl
root 11321 0.0 0.0 0 0 ? S 16:21 0:01 [kworker/0:0]
postfix 11389 0.0 0.0 40800 3204 ? S 16:22 0:00 cleanup -z -t unix -u -c
root 11400 0.2 0.0 11236 996 ? DN 16:23 0:04 /usr/bin/find /dev /tmp /lib /etc /var ( -name tcp.log -o -name .li
postfix 11455 0.0 0.1 64052 4144 ? S 16:23 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
root 11469 0.0 0.1 49836 4448 pts/0 D+ 16:24 0:01 apt-get install smartmontools
root 11687 0.1 0.0 4124 636 ? D 16:29 0:02 /usr/bin/md5sum --check /var/lib/csf/csf.tempint
root 11823 0.0 0.8 133916 32664 ? D 16:34 0:00 /usr/share/webmin/webmincron/webmincron.pl
root 11832 0.0 0.0 0 0 ? S 16:34 0:00 [kworker/1:1]
postfix 11850 0.0 0.0 40096 2356 ? S 16:35 0:00 showq -t unix -u -c
postfix 11872 0.0 0.0 40096 2300 ? S 16:35 0:00 showq -t unix -u -c
root 11944 0.0 0.0 54584 2272 ? Ss 16:36 0:00 sshd: user [priv]
postfix 11947 0.0 0.0 64040 4044 ? S 16:36 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
postfix 11964 0.0 0.0 44268 2680 ? S 16:37 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
user 11971 0.0 0.0 54584 1180 ? D 16:37 0:00 sshd: user@pts/1
postfix 11975 0.0 0.0 44268 2788 ? S 16:37 0:00 smtp -t unix -u -c
postfix 11976 0.0 0.0 40800 3388 ? S 16:37 0:00 cleanup -z -t unix -u -c
user 11979 0.0 0.0 20556 3788 pts/1 Ss 16:37 0:00 -bash
postfix 12001 0.0 0.0 64036 3808 ? S 16:37 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
postfix 12005 0.0 0.1 64048 4100 ? S 16:37 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
postfix 12063 0.0 0.0 40800 3388 ? S 16:38 0:00 cleanup -z -t unix -u -c
root 12080 0.0 0.0 33196 1128 ? S 16:39 0:00 /USR/SBIN/CRON
root 12083 0.0 0.0 4188 536 ? Ss 16:39 0:00 /bin/sh -c [ -x /usr/lib/php5/maxlifetime ] && [ -x /usr/lib/php5
root 12117 0.0 0.0 4188 572 ? S 16:39 0:00 /bin/sh -e /usr/lib/php5/maxlifetime
root 12242 0.0 0.0 35660 1188 pts/1 S 16:40 0:00 su -
root 12245 0.0 0.0 21112 3404 pts/1 S 16:40 0:00 -su
1010 12280 0.0 0.0 4188 576 ? Ss 16:41 0:00 sh -c /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
root 12281 0.0 0.0 15140 836 ? S 16:41 0:00 /usr/bin/procmail-wrapper -o -a user1.com -d oceanman-fishin
postfix 12282 0.0 0.0 40068 2416 ? S 16:41 0:00 showq -t unix -u -c
root 12285 0.0 0.0 15140 156 ? S 16:41 0:00 /usr/bin/procmail-wrapper -o -a user1.com -d oceanman-fishin
root 12286 0.1 0.9 66952 37916 ? D 16:41 0:01 /usr/bin/perl /usr/share/webmin/virtual-server/lookup-domain.pl oce
root 12301 0.0 0.0 0 0 ? S 16:41 0:00 [kworker/0:1]
postfix 12353 0.0 0.0 44268 2676 ? S 16:42 0:00 smtp -t unix -u -c
postfix 12358 0.0 0.0 40508 2900 ? S 16:42 0:00 trivial-rewrite -n rewrite -t unix -u -c
root 12380 0.0 0.0 33196 1040 ? S 16:43 0:00 /USR/SBIN/CRON
root 12383 0.0 0.0 4188 576 ? Ss 16:43 0:00 /bin/sh -c /usr/bin/mailq | /bin/grep MAILER-DAEMON | /usr/bin/cut
postfix 12387 0.0 0.0 37880 1960 ? D 16:43 0:00 /usr/sbin/postsuper -d -
postfix 12390 0.0 0.0 44268 2776 ? S 16:43 0:00 smtp -t unix -u -c
postfix 12391 0.0 0.0 44268 2772 ? S 16:43 0:00 smtp -t unix -u -c
postfix 12405 0.0 0.0 44268 2776 ? S 16:43 0:00 smtp -t unix -u -c
postfix 12407 0.0 0.0 44268 2776 ? S 16:43 0:00 smtp -t unix -u -c
postfix 12432 0.0 0.0 40068 2420 ? S 16:44 0:00 showq -t unix -u -c
root 12450 0.0 0.0 33196 1156 ? S 16:45 0:00 /USR/SBIN/CRON
root 12456 0.0 0.0 4188 576 ? Ss 16:45 0:00 /bin/sh -c /etc/webmin/status/monitor.pl
root 12458 0.1 0.3 41440 15068 ? D 16:45 0:00 /usr/bin/perl /usr/share/webmin/status/monitor.pl
root 12464 0.0 0.0 0 0 ? S 16:45 0:00 [kworker/1:0]
postfix 12467 0.0 0.1 63916 4704 ? S 16:45 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
root 12471 0.3 1.2 143816 51112 ? D 16:45 0:01 /usr/share/webmin/webmincron/webmincron.pl
postfix 12481 0.0 0.0 40072 2420 ? S 16:46 0:00 showq -t unix -u -c
postfix 12536 0.0 0.0 40800 3620 ? S 16:46 0:00 cleanup -z -t unix -u -c
postfix 12542 0.0 0.0 40800 3624 ? S 16:46 0:00 cleanup -z -t unix -u -c
root 12543 0.2 0.4 479056 17692 ? D 16:46 0:00 php5 -c /etc/php5/cgi/php.ini -d error_reporting='~E_ALL' -r print
root 12556 0.1 0.0 0 0 ? Z 16:47 0:00 [/usr/share/webm] <defunct>
postfix 12558 0.0 0.0 40068 2416 ? S 16:47 0:00 showq -t unix -u -c
postfix 12560 0.0 0.0 40800 3624 ? S 16:47 0:00 cleanup -z -t unix -u -c
postfix 12562 0.0 0.0 40068 2420 ? S 16:47 0:00 showq -t unix -u -c
postfix 12563 0.0 0.0 39996 2340 ? D 16:47 0:00 bounce -z -n defer -t unix -u -c
postfix 12586 0.0 0.0 44268 2752 ? S 16:47 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
1010 12590 0.0 0.0 4188 580 ? Ss 16:47 0:00 sh -c /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
root 12591 0.0 0.0 15140 852 ? S 16:47 0:00 /usr/bin/procmail-wrapper -o -a user1.com -d oceanman-fishin
root 12598 0.0 0.0 15140 176 ? S 16:47 0:00 /usr/bin/procmail-wrapper -o -a user1.com -d oceanman-fishin
root 12599 0.0 0.0 21852 3108 ? S 16:47 0:00 /usr/bin/perl /usr/share/webmin/virtual-server/lookup-domain.pl oce
postfix 12600 0.0 0.0 44268 2752 ? S 16:47 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12602 0.0 0.0 44268 2708 ? S 16:47 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12603 0.0 0.0 39996 2468 ? D 16:47 0:00 bounce -z -n defer -t unix -u -c
postfix 12613 0.0 0.0 40508 3120 ? S 16:47 0:00 trivial-rewrite -n rewrite -t unix -u -c
postfix 12615 0.0 0.0 44268 2716 ? S 16:48 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12617 0.0 0.0 44268 2712 ? S 16:48 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12628 0.0 0.0 40068 2420 ? S 16:48 0:00 showq -t unix -u -c
postfix 12629 0.0 0.0 39996 2336 ? D 16:48 0:00 bounce -z -n defer -t unix -u -c
postfix 12630 0.0 0.0 39996 2336 ? D 16:48 0:00 bounce -z -n defer -t unix -u -c
postfix 12633 0.0 0.0 39996 2340 ? D 16:48 0:00 bounce -z -n defer -t unix -u -c
vm 12645 0.1 0.0 14668 904 ? D 16:49 0:00 /usr/lib/apache2/suexec 1048 1037 php5.fcgi
postfix 12654 0.0 0.1 63916 4904 ? S 16:49 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
postfix 12655 0.0 0.0 39964 2324 ? S 16:49 0:00 proxymap -t unix -u
root 12663 0.0 0.0 33196 1156 ? S 16:50 0:00 /USR/SBIN/CRON
postfix 12667 0.0 0.0 44268 2792 ? S 16:50 0:00 smtp -t unix -u -c
postfix 12670 0.0 0.0 44268 2716 ? S 16:50 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12671 0.0 0.0 39996 2336 ? D 16:50 0:00 bounce -z -n defer -t unix -u -c
postfix 12681 0.0 0.0 40072 2416 ? S 16:50 0:00 showq -t unix -u -c
root 12682 0.0 0.0 4188 576 ? Ss 16:50 0:00 /bin/sh -c /etc/webmin/status/monitor.pl
root 12683 0.3 0.2 35612 11196 ? D 16:50 0:00 /usr/bin/perl /usr/share/webmin/status/monitor.pl
root 12685 0.1 0.2 68108 11060 ? D 16:50 0:00 lfd - (child) closing
postfix 12689 0.0 0.0 44268 2788 ? S 16:50 0:00 smtp -t unix -u -c
postfix 12694 0.0 0.0 39964 2324 ? S 16:50 0:00 scache -l -t unix -u -c
postfix 12695 0.0 0.0 44268 2796 ? S 16:50 0:00 smtp -t unix -u -c
postfix 12696 0.0 0.0 44268 2640 ? S 16:50 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
postfix 12697 0.0 0.0 44268 2640 ? S 16:50 0:00 smtp -n smtp-134631006020233 -t unix -u -c -o smtp_bind_address=208
root 12703 0.2 0.0 16844 1248 pts/1 R+ 16:50 0:00 ps auxw
postfix 12743 0.1 0.0 44268 2480 ? D 16:50 0:00 smtp -t unix -u -c
postfix 12744 0.0 0.0 39996 2336 ? D 16:50 0:00 bounce -z -n defer -t unix -u -c
postfix 12749 0.0 0.1 61844 4600 ? S 16:50 0:00 smtpd -n smtp -t inet -u -c -o stress= -o smtpd_sasl_auth_enable=ye
root 12750 0.1 0.0 123732 3424 ? D 16:50 0:00 /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.co
root 12751 0.1 0.0 4188 580 ? D 16:50 0:00 sh -c (e2label /dev/disk/by-uuid/8f256941-31b0-4170-be5e-46304d554a
root 12752 0.1 0.0 17044 788 ? D 16:50 0:00 e2label /dev/disk/by-uuid/8f256941-31b0-4170-be5e-46304d554a3a
root 12753 0.0 0.0 0 0 ? S 16:50 0:00 [kworker/0:2]
postfix 12770 0.2 0.0 44268 2640 ? D 16:51 0:00 smtp -t unix -u -c
www-data 12771 0.0 0.0 224060 2156 ? R 16:51 0:00 /usr/sbin/apache2 -k start
Submitted by jimdunn on Thu, 01/26/2017 - 17:08 Pro Licensee Comment #7
It appears I have an apache issue (too many www-data processes). When I stopped apache, the load average dropped to 0.01.
I am now researching this.
Submitted by andreychek on Thu, 01/26/2017 - 18:00 Comment #8
You may want to remove all the emails from the queue that shouldn't be there, as they'll just make things worse.
Regarding Apache though, what you could do review the PHP processes that you see spawned from those Apache processes (assuming your sites are running PHP). Then, check out which user owns them, that can help you nail down the culprit.
Submitted by jimdunn on Thu, 01/26/2017 - 20:58 Pro Licensee Comment #9
Hey, thanks for all your help... turns out I had a client with Wordpress plugin Wordfence... which was spawning processes left and right (would force load average up to 150+ in 10 minutes).
I've disabled their site until they return.
Thx!!!
Submitted by jimdunn on Thu, 01/26/2017 - 21:00 Pro Licensee Comment #10
Submitted by jimdunn on Thu, 01/26/2017 - 21:01 Pro Licensee Comment #11
Submitted by andreychek on Thu, 01/26/2017 - 22:32 Comment #12
No problem, glad to hear you got it working! Feel free to let us know if you have any additional questions.