Plantage serveur

Bonjour,

Depuis quelques jours mon serveur plante et le seul moyen de le redemarrer est le reboot hardware.

Voici ce qui est indiqué dans les logs :

Jan 24 16:12:03 ks389006 kernel: apache2 invoked oom-killer: gfp_mask=0x84d0, order=0, oom_adj=0, oom_score_adj=0 Jan 24 16:12:09 ks389006 kernel: apache2 cpuset=/ mems_allowed=0 Jan 24 16:12:09 ks389006 kernel: Pid: 14110, comm: apache2 Not tainted 2.6.38.2-grsec-xxxx-grs-ipv6-64 #2 Jan 24 16:12:09 ks389006 kernel: Call Trace: Jan 24 16:12:09 ks389006 kernel: [<ffffffff810e94a8>] ? dump_header+0x88/0x1d0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810b3bb3>] ? ktime_get_ts+0xb3/0xe0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810e93f1>] ? oom_unkillable_task+0x91/0xc0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff815337a5>] ? ___ratelimit+0xa5/0x120 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810e99cc>] ? oom_kill_process+0x8c/0x2e0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810e9893>] ? select_bad_process+0x93/0x140 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810e9e58>] ? out_of_memory+0x238/0x3e0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff810eefed>] ? __alloc_pages_nodemask+0x86d/0x8a0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8111affa>] ? alloc_pages_current+0xaa/0x120 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8106edd6>] ? pte_alloc_one+0x16/0x40 Jan 24 16:12:09 ks389006 kernel: [<ffffffff81104bb9>] ? __pte_alloc+0x29/0xd0 Jan 24 16:12:09 ks389006 kernel: [<ffffffff81104dc3>] ? handle_mm_fault+0x163/0x200 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8106b307>] ? do_page_fault+0x1a7/0x450 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8110b334>] ? do_brk+0x234/0x410 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8114c288>] ? mntput+0x18/0x30 Jan 24 16:12:09 ks389006 kernel: [<ffffffff8112f111>] ? fput+0x1b1/0x240 Jan 24 16:12:09 ks389006 kernel: [<ffffffff81ab9a3f>] ? page_fault+0x1f/0x30 Jan 24 16:12:09 ks389006 kernel: Mem-Info: Jan 24 16:12:09 ks389006 kernel: Node 0 DMA per-cpu: Jan 24 16:12:09 ks389006 kernel: CPU 0: hi: 0, btch: 1 usd: 0 Jan 24 16:12:09 ks389006 kernel: CPU 1: hi: 0, btch: 1 usd: 0 Jan 24 16:12:09 ks389006 kernel: Node 0 DMA32 per-cpu: Jan 24 16:12:09 ks389006 kernel: CPU 0: hi: 186, btch: 31 usd: 0 Jan 24 16:12:09 ks389006 kernel: CPU 1: hi: 186, btch: 31 usd: 0 Jan 24 16:12:09 ks389006 kernel: active_anon:354101 inactive_anon:118786 isolated_anon:832 Jan 24 16:12:09 ks389006 kernel: active_file:156 inactive_file:188 isolated_file:96 Jan 24 16:12:09 ks389006 kernel: unevictable:2 dirty:0 writeback:230 unstable:0 Jan 24 16:12:09 ks389006 kernel: free:3421 slab_reclaimable:1426 slab_unreclaimable:14547 Jan 24 16:12:09 ks389006 kernel: mapped:137 shmem:13 pagetables:9449 bounce:0 Jan 24 16:12:09 ks389006 kernel: Node 0 DMA free:7992kB min:40kB low:48kB high:60kB active_anon:3844kB inactive_anon:4020kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB iso$ Jan 24 16:12:09 ks389006 kernel: lowmem_reserve[]: 0 1987 1987 1987 Jan 24 16:12:09 ks389006 kernel: Node 0 DMA32 free:5692kB min:5684kB low:7104kB high:8524kB active_anon:1412560kB inactive_anon:471124kB active_file:624kB inactive_file:744kB unevictable:8kB isola$ Jan 24 16:12:09 ks389006 kernel: lowmem_reserve[]: 0 0 0 0 Jan 24 16:12:09 ks389006 kernel: Node 0 DMA: 1*4kB 1*8kB 1*16kB 3*32kB 1*64kB 1*128kB 2*256kB 0*512kB 1*1024kB 1*2048kB 1*4096kB = 7996k

J’ai regardé sur le net et il est indiqué que mon apache est mal configuré.
Voici un morceau de la config sachant que mon serveur est un kimsufi 2g :

<IfModule mpm_prefork_module> StartServers 5 MinSpareServers 5 MaxSpareServers 8 MaxClients 65 MaxRequestsPerChild 500 </IfModule>

Merci de votre aide

Personne ?

Merci

si tu redémare ton apache tu à des erreurs?

fait un :: tail -f /var/log/apache2/*.log

Quand je redemarre apache j’ai ceci :

Restarting web server: apache2[Wed Jan 25 10:39:24 2012] [warn] The Alias direct ive in /etc/apache2/sites-enabled/munin.conf at line 1 will probably never match because it overlaps an earlier Alias. ... waiting .[Wed Jan 25 10:39:26 2012] [warn] The Alias directive in /etc/apac he2/sites-enabled/munin.conf at line 1 will probably never match because it over laps an earlier Alias.

Je ne pense pas que c’est ceci qui fais planter le serveur mais plutot une mauvaise config d’apache dans apache2.conf

Et le tail -f /var/log/apache2/*.log ne donne pas d’erreur. ( En même temps il y a je ne sais combien de page ^^

tu va remplacer mich dans ca machine toi tu sait!!!

envoie ton fichier de conf apache.

oom = out of memory
Ton apache consomme trop de mémoire.

Plusieurs pistes à explorer :

  • machine sous dimensionnée, nombre de page vue par jour ?
  • trafic indésirable : attaque / flood, présence d’un parefeu comme iptables ?
  • si php présence d’un opcode comme apc/xcache/eaccelerator ?
  • tenter de diminuer/virer le keepalive (affiche le contenu du fichier /etc/apache2/apache2.conf)

Pour le nombre de page vu par jour, pour le moment je n’est pas l’info mais ce n’est pas énorme.
Iptables est bien présent

Pour eaccelerator il n’est pas présent mais je l’installerai ( Je boss sous ispcp ).
Et je viens de trouver un tutoriel ici qu’il faudrai que je mette en application
isp-control.net/ispcp/wiki/howto_eaccelerator

Iptables est bien présent.
Je viens de modifier le keepalive, je l’ai mis à off, cela va changer quoi ?

Voici apache2.conf aprèsla modif du keepalive :

[code]#

Based upon the NCSA server configuration files originally by Rob McCool.

This is the main Apache server configuration file. It contains the

configuration directives that give the server its instructions.

See http://httpd.apache.org/docs/2.2/ for detailed information about

the directives.

Do NOT simply read the instructions in here without understanding

what they do. They’re here only as hints or reminders. If you are unsure

consult the online docs. You have been warned.

The configuration directives are grouped into three basic sections:

1. Directives that control the operation of the Apache server process as a

whole (the ‘global environment’).

2. Directives that define the parameters of the ‘main’ or ‘default’ server,

which responds to requests that aren’t handled by a virtual host.

These directives also provide default values for the settings

of all virtual hosts.

3. Settings for virtual hosts, which allow Web requests to be sent to

different IP addresses or hostnames and have them handled by the

same Apache server process.

Configuration and logfile names: If the filenames you specify for many

of the server’s control files begin with “/” (or “drive:/” for Win32), the

server will use that explicit path. If the filenames do not begin

with “/”, the value of ServerRoot is prepended – so “foo.log”

with ServerRoot set to “/etc/apache2” will be interpreted by the

server as “/etc/apache2/foo.log”.

ListenBacklog 5120

Section 1: Global Environment

The directives in this section affect the overall operation of Apache,

such as the number of concurrent requests it can handle or where it

can find its configuration files.

ServerRoot: The top of the directory tree under which the server’s

configuration, error, and log files are kept.

NOTE! If you intend to place this on an NFS (or otherwise network)

mounted filesystem then please read the LockFile documentation (available

at URL:http://httpd.apache.org/docs/2.2/mod/mpm_common.html#lockfile);

you will save yourself a lot of trouble.

Do NOT add a slash at the end of the directory path.

#ServerRoot “/etc/apache2”

The accept serialization lock file MUST BE STORED ON A LOCAL DISK.

LockFile ${APACHE_LOCK_DIR}/accept.lock

PidFile: The file in which the server should record its process

identification number when it starts.

This needs to be set in /etc/apache2/envvars

PidFile ${APACHE_PID_FILE}

Timeout: The number of seconds before receives and sends time out.

Timeout 45

KeepAlive: Whether or not to allow persistent connections (more than

one request per connection). Set to “Off” to deactivate.

KeepAlive Off

MaxKeepAliveRequests: The maximum number of requests to allow

during a persistent connection. Set to 0 to allow an unlimited amount.

We recommend you leave this number high, for maximum performance.

MaxKeepAliveRequests 25

KeepAliveTimeout: Number of seconds to wait for the next request from the

same client on the same connection.

KeepAliveTimeout 3

Server-Pool Size Regulation (MPM specific)

prefork MPM

StartServers: number of server processes to start

MinSpareServers: minimum number of server processes which are kept spare

MaxSpareServers: maximum number of server processes which are kept spare

MaxClients: maximum number of server processes allowed to start

MaxRequestsPerChild: maximum number of requests a server process serves

StartServers 5 MinSpareServers 5 MaxSpareServers 8 MaxClients 65 MaxRequestsPerChild 500

worker MPM

StartServers: initial number of server processes to start

MaxClients: maximum number of simultaneous client connections

MinSpareThreads: minimum number of worker threads which are kept spare

MaxSpareThreads: maximum number of worker threads which are kept spare

ThreadLimit: ThreadsPerChild can be changed to this maximum value during a

graceful restart. ThreadLimit can only be changed by stopping

and starting Apache.

ThreadsPerChild: constant number of worker threads in each server process

MaxRequestsPerChild: maximum number of requests a server process serves

StartServers 5 MinSpareThreads 25 MaxSpareThreads 75 ThreadLimit 64 ThreadsPerChild 25 MaxClients 65 MaxRequestsPerChild 500

event MPM

StartServers: initial number of server processes to start

MaxClients: maximum number of simultaneous client connections

MinSpareThreads: minimum number of worker threads which are kept spare

MaxSpareThreads: maximum number of worker threads which are kept spare

ThreadsPerChild: constant number of worker threads in each server process

MaxRequestsPerChild: maximum number of requests a server process serves

StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadLimit 64 ThreadsPerChild 25 MaxRequestsPerChild 0

These need to be set in /etc/apache2/envvars

User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}

AccessFileName: The name of the file to look for in each directory

for additional configuration directives. See also the AllowOverride

directive.

AccessFileName .htaccess

The following lines prevent .htaccess and .htpasswd files from being

viewed by Web clients.

<Files ~ “^.ht”>
Order allow,deny
Deny from all
Satisfy all

DefaultType is the default MIME type the server will use for a document

if it cannot otherwise determine one, such as from filename extensions.

If your server contains mostly text or HTML documents, “text/plain” is

a good value. If most of your content is binary, such as applications

or images, you may want to use “application/octet-stream” instead to

keep browsers from trying to display binary files as though they are

text.

DefaultType text/plain

HostnameLookups: Log the names of clients or just their IP addresses

e.g., www.apache.org (on) or 204.62.129.132 (off).

The default is off because it’d be overall better for the net if people

had to knowingly turn this feature on, since enabling it means that

each client request will result in AT LEAST one lookup request to the

nameserver.

HostnameLookups Off

ErrorLog: The location of the error log file.

If you do not specify an ErrorLog directive within a

container, error messages relating to that virtual host will be

logged here. If you do define an error logfile for a

container, that host’s errors will be logged there and not here.

ErrorLog ${APACHE_LOG_DIR}/error.log

LogLevel: Control the number of messages logged to the error_log.

Possible values include: debug, info, notice, warn, error, crit,

alert, emerg.

LogLevel warn

Include module configuration:

Include mods-enabled/.load
Include mods-enabled/
.conf

Include all the user configurations:

Include httpd.conf

Include ports listing

Include ports.conf

The following directives define some format nicknames for use with

a CustomLog directive (see below).

If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i

LogFormat “%v:%p %h %l %u %t “%r” %>s %O “%{Referer}i” “%{User-Agent}i”” vhost_combined
LogFormat “%h %l %u %t “%r” %>s %O “%{Referer}i” “%{User-Agent}i”” combined
LogFormat “%h %l %u %t “%r” %>s %O” common
LogFormat “%{Referer}i -> %U” referer
LogFormat “%{User-agent}i” agent

Include of directories ignores editors’ and dpkg’s backup files,

see README.Debian for details.

Include generic snippets of statements

Include conf.d/

Include the virtual host configurations:

Include sites-enabled/

DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
DOSEmailNotify admin@srv-home.fr
DOSSystemCommand "su - someuser -c ‘/sbin/… %s …’"
DOSLogDir “/var/lock/mod_evasive”
[/code]

[quote=“prohand”]

DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
DOSEmailNotify admin@srv-home.fr
DOSSystemCommand "su - someuser -c ‘/sbin/… %s …’"
DOSLogDir “/var/lock/mod_evasive”
[/quote]

ya juste cette partie que j’aurais plutôt mis dans httpd.conf mais a par ca rien de spécial me saute au yeux… (sauf évidement si j’ai encore quelques grammes qui reste xD mais ca tu le sait déja^^)

@ xps :
Il faut installer et activer le module evasive si tu veux que ton paragraphe ai un sens.
De plus, je déconseille de surcharger le fichier httpd.conf/apache2.conf, le répertoire /etc/apache2/mods-available sert justement à configurer les modules.

Le keepalive sert à accélérer l’envoi des données du serveur web mais contre un bon paquet de ram.
A voir si on cherche à économiser du CPU ou de la ram.

Une différence remarqué depuis le changement du keepalive ?

Que te donne les commandes :

Pour le moment je n’ai pas eu de problème, il faut voir sur du plus ou moins long terme mais il plantant tout les 2-3jours en ce moment

apache2ctl -V me donne ceci :

Server built:   Sep 29 2011 20:59:05
Server's Module Magic Number: 20051115:24
Server loaded:  APR 1.4.2, APR-Util 1.3.9
Compiled using: APR 1.4.2, APR-Util 1.3.9
Architecture:   64-bit
Server MPM:     Prefork
  threaded:     no
    forked:     yes (variable process count)
Server compiled with....
 -D APACHE_MPM_DIR="server/mpm/prefork"
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=128
 -D HTTPD_ROOT="/etc/apache2"
 -D SUEXEC_BIN="/usr/lib/apache2/suexec"
 -D DEFAULT_PIDLOG="/var/run/apache2.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="mime.types"
 -D SERVER_CONFIG_FILE="apache2.conf"

apache2ctl -M me donne ceci :

[Wed Jan 25 18:47:59 2012] [warn] The Alias directive in /etc/apache2/sites-enabled/munin.conf at line 1 will probably never match because it overlaps an earlier Alias. Loaded Modules: core_module (static) log_config_module (static) logio_module (static) mpm_prefork_module (static) http_module (static) so_module (static) actions_module (shared) alias_module (shared) auth_basic_module (shared) authn_file_module (shared) authz_default_module (shared) authz_groupfile_module (shared) authz_host_module (shared) authz_user_module (shared) autoindex_module (shared) cgi_module (shared) deflate_module (shared) dir_module (shared) env_module (shared) evasive20_module (shared) fcgid_module (shared) info_module (shared) mime_module (shared) security2_module (shared) negotiation_module (shared) php5_module (shared) proxy_module (shared) proxy_http_module (shared) reqtimeout_module (shared) rewrite_module (shared) setenvif_module (shared) ssl_module (shared) status_module (shared) suexec_module (shared) unique_id_module (shared) Syntax OK

Merci beaucoup

[quote=“Niloo”]@ xps :
Il faut installer et activer le module evasive si tu veux que ton paragraphe ai un sens.
De plus, je déconseille de surcharger le fichier httpd.conf/apache2.conf, le répertoire /etc/apache2/mods-available sert justement à configurer les modules.

Le keepalive sert à accélérer l’envoi des données du serveur web mais contre un bon paquet de ram.
A voir si on cherche à économiser du CPU ou de la ram.

Une différence remarqué depuis le changement du keepalive ?

Que te donne les commandes :

Ok laisse tourner et tiens nous informer si ça tient ou pas.

Tu peux éventuellement installer munin afin d’avoir une vue sur le comportement de ton serveur.

Ok sa marche.

Munin est déjà installé et au moment du crache je n’ai aucun pique de memoire ou de cpu.

Le problème ne c’est pas reproduit après la mise du keepalive à off.
Je voulais savoir maintenant si la configuration apache était adapté par rapport à un kimsufi 2g ?

Merci

Le problème c’est reproduit aujourd’hui.

Merci de votre aide pour résoudre ce problème définitivement

En regardant de plus près les logs je vois ceci :

cat /var/log/syslog | grep "Out of memory" Feb 2 21:43:47 ks389006 kernel: Out of memory: Kill process 14728 (clamd) score 51 or sacrifice child

On dirait que le process clamd serait en cause dans le plantage.
Je me trompe ?

Merci

J’ai désactivé clamd.
Plus qu’a voir ce que cela donne.
Si vous avez des idées au passage :slightly_smiling:

Visiblement on commence à voir les limitations de ta machine par rapport à ton utilisation.
A chaque fois c’est un soucis de mémoire ram épuisée.
Il faudrait donc tenter de cibler et de désactiver tous les services inutiles afin d’optimiser au mieux ta mémoire ram.

Que te retourne un :

Cela va afficher tous les processus qui tourne en les triant par leur empreinte mémoire.

J’ai désactivé clamd, la ram tourne autour de 250Mo.

Voici ce que me donne ta commande :

root 2 0 0 0 0 1 Feb02 ? 00:00:00 [kthreadd] root 3 2 0 0 0 0 Feb02 ? 00:00:01 [ksoftirqd/0] root 4 2 0 0 0 0 Feb02 ? 00:00:09 [kworker/0:0] root 6 2 0 0 0 0 Feb02 ? 00:00:00 [migration/0] root 7 2 0 0 0 1 Feb02 ? 00:00:00 [migration/1] root 8 2 0 0 0 1 Feb02 ? 00:00:10 [kworker/1:0] root 9 2 0 0 0 1 Feb02 ? 00:00:01 [ksoftirqd/1] root 10 2 0 0 0 0 Feb02 ? 00:00:00 [kworker/0:1] root 11 2 0 0 0 0 Feb02 ? 00:00:00 [cpuset] root 12 2 0 0 0 1 Feb02 ? 00:00:00 [khelper] root 13 2 0 0 0 1 Feb02 ? 00:00:00 [kworker/u:1] root 33 2 0 0 0 0 Feb02 ? 00:00:00 [netns] root 376 2 0 0 0 0 Feb02 ? 00:00:00 [sync_supers] root 378 2 0 0 0 1 Feb02 ? 00:00:00 [bdi-default] root 379 2 0 0 0 1 Feb02 ? 00:00:00 [kintegrityd] root 381 2 0 0 0 0 Feb02 ? 00:00:00 [kblockd] root 382 2 0 0 0 1 Feb02 ? 00:00:00 [kacpid] root 383 2 0 0 0 0 Feb02 ? 00:00:00 [kacpi_notify] root 384 2 0 0 0 0 Feb02 ? 00:00:00 [kacpi_hotplug] root 470 2 0 0 0 1 Feb02 ? 00:00:00 [ata_sff] root 480 2 0 0 0 1 Feb02 ? 00:00:00 [khubd] root 487 2 0 0 0 1 Feb02 ? 00:00:00 [md] root 494 2 0 0 0 1 Feb02 ? 00:00:02 [kworker/1:1] root 592 2 0 0 0 0 Feb02 ? 00:00:00 [rpciod] root 593 2 0 0 0 1 Feb02 ? 00:00:00 [kvm-irqfd-clean] root 632 2 0 0 0 1 Feb02 ? 00:00:10 [kswapd0] root 633 2 0 0 0 0 Feb02 ? 00:00:00 [ksmd] root 634 2 0 0 0 1 Feb02 ? 00:00:00 [fsnotify_mark] root 635 2 0 0 0 0 Feb02 ? 00:00:00 [aio] root 639 2 0 0 0 1 Feb02 ? 00:00:00 [nfsiod] root 644 2 0 0 0 0 Feb02 ? 00:00:00 [xfs_mru_cache] root 645 2 0 0 0 1 Feb02 ? 00:00:00 [xfslogd] root 646 2 0 0 0 1 Feb02 ? 00:00:00 [xfsdatad] root 647 2 0 0 0 1 Feb02 ? 00:00:00 [xfsconvertd] root 648 2 0 0 0 0 Feb02 ? 00:00:00 [ocfs2_wq] root 649 2 0 0 0 0 Feb02 ? 00:00:00 [o2quot] root 651 2 0 0 0 1 Feb02 ? 00:00:00 [user_dlm] root 654 2 0 0 0 0 Feb02 ? 00:00:00 [glock_workqueue] root 655 2 0 0 0 0 Feb02 ? 00:00:00 [delete_workqueu] root 656 2 0 0 0 1 Feb02 ? 00:00:00 [gfs_recovery] root 657 2 0 0 0 0 Feb02 ? 00:00:00 [crypto] root 1345 2 0 0 0 0 Feb02 ? 00:00:00 [iscsi_eh] root 1354 2 0 0 0 1 Feb02 ? 00:00:00 [fc_exch_workque] root 1355 2 0 0 0 1 Feb02 ? 00:00:00 [fc_rport_eq] root 1356 2 0 0 0 0 Feb02 ? 00:00:00 [fcoethread/0] root 1357 2 0 0 0 1 Feb02 ? 00:00:00 [fcoethread/1] root 1382 2 0 0 0 0 Feb02 ? 00:00:00 [scsi_eh_0] root 1385 2 0 0 0 0 Feb02 ? 00:00:00 [scsi_eh_1] root 1388 2 0 0 0 1 Feb02 ? 00:00:00 [kworker/u:2] root 1466 2 0 0 0 0 Feb02 ? 00:00:00 [kpsmoused] root 1495 2 0 0 0 0 Feb02 ? 00:00:00 [kdelayd] root 1496 2 0 0 0 1 Feb02 ? 00:00:00 [kmpathd] root 1497 2 0 0 0 1 Feb02 ? 00:00:00 [kmpath_handlerd] root 1500 2 0 0 0 0 Feb02 ? 00:00:00 [edac-poller] root 1517 2 0 0 0 1 Feb02 ? 00:00:00 [kondemand] root 1518 2 0 0 0 0 Feb02 ? 00:00:00 [kconservative] root 1572 2 0 0 0 0 Feb02 ? 00:00:01 [jbd2/sda1-8] root 1573 2 0 0 0 0 Feb02 ? 00:00:00 [ext4-dio-unwrit] root 1766 2 0 0 0 0 Feb02 ? 00:00:27 [flush-8:0] root 3697 2 0 0 0 1 Feb02 ? 00:00:00 [jbd2/sda2-8] root 3698 2 0 0 0 0 Feb02 ? 00:00:00 [ext4-dio-unwrit] root 3700 2 0 0 0 0 Feb02 ? 00:00:05 [kjournald] daemon 3981 1 0 4690 0 1 Feb02 ? 00:00:00 /usr/sbin/atd root 3992 1 0 1543 12 1 Feb02 ? 00:00:00 /usr/sbin/courierlogger -pid=/var/run/courier/authdaemon/pid -start /usr/lib/courier/courier-authlib/authdaemond root 4860 1 0 975 24 1 Feb02 ? 00:00:00 /var/www/ispcp/daemon/ispcp_daemon -p /var/run/ispcp_daemon.pid root 1 0 0 2099 32 1 Feb02 ? 00:00:01 init [2] root 5347 1 0 1494 32 1 Feb02 tty1 00:00:00 /sbin/getty 38400 tty1 root 5348 1 0 1494 32 0 Feb02 tty2 00:00:00 /sbin/getty 38400 tty2 root 5349 1 0 1494 32 1 Feb02 tty3 00:00:00 /sbin/getty 38400 tty3 root 5350 1 0 1494 32 0 Feb02 tty4 00:00:00 /sbin/getty 38400 tty4 root 5351 1 0 1494 32 1 Feb02 tty5 00:00:00 /sbin/getty 38400 tty5 root 5352 1 0 1494 32 0 Feb02 tty6 00:00:00 /sbin/getty 38400 tty6 root 5362 1619 0 4209 32 1 Feb02 ? 00:00:00 udevd --daemon root 5363 1619 0 4209 32 0 Feb02 ? 00:00:00 udevd --daemon root 1619 1 0 4210 36 0 Feb02 ? 00:00:00 udevd --daemon root 3993 3992 0 5697 56 0 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 4015 1 0 1543 56 1 Feb02 ? 00:00:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd.pid -start -name=imapd /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 root 4021 1 0 1543 68 0 Feb02 ? 00:00:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd-ssl.pid -start -name=imapd-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=40 -max root 4294 1 0 1543 68 0 Feb02 ? 00:00:00 /usr/sbin/courierlogger -pid=/var/run/courier/pop3d.pid -start -name=pop3d /usr/sbin/couriertcpd -maxprocs=40 -maxperip=4 -nodnslooku root 4310 1 0 1543 68 0 Feb02 ? 00:00:00 /usr/sbin/courierlogger -pid=/var/run/courier/pop3d-ssl.pid -start -name=pop3d-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=40 -max root 4974 1 0 12305 92 1 Feb02 ? 00:00:00 /usr/sbin/sshd root 4022 4021 0 2595 132 1 Feb02 ? 00:00:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/lib root 4296 4294 0 2595 132 1 Feb02 ? 00:00:00 /usr/sbin/couriertcpd -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup -address=0 110 /usr/lib/courier/courier/courierpop3login / root 4311 4310 0 2595 132 1 Feb02 ? 00:00:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/lib/ root 4016 4015 0 2595 136 1 Feb02 ? 00:00:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/lib/courier/courier/imaplogin /usr/bi root 4425 1 0 3181 168 0 Feb02 ? 00:00:00 /sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan --syslog root 4419 1 0 28875 276 1 Feb02 ? 00:00:00 /usr/sbin/lwresd root 21447 1 0 9303 296 0 Feb02 ? 00:00:01 /usr/lib/postfix/master postfix 21451 21447 0 9819 336 1 03:26 ? 00:00:00 anvil -l -t unix -u -c root 4401 1 0 2277 340 1 Feb02 ? 00:00:13 /usr/sbin/irqbalance nobody 5087 1 0 26986 416 0 Feb02 ? 00:00:03 proftpd: (accepting connections) root 4053 3993 0 5699 440 1 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 4054 3993 0 5699 440 1 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 4055 3993 0 5699 440 0 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 4051 3993 0 5699 444 1 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 5005 1 0 5733 464 1 Feb02 ? 00:00:01 /usr/sbin/cron postfix 21454 21447 0 9859 528 1 Feb02 ? 00:00:00 qmgr -l -t fifo -u root 6615 4464 0 975 592 0 18:31 ? 00:00:00 logger -t mysqld -p daemon.error root 4464 1 0 2296 704 0 Feb02 ? 00:00:00 /bin/sh /usr/bin/mysqld_safe root 3927 1 0 29500 740 1 Feb02 ? 00:00:31 /usr/sbin/rsyslogd -c4 root 4052 3993 0 5897 964 1 Feb02 ? 00:00:00 /usr/lib/courier/courier-authlib/authdaemond root 2298 4974 0 17634 1008 0 18:05 ? 00:00:01 sshd: root@pts/0 root 26452 2301 0 4246 1180 1 20:14 pts/0 00:00:00 ps -efF --sort rss root 4373 1 0 9568 1212 0 Feb02 ? 00:01:02 /usr/bin/perl /usr/sbin/floodmon --daemon root 2301 2298 0 5906 1412 1 18:06 pts/0 00:00:00 -bash vmail 17134 4016 0 6444 1652 1 19:25 ? 00:00:00 /usr/bin/imapd /var/mail/virtual/srv-hosting.fr/support vmail 7358 4016 0 6444 1656 1 18:33 ? 00:00:00 /usr/bin/imapd /var/mail/virtual/srv-hosting.fr/support snmp 4959 1 0 12892 2020 1 Feb02 ? 00:01:06 /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid root 5328 1 0 11432 2160 1 Feb02 ? 00:00:06 /usr/sbin/munin-node root 4530 1 0 11953 2264 0 Feb02 ? 00:00:27 /usr/bin/python /usr/bin/fail2ban-server -b -s /var/run/fail2ban/fail2ban.sock postfix 22424 21447 0 9819 2396 1 19:53 ? 00:00:00 pickup -l -t fifo -u -c root 7360 1 0 4199 2412 0 18:33 ? 00:00:00 couriertls -statusfd=7 -printx509=9 -localfd=5 -tcpd -server root 17136 1 0 4199 2412 0 19:25 ? 00:00:00 couriertls -statusfd=7 -printx509=9 -localfd=5 -tcpd -server postfix 18998 21447 0 15809 4004 0 19:35 ? 00:00:00 smtpd -n smtp -t inet -u -c -o stress= root 26368 27563 0 6386 4812 1 20:13 ? 00:00:00 /usr/bin/perl /var/www/ispcp/engine/ispcp-apache-logger root 26367 27563 0 6386 4820 1 20:13 ? 00:00:00 /usr/bin/perl /var/www/ispcp/engine/ispcp-apache-logger -t error www-data 26371 27563 0 33883 8340 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26370 27563 0 33589 8440 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start bind 4120 1 0 51586 9040 0 Feb02 ? 00:00:17 /usr/sbin/named -u bind vu2009 26391 26371 0 35244 9164 0 20:13 ? 00:00:00 /usr/bin/php5-cgi vu2009 26399 26391 0 36189 9664 1 20:13 ? 00:00:00 /usr/bin/php5-cgi www-data 26372 27563 0 35995 10204 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26388 27563 0 36028 10208 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26393 27563 0 36028 10208 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26395 27563 0 36028 10208 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26381 27563 0 36028 10316 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26375 27563 0 36026 10348 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26377 27563 0 36026 10352 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26382 27563 0 36026 10360 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26373 27563 0 36026 10368 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start www-data 26378 27563 0 36028 10452 1 20:13 ? 00:00:00 /usr/sbin/apache2 -k start vu2009 26398 26391 0 36402 11240 1 20:13 ? 00:00:00 /usr/bin/php5-cgi www-data 26374 27563 1 58749 13488 0 20:13 ? 00:00:00 /usr/sbin/apache2 -k start root 27563 1 0 33913 14264 1 01:12 ? 00:00:05 /usr/sbin/apache2 -k start mysql 6614 4464 0 59795 35928 1 18:31 ? 00:00:08 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/

Merci