CPU usage jumped [message #144892] |
Fri, 25 January 2019 18:38  |
mayall
Messages: 99 Registered: October 2006
|
|
|
|
For the past 12 hours, Kerio Connect CPU use has jumped from about 5% to 20% and I can't find a reason.
1. Nothing obvious in Kerio Connect logs.
2. No sign of anything abnormal in charts.
3. Ubuntu updated from 14 to 16 two days ago but was running at 5% or less for over 24 hours.
Other than the jump in CPU usage by Kerio Connect, the server is running fine.
It runs on an AWS EC2 instance and therefore CPU usage make a difference to cost. I'd like to track it down.
Thoughts?
Will Mayall
|
|
|
Re: CPU usage jumped [message #144893 is a reply to message #144892] |
Fri, 25 January 2019 20:36   |
mayall
Messages: 99 Registered: October 2006
|
|
|
|
I found the problem. Something was pounding port 443 (https). Blocking the IP fixed it.
To find the issue:
1. Used htop to find that mailserver (Kerio Connect) was using the CPU.
2. Turned off each service in Kerio to find that port 443 was being hit.
3. Used this to see the port traffic: sudo tcpdump port 443 and '(tcp-syn|tcp-ack)!=0'
4. Blocked the suspect IP using the firewall
|
|
|
|