GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » CPU usage jumped (Running on Linux CPU use jumped)
CPU usage jumped [message #144892] Fri, 25 January 2019 18:38 Go to next message
mayall is currently offline  mayall
Messages: 99
Registered: October 2006
For the past 12 hours, Kerio Connect CPU use has jumped from about 5% to 20% and I can't find a reason.

1. Nothing obvious in Kerio Connect logs.
2. No sign of anything abnormal in charts.
3. Ubuntu updated from 14 to 16 two days ago but was running at 5% or less for over 24 hours.

Other than the jump in CPU usage by Kerio Connect, the server is running fine.

It runs on an AWS EC2 instance and therefore CPU usage make a difference to cost. I'd like to track it down.

Thoughts?

Will Mayall
Re: CPU usage jumped [message #144893 is a reply to message #144892] Fri, 25 January 2019 20:36 Go to previous messageGo to next message
mayall is currently offline  mayall
Messages: 99
Registered: October 2006
I found the problem. Something was pounding port 443 (https). Blocking the IP fixed it.

To find the issue:

1. Used htop to find that mailserver (Kerio Connect) was using the CPU.
2. Turned off each service in Kerio to find that port 443 was being hit.
3. Used this to see the port traffic: sudo tcpdump port 443 and '(tcp-syn|tcp-ack)!=0'
4. Blocked the suspect IP using the firewall
Re: CPU usage jumped [message #144900 is a reply to message #144893] Sun, 27 January 2019 17:48 Go to previous message
mayall is currently offline  mayall
Messages: 99
Registered: October 2006
I found the cause. It was a user's Mac Outlook using EWS.

First time I've seen this happen.
Previous Topic: Spamhaus Block List (CSS)
Next Topic: Infinite Differential Backups
Goto Forum:
  


Current Time: Fri Jun 02 16:23:10 CEST 2023

Total time taken to generate the page: 0.05033 seconds