<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi all.<div class=""><br class=""></div><div class="">The most common underlying root cause here in my experience is problems with your CODB database, or some pretty heavy attacks from a large list of IP's (or both). Changing the cron interval will help keep you alive, but what is the real reason behind the problem? </div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">for X in `cat $TLOGCURRENT | grep -vf $TLOGIP`;</div></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><br class=""></div><div class="">This is the line in question. TLOGIP is the list of already existing blacklisted IP’s. (the dfix-badip-*.txt files). If those files are really big, it can cause the size of the badip file to be very big. If that is the case, the grep -vf might cause you some grief. Suggest changing it from grep to fgrep in that line to see if that helps.</div><div class=""><br class=""></div><div class="">GK</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 17 Aug 2015, at 5:17 pm, Steffan Noord <<a href="mailto:mailinglist@tikklik.nl" class="">mailinglist@tikklik.nl</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">Had the same isue<br class="">I change the cron interval in /etc/cron.d/dfix<br class="">Afther that no problems anymore<br class=""><br class="">Steffan<br class=""><br class=""><br class="">-----Oorspronkelijk bericht-----<br class="">Van: <a href="mailto:blueonyx-bounces@mail.blueonyx.it" class="">blueonyx-bounces@mail.blueonyx.it</a><br class="">[<a href="mailto:blueonyx-bounces@mail.blueonyx.it" class="">mailto:blueonyx-bounces@mail.blueonyx.it</a>] Namens Robert Fitzpatrick<br class="">Verzonden: zondag 16 augustus 2015 19:55<br class="">Aan: BlueOnyx General Mailing List<br class="">Onderwerp: [BlueOnyx:18162] Dfix grep processes<br class=""><br class="">I still have a 5106R up and lately it has been experiencing an issue with<br class="">lots of grep processes like below building up and causing load issues....<br class=""><br class="">[root@webtent server_backup]# ps ax | grep grep<br class=""> 6013 ? R 1:45 grep -vf /tmp/dfix-badip-5065.txt<br class=""> 6944 ? R 1:23 grep -vf /tmp/dfix-badip-6156.txt<br class=""> 7739 ? R 1:03 grep -vf /tmp/dfix-badip-6949.txt<br class=""> 8534 ? R 0:47 grep -vf /tmp/dfix-badip-7745.txt<br class=""> 9351 ? R 0:34 grep -vf /tmp/dfix-badip-8541.txt<br class="">10204 ? R 0:24 grep -vf /tmp/dfix-badip-9360.txt<br class="">11030 ? R 0:17 grep -vf /tmp/dfix-badip-10222.txt<br class="">11851 ? R 0:11 grep -vf /tmp/dfix-badip-11049.txt<br class="">12758 ? R 0:03 grep -vf /tmp/dfix-badip-11955.txt<br class=""><br class="">Has anyone seen this issue? The only way I can get the server back to normal<br class="">load is killall grep.<br class=""><br class="">Thanks,<br class="">Robert<br class=""><br class="">_______________________________________________<br class="">Blueonyx mailing list<br class=""><a href="mailto:Blueonyx@mail.blueonyx.it" class="">Blueonyx@mail.blueonyx.it</a><br class="">http://mail.blueonyx.it/mailman/listinfo/blueonyx<br class=""><br class="">_______________________________________________<br class="">Blueonyx mailing list<br class="">Blueonyx@mail.blueonyx.it<br class="">http://mail.blueonyx.it/mailman/listinfo/blueonyx<br class=""></div></blockquote></div><br class=""></div></body></html>