High Server Load because of iowait - find the cause?

Virtualmin
1

Hello all,

Today one of my servers is becoming very slow, with very High Load Average (up to 200). There’s no very high CPU use, but a high IOWAIT.

Normally I can identify the problem, it is usually email, someone sending spam. But today I can’t find out what is causing the high load iowait.

My top shows:

top - 14:27:34 up  4:12,  2 users,  load average: 84.58, 53.22, 43.74
Tasks: 681 total,   1 running, 679 sleeping,   0 stopped,   1 zombie
Cpu0  : 10.8%us,  2.0%sy,  0.0%ni,  0.0%id, 86.8%wa,  0.0%hi,  0.3%si,  0.0%st
Cpu1  :  2.3%us,  0.7%sy,  0.0%ni, 96.3%id,  0.7%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu2  :  0.3%us,  0.3%sy,  0.0%ni,  0.0%id, 99.3%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu3  :  0.3%us,  0.3%sy,  0.0%ni,  0.0%id, 99.3%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu4  :  5.3%us,  1.0%sy,  0.0%ni, 82.4%id, 11.3%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu5  :  0.7%us,  0.3%sy,  0.0%ni,  0.0%id, 99.0%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu6  :  1.3%us,  0.3%sy,  0.0%ni,  0.0%id, 98.3%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu7  :  0.0%us,  0.7%sy,  0.0%ni,  0.0%id, 99.3%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:  16037364k total, 13479312k used,  2558052k free,  1231820k buffers
Swap: 18284540k total,        0k used, 18284540k free,  7857368k cached

   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                                                                                   
 55028 eptvmast  20   0  276m  21m 7512 S  6.0  0.1   0:00.92 php-cgi                                                                                                                    
 45290 eptvmast  20   0  286m  31m 7804 S  4.3  0.2   0:14.55 php-cgi                                                                                                                    
 54977 1261      20   0  277m  19m 7536 S  3.0  0.1   0:00.25 php-cgi                                                                                                                    
 55165 1080      20   0  186m  24m 7476 D  2.0  0.2   0:00.06 php-cgi                                                                                                                    
 16602 phoenixa  20   0  181m  20m 7744 S  1.3  0.1   0:49.99 php-cgi                                                                                                                    
 55166 helicida  20   0  273m  16m 7276 D  1.3  0.1   0:00.04 php-cgi                                                                                                                    
  3501 mysql     20   0 12.9g 1.1g 7492 S  1.0  7.1   2:58.34 mysqld                                                                                                                     
 54940 root      20   0 78880 3436 2408 S  1.0  0.0   0:00.04 auth                                                                                                                       
 45639 postfix   20   0 82552 4988 3112 S  0.7  0.0   0:00.12 cleanup                                                                                                                    
 51587 root      20   0 15504 1820  992 R  0.7  0.0   0:01.30 top                                                                                                                        
 54757 postfix   20   0 98952 5132 3564 S  0.7  0.0   0:00.20 smtpd                                                                                                                      
   249 root      20   0     0    0    0 S  0.3  0.0   0:01.41 scsi_eh_3                                                                                                                  
  1880 root      16  -4 93156  864  572 S  0.3  0.0   0:02.81 auditd                                                                                                                     
  3688 root      20   0  238m  53m 3220 S  0.3  0.3   0:04.80 spamd                                                                                                                      
 11834 dovecot   20   0 78840 3324 2268 S  0.3  0.0   0:10.39 auth                                                                                                                       
 41193 postfix   20   0 82584 5004 3112 S  0.3  0.0   0:00.55 cleanup                                                                                                                    
 47545 567       20   0 15824 2196  992 S  0.3  0.0   0:37.54 top                                                                                                                        
 53714 1316      20   0 18460 1988 1548 S  0.3  0.0   0:00.14 imap                                                                                                                       
 53715 apache    20   0  334m  16m 2712 S  0.3  0.1   0:00.01 httpd                                                                                                                      
 54547 866       20   0 18472 1968 1564 S  0.3  0.0   0:00.01 imap                                                                                                                       
 54912 756       20   0 18456 1964 1548 D  0.3  0.0   0:00.04 imap                                                                                                                       
     1 root      20   0 19232 1528 1236 S  0.0  0.0   0:01.24 init                                                                                                                       
     2 root      20   0     0    0    0 S  0.0  0.0   0:00.00 kthreadd                                                                                                                   
     3 root      RT   0     0    0    0 S  0.0  0.0   0:00.07 migration/0                                                                                                                
     4 root      20   0     0    0    0 S  0.0  0.0   0:00.30 ksoftirqd/0                                                                                                                
     5 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 stopper/0                                                                                                                  
     6 root      RT   0     0    0    0 S  0.0  0.0   0:00.01 watchdog/0                                                                                                                 
     7 root      RT   0     0    0    0 S  0.0  0.0   0:00.01 migration/1                                                                                                                
     8 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 stopper/1                                                                                                                  
     9 root      20   0     0    0    0 S  0.0  0.0   0:00.19 ksoftirqd/1                                                                                                                
    10 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 watchdog/1                                                                                                                 
    11 root      RT   0     0    0    0 S  0.0  0.0   0:00.01 migration/2                                                                                                                
    12 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 stopper/2                                                                                                                  
    13 root      20   0     0    0    0 S  0.0  0.0   0:00.18 ksoftirqd/2

My iotop normally does not show anything unusual , but for every several seconds it shows like belllow for one second:

Total DISK READ: 69.10 K/s | Total DISK WRITE: 3.79 M/s
  TID  PRIO  USER     DISK READ  DISK WRITE  SWAPIN     IO>    COMMAND                                                                                                                   
53168 be/4 vendas4@    3.84 K/s    0.00 B/s  0.00 % 99.99 % dovecot/imap
31584 be/4 tlazarim    0.00 B/s    0.00 B/s  0.00 % 99.99 % spamd child
55433 be/4 root        0.00 B/s    0.00 B/s  0.00 % 99.99 % repquota -u -v /home
55382 be/4 root        0.00 B/s    0.00 B/s  0.00 % 99.99 % repquota -u -v /home
54574 be/4 root        0.00 B/s    0.00 B/s  0.00 % 99.99 % repquota -u -v /home
55938 be/4 comunica    0.00 B/s    0.00 B/s  0.00 % 99.99 % procmail-wrapper -o -a mail2.intercode.com.br -d comunicacao-frutal.mg.gov.br
17162 be/4 barrosde    0.00 B/s    0.00 B/s  0.00 % 99.99 % spamd child
54903 be/4 educacao   26.87 K/s    0.00 B/s  0.00 % 99.99 % dovecot/imap
56043 be/4 a.robert   26.87 K/s    0.00 B/s  0.00 % 99.99 % dovecot/imap
52897 be/4 editorar    3.84 K/s    0.00 B/s  0.00 % 99.99 % spamd child
109664 be/4 controli    0.00 B/s    0.00 B/s  0.00 % 99.99 % php-cgi
  460 be/3 root        0.00 B/s  153.55 K/s  0.00 % 95.16 % [jbd2/dm-0-8]
45595 be/4 postfix     0.00 B/s   11.52 K/s  0.00 % 24.99 % cleanup -z -t unix -u
 5197 be/4 apache      0.00 B/s    0.00 B/s  0.00 % 14.66 % httpd
 3562 be/4 mysql       7.68 K/s  295.59 K/s  0.00 %  9.89 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
 1631 be/4 root        0.00 B/s   19.19 K/s  0.00 %  4.60 % [flush-253:0]
44141 be/4 mysql       0.00 B/s   15.36 K/s  0.00 %  3.06 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
 1911 be/4 root        0.00 B/s    7.68 K/s  0.00 %  0.48 % rsyslogd -i /var/run/syslogd.pid -c 5
109309 be/4 mysql       0.00 B/s    7.68 K/s  0.00 %  0.30 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
 3523 be/4 mysql       0.00 B/s    0.00 B/s  0.00 %  0.23 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
41193 be/4 postfix     0.00 B/s    7.68 K/s  0.00 %  0.00 % cleanup -z -t unix -u
49440 be/4 apache      0.00 B/s    3.84 K/s  0.00 %  0.00 % httpd
53694 be/4 apache      0.00 B/s    3.84 K/s  0.00 %  0.00 % httpd
 2713 be/4 clam        0.00 B/s 1167.00 K/s  0.00 %  0.00 % clamd
51907 be/4 apache      0.00 B/s    3.84 K/s  0.00 %  0.00 % httpd
56015 be/4 clam        0.00 B/s    0.00 B/s  0.00 %  0.00 % clamd
 5496 be/4 root        0.00 B/s    3.84 K/s  0.00 %  0.00 % lookup-domain-daemon.pl
55207 be/4 apache      0.00 B/s    3.84 K/s  0.00 %  0.00 % httpd
    1 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % init
    2 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [kthreadd]
    3 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/0]
    4 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/0]
    5 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/0]
    6 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/0]
    7 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/1]
    8 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/1]
    9 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/1]
   10 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/1]
   11 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/2]
   12 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/2]
   13 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/2]
   14 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/2]
   15 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/3]
   16 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/3]
   17 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/3]
   18 rt/4 root        0.00 B/s    0.00 B/

Normally it is like this:

Total DISK READ: 159.43 K/s | Total DISK WRITE: 680.50 K/s
  TID  PRIO  USER     DISK READ  DISK WRITE  SWAPIN     IO>    COMMAND                                                                                                                   
  460 be/3 root        0.00 B/s    0.00 B/s  0.00 % 35.70 % [jbd2/dm-0-8]
  944 be/3 root        0.00 B/s   73.88 K/s  0.00 % 18.93 % [jbd2/dm-2-8]
108619 be/4 mysql       0.00 B/s   42.77 K/s  0.00 %  2.06 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
 3562 be/4 mysql       0.00 B/s    7.78 K/s  0.00 %  1.96 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
 3723 be/4 postgrey    0.00 B/s   15.55 K/s  0.00 %  0.04 % socket
43280 be/4 mysql       0.00 B/s    3.89 K/s  0.00 %  0.04 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/~=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
65734 be/4 postfix     0.00 B/s   11.67 K/s  0.00 %  0.00 % cleanup -z -t unix -u
41193 be/4 postfix     0.00 B/s   23.33 K/s  0.00 %  0.00 % cleanup -z -t unix -u
 1881 be/3 root        0.00 B/s    7.78 K/s  0.00 %  0.00 % auditd
 1911 be/4 root        0.00 B/s    3.89 K/s  0.00 %  0.00 % rsyslogd -i /var/run/syslogd.pid -c 5
65505 be/4 apache      0.00 B/s    3.89 K/s  0.00 %  0.00 % httpd
    1 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % init
    2 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [kthreadd]
    3 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/0]
    4 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/0]
    5 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/0]
    6 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/0]
    7 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/1]
    8 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/1]
    9 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/1]
   10 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/1]
   11 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/2]
   12 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/2]
   13 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/2]
   14 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/2]
   15 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/3]
   16 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/3]
   17 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/3]
   18 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/3]
   19 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/4]
   20 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/4]
   21 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/4]
   22 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/4]
   23 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/5]
   24 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/5]
   25 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/5]
   26 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/5]
   27 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/6]
   28 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/6]
   29 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/6]
   30 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/6]
   31 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/7]
   32 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/7]
   33 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/7]
   34 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/7]
   35 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [events/0]
   36 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [events/1]
   37 be/4 root        0.00 B/s    0.00 B/s

The postfix email queue is normal, and I usually get the culprit there. But not today.

I have enough free disk space

[root@linux03 ~]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/vg_linux_a-lv_root
                      900G  813G   42G  96% /
tmpfs                 7.7G     0  7.7G   0% /dev/shm
/dev/sda1             477M  121M  331M  27% /boot
/dev/mapper/vg_linux_b-LogVol00
                      1.4T  911G  395G  70% /home
/dev/sdc1             1.8T  1.3T  414G  77% /backup
[root@linux03 ~]#

Can anyone please advise how to identify the problem?

Thanks a lot

Rogerio

2

Howdy,

Sounds like you’ve already looked for a lot of the usual culprits!

Could you post the output of this command:

ps auxwf

That will give us an idea of what all is going on at the moment.

Also, this command will show if there’s a DoS of some sort occurring:

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head -10

3

Hi Andrey, here it is:

[root@linux03 ~]# ps auxwf
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:15   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/0]
root          4  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/0]
root          5  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/0]
root          6  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/0]
root          7  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/1]
root          8  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/1]
root          9  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/1]
root         10  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/1]
root         11  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/2]
root         12  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/2]
root         13  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/2]
root         14  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/2]
root         15  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/3]
root         16  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/3]
root         17  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/3]
root         18  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/3]
root         19  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/4]
root         20  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/4]
root         21  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/4]
root         22  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/4]
root         23  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/5]
root         24  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/5]
root         25  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/5]
root         26  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/5]
root         27  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/6]
root         28  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/6]
root         29  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/6]
root         30  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/6]
root         31  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/7]
root         32  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [stopper/7]
root         33  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/7]
root         34  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/7]
root         35  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [events/0]
root         36  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [events/1]
root         37  0.0  0.0      0     0 ?        S    10:15   0:05  \_ [events/2]
root         38  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [events/3]
root         39  0.0  0.0      0     0 ?        S    10:15   0:01  \_ [events/4]
root         40  0.0  0.0      0     0 ?        S    10:15   0:06  \_ [events/5]
root         41  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [events/6]
root         42  0.0  0.0      0     0 ?        S    10:15   0:04  \_ [events/7]
root         43  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cgroup]
root         44  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [khelper]
root         45  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [netns]
root         46  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [async/mgr]
root         47  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [pm]
root         48  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [sync_supers]
root         49  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [bdi-default]
root         50  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/0]
root         51  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/1]
root         52  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/2]
root         53  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/3]
root         54  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/4]
root         55  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/5]
root         56  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/6]
root         57  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kintegrityd/7]
root         58  0.0  0.0      0     0 ?        S    10:15   0:07  \_ [kblockd/0]
root         59  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/1]
root         60  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/2]
root         61  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/3]
root         62  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/4]
root         63  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/5]
root         64  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/6]
root         65  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kblockd/7]
root         66  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kacpid]
root         67  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kacpi_notify]
root         68  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kacpi_hotplug]
root         69  0.0  0.0      0     0 ?        D    10:15   0:00  \_ [ata_aux]
root         70  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/0]
root         71  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/1]
root         72  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/2]
root         73  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/3]
root         74  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/4]
root         75  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/5]
root         76  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/6]
root         77  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ata_sff/7]
root         78  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksuspend_usbd]
root         79  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [khubd]
root         80  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kseriod]
root         81  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/0]
root         82  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/1]
root         83  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/2]
root         84  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/3]
root         85  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/4]
root         86  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/5]
root         87  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/6]
root         88  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md/7]
root         89  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/0]
root         90  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/1]
root         91  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/2]
root         92  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/3]
root         93  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/4]
root         94  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/5]
root         95  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/6]
root         96  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [md_misc/7]
root         97  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [linkwatch]
root         99  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [khungtaskd]
root        100  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kswapd0]
root        101  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [ksmd]
root        102  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [khugepaged]
root        103  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/0]
root        104  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/1]
root        105  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/2]
root        106  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/3]
root        107  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/4]
root        108  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/5]
root        109  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/6]
root        110  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [aio/7]
root        111  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/0]
root        112  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/1]
root        113  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/2]
root        114  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/3]
root        115  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/4]
root        116  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/5]
root        117  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/6]
root        118  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [crypto/7]
root        126  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/0]
root        127  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/1]
root        128  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/2]
root        129  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/3]
root        130  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/4]
root        131  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/5]
root        132  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/6]
root        133  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kthrotld/7]
root        135  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kpsmoused]
root        136  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [usbhid_resumer]
root        137  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [deferwq]
root        168  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kdmremove]
root        169  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kstriped]
root        246  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_2]
root        249  0.0  0.0      0     0 ?        S    10:15   0:01  \_ [scsi_eh_3]
root        250  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_4]
root        251  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_5]
root        367  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_6]
root        368  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [usb-storage]
root        429  0.0  0.0      0     0 ?        S    10:15   0:02  \_ [kdmflush]
root        431  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kdmflush]
root        460  0.0  0.0      0     0 ?        S    10:15   0:12  \_ [jbd2/dm-0-8]
root        461  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ext4-dio-unwrit]
root        902  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kdmflush]
root        942  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [jbd2/sda1-8]
root        943  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ext4-dio-unwrit]
root        944  0.0  0.0      0     0 ?        D    10:15   0:02  \_ [jbd2/dm-2-8]
root        945  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ext4-dio-unwrit]
root        948  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kjournald]
root       1595  0.0  0.0      0     0 ?        S    10:15   0:01  \_ [kauditd]
root       1631  0.0  0.0      0     0 ?        S    10:15   0:01  \_ [flush-253:0]
root       1632  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [flush-253:2]
root          1  0.0  0.0  19232  1528 ?        Ss   10:15   0:01 /sbin/init
root        544  0.0  0.0  10964  1072 ?        S<s  10:15   0:00 /sbin/udevd -d
root        899  0.0  0.0  10960  1100 ?        S<   10:15   0:00  \_ /sbin/udevd -d
root        903  0.0  0.0  10960  1064 ?        S<   10:15   0:00  \_ /sbin/udevd -d
root       1880  0.0  0.0  93156   864 ?        S<sl 10:15   0:03 auditd
root       1910  0.0  0.0 249088  2500 ?        Sl   10:15   0:13 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
named      1930  0.0  0.3 721980 49456 ?        Ssl  10:15   0:08 /usr/sbin/named -u named
root       2634  0.9  0.1 158272 17840 ?        Ss   10:15   2:59 lfd - sleeping
dbus       2651  0.0  0.0  21432   876 ?        Ss   10:15   0:00 dbus-daemon --system
root       2694  0.0  0.0  66216  1216 ?        Ss   10:15   0:00 /usr/sbin/sshd
root      10160  0.0  0.0 100420  4300 ?        Ss   10:22   0:00  \_ sshd: guilherme.francisquini [priv]
567       10165  0.0  0.0 100420  2092 ?        S    10:22   0:01  |   \_ sshd: guilherme.francisquini@pts/0
567       10166  0.0  0.0 108300  1852 pts/0    Ss   10:22   0:00  |       \_ -sh
567       47545  0.3  0.0  15824  2196 pts/0    S+   11:06   0:45  |           \_ top
root      79630  0.0  0.0 100424  4280 ?        Ss   11:44   0:00  \_ sshd: editoraroncaratimaster [priv]
754       79633  0.0  0.0 100564  2164 ?        S    11:44   0:00  |   \_ sshd: editoraroncaratimaster@notty
754       79634  0.0  0.0  57372  2288 ?        Ss   11:44   0:00  |       \_ /usr/libexec/openssh/sftp-server
root      50700  0.0  0.0 100564  4392 ?        Ss   14:20   0:00  \_ sshd: rogerio [priv]
rogerio   51498  0.0  0.0 100564  2100 ?        S    14:21   0:00      \_ sshd: rogerio@pts/1
rogerio   51499  0.0  0.0 108300  1928 pts/1    Ss   14:21   0:00          \_ -sh
root      51520  0.0  0.0 147544  1876 pts/1    S    14:21   0:00              \_ su -
root      51552  0.0  0.0 108432  1964 pts/1    S    14:21   0:00                  \_ -bash
root      87948  4.0  0.0 110932  1776 pts/1    R+   15:15   0:00                      \_ ps auxwf
root       2751  0.0  0.0 108296  1612 ?        S    10:16   0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql/ --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/my
mysql      3501  1.1  7.2 13551204 1167416 ?    Sl   10:16   3:26  \_ /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql/ --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --lo
root       3657  0.0  0.0  71208  2372 ?        Ss   10:16   0:02 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -r
root       3662  0.0  0.0  71208  2364 ?        S    10:16   0:02  \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -r
root       3663  0.0  0.0  71208  2364 ?        S    10:16   0:02  \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -r
root       3664  0.0  0.0  71208  2364 ?        S    10:16   0:02  \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -r
root       3665  0.0  0.0  71208  2364 ?        S    10:16   0:02  \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -r
grmilter   3706  0.2  0.0 1134244 13316 ?       Ssl  10:16   0:36 /usr/sbin/milter-greylist -u grmilter -P /var/run/milter-greylist.pid
postgrey   3723  0.0  0.0 157620 14064 ?        Ss   10:16   0:05 /usr/sbin/postgrey -d --unix=/var/spool/postfix/postgrey/socket
nobody     4334  0.0  0.0 152216  2056 ?        Ss   10:16   0:00 proftpd: (accepting connections)
root       5185  0.0  0.1 341836 22740 ?        Ss   10:16   0:02 /usr/sbin/httpd
apache     5197  0.0  0.0 260812 13580 ?        S    10:16   0:01  \_ /usr/sbin/httpd
1261       5605  0.0  0.0 176416  9692 ?        S    10:16   0:00  |   \_ /usr/bin/php-cgi
cmais6     5842  0.0  0.0 178576 10328 ?        S    10:16   0:00  |   \_ /usr/bin/php-cgi
630        8280  0.0  0.0 178576 10328 ?        S    10:19   0:00  |   \_ /usr/bin/php-cgi
1362      10198  0.0  0.1 190776 26480 ?        S    10:22   0:05  |   \_ /usr/bin/php-cgi
894       10223  0.0  0.1 281192 19884 ?        S    10:23   0:04  |   \_ /usr/bin/php-cgi
1032      14324  0.0  0.2 294896 33736 ?        S    10:28   0:02  |   \_ /usr/bin/php-cgi
740       15127  0.0  0.1 282220 20648 ?        S    10:30   0:03  |   \_ /usr/bin/php-cgi
740       15234  0.0  0.1 281448 20156 ?        S    10:31   0:03  |   \_ /usr/bin/php-cgi
1059      15366  0.3  0.1 185724 21632 ?        S    10:31   0:54  |   \_ /usr/bin/php-cgi
1059      16602  0.3  0.1 185468 21380 ?        S    10:33   0:58  |   \_ /usr/bin/php-cgi
1059      16888  0.2  0.1 185468 21380 ?        S    10:33   0:47  |   \_ /usr/bin/php-cgi
1067      19967  0.0  0.1 283256 21712 ?        S    10:36   0:01  |   \_ /usr/bin/php-cgi
1067      20063  0.0  0.1 283264 21688 ?        S    10:36   0:01  |   \_ /usr/bin/php-cgi
1067      20106  0.0  0.1 283264 21724 ?        S    10:36   0:01  |   \_ /usr/bin/php-cgi
1368      20829  0.0  0.1 281984 20664 ?        S    10:38   0:04  |   \_ /usr/bin/php-cgi
754       22590  0.0  0.0 176416  9940 ?        S    10:39   0:00  |   \_ /usr/bin/php-cgi
556       25128  0.0  0.1 189312 25164 ?        S    10:41   0:07  |   \_ /usr/bin/php-cgi
1324      41090  0.0  0.0 177184 11080 ?        S    10:54   0:00  |   \_ /usr/bin/php-cgi
530       42627  0.0  0.0 275932 14684 ?        S    10:58   0:02  |   \_ /usr/bin/php-cgi
500       43287  0.0  0.0 177188 11244 ?        S    10:59   0:00  |   \_ /usr/bin/php-cgi
897       53021  0.0  0.2 300012 38948 ?        S    11:16   0:06  |   \_ /usr/bin/php-cgi
597      108102  0.0  0.1 182852 18452 ?        S    12:29   0:00  |   \_ /usr/bin/php-cgi
597      108827  0.0  0.1 182852 18452 ?        S    12:30   0:00  |   \_ /usr/bin/php-cgi
774      109331  0.0  0.1 291612 30728 ?        S    12:30   0:06  |   \_ /usr/bin/php-cgi
597      109752  0.0  0.1 182072 17668 ?        S    12:31   0:00  |   \_ /usr/bin/php-cgi
500      111733  0.0  0.0 177188 11000 ?        S    12:34   0:00  |   \_ /usr/bin/php-cgi
1134     112285  0.1  0.2 202528 38156 ?        S    12:34   0:10  |   \_ /usr/bin/php-cgi
1305     113147  0.0  0.1 278616 16576 ?        S    12:35   0:00  |   \_ /usr/bin/php-cgi
897      115066  0.0  0.1 281484 19732 ?        S    12:37   0:00  |   \_ /usr/bin/php-cgi
897       44387  0.0  0.1 281480 19716 ?        S    14:12   0:00  |   \_ /usr/bin/php-cgi
614       44427  0.0  0.1 280800 19520 ?        S    14:13   0:01  |   \_ /usr/bin/php-cgi
877       44619  0.2  0.1 287612 24444 ?        S    14:13   0:07  |   \_ /usr/bin/php-cgi
1069      44673  0.0  0.1 279944 18700 ?        S    14:13   0:00  |   \_ /usr/bin/php-cgi
1564      44681  0.3  0.2 202996 38772 ?        D    14:13   0:13  |   \_ /usr/bin/php-cgi
770       44702  0.0  0.1 283820 22516 ?        S    14:13   0:01  |   \_ /usr/bin/php-cgi
861       44709  0.1  0.1 280416 19268 ?        S    14:13   0:04  |   \_ /usr/bin/php-cgi
1069      44747  0.0  0.1 284620 23372 ?        S    14:13   0:00  |   \_ /usr/bin/php-cgi
1040      44862  0.0  0.1 286820 25608 ?        S    14:14   0:01  |   \_ /usr/bin/php-cgi
1068      44873  0.0  0.1 280448 19484 ?        S    14:14   0:00  |   \_ /usr/bin/php-cgi
882       45113  0.0  0.1 285524 24252 ?        S    14:14   0:02  |   \_ /usr/bin/php-cgi
898       45380  0.0  0.1 285508 24272 ?        D    14:14   0:02  |   \_ /usr/bin/php-cgi
1194      45853  0.0  0.2 204016 39912 ?        S    14:14   0:02  |   \_ /usr/bin/php-cgi
1050      51800  0.0  0.2 299916 38644 ?        S    14:21   0:00  |   \_ /usr/bin/php-cgi
754       52297  0.4  0.1 292552 29948 ?        D    14:22   0:14  |   \_ /usr/bin/php-cgi
556       52687  0.0  0.1 189312 25028 ?        S    14:23   0:01  |   \_ /usr/bin/php-cgi
622       52832  0.0  0.1 280180 18464 ?        D    14:23   0:00  |   \_ /usr/bin/php-cgi
754       53430  0.4  0.2 299888 36772 ?        D    14:25   0:12  |   \_ /usr/bin/php-cgi
1300      55036  0.0  0.1 284056 22764 ?        S    14:27   0:00  |   \_ /usr/bin/php-cgi
1080      55165  0.1  0.2 196792 32532 ?        S    14:27   0:05  |   \_ /usr/bin/php-cgi
881       55166  0.1  0.1 287584 26440 ?        S    14:27   0:02  |   \_ /usr/bin/php-cgi
1257      55213  0.0  0.1 185432 20832 ?        S    14:27   0:00  |   \_ /usr/bin/php-cgi
754       55405  0.5  0.1 292064 29292 ?        D    14:27   0:16  |   \_ /usr/bin/php-cgi
1131      55476  0.0  0.2 200080 35904 ?        S    14:28   0:01  |   \_ /usr/bin/php-cgi
1631      55564  0.0  0.0 176532 10888 ?        D    14:28   0:00  |   \_ /usr/bin/php-cgi
1257      55591  0.0  0.1 181596 16956 ?        S    14:28   0:00  |   \_ /usr/bin/php-cgi
614       55710  0.0  0.1 280804 19536 ?        S    14:28   0:00  |   \_ /usr/bin/php-cgi
1162      55830  0.0  0.1 194000 28056 ?        S    14:28   0:01  |   \_ /usr/bin/php-cgi
745       55901  0.0  0.0 176932 10608 ?        S    14:28   0:00  |   \_ /usr/bin/php-cgi
635       56179  0.4  0.2 308844 46032 ?        S    14:29   0:11  |   \_ /usr/bin/php-cgi
638       56471  0.0  0.0 178160 12568 ?        S    14:29   0:00  |   \_ /usr/bin/php-cgi
638       56556  0.0  0.0 178080 12568 ?        S    14:30   0:00  |   \_ /usr/bin/php-cgi
635       56662  0.3  0.1 288980 25848 ?        D    14:30   0:10  |   \_ /usr/bin/php-cgi
635       56690  0.2  0.1 292804 31876 ?        D    14:30   0:06  |   \_ /usr/bin/php-cgi
876       84444  0.0  0.1 191368 27036 ?        S    15:10   0:00  |   \_ /usr/bin/php-cgi
1631      86704  0.0  0.0 176612 11196 ?        S    15:13   0:00  |   \_ /usr/bin/php-cgi
754       86764  0.0  0.1 280344 18128 ?        D    15:13   0:00  |   \_ /usr/bin/php-cgi
864       86945  0.1  0.1 285132 23736 ?        D    15:13   0:00  |   \_ /usr/bin/php-cgi
754       87072  0.9  0.1 286800 25816 ?        D    15:13   0:00  |   \_ /usr/bin/php-cgi
754       87073  0.4  0.1 286812 25828 ?        D    15:13   0:00  |   \_ /usr/bin/php-cgi
1261      87203  0.8  0.1 286832 23460 ?        S    15:14   0:00  |   \_ /usr/bin/php-cgi
1261      87301  0.4  0.1 283916 20488 ?        S    15:14   0:00  |   \_ /usr/bin/php-cgi
1261      87446  0.9  0.0      0     0 ?        Z    15:14   0:00  |   \_ [php-cgi] <defunct>
754       87601  0.0  0.1 280344 18128 ?        D    15:14   0:00  |   \_ /usr/bin/php-cgi
1564      87653  0.1  0.1 190468 25068 ?        D    15:14   0:00  |   \_ /usr/bin/php-cgi
1261      87741  0.5  0.1 284752 21436 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87742  0.1  0.1 281552 19204 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87747  1.8  0.1 284436 20768 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
1564      87770  0.3  0.1 190468 25064 ?        D    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87836  1.2  0.1 283924 20372 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87841  0.2  0.1 281552 19212 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87847  1.2  0.1 282348 20636 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
754       87853  0.2  0.1 280344 18128 ?        D    15:15   0:00  |   \_ /usr/bin/php-cgi
1261      87898  1.8  0.1 279488 17908 ?        S    15:15   0:00  |   \_ /usr/bin/php-cgi
apache    75591  0.0  0.1 342956 17972 ?        S    14:56   0:00  \_ /usr/sbin/httpd
apache    77275  0.0  0.1 342996 18080 ?        S    15:00   0:00  \_ /usr/sbin/httpd
apache    80204  0.0  0.1 342680 17604 ?        S    15:03   0:00  \_ /usr/sbin/httpd
apache    80278  0.0  0.1 342812 17780 ?        S    15:03   0:00  \_ /usr/sbin/httpd
apache    80330  0.0  0.1 342824 17652 ?        S    15:03   0:00  \_ /usr/sbin/httpd
apache    80363  0.0  0.1 342880 17800 ?        S    15:03   0:00  \_ /usr/sbin/httpd
apache    81491  0.0  0.1 342924 17700 ?        S    15:05   0:00  \_ /usr/sbin/httpd
apache    82965  0.0  0.1 342680 17612 ?        S    15:07   0:00  \_ /usr/sbin/httpd
apache    82974  0.0  0.1 342680 17400 ?        S    15:07   0:00  \_ /usr/sbin/httpd
apache    83159  0.0  0.1 342824 17624 ?        S    15:07   0:00  \_ /usr/sbin/httpd
apache    83170  0.0  0.1 343332 18068 ?        S    15:07   0:00  \_ /usr/sbin/httpd
apache    83172  0.0  0.1 342796 17536 ?        S    15:07   0:00  \_ /usr/sbin/httpd
apache    83440  0.0  0.1 342816 17480 ?        S    15:08   0:00  \_ /usr/sbin/httpd
apache    83566  0.0  0.1 342680 17436 ?        S    15:08   0:00  \_ /usr/sbin/httpd
apache    83580  0.0  0.1 342976 17676 ?        S    15:08   0:00  \_ /usr/sbin/httpd
apache    83662  0.0  0.1 342688 17596 ?        S    15:08   0:00  \_ /usr/sbin/httpd
apache    84434  0.0  0.1 342808 17624 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84435  0.0  0.1 342852 17680 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84440  0.0  0.1 342680 17552 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84643  0.0  0.1 342884 17556 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84644  0.0  0.1 342632 17356 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84651  0.0  0.1 342548 17516 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84652  0.0  0.1 342680 17296 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    84653  0.0  0.1 342880 17628 ?        S    15:10   0:00  \_ /usr/sbin/httpd
apache    85872  0.0  0.1 342388 17312 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85879  0.0  0.1 342832 17396 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85880  0.0  0.1 342704 17528 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85896  0.0  0.1 342912 17728 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85898  0.0  0.1 342824 17452 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85915  0.0  0.1 342800 17608 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85917  0.0  0.1 342704 17332 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85918  0.0  0.1 342872 17472 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85919  0.0  0.1 342640 17116 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85921  0.0  0.1 342784 17648 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85922  0.0  0.1 342696 17460 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85966  0.0  0.1 342704 17136 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85971  0.0  0.1 342640 17380 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85973  0.0  0.1 342992 17792 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85975  0.0  0.1 342312 17104 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85976  0.0  0.1 342680 17376 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85977  0.0  0.1 342648 17440 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85978  0.0  0.1 342680 17264 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85979  0.0  0.1 342680 17196 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    85980  0.0  0.1 342856 17316 ?        S    15:11   0:00  \_ /usr/sbin/httpd
apache    86398  0.0  0.1 342756 17360 ?        S    15:12   0:00  \_ /usr/sbin/httpd
apache    86407  0.0  0.1 342680 17416 ?        S    15:12   0:00  \_ /usr/sbin/httpd
apache    86408  0.0  0.1 342684 17296 ?        S    15:12   0:00  \_ /usr/sbin/httpd
apache    86528  0.0  0.1 342944 17392 ?        S    15:12   0:00  \_ /usr/sbin/httpd
apache    86536  0.0  0.1 342680 17052 ?        S    15:13   0:00  \_ /usr/sbin/httpd
apache    86537  0.0  0.1 342688 17248 ?        S    15:13   0:00  \_ /usr/sbin/httpd
apache    87563  0.0  0.0 342104 15880 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87602  0.0  0.1 342700 16840 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87603  0.0  0.1 342604 16928 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87631  0.0  0.1 342244 16160 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87632  0.0  0.1 342680 16860 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87633  0.0  0.1 342248 16612 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87634  0.0  0.1 342680 16720 ?        S    15:14   0:00  \_ /usr/sbin/httpd
apache    87850  0.0  0.1 342684 17184 ?        S    15:15   0:00  \_ /usr/sbin/httpd
apache    87858  0.0  0.1 342676 16948 ?        S    15:15   0:00  \_ /usr/sbin/httpd
apache    87859  0.0  0.1 342676 16936 ?        S    15:15   0:00  \_ /usr/sbin/httpd
apache    87926  0.0  0.0 342108 15924 ?        S    15:15   0:00  \_ /usr/sbin/httpd
apache    87934  0.0  0.0 341972 14688 ?        S    15:15   0:00  \_ /usr/sbin/httpd
apache    87935  0.0  0.0 341972 14688 ?        S    15:15   0:00  \_ /usr/sbin/httpd
qpidd      5213  0.0  0.0 795368  8132 ?        Ssl  10:16   0:00 /usr/sbin/qpidd --data-dir /var/lib/qpidd --daemon
root       5260  0.0  0.0 116892  1284 ?        Ss   10:16   0:00 crond
root      84242  0.0  0.0 139780  1768 ?        S    15:10   0:00  \_ CROND
root      84250  0.0  0.1 151696 21820 ?        Ss   15:10   0:00      \_ /usr/bin/perl /usr/libexec/webmin/quota/email.pl
root      84280  0.0  0.0 106060  1260 ?        S    15:10   0:00          \_ sh -c (repquota -u -v /home 2>&1)
root      84281  0.0  0.0 101248   928 ?        D    15:10   0:00              \_ repquota -u -v /home
mailman    5383  0.0  0.0 206052  8624 ?        Ss   10:16   0:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
mailman    5397  0.0  0.0 208268 11708 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman    5398  0.0  0.0 208316 11776 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
mailman    5399  0.0  0.0 208264 11712 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman    5400  0.0  0.0 208292 11704 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
mailman    5401  0.0  0.0 208256 11780 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman    5402  0.0  0.0 208392 11828 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
mailman    5403  0.0  0.0 208256 11712 ?        S    10:16   0:01  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman    5404  0.0  0.0 208264 11712 ?        S    10:16   0:00  \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root       5496  0.0  0.3 187588 54604 ?        Ss   10:16   0:00 /usr/libexec/webmin/virtual-server/lookup-domain-daemon.pl
root       5592  0.0  0.1  89268 17108 ?        Ss   10:16   0:00 /usr/bin/perl /usr/libexec/usermin/miniserv.pl /etc/usermin/miniserv.conf
root       5820  0.0  0.3 138400 64144 ?        Ss   10:16   0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root       5829  0.0  0.0   4064   592 tty1     Ss+  10:16   0:00 /sbin/mingetty /dev/tty1
root       5831  0.0  0.0   4064   596 tty2     Ss+  10:16   0:00 /sbin/mingetty /dev/tty2
root       5833  0.0  0.0   4064   596 tty3     Ss+  10:16   0:00 /sbin/mingetty /dev/tty3
root       5835  0.0  0.0   4064   596 tty4     Ss+  10:16   0:00 /sbin/mingetty /dev/tty4
root       5839  0.0  0.0   4064   592 tty5     Ss+  10:16   0:00 /sbin/mingetty /dev/tty5
root       5841  0.0  0.0   4064   592 tty6     Ss+  10:16   0:00 /sbin/mingetty /dev/tty6
root      10480  0.0  0.0  81412  3600 ?        Ss   10:25   0:04 /usr/libexec/postfix/master
postfix   10482  0.0  0.0  83860  5996 ?        S    10:25   0:04  \_ qmgr -l -t fifo -u
postfix   10484  0.0  0.0  81968  4408 ?        S    10:25   0:03  \_ trivial-rewrite -n rewrite -t unix -u
postfix   10613  0.0  0.0  81600  3620 ?        S    10:25   0:01  \_ anvil -l -t unix -u
postfix   41193  0.0  0.0  82584  5004 ?        S    14:08   0:01  \_ cleanup -z -t unix -u
postfix   55305  0.0  0.0  98952  5180 ?        S    14:27   0:02  \_ smtpd -n 5525 -t inet -u -o stress= -s 2
postfix   72160  0.0  0.0  81492  3544 ?        S    14:51   0:00  \_ pickup -l -t fifo -u
postfix   73481  0.0  0.0  82588  5036 ?        S    14:54   0:01  \_ cleanup -z -t unix -u
postfix   73503  0.0  0.0  99192  5344 ?        S    14:54   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   73979  0.0  0.0  82552  4996 ?        S    14:55   0:00  \_ cleanup -z -t unix -u
postfix   76716  0.0  0.0  99072  5304 ?        S    14:59   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   80658  0.0  0.0  99072  5292 ?        S    15:04   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   80683  0.0  0.0  99072  5292 ?        S    15:04   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   81003  0.0  0.0  99072  5304 ?        S    15:05   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   82537  0.0  0.0  82560  4992 ?        S    15:06   0:00  \_ cleanup -z -t unix -u
postfix   82657  0.0  0.0  82512  4944 ?        S    15:06   0:00  \_ cleanup -z -t unix -u
postfix   83428  0.0  0.0  81908  4264 ?        S    15:08   0:00  \_ local -t unix
580       85686  0.0  0.0   8824   972 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas4-cartescos.com.br
postfix   83737  0.0  0.0  81792  4224 ?        S    15:08   0:00  \_ local -t unix
754       84285  0.0  0.0   8824   940 ?        Ds   15:10   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d editoraroncaratimaster
postfix   83948  0.0  0.0  81792  4228 ?        S    15:09   0:00  \_ local -t unix
1208      85821  0.0  0.0   8824   944 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d cursos-vivaedeixeviver.org.br
postfix   83963  0.0  0.0  81792  4200 ?        S    15:09   0:00  \_ local -t unix
root      83964  0.0  0.0   8824   968 ?        Ss   15:09   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ademirrh-frutal.mg.gov.br
root      83965  0.0  0.0   8824   296 ?        S    15:09   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ademirrh-frutal.mg.gov.br
root      83966  0.1  0.4 103748 66584 ?        S    15:09   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 ademirrh-frutal.mg.gov.
root      83979  0.0  0.0   9196  1168 ?        S    15:09   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      83980  0.0  0.0   4408   844 ?        D    15:09   0:00  |                   \_ repquota -u -v /home
postfix   83994  0.0  0.0  81792  4232 ?        S    15:09   0:00  \_ local -t unix
602       86843  0.0  0.0   8824   948 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d denise.munhoz-citrik.com.br
postfix   84010  0.0  0.0  81916  4264 ?        S    15:09   0:00  \_ local -t unix
1215      86981  0.0  0.0   8824   972 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d portoalegre-vivaedeixeviver.org.br
postfix   84017  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
905       86071  0.0  0.0   8824   960 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d rogerio.brito-intercode.com.br
postfix   84044  0.0  0.0  81792  4228 ?        S    15:09   0:00  \_ local -t unix
root      84045  0.0  0.0   8824   964 ?        Ss   15:09   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-travelaround.com.br
root      84046  0.0  0.0   8824   292 ?        S    15:09   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-travelaround.com.br
root      84047  0.1  0.4 103752 66588 ?        S    15:09   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 contato-travelaround.co
root      84068  0.0  0.0   9196  1168 ?        S    15:09   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      84069  0.0  0.0   4408   844 ?        D    15:09   0:00  |                   \_ repquota -u -v /home
postfix   84049  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
1684      84940  0.0  0.0   8824   960 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d loraine-ta.tur.br
postfix   84079  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
1684      86815  0.0  0.0   8824   948 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d loraine-ta.tur.br
postfix   84088  0.0  0.0  81792  4192 ?        S    15:09   0:00  \_ local -t unix
root      84089  0.0  0.0   8960  1044 ?        Ss   15:09   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d convenios-iturama.mg.gov.br
root      84090  0.0  0.0   8824   372 ?        S    15:09   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d convenios-iturama.mg.gov.br
root      84091  0.1  0.4 103752 66588 ?        S    15:09   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 convenios-iturama.mg.go
root      84100  0.0  0.0   9196  1172 ?        S    15:09   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      84101  0.0  0.0   4404   840 ?        D    15:09   0:00  |                   \_ repquota -u -v /home
postfix   84129  0.0  0.0  81528  3588 ?        S    15:09   0:00  \_ bounce -z -t unix -u
postfix   84132  0.0  0.0  81792  4216 ?        S    15:09   0:00  \_ local -t unix
537       84149  0.0  0.0   8824   948 ?        Ds   15:09   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d evaldo-barrosdecoracoes.com.br
postfix   84161  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
1839      86876  0.0  0.0   8948  1048 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d nathalia.conrradi-vivaedeixeviver.org.br
postfix   84186  0.0  0.0  81792  4228 ?        S    15:09   0:00  \_ local -t unix
1216      85813  0.0  0.0   8824   960 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d regina-vivaedeixeviver.org.br
postfix   84201  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
1686      86813  0.0  0.0   8824   948 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-ta.tur.br
postfix   84224  0.0  0.0  81792  4224 ?        S    15:09   0:00  \_ local -t unix
1686      84941  0.0  0.0   8824   964 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-ta.tur.br
postfix   84323  0.0  0.0  81792  4224 ?        S    15:10   0:00  \_ local -t unix
root      85881  0.0  0.0   8824   964 ?        Ss   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ademirrh-frutal.mg.gov.br
root      85882  0.0  0.0   8824   288 ?        S    15:11   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ademirrh-frutal.mg.gov.br
root      85883  0.2  0.4 103748 66588 ?        S    15:11   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 ademirrh-frutal.mg.gov.
root      85893  0.0  0.0   9196  1172 ?        S    15:11   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      85894  0.0  0.0   4400   724 ?        D    15:11   0:00  |                   \_ repquota -u -v /home
postfix   84333  0.0  0.0  81792  4224 ?        S    15:10   0:00  \_ local -t unix
1042      86042  0.0  0.0  10040  2260 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d alda-metodocad.com.br
postfix   84350  0.0  0.0  81792  4224 ?        S    15:10   0:00  \_ local -t unix
1219      85789  0.0  0.0   8824   952 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d site-vivaedeixeviver.org.br
postfix   84351  0.0  0.0  81792  4224 ?        S    15:10   0:00  \_ local -t unix
557       86999  0.0  0.0   8824   936 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d fabio-brincabrasil.com.br
postfix   84374  0.0  0.0  81792  4248 ?        S    15:10   0:00  \_ local -t unix
1241      85800  0.0  0.0   8824  1020 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ines-vivaedeixeviver.org.br
postfix   84388  0.0  0.0  81792  4196 ?        S    15:10   0:00  \_ local -t unix
757       84389  0.0  0.0   8824   936 ?        Ds   15:10   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d christina-editoraroncarati.com.br
postfix   84417  0.0  0.0  81792  4232 ?        S    15:10   0:00  \_ local -t unix
root      84418  0.0  0.0   8824   944 ?        Ss   15:10   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-travelaround.com.br
root      84419  0.0  0.0   8824   272 ?        S    15:10   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d contato-travelaround.com.br
root      84420  0.1  0.4 103752 66584 ?        S    15:10   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 contato-travelaround.co
root      84432  0.0  0.0   9196  1172 ?        S    15:10   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      84433  0.0  0.0   4404   840 ?        D    15:10   0:00  |                   \_ repquota -u -v /home
postfix   84455  0.0  0.0  81792  4220 ?        S    15:10   0:00  \_ local -t unix
580       84974  0.0  0.0   8824  1004 ?        Ds   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas4-cartescos.com.br
postfix   84479  0.0  0.0  81792  4232 ?        S    15:10   0:00  \_ local -t unix
root      84480  0.0  0.0   8968  1048 ?        Ss   15:10   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d infra-intercode.com.br
root      84481  0.0  0.0   8824   376 ?        S    15:10   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d infra-intercode.com.br
root      84482  0.1  0.4 103768 66584 ?        S    15:10   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 infra-intercode.com.br
root      84491  0.0  0.0   9196  1168 ?        S    15:10   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      84492  0.0  0.0   4408   844 ?        D    15:10   0:00  |                   \_ repquota -u -v /home
postfix   84493  0.0  0.0  81792  4220 ?        S    15:10   0:00  \_ local -t unix
1200      86859  0.0  0.0   8824   944 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d administracao-vivaedeixeviver.org.br
postfix   84550  0.0  0.0  81792  4224 ?        S    15:10   0:00  \_ local -t unix
757       86814  0.0  0.0   8824   972 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d christina-editoraroncarati.com.br
postfix   84673  0.0  0.0  81696  3896 ?        S    15:10   0:00  \_ smtp -t unix -u
postfix   84683  0.0  0.0  81696  3884 ?        S    15:10   0:00  \_ smtp -t unix -u
postfix   84691  0.0  0.0  81696  3880 ?        S    15:10   0:00  \_ smtp -t unix -u
postfix   84707  0.0  0.0  81792  4228 ?        S    15:10   0:00  \_ local -t unix
1089      87016  0.0  0.0   8824   984 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d prefeitura-santaadelia.sp.gov.br
postfix   84714  0.0  0.0  81528  3592 ?        S    15:10   0:00  \_ bounce -z -t unix -u
postfix   84716  0.1  0.0  82520  4964 ?        S    15:10   0:00  \_ cleanup -z -t unix -u
postfix   84719  0.0  0.0  81792  4220 ?        S    15:10   0:00  \_ local -t unix
557       86918  0.0  0.0   8824   944 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d fabio-brincabrasil.com.br
postfix   84735  0.1  0.0  82528  4964 ?        S    15:10   0:00  \_ cleanup -z -t unix -u
postfix   84736  0.0  0.0  82580  5000 ?        S    15:10   0:00  \_ cleanup -z -t unix -u
postfix   84737  0.0  0.0  81792  4216 ?        S    15:10   0:00  \_ local -t unix
1632      84777  0.0  0.0   8824   952 ?        Ds   15:10   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d acifcdl-acifcdlfrutal.com.br
postfix   84746  0.0  0.0  81792  4220 ?        S    15:10   0:00  \_ local -t unix
1042      86900  0.0  0.0  10040  2260 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d alda-metodocad.com.br
postfix   84871  0.0  0.0  81792  4224 ?        S    15:11   0:00  \_ local -t unix
867       86932  0.0  0.0  16252  8480 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d ppaiva-ghtengenharia.com.br
postfix   84894  0.0  0.0  81792  4200 ?        S    15:11   0:00  \_ local -t unix
root      84895  0.0  0.0   8824   944 ?        Ss   15:11   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d rhsaude-frutal.mg.gov.br
root      84896  0.0  0.0   8824   272 ?        S    15:11   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d rhsaude-frutal.mg.gov.br
root      84897  0.2  0.4 103748 66584 ?        S    15:11   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 rhsaude-frutal.mg.gov.b
root      84919  0.0  0.0   9196  1168 ?        S    15:11   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      84920  0.0  0.0   4400   732 ?        D    15:11   0:00  |                   \_ repquota -u -v /home
postfix   85985  0.0  0.0  81480  3472 ?        S    15:11   0:00  \_ scache -l -t unix -u
postfix   86100  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
1575      86101  0.0  0.0   8824   936 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d bcintercodemaster
postfix   86111  0.0  0.0  81792  4192 ?        S    15:12   0:00  \_ local -t unix
908       86112  0.0  0.0   8824   952 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d compras-intercode.com.br
postfix   86136  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
602       86137  0.0  0.0   8824   956 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d denise.munhoz-citrik.com.br
postfix   86148  0.0  0.0  81792  4228 ?        S    15:12   0:00  \_ local -t unix
1211      86149  0.0  0.0   8824   960 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d integracao-vivaedeixeviver.org.br
postfix   86235  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
1135      86236  0.0  0.0   8824   988 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d steelknife-steelknife.com.br
postfix   86248  0.0  0.0  81792  4204 ?        S    15:12   0:00  \_ local -t unix
905       86249  0.0  0.0   8824   968 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d rogerio.brito-intercode.com.br
postfix   86298  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
841       86299  0.0  0.0   8824   956 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d recursoshumanos-frutal.mg.gov.br
postfix   86320  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
1717      86321  0.0  0.0   8824   952 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d comercial-97fmfrutal.com.br
postfix   86409  0.0  0.0  81792  4224 ?        S    15:12   0:00  \_ local -t unix
1097      86438  0.0  0.0   8824   948 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d saude-santaadelia.sp.gov.br
postfix   86485  0.0  0.0  81792  4196 ?        S    15:12   0:00  \_ local -t unix
573       86486  0.0  0.0   8824   936 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d financeiro-cartescos.com.br
postfix   86515  0.0  0.0  81792  4200 ?        S    15:12   0:00  \_ local -t unix
1327      86517  0.0  0.0   8824  1028 ?        Ds   15:12   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d beatriz-ibhe.com.br
postfix   86559  0.0  0.0  81792  4196 ?        S    15:13   0:00  \_ local -t unix
1926      86560  0.0  0.0  19144 11368 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas-ferramentascifal.com.br
postfix   86568  0.0  0.0  81792  4248 ?        S    15:13   0:00  \_ local -t unix
1784      86571  0.0  0.0   8824   956 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d indicar-insca.com.br
postfix   86725  0.0  0.0  81792  4200 ?        S    15:13   0:00  \_ local -t unix
1146      86726  0.0  0.0   8824   944 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d jane-tawaya.com.br
postfix   86737  0.0  0.0  81792  4200 ?        S    15:13   0:00  \_ local -t unix
1852      86739  0.0  0.0   8824   996 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d daniel-vanguardian.com.br
postfix   86738  0.0  0.0  81792  4196 ?        S    15:13   0:00  \_ local -t unix
1163      86742  0.0  0.0   8824   996 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d sven-vanguardian.com.br
postfix   86776  0.0  0.0  98952  5152 ?        S    15:13   0:00  \_ smtpd -n smtp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_enable=yes
postfix   86778  0.0  0.0  82512  4908 ?        S    15:13   0:00  \_ cleanup -z -t unix -u
postfix   86779  0.0  0.0  81792  4200 ?        S    15:13   0:00  \_ local -t unix
1215      86780  0.0  0.0   8824   972 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d portoalegre-vivaedeixeviver.org.br
postfix   86783  0.0  0.0  81792  4200 ?        S    15:13   0:00  \_ local -t unix
1205      86784  0.0  0.0   8824   980 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d comunicacao-vivaedeixeviver.org.br
postfix   87074  0.0  0.0  81792  4220 ?        S    15:13   0:00  \_ local -t unix
root      87098  0.0  0.0   8824   960 ?        Ss   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas-lubemetal.com.br
root      87099  0.0  0.0   8824   284 ?        S    15:13   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas-lubemetal.com.br
root      87100  0.5  0.4 103768 66592 ?        S    15:13   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 vendas-lubemetal.com.br
root      87125  0.0  0.0   9196  1168 ?        S    15:13   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87126  0.0  0.0   4400   724 ?        D    15:13   0:00  |                   \_ repquota -u -v /home
postfix   87105  0.0  0.0  81792  4196 ?        S    15:13   0:00  \_ local -t unix
1593      87106  0.0  0.0   8824   948 ?        Ds   15:13   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d secretaria-versocial.org.br
postfix   87174  0.0  0.0  81792  4192 ?        S    15:14   0:00  \_ local -t unix
1135      87175  0.0  0.0   8824   940 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d steelknife-steelknife.com.br
postfix   87185  0.0  0.0  81792  4244 ?        S    15:14   0:00  \_ local -t unix
1780      87186  0.0  0.0   8824   940 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d atendimento-insca.com.br
postfix   87205  0.0  0.0  81792  4192 ?        S    15:14   0:00  \_ local -t unix
1089      87207  0.0  0.0   8824   964 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d prefeitura-santaadelia.sp.gov.br
postfix   87236  0.0  0.0  81792  4196 ?        S    15:14   0:00  \_ local -t unix
1782      87237  0.0  0.0   8824   968 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d cac-insca.com.br
postfix   87327  0.0  0.0  81528  3520 ?        S    15:14   0:00  \_ bounce -z -n trace -t unix -u
postfix   87332  0.0  0.0  81792  4204 ?        S    15:14   0:00  \_ local -t unix
1002      87334  0.0  0.0   8824   952 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d coordenacaopsf-iturama.mg.gov.br
postfix   87333  0.0  0.0  81792  4196 ?        S    15:14   0:00  \_ local -t unix
995       87337  0.0  0.0   8824   956 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d secretariadesaude-iturama.mg.gov.br
postfix   87365  0.0  0.0  81792  4196 ?        S    15:14   0:00  \_ local -t unix
root      87366  0.0  0.0   8824   952 ?        Ss   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d conselhom-frutal.mg.gov.br
root      87367  0.0  0.0   8824   276 ?        S    15:14   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d conselhom-frutal.mg.gov.br
root      87368  0.7  0.4 103748 66580 ?        S    15:14   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 conselhom-frutal.mg.gov
root      87377  0.0  0.0   9196  1168 ?        S    15:14   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87378  0.0  0.0   4404   728 ?        D    15:14   0:00  |                   \_ repquota -u -v /home
postfix   87380  0.0  0.0  81792  4196 ?        S    15:14   0:00  \_ local -t unix
1200      87381  0.0  0.0   8824   956 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d administracao-vivaedeixeviver.org.br
postfix   87399  0.0  0.0  81792  4244 ?        S    15:14   0:00  \_ local -t unix
1169      87402  0.0  0.0   8824   956 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d luiz.sa-vetrix.net
postfix   87400  0.0  0.0  81792  4244 ?        S    15:14   0:00  \_ local -t unix
1169      87403  0.0  0.0   8824   952 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d luiz.sa-vetrix.net
postfix   87401  0.0  0.0  81792  4232 ?        S    15:14   0:00  \_ local -t unix
1329      87477  0.0  0.0   8824   952 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d hospitalidade-ibhe.com.br
postfix   87493  0.0  0.0  81792  4196 ?        S    15:14   0:00  \_ local -t unix
535       87494  0.0  0.0   8824   940 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d compras-barrosdecoracoes.com.br
postfix   87526  0.0  0.0  81792  4200 ?        S    15:14   0:00  \_ local -t unix
1217      87528  0.0  0.0   8824   956 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d rio-vivaedeixeviver.org.br
postfix   87586  0.0  0.0  81792  4200 ?        S    15:14   0:00  \_ local -t unix
1594      87587  0.0  0.0   8824   960 ?        Ds   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d voluntariado-versocial.org.br
postfix   87606  0.0  0.0  81792  4224 ?        S    15:14   0:00  \_ local -t unix
root      87627  0.0  0.0   8824   944 ?        Ss   15:14   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d daniel-icasaa.com.br
root      87628  0.0  0.0   8824   272 ?        S    15:14   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d daniel-icasaa.com.br
root      87629  1.4  0.4 103744 66580 ?        S    15:14   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 daniel-icasaa.com.br
root      87643  0.0  0.0   9196  1172 ?        S    15:14   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87644  0.0  0.0   4408   732 ?        D    15:14   0:00  |                   \_ repquota -u -v /home
postfix   87613  0.0  0.0  81792  4224 ?        S    15:14   0:00  \_ local -t unix
1782      87723  0.0  0.0   8824   944 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d cac-insca.com.br
postfix   87626  0.0  0.0  81792  4200 ?        S    15:14   0:00  \_ local -t unix
754       87684  0.0  0.0   8824   944 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d editoraroncaratimaster
postfix   87735  0.0  0.0  81792  4192 ?        S    15:15   0:00  \_ local -t unix
578       87736  0.0  0.0   9652  1876 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d vendas2-cartescos.com.br
postfix   87757  0.0  0.0  81792  4192 ?        S    15:15   0:00  \_ local -t unix
1575      87758  0.0  0.0   8824   932 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d bcintercodemaster
postfix   87780  0.0  0.0  81792  4192 ?        S    15:15   0:00  \_ local -t unix
root      87781  0.0  0.0   8824   944 ?        Ss   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d brincabrasil-brincabrasil.com.br
root      87782  0.0  0.0   8824   272 ?        S    15:15   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d brincabrasil-brincabrasil.com.br
root      87783  2.5  0.4 103836 66612 ?        S    15:15   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 brincabrasil-brincabras
root      87794  0.0  0.0   9196  1172 ?        S    15:15   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87795  0.0  0.0   4404   728 ?        D    15:15   0:00  |                   \_ repquota -u -v /home
postfix   87801  0.0  0.0  81792  4196 ?        S    15:15   0:00  \_ local -t unix
555       87802  0.0  0.0   8824   944 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d zequi-bnbancodenegocios.com.br
postfix   87822  0.0  0.0  81792  4200 ?        S    15:15   0:00  \_ local -t unix
root      87823  0.0  0.0   8824   960 ?        Ss   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d lidia.hirata-intercode.com.br
root      87824  0.0  0.0   8824   288 ?        S    15:15   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d lidia.hirata-intercode.com.br
root      87825  3.4  0.4 103768 66588 ?        S    15:15   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 lidia.hirata-intercode.
root      87834  0.0  0.0   9196  1168 ?        S    15:15   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87835  0.0  0.0   4404   728 ?        D    15:15   0:00  |                   \_ repquota -u -v /home
postfix   87861  0.0  0.0  81792  4232 ?        S    15:15   0:00  \_ local -t unix
root      87862  0.0  0.0   8824   980 ?        Ss   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d fernando-vanguardian.com.br
root      87863  0.0  0.0   8824   308 ?        S    15:15   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d fernando-vanguardian.com.br
root      87864  4.7  0.4 103752 66588 ?        S    15:15   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 fernando-vanguardian.co
root      87874  0.0  0.0   9196  1168 ?        S    15:15   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87875  0.0  0.0   4400   724 ?        D    15:15   0:00  |                   \_ repquota -u -v /home
postfix   87876  0.0  0.0  81792  4192 ?        S    15:15   0:00  \_ local -t unix
1449      87877  0.0  0.0   8824   948 ?        Ds   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d educacaoespecial-frutal.mg.gov.br
postfix   87900  0.0  0.0  81792  4200 ?        S    15:15   0:00  \_ local -t unix
root      87901  0.0  0.0   8824   980 ?        Ss   15:15   0:00  |   \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d lidia.hirata-intercode.com.br
root      87902  0.0  0.0   8824   308 ?        S    15:15   0:00  |       \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d lidia.hirata-intercode.com.br
root      87903 13.7  0.4 103768 66584 ?        S    15:15   0:00  |           \_ /usr/bin/perl /usr/libexec/webmin/virtual-server/lookup-domain.pl --exitcode 73 lidia.hirata-intercode.
root      87923  0.0  0.0   9196  1172 ?        S    15:15   0:00  |               \_ sh -c (repquota -u -v /home 2>&1)
root      87924  0.0  0.0   4404   728 ?        D    15:15   0:00  |                   \_ repquota -u -v /home
postfix   87937  0.0  0.0  81792  4192 ?        S    15:15   0:00  \_ local -t unix
532       87938  0.0  0.0   8824   972 ?        Ss   15:15   0:00      \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d barrosdecoracoes-barrosdecoracoes.com.br
532       87946  0.0  0.0   8824   296 ?        S    15:15   0:00          \_ /usr/bin/procmail-wrapper -o -a mail2.intercode.com.br -d barrosdecoracoes-barrosdecoracoes.com.br
532       87947  0.0  0.0  38112  1996 ?        S    15:15   0:00              \_ /usr/bin/spamc
root      11828  0.0  0.0  19264   836 ?        Ss   10:25   0:10 /usr/sbin/dovecot
dovecot   11829  0.0  0.0  12984  1148 ?        S    10:25   0:04  \_ dovecot/anvil
root      11830  0.0  0.0  13112  1200 ?        S    10:25   0:03  \_ dovecot/log
root      11832  0.0  0.0  15912  4040 ?        S    10:25   0:09  \_ dovecot/config
dovecot   11834  0.0  0.0  78840  3324 ?        S    10:25   0:12  \_ dovecot/auth
1873      11929  0.0  0.0  19680  2900 ?        S    10:26   0:00  \_ dovecot/imap
dovenull  13783  0.0  0.0  42148  3464 ?        S    10:27   0:00  \_ dovecot/imap-login
1872      13784  0.0  0.0  19152  2824 ?        S    10:27   0:00  \_ dovecot/imap
1163      14693  0.0  0.0  81360 15748 ?        S    10:29   0:05  \_ dovecot/imap
dovenull  15976  0.0  0.0  42148  3460 ?        S    10:32   0:00  \_ dovecot/imap-login
1872      15978  0.0  0.0  20492  2980 ?        S    10:32   0:00  \_ dovecot/imap
dovenull  20058  0.0  0.0  42148  3456 ?        S    10:36   0:00  \_ dovecot/imap-login
1872      20060  0.0  0.0  18944  2712 ?        S    10:36   0:00  \_ dovecot/imap
dovenull  23399  0.0  0.0  42148  3456 ?        S    10:40   0:00  \_ dovecot/imap-login
1872      23436  0.0  0.0  18920  2444 ?        S    10:40   0:00  \_ dovecot/imap
1852      64737  0.0  0.0  24628  4052 ?        S    11:23   0:00  \_ dovecot/imap
1728      69719  0.0  0.0  18572  2216 ?        S    11:29   0:00  \_ dovecot/imap
1728      69878  0.0  0.0  18708  2436 ?        S    11:29   0:00  \_ dovecot/imap
1273      78981  0.0  0.0  18824  2560 ?        S    11:42   0:00  \_ dovecot/imap
dovenull  92325  0.0  0.0  42148  3468 ?        S    12:02   0:00  \_ dovecot/imap-login
906       92327  0.0  0.0  19040  2812 ?        S    12:02   0:00  \_ dovecot/imap
1387      96716  0.0  0.0  20640  4136 ?        S    12:10   0:00  \_ dovecot/imap
942      110695  0.0  0.0  18448  2080 ?        S    12:32   0:00  \_ dovecot/imap
866        3621  0.0  0.0  18572  2376 ?        S    13:07   0:00  \_ dovecot/imap
1836      22096  0.0  0.0  18772  2520 ?        S    13:38   0:00  \_ dovecot/imap
1836      32812  0.0  0.0  18568  2352 ?        S    13:57   0:00  \_ dovecot/imap
1163      36467  0.0  0.3  81712 55820 ?        S    14:01   0:00  \_ dovecot/imap
1034      37457  0.0  0.0  19372  3304 ?        S    14:02   0:00  \_ dovecot/imap
1926      39267  0.0  0.0  20032  3008 ?        S    14:06   0:00  \_ dovecot/imap
1830      43132  0.0  0.0  18924  2736 ?        S    14:11   0:00  \_ dovecot/imap
615       48523  0.0  0.0  18440  2024 ?        S    14:17   0:00  \_ dovecot/imap
615       48537  0.0  0.0  18276  2076 ?        S    14:17   0:00  \_ dovecot/imap
615       48542  0.0  0.0  18528  2324 ?        S    14:17   0:00  \_ dovecot/imap
615       48553  0.0  0.0  18528  2320 ?        S    14:17   0:00  \_ dovecot/imap
616       48566  0.0  0.0  19944  2856 ?        S    14:17   0:00  \_ dovecot/imap
616       48573  0.0  0.0  18244  1756 ?        S    14:17   0:00  \_ dovecot/imap
616       48704  0.0  0.0  18468  2192 ?        S    14:17   0:00  \_ dovecot/imap
1478      54864  0.0  0.0  22048  5292 ?        S    14:26   0:00  \_ dovecot/imap
907       56073  0.0  0.0  47916  8516 ?        D    14:29   0:00  \_ dovecot/imap
1330      56621  0.0  0.0  18608  2528 ?        S    14:30   0:00  \_ dovecot/imap
1852      56639  0.0  0.0  18560  2380 ?        S    14:30   0:00  \_ dovecot/imap
1316      56907  0.0  0.0  30980  6444 ?        S    14:30   0:00  \_ dovecot/imap
1852      57056  0.0  0.0  20676  2976 ?        S    14:30   0:00  \_ dovecot/imap
1163      59254  0.0  0.0  47500  3320 ?        D    14:32   0:00  \_ dovecot/imap
dovenull  60234  0.0  0.0  42152  3456 ?        S    14:34   0:00  \_ dovecot/imap-login
1955      60238  0.0  0.0  18924  2680 ?        S    14:34   0:00  \_ dovecot/imap
dovenull  60262  0.0  0.0  42152  3456 ?        S    14:34   0:00  \_ dovecot/imap-login
1955      60269  0.0  0.0  18244  1768 ?        S    14:34   0:00  \_ dovecot/imap
dovenull  60276  0.0  0.0  42152  3456 ?        S    14:34   0:00  \_ dovecot/imap-login
1955      60280  0.0  0.0  18672  2284 ?        S    14:34   0:00  \_ dovecot/imap
dovenull  60286  0.0  0.0  42152  3452 ?        S    14:34   0:00  \_ dovecot/imap-login
1955      60287  0.0  0.0  18276  2128 ?        S    14:34   0:00  \_ dovecot/imap
866       64063  0.0  0.0  19296  3156 ?        S    14:39   0:00  \_ dovecot/imap
886       65541  0.1  0.1  44784 22716 ?        S    14:41   0:02  \_ dovecot/imap
1950      66791  0.0  0.0  18892  2708 ?        S    14:43   0:00  \_ dovecot/imap
1137      66802  0.0  0.0  21012  2908 ?        S    14:44   0:00  \_ dovecot/imap
619       67631  0.0  0.0  18520  2328 ?        S    14:45   0:00  \_ dovecot/imap
1358      68824  0.0  0.0  18488  2248 ?        S    14:46   0:00  \_ dovecot/imap
1930      68830  0.0  0.0  18468  2208 ?        S    14:46   0:00  \_ dovecot/imap
1930      68833  0.0  0.0  18680  2452 ?        S    14:46   0:00  \_ dovecot/imap
1358      68839  0.0  0.0  18484  2260 ?        S    14:46   0:00  \_ dovecot/imap
1358      68844  0.0  0.0  18692  2428 ?        S    14:46   0:00  \_ dovecot/imap
dovenull  69258  0.0  0.0  42148  3452 ?        S    14:47   0:00  \_ dovecot/imap-login
1472      69269  0.0  0.0  18572  2200 ?        S    14:47   0:00  \_ dovecot/imap
dovenull  69368  0.0  0.0  42148  3452 ?        S    14:47   0:00  \_ dovecot/imap-login
1472      69369  0.0  0.0  18468  2084 ?        S    14:47   0:00  \_ dovecot/imap
1358      69443  0.0  0.0  18488  2260 ?        S    14:47   0:00  \_ dovecot/imap
1517      69487  0.0  0.0  18596  2200 ?        S    14:47   0:00  \_ dovecot/imap
1517      69492  0.0  0.0  31196  3568 ?        S    14:47   0:00  \_ dovecot/imap
1930      70861  0.0  0.0  18676  2364 ?        S    14:50   0:00  \_ dovecot/imap
1930      70862  0.0  0.0  18468  2144 ?        S    14:50   0:00  \_ dovecot/imap
1164      72740  0.0  0.0  21356  4016 ?        D    14:52   0:00  \_ dovecot/imap
1408      73891  0.0  0.0  28580  5404 ?        S    14:55   0:00  \_ dovecot/imap
1930      75597  0.0  0.0  18468  2212 ?        S    14:56   0:00  \_ dovecot/imap
1164      77360  0.0  0.0  57720  6648 ?        S    15:00   0:00  \_ dovecot/imap
1164      77361  0.0  0.2  57720 34268 ?        S    15:00   0:00  \_ dovecot/imap
1684      79903  0.1  0.0  19192  2988 ?        S    15:02   0:00  \_ dovecot/imap
1684      82848  0.0  0.0  18880  2860 ?        S    15:07   0:00  \_ dovecot/imap
1329      83550  0.0  0.0  18772  2708 ?        S    15:08   0:00  \_ dovecot/imap
1329      83822  0.0  0.0  18820  2504 ?        D    15:09   0:00  \_ dovecot/imap
854       83882  0.0  0.0  23572  2972 ?        D    15:09   0:00  \_ dovecot/imap
dovenull  83926  0.0  0.0  42148  3460 ?        S    15:09   0:00  \_ dovecot/imap-login
dovenull  83927  0.0  0.0  42148  3456 ?        S    15:09   0:00  \_ dovecot/imap-login
1517      83930  0.0  0.0  18920  2704 ?        S    15:09   0:00  \_ dovecot/imap
1511      83931  0.0  0.0  18608  2048 ?        S    15:09   0:00  \_ dovecot/imap
dovenull  83943  0.0  0.0  42148  3460 ?        S    15:09   0:00  \_ dovecot/imap-login
1511      83946  0.0  0.0  18244  1768 ?        S    15:09   0:00  \_ dovecot/imap
dovenull  83947  0.0  0.0  42148  3456 ?        S    15:09   0:00  \_ dovecot/imap-login
1511      83954  0.0  0.0  18692  2252 ?        S    15:09   0:00  \_ dovecot/imap
dovenull  83955  0.0  0.0  42148  3460 ?        S    15:09   0:00  \_ dovecot/imap-login
1511      83956  0.0  0.0  18244  2040 ?        S    15:09   0:00  \_ dovecot/imap
1090      84103  0.0  0.0  18344  1956 ?        D    15:09   0:00  \_ dovecot/pop3
580       84184  0.0  0.0  18860  2572 ?        D    15:09   0:00  \_ dovecot/imap
1315      84222  0.0  0.0  25744  3744 ?        D    15:09   0:00  \_ dovecot/imap
1106      84446  0.0  0.0  18440  2052 ?        S    15:10   0:00  \_ dovecot/imap
dovenull  84513  0.0  0.0  42148  3460 ?        S    15:10   0:00  \_ dovecot/imap-login
1517      84522  0.0  0.0  18596  2172 ?        S    15:10   0:00  \_ dovecot/imap
dovenull  84523  0.0  0.0  42148  3456 ?        S    15:10   0:00  \_ dovecot/imap-login
1517      84532  0.0  0.0  21196  4296 ?        S    15:10   0:00  \_ dovecot/imap
1358      84536  0.0  0.0  18468  2256 ?        S    15:10   0:00  \_ dovecot/imap
824       84591  0.0  0.0  18616  2184 ?        D    15:10   0:00  \_ dovecot/imap
1781      84773  0.0  0.0  18636  2200 ?        D    15:10   0:00  \_ dovecot/pop3
1686      84827  0.0  0.0  18244  1812 ?        S    15:10   0:00  \_ dovecot/imap
1685      84828  0.0  0.0  18244  1808 ?        S    15:10   0:00  \_ dovecot/imap
1686      84852  0.1  0.0  18628  2404 ?        S    15:11   0:00  \_ dovecot/imap
1486      84856  0.0  0.0  18876  2772 ?        D    15:11   0:00  \_ dovecot/imap
1679      84904  0.0  0.0  18360  2124 ?        D    15:11   0:00  \_ dovecot/pop3
1315      85737  0.0  0.0  19768  2656 ?        D    15:11   0:00  \_ dovecot/imap
1582      85765  0.0  0.0  18448  2024 ?        D    15:11   0:00  \_ dovecot/imap
1582      85767  0.0  0.0  18448  2028 ?        D    15:11   0:00  \_ dovecot/imap
1684      85871  0.0  0.0  18440  2084 ?        D    15:11   0:00  \_ dovecot/imap
815       85903  0.0  0.0  18716  2308 ?        D    15:11   0:00  \_ dovecot/imap
root      85939  0.0  0.0  39612  2080 ?        S    15:11   0:00  \_ dovecot/ssl-params
1517      85964  0.0  0.0  18616  2200 ?        D    15:11   0:00  \_ dovecot/imap
580       86054  0.0  0.0  18860  2528 ?        D    15:11   0:00  \_ dovecot/imap
1387      86056  0.0  0.0  18616  2284 ?        D    15:11   0:00  \_ dovecot/imap
1685      86107  0.1  0.0  18800  2596 ?        D    15:12   0:00  \_ dovecot/imap
1780      86165  0.0  0.0  18492  2168 ?        D    15:12   0:00  \_ dovecot/pop3
618       86178  0.0  0.0  18244  1756 ?        S    15:12   0:00  \_ dovecot/imap
581       86187  0.0  0.0  18372  1900 ?        D    15:12   0:00  \_ dovecot/pop3
1679      86200  0.0  0.0  18360  1940 ?        D    15:12   0:00  \_ dovecot/pop3
557       86207  0.0  0.0  20440  3140 ?        D    15:12   0:00  \_ dovecot/imap
558       86208  0.0  0.0  18700  2348 ?        D    15:12   0:00  \_ dovecot/imap
1792      86229  0.0  0.0  21560  5176 ?        D    15:12   0:00  \_ dovecot/imap
1635      86233  0.0  0.0  18344  2080 ?        D    15:12   0:00  \_ dovecot/pop3
1017      86261  0.0  0.0  18656  2184 ?        D    15:12   0:00  \_ dovecot/imap
1136      86275  0.0  0.0  26120  5316 ?        D    15:12   0:00  \_ dovecot/pop3
815       86371  0.0  0.0  18440  1956 ?        D    15:12   0:00  \_ dovecot/imap
578       86423  0.0  0.0  18360  1872 ?        D    15:12   0:00  \_ dovecot/pop3
580       86437  0.0  0.0  18860  2524 ?        S    15:12   0:00  \_ dovecot/imap
504       86483  0.0  0.0  18376  1900 ?        D    15:12   0:00  \_ dovecot/pop3
756       86507  0.0  0.0  19888  3604 ?        D    15:12   0:00  \_ dovecot/imap
580       86582  0.0  0.0  18860  2492 ?        D    15:13   0:00  \_ dovecot/imap
1327      86600  0.0  0.0  18244  1760 ?        S    15:13   0:00  \_ dovecot/imap
1401      86602  0.0  0.0  18244  1764 ?        S    15:13   0:00  \_ dovecot/imap
1401      86605  0.0  0.0  18548  2368 ?        D    15:13   0:00  \_ dovecot/imap
1327      86618  0.0  0.0  19280  2680 ?        D    15:13   0:00  \_ dovecot/imap
906       86631  0.0  0.0  18244  1804 ?        S    15:13   0:00  \_ dovecot/imap
1435      86639  0.0  0.0  18732  2264 ?        S    15:13   0:00  \_ dovecot/imap
1273      86641  0.0  0.0  18244  1772 ?        S    15:13   0:00  \_ dovecot/imap
1435      86645  0.0  0.0  18732  2304 ?        D    15:13   0:00  \_ dovecot/imap
1273      86667  0.2  0.0  18540  2352 ?        S    15:13   0:00  \_ dovecot/imap
1017      86683  0.0  0.0  21644  2268 ?        D    15:13   0:00  \_ dovecot/imap
618       86689  0.0  0.0  18580  2228 ?        D    15:13   0:00  \_ dovecot/imap
618       86690  0.0  0.0  18244  1756 ?        S    15:13   0:00  \_ dovecot/imap
1136      86701  0.1  0.0  19040  2164 ?        D    15:13   0:00  \_ dovecot/pop3
1686      86736  0.0  0.0  18828  2640 ?        D    15:13   0:00  \_ dovecot/imap
1788      86868  0.0  0.0  18368  2128 ?        D    15:13   0:00  \_ dovecot/pop3
1792      86917  0.0  0.0  18440  1996 ?        D    15:13   0:00  \_ dovecot/imap
756       86931  0.0  0.0  18456  1964 ?        S    15:13   0:00  \_ dovecot/imap
1090      86947  0.0  0.0  18344  1832 ?        D    15:13   0:00  \_ dovecot/pop3
1230      86949  0.0  0.0  18368  2112 ?        D    15:13   0:00  \_ dovecot/pop3
1679      86952  0.0  0.0  18360  1844 ?        S    15:13   0:00  \_ dovecot/pop3
1665      86971  0.0  0.0  18244  1760 ?        S    15:13   0:00  \_ dovecot/imap
757       86979  0.0  0.0  20260  2784 ?        D    15:13   0:00  \_ dovecot/pop3
1163      87012  0.0  0.0  47172  2648 ?        D    15:13   0:00  \_ dovecot/imap
824       87014  0.0  0.0  18620  2044 ?        D    15:13   0:00  \_ dovecot/imap
1632      87022  0.0  0.0  18508  2164 ?        D    15:13   0:00  \_ dovecot/pop3
815       87027  0.0  0.0  18440  1956 ?        D    15:13   0:00  \_ dovecot/imap
1136      87087  0.1  0.0  18940  1980 ?        D    15:13   0:00  \_ dovecot/imap
759       87169  0.0  0.0  18580  2248 ?        D    15:14   0:00  \_ dovecot/imap
759       87171  0.0  0.0  18580  2260 ?        D    15:14   0:00  \_ dovecot/imap
580       87200  0.0  0.0  18780  2508 ?        D    15:14   0:00  \_ dovecot/imap
1478      87212  0.0  0.0  20932  3576 ?        S    15:14   0:00  \_ dovecot/imap
1327      87250  0.0  0.0  18584  1936 ?        S    15:14   0:00  \_ dovecot/imap
1435      87253  0.0  0.0  18456  1980 ?        D    15:14   0:00  \_ dovecot/imap
1329      87255  0.0  0.0  18244  1776 ?        S    15:14   0:00  \_ dovecot/imap
1329      87262  0.2  0.0  18560  2352 ?        S    15:14   0:00  \_ dovecot/imap
1435      87274  0.0  0.0  18456  2012 ?        D    15:14   0:00  \_ dovecot/imap
root      87277  0.6  0.0  78880  3432 ?        S    15:14   0:00  \_ dovecot/auth -w
578       87286  0.0  0.0  18360  1836 ?        S    15:14   0:00  \_ dovecot/pop3
1401      87297  0.0  0.0  18460  1960 ?        S    15:14   0:00  \_ dovecot/imap
root      87308  0.0  0.0  78880  3432 ?        S    15:14   0:00  \_ dovecot/auth -w
906       87309  0.0  0.0  18240  1700 ?        S    15:14   0:00  \_ dovecot/imap
906       87310  0.0  0.0  18244  1812 ?        S    15:14   0:00  \_ dovecot/imap
1377      87311  0.0  0.0  18244  1756 ?        S    15:14   0:00  \_ dovecot/imap
1164      87330  0.0  0.0  22416  4512 ?        D    15:14   0:00  \_ dovecot/imap
1164      87331  0.0  0.0  19968  2568 ?        D    15:14   0:00  \_ dovecot/imap
1136      87357  0.1  0.0  18844  1876 ?        D    15:14   0:00  \_ dovecot/pop3
1136      87359  0.1  0.0  18940  1980 ?        D    15:14   0:00  \_ dovecot/imap
1792      87433  0.1  0.0  18440  1996 ?        S    15:14   0:00  \_ dovecot/imap
1377      87437  0.0  0.0  18528  2288 ?        S    15:14   0:00  \_ dovecot/imap
854       87444  0.0  0.0  23476  2828 ?        S    15:14   0:00  \_ dovecot/imap
1790      87461  0.0  0.0  18644  2152 ?        D    15:14   0:00  \_ dovecot/pop3
906       87466  0.2  0.0  18536  2336 ?        S    15:14   0:00  \_ dovecot/imap
1478      87475  0.0  0.0  18632  2204 ?        D    15:14   0:00  \_ dovecot/imap
dovenull  87490  0.0  0.0  42016  3444 ?        S    15:14   0:00  \_ dovecot/pop3-login
1093      87491  0.0  0.0  20332  3168 ?        D    15:14   0:00  \_ dovecot/pop3
dovenull  87504  0.0  0.0  42148  3464 ?        S    15:14   0:00  \_ dovecot/imap-login
1517      87505  0.0  0.0  18616  2212 ?        D    15:14   0:00  \_ dovecot/imap
815       87511  0.0  0.0  18440  1960 ?        D    15:14   0:00  \_ dovecot/imap
1686      87516  0.0  0.0  18856  2380 ?        S    15:14   0:00  \_ dovecot/imap
1090      87553  0.0  0.0  18344  1828 ?        S    15:14   0:00  \_ dovecot/pop3
1230      87600  0.0  0.0  18368  1852 ?        S    15:14   0:00  \_ dovecot/pop3
1665      87660  0.0  0.0  18540  2296 ?        S    15:14   0:00  \_ dovecot/imap
1136      87662  0.1  0.0  18940  1976 ?        S    15:14   0:00  \_ dovecot/imap
1163      87703  0.0  0.0  47172  2652 ?        D    15:15   0:00  \_ dovecot/imap
759       87716  0.0  0.0  18580  2228 ?        S    15:15   0:00  \_ dovecot/imap
976       87720  0.0  0.0  24432  3988 ?        D    15:15   0:00  \_ dovecot/imap
580       87746  0.0  0.0  18780  2508 ?        D    15:15   0:00  \_ dovecot/imap
1685      87752  0.0  0.0  18240  1812 ?        S    15:15   0:00  \_ dovecot/imap
1686      87753  0.0  0.0  18244  1728 ?        S    15:15   0:00  \_ dovecot/imap
1685      87764  0.1  0.0  18492  2308 ?        S    15:15   0:00  \_ dovecot/imap
766       87774  0.0  0.0  18356  2112 ?        D    15:15   0:00  \_ dovecot/pop3
1245      87779  0.0  0.0  18372  1988 ?        D    15:15   0:00  \_ dovecot/pop3
580       87843  0.0  0.0  18860  2492 ?        D    15:15   0:00  \_ dovecot/imap
1684      87846  0.0  0.0  18440  1940 ?        S    15:15   0:00  \_ dovecot/imap
1110      87857  0.0  0.0  18356  2024 ?        D    15:15   0:00  \_ dovecot/pop3
1163      87890  0.0  0.0  47172  2672 ?        D    15:15   0:00  \_ dovecot/imap
854       87892  0.0  0.0  18488  2060 ?        D    15:15   0:00  \_ dovecot/imap
1164      87896  0.5  0.0  18772  2424 ?        S    15:15   0:00  \_ dovecot/imap
1004      87910  0.0  0.0  19732  2184 ?        D    15:15   0:00  \_ dovecot/imap
1004      87912  0.0  0.0  18276  2056 ?        D    15:15   0:00  \_ dovecot/imap
1164      87931  0.0  0.0  19908  2404 ?        S    15:15   0:00  \_ dovecot/imap
[root@linux03 ~]#

And here is second command:

[root@linux03 ~]# netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head -10
    265 
     20 201.63.115.123
     14 177.140.145.10
     13 187.66.71.137
     13 179.34.54.169
     13 177.95.212.201
     13 127.0.0.1
     12 201.93.118.178
     12 187.108.34.34
     10 189.121.84.217
[root@linux03 ~]#

Thank you

4

Hi Andrey, here it is:

I’ve attached the ps command,

And here is second command:

[root@linux03 ~]# netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head -10
    265 
     20 201.63.115.123
     14 177.140.145.10
     13 187.66.71.137
     13 179.34.54.169
     13 177.95.212.201
     13 127.0.0.1
     12 201.93.118.178
     12 187.108.34.34
     10 189.121.84.217
[root@linux03 ~]#

Thank you

5

Howdy,

Hmm, it can be tough to discern the cause and the effect just by looking at the process list… but I notice two things.

You do seem to have a decent amount of PHP processes running, though many of them are older.

However, the thing that really stood out to me is how many emails procmail is currently in the process of delivering.

What would you think about temporarily disabling Postfix (just by running “/etc/init.d/postfix stop”, and seeing if your load goes back to normal after a couple of minutes.

If that doesn’t help, we may want to look deeper into the PHP processes running, and what they’re up to.

-Eric

6

Hi Andrey,

I still could not find the cause of the high IO wait.
Look at the top command right now, Postfix is stopped.

top - 10:42:01 up 1 day, 10:58,  1 user,  load average: 301.14, 234.65, 121.91
Tasks: 1190 total,   1 running, 1188 sleeping,   0 stopped,   1 zombie
Cpu0  :  4.7%us,  1.3%sy,  0.0%ni,  0.0%id, 93.0%wa,  0.0%hi,  1.0%si,  0.0%st
Cpu1  :  1.0%us,  0.0%sy,  0.0%ni,  0.0%id, 99.0%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu2  :  0.0%us,  0.7%sy,  0.0%ni,  0.0%id, 99.3%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu3  :  0.0%us,  0.0%sy,  0.0%ni,  0.0%id,100.0%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu4  :  1.7%us,  1.3%sy,  0.0%ni,  0.0%id, 97.0%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu5  :  1.7%us,  0.7%sy,  0.0%ni,  0.0%id, 97.7%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu6  :  0.3%us,  0.7%sy,  0.0%ni,  0.0%id, 99.0%wa,  0.0%hi,  0.0%si,  0.0%st
Cpu7  :  0.3%us,  0.3%sy,  0.0%ni,  0.0%id, 99.3%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:  16037364k total, 14981824k used,  1055540k free,  1681864k buffers
Swap: 18284540k total,   903132k used, 17381408k free,  2798056k cached

   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                                                        
 88212 1080      20   0  185m  24m 7636 D  2.0  0.2   0:00.34 php-cgi                                                                                         
 89517 1261      20   0  276m  20m 7432 S  2.0  0.1   0:00.12 php-cgi                                                                                         
 89515 1261      20   0  275m  20m 7404 S  1.3  0.1   0:00.12 php-cgi                                                                                         
 89163 root      20   0 78880 3472 2452 S  1.0  0.0   0:00.26 auth                                                                                            
 89285 1261      20   0  277m  20m 7564 S  1.0  0.1   0:00.40 php-cgi                                                                                         
   460 root      20   0     0    0    0 D  0.7  0.0   1:09.58 jbd2/dm-0-8                                                                                     
  3437 mysql     20   0 12.9g 1.5g 5364 S  0.7 10.1  13:42.62 mysqld                                                                                          
 89181 gemeloma  20   0  273m  18m 7372 D  0.7  0.1   0:00.10 php-cgi                                                                                         
 89276 root      20   0  382m 310m 2492 D  0.7  2.0   0:05.40 miniserv.pl                                                                                     
 89511 root      20   0 15916 2220  992 R  0.7  0.0   0:00.24 top                                                                                             
 89620 uniquecl  20   0  272m  16m 7276 D  0.7  0.1   0:00.03 php-cgi                                                                                         
    58 root      20   0     0    0    0 S  0.3  0.0   1:20.51 kblockd/0                                                                                       
   950 root      20   0     0    0    0 D  0.3  0.0   0:13.95 flush-253:0                                                                                     
  3517 root      20   0 19264  680  528 S  0.3  0.0   0:40.28 dovecot                                                                                         
  3548 root      20   0  238m  22m 3196 S  0.3  0.1   0:22.59 spamd                                                                                           
 74856 apache    20   0  334m 8004 3056 S  0.3  0.0   0:00.08 httpd                                                                                           
 75020 905       20   0 70080 3588 1792 D  0.3  0.0   0:00.11 imap                                                                                            
 85253 905       20   0 69884 3224 1692 D  0.3  0.0   0:00.04 imap                                                                                            
 86823 580       20   0 18860 2524 1612 S  0.3  0.0   0:00.11 imap                                                                                            
 87701 1492      20   0 18988 2416 1552 D  0.3  0.0   0:00.04 imap                                                                                            
 87768 539       20   0 19796 2400 1596 D  0.3  0.0   0:00.30 pop3                                                                                            
 89145 996       20   0 18864 2368 1572 S  0.3  0.0   0:00.04 imap                                                                                            
 89198 1492      20   0 18988 2416 1552 S  0.3  0.0   0:00.04 imap                                                                                            
 89539 1261      20   0  274m  18m 7388 S  0.3  0.1   0:00.06 php-cgi                                                                                         
 89638 lubemeta  20   0  174m  12m 6912 S  0.3  0.1   0:00.01 php-cgi                                                                                         
     1 root      20   0 19232 1120  912 S  0.0  0.0   0:01.41 init                                                                                            
     2 root      20   0     0    0    0 S  0.0  0.0   0:00.00 kthreadd                                                                                        
     3 root      RT   0     0    0    0 S  0.0  0.0   0:01.20 migration/0                                                                                     
     4 root      20   0     0    0    0 S  0.0  0.0   0:05.21 ksoftirqd/0                                                                                     
     5 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 stopper/0                                                                                       
     6 root      RT   0     0    0    0 S  0.0  0.0   0:00.09 watchdog/0                                                                                      
     7 root      RT   0     0    0    0 S  0.0  0.0   0:00.09 migration/1                                                                                     
     8 root      RT   0     0    0    0 S  0.0  0.0   0:00.00 stopper/1                                                                                       
     9 root      20   0     0    0    0 S  0.0  0.0   0:00.99 ksoftirqd/1                                                                                     
    10 root      RT   0     0    0    0 S  0.0  0.0   0:00.07 watchdog/1

On iotop I noticed a process, index.cgi that’s using most of the IO… what is this process?
A few moments ago it was writing 30Mb/s

Total DISK READ: 19.37 K/s | Total DISK WRITE: 1622.80 K/s
  TID  PRIO  USER     DISK READ  DISK WRITE  SWAPIN     IO>    COMMAND                                                                                        
89276 be/4 root        0.00 B/s    0.00 B/s  0.00 % 90.77 % index.cgi
  460 be/3 root        0.00 B/s  507.37 K/s  0.00 % 18.16 % [jbd2/dm-0-8]
  946 be/3 root        0.00 B/s   27.11 K/s  0.00 % 10.31 % [jbd2/dm-2-8]
89903 be/4 suporte@   11.62 K/s    0.00 B/s  0.00 %  1.51 % dovecot/imap
 3488 be/4 mysql       3.87 K/s    3.87 K/s  0.00 %  1.18 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ ~qld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
84757 be/4 mysql       0.00 B/s    0.00 B/s  0.00 %  0.48 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ ~qld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
85686 be/4 mysql       0.00 B/s    3.87 K/s  0.00 %  0.46 % mysqld --basedir=/usr --datadir=/var/lib/mysql/ ~qld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
90841 be/4 rogerio.    0.00 B/s    3.87 K/s  0.00 %  0.00 % dovecot/imap
88941 be/4 apache      0.00 B/s    7.75 K/s  0.00 %  0.00 % httpd
93059 be/4 root        0.00 B/s    7.75 K/s  0.00 %  0.00 % lfd - (child) (PT) sending alert email for process 91898
  951 be/4 root        0.00 B/s    3.87 K/s  0.00 %  0.00 % [flush-253:2]
91664 be/4 apache      0.00 B/s    3.87 K/s  0.00 %  0.00 % httpd
81246 be/4 apache      0.00 B/s    3.87 K/s  0.00 %  0.00 % httpd
87814 be/4 apache      0.00 B/s    7.75 K/s  0.00 %  0.00 % httpd
 1820 be/4 root        0.00 B/s    3.87 K/s  0.00 %  0.00 % rsyslogd -i /var/run/syslogd.pid -c 5
    1 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % init
    2 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [kthreadd]
    3 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/0]
    4 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/0]
    5 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/0]
    6 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/0]
    7 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/1]
    8 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/1]
    9 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/1]
   10 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/1]
   11 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/2]
   12 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/2]
   13 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/2]
   14 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchdog/2]
   15 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [migration/3]
   16 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [stopper/3]
   17 be/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [ksoftirqd/3]
   18 rt/4 root        0.00 B/s    0.00 B/s  0.00 %  0.00 % [watchd

Also, is there a way to check if the HD is failing? Read/write errors?

Thank you

7

Howdy,

Hmm, I’m not aware of a program named “index.cgi” that would run as root, that’s a little unusual.

It sounds like a web app, but web apps shouldn’t run as root. It might be worth investigating what’s going on there.

In the meantime though, you could always kill that process.

I don’t think you’re seeing a disk related issue here, though if you wanted, you could run “dmesg” and review the output towards the end to see if any disk related errors are being generated.

-Eric

8

Hi Eric,

Today i didn’t have any problems so far.
But looking at dmegs, among a lot of firewall entries , I’ve found the follwing:

Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.192.107 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.216.251 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.216.250 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=61.240.144.65 DST=200.170.192.107 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=2422 PROTO=TCP SPT=60000 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 6 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 7 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 8 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 9 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 10 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:b8:e0:b6:59/00:00:92:00:00/e0 tag 11 dma 94208 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
sd 3:0:0:0: [sdb]  Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
sd 3:0:0:0: [sdb]  Sense Key : Medium Error [current] [descriptor]
Descriptor sense data with sense descriptors (in hex):
        72 03 11 04 00 00 00 0c 00 0a 80 00 00 00 00 00 
        92 59 b7 3b 
sd 3:0:0:0: [sdb]  Add. Sense: Unrecovered read error - auto reallocate failed
sd 3:0:0:0: [sdb] CDB: Read(10): 28 00 92 59 b6 e0 00 00 b8 00
end_request: I/O error, dev sdb, sector 2455353147
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 9 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 10 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 11 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 12 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 13 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
ata4: EH complete
ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
ata4.00: irq_stat 0x40000001
ata4.00: failed command: READ DMA EXT
ata4.00: cmd 25/00:08:38:b7:59/00:00:92:00:00/e0 tag 14 dma 4096 in
         res 51/40:00:3b:b7:59/00:00:92:00:00/00 Emask 0x9 (media error)
ata4.00: status: { DRDY ERR }
ata4.00: error: { UNC }
ata4.00: configured for UDMA/133
sd 3:0:0:0: [sdb]  Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
sd 3:0:0:0: [sdb]  Sense Key : Medium Error [current] [descriptor]
Descriptor sense data with sense descriptors (in hex):
        72 03 11 04 00 00 00 0c 00 0a 80 00 00 00 00 00 
        92 59 b7 3b 
sd 3:0:0:0: [sdb]  Add. Sense: Unrecovered read error - auto reallocate failed
sd 3:0:0:0: [sdb] CDB: Read(10): 28 00 92 59 b7 38 00 00 08 00
end_request: I/O error, dev sdb, sector 2455353147
ata4: EH complete
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=133.71.201.200 DST=200.170.216.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=38578 DF PROTO=TCP SPT=46281 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=133.71.201.200 DST=200.170.216.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=38579 DF PROTO=TCP SPT=46281 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=164.77.212.203 DST=200.170.216.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=7311 DF PROTO=TCP SPT=35781 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.192.106 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.192.107 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.216.251 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0 
Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:1e:67:14:e1:95:00:15:17:24:18:e1:08:00 SRC=115.231.222.14 DST=200.170.216.250 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=64316 DPT=8080 WINDOW=15500 RES=0x00 SYN URGP=0

It seems to refer to sdb disk…

[root@linux03 ~]# fdisk -l

Disk /dev/sda: 1000.2 GB, 1000204886016 bytes
255 heads, 63 sectors/track, 121601 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x1585da02

   Device Boot      Start         End      Blocks   Id  System
/dev/sda1   *           1          64      512000   83  Linux
Partition 1 does not end on cylinder boundary.
/dev/sda2              64      121602   976248832   8e  Linux LVM

Disk /dev/sdb: 1500.3 GB, 1500301910016 bytes
255 heads, 63 sectors/track, 182401 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x0007bd40

   Device Boot      Start         End      Blocks   Id  System
/dev/sdb1               1      182402  1465137152   8e  Linux LVM

Disk /dev/mapper/vg_linux_a-lv_root: 981.0 GB, 980951236608 bytes
255 heads, 63 sectors/track, 119260 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000


Disk /dev/mapper/vg_linux_a-lv_swap: 18.7 GB, 18723373056 bytes
255 heads, 63 sectors/track, 2276 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000


Disk /dev/sdc: 2000.4 GB, 2000398934016 bytes
255 heads, 63 sectors/track, 243201 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x18c1bc80

   Device Boot      Start         End      Blocks   Id  System
/dev/sdc1               1      243202  1953512448    7  HPFS/NTFS

Disk /dev/mapper/vg_linux_b-LogVol00: 1500.3 GB, 1500298346496 bytes
255 heads, 63 sectors/track, 182400 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000

[root@linux03 ~]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/vg_linux_a-lv_root
                      900G  799G   55G  94% /
tmpfs                 7.7G     0  7.7G   0% /dev/shm
/dev/sda1             477M  121M  331M  27% /boot
/dev/mapper/vg_linux_b-LogVol00
                      1.4T  907G  399G  70% /home
/dev/sdc1             1.8T  734G 1008G  43% /backup
[root@linux03 ~]#

[code]
[root@linux03 ~]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_linux_a-lv_root
900G 799G 55G 94% /
tmpfs 7.7G 0 7.7G 0% /dev/shm
/dev/sda1 477M 121M 331M 27% /boot
/dev/mapper/vg_linux_b-LogVol00
1.4T 907G 399G 70% /home
/dev/sdc1 1.8T 734G 1008G 43% /backup
[root@linux03 ~]#
[\code]

What should I do?
Thanks

  • Rogerio
9

Howdy,

Yeah, it does appear that you’re seeing some disk related errors on /dev/sdb… that may be contributing to the problem you’re seeing there.

-Eric

10

Hello!

I am using this script to check high iowait which is caused in my case mostly by pop3 proc.

while true; do date; ps auxf | awk ‘{if($8==“D”) print $0;}’; sleep 1; done

you will filter with that processes that have D flag - Uninterruptible sleep (usually IO)

put that in an exec file and run it when the service is degraded.

after, you could check with lsof -p (pid no from previous script output) and see the files that are written or read.