From owner-freebsd-questions@FreeBSD.ORG Wed Feb 27 13:47:07 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AA6A61065670 for ; Wed, 27 Feb 2008 13:47:07 +0000 (UTC) (envelope-from tinguely@casselton.net) Received: from casselton.net (casselton.net [63.165.140.2]) by mx1.freebsd.org (Postfix) with ESMTP id 621B38FC15 for ; Wed, 27 Feb 2008 13:47:07 +0000 (UTC) (envelope-from tinguely@casselton.net) Received: from casselton.net (localhost [127.0.0.1]) by casselton.net (8.14.2/8.14.2) with ESMTP id m1RDl61o036978; Wed, 27 Feb 2008 07:47:06 -0600 (CST) (envelope-from tinguely@casselton.net) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=casselton.net; s=ccnMail; t=1204120026; bh=sOVg9BGf/7ZyIVRPwdqgfgaHVZY=; h=Date: From:Message-Id:To:Subject:In-Reply-To; b=Arq6KoBPG1fyW3k8ktNYuuEv dQNXgM8zCte2FSxWfcF31VKBcnh5myT6JzDzkKo02KJygEXVi7PJNXMZS7R8z2z4u9A VbwsqmiMPK8UDtZoA3NGOzX+hN+7uUs4Jdhv6aAkT9aqbHkxAVEi5btaBktSfKj932s 3RZBM4ZebCm5I= Received: (from tinguely@localhost) by casselton.net (8.14.2/8.14.2/Submit) id m1RDl5mh036977; Wed, 27 Feb 2008 07:47:05 -0600 (CST) (envelope-from tinguely) Date: Wed, 27 Feb 2008 07:47:05 -0600 (CST) From: Mark Tinguely Message-Id: <200802271347.m1RDl5mh036977@casselton.net> To: freebsd-questions@freebsd.org, zszalbot@gmail.com In-Reply-To: <94136a2c0802270259i313331dcw45f8c26801f01636@mail.gmail.com> Cc: Subject: Re: sudden peak in load average X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Feb 2008 13:47:07 -0000 > >From the MRTG data I can see that suddenly on a currently not very > busy machine the load averege went over 15 or more. This happened > around 10 in the morning. Not many entries in httpd access log, smtp > server was not too much loaded (at that time it generally produces a > load average of about 1). By any chance, do you run SpamAssassin? I have seen load average bursts with SA. It seems to me that spam sites are bursting spam to attempt to bring down the anti-spam filters. As mentioned by others a "ps" (or I prefer "pstree") list will help solve the issue. --Mark Tinguely