/var/log/syslog

maooah · February 16, 2010, 2:29am

Hi,
Solaris : 9
I noticed /var/log/syslog message file growing fast in abnormal way since 4 or 5 days. due to this my root / filesystem is getting filled with 100% .

root $ls -ltr
total 4683730
-rwxrwxrwx   1 root     sys            0 Oct 17  2005 authlog
-rwxrwxrwx   1 root     other        254 Oct 17  2005 sysidconfig.log
-rwxrwxrwx   1 root     sys      232392781 Dec 22 03:07 syslog.7
-rwxrwxrwx   1 root     sys      234862215 Dec 29 03:07 syslog.6
-rwxrwxrwx   1 root     sys      237526516 Jan  5 03:08 syslog.5
-rwxrwxrwx   1 root     sys      239885061 Jan 12 03:08 syslog.4
-rwxrwxrwx   1 root     sys      242073740 Jan 19 03:08 syslog.3
-rwxrwxrwx   1 root     sys      244402872 Jan 26 03:08 syslog.2
-rwxrwxrwx   1 root     sys      872775680 Feb 12 19:40 syslog.0
-rwxrwxrwx   1 root     sys      92855508 Feb 16 10:26 syslog

appreciate an early response.

Regards

amitranjansahu · February 16, 2010, 3:02am

Check the /etc/default/syslogd file.

Here disable the LOG_FROM_REMOTE

ie

LOG_FROM_REMOTE=NO

jlliagre · February 16, 2010, 4:19am

The OS is badly trying to tell you something. Have a look at these files content to see what it is. You can then safely remove the syslog.[0-7] files. Fix the issue at the origin of the messages.

maooah · February 17, 2010, 2:07am

Dear All,

amitranjansahu:
i checked the entry so i dont think this is issue.
#LOG_FROM_REMOTE=YES

1) can we delete the files from this location /var/spool/clientmqueue and any impact on other things with deletion of this files.

2)Last lines of syslog entries., expecting some early response this is our production machine.

Feb 17 09:44:22 DBSERVER sendmail[10896]: [ID 801593 mail.info] o1DL750u028621: to=postmaster, delay=3+04:39:40, xdelay=00:00:00, mailer=relay, pri=23613203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[5106]: [ID 801593 mail.info] o1DIq50j002300: to=postmaster, delay=3+07:44:34, xdelay=00:00:00, mailer=relay, pri=24513203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[12060]: [ID 801593 mail.info] o1DBb5Ah006054: to=postmaster, delay=3+17:50:12, xdelay=00:00:00, mailer=relay, pri=27213203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[17490]: [ID 801593 mail.info] o1G9b711016315: to=postmaster, delay=03:08:41, xdelay=00:00:00, mailer=relay, pri=1023210, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[2162]: [ID 801593 mail.info] o1DHM513015134: to=root, delay=3+09:51:48, xdelay=00:00:00, mailer=relay, pri=25141539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[21598]: [ID 801593 mail.info] o1F5b613020595: to=root, delay=1+11:50:23, xdelay=00:00:00, mailer=relay, pri=11011541, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[6202]: [ID 801593 mail.info] o1DBb52J006054: to=postmaster, delay=3+18:04:36, xdelay=00:00:00, mailer=relay, pri=27303203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[19626]: [ID 801593 mail.info] o1EE760c020134: to=postmaster, delay=2+06:50:28, xdelay=00:00:00, mailer=relay, pri=16863206, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:22 DBSERVER sendmail[26380]: [ID 801593 mail.info] o1DEq51K016007: to=root, delay=3+13:27:03, xdelay=00:00:00, mailer=relay, pri=26311539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[26910]: [ID 801593 mail.info] o1C67315010917: to=root, delay=4+21:18:49, xdelay=00:00:00, mailer=relay, pri=27751539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[15193]: [ID 801593 mail.info] o1FGb711001496: to=root, delay=22:49:05, xdelay=00:00:00, mailer=relay, pri=7051541, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[15857]: [ID 801593 mail.info] o1DAq57L026800: to=postmaster, delay=3+18:04:57, xdelay=00:00:00, mailer=relay, pri=26493203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[29474]: [ID 801593 mail.info] o1E4b50a025561: to=root, delay=2+18:40:16, xdelay=00:00:00, mailer=relay, pri=20551539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[28344]: [ID 801593 mail.info] o1EI760i006522: to=postmaster, delay=2+01:53:55, xdelay=00:00:00, mailer=relay, pri=15423210, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[23685]: [ID 801593 mail.info] o1E27511026795: to=root, delay=2+21:52:28, xdelay=00:00:00, mailer=relay, pri=21541539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[20468]: [ID 801593 mail.info] o1GAM70w024852: to=postmaster, delay=02:24:55, xdelay=00:00:00, mailer=relay, pri=843210, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[23555]: [ID 801593 mail.info] o1DEb51N013105: to=postmaster, delay=3+13:48:17, xdelay=00:00:00, mailer=relay, pri=26313203, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[255]: [ID 801593 mail.info] o1DBM585003027: to=postmaster, delay=3+18:03:07, xdelay=00:00:00, mailer=relay, pri=26145712, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[11078]: [ID 801593 mail.info] o1E9b50a025662: to=root, delay=2+12:26:38, xdelay=00:00:00, mailer=relay, pri=18661539, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Feb 17 09:44:23 DBSERVER sendmail[9443]: [ID 801593 mail.info] o1FDq70q029956: to=root, delay=1+02:09:01, xdelay=00:00:00, mailer=relay, pri=8131541, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]

Regards

incredible · February 17, 2010, 2:42am

whatever you want to remove or housekeep, ensure you have a backup. how critical is sendmail used in your environment? can you turn it off?
You should also look everywhere in the OS where that could be huge culprits resting in there.

maooah · February 17, 2010, 5:53am

Hi Incredible,

thanks for your reply ,
1)what ever you want to remove or housekeep ,
I would like to know whether this files are critical i mean to ask like /tmp logfiles, we can delete . apologize for asking basic question.

2)how critical is sendmail used in your environment? can you turn it off?
we are running Oracle 9.2 database on this server.

need your suggestions in which area should i start investigation.

Regards

incredible · February 17, 2010, 6:51am

Backup... That's a very impt thing.
Then remove all contents under /tmp (anyway, they will go off after a reboot)
cd /var/crash/`hostname` <--- check if there are any coredump files in there, if yes remove.
cd /
du -sk * |sort -rn |head
see which directory shows highest usage and narrow down from there.
Remove old logs.. Logs which are not used by apps and will not be used, i they are big, zip/compress them.
reverify df -k .
Lastly, let us know the progress

flexinfo · February 17, 2010, 7:13am

Do you need sendmail on this machine since its mail delivered to root and postmaster from local host and isnt obviously working. If this isnt an MTA mailserver/relay then stop the deamon. I know its installed and started by default..

jlliagre · February 17, 2010, 8:06am

The main issue seems to me there is a process (or more) constantly trying to send mails to a local mail server (likely sendmail) but the latter is not running. The fix would be then to start the mailserver daemon, not to stop it.

maooah · February 20, 2010, 3:30am

Hi ,

thanks for your update.

1)
root $pwd
/var/crash/DBSERVER
root $ls -ltr
total 2
-rw-r--r--   1 root     root           2 Jun 30  2007 bounds
root $cat bounds
2

2)
root $du -sh * |sort -rn |head
 936K   core
 623M   root
 208K   tmp
 189K   TT_DB
  78M   etc
  75M   kernel
  62K   lost+found
  58K   devices
  57M   jdk
  52G   oratest

latest update from /var/log 
root $pwd
/var/log
DBSERVER@root $ls -ltr
total 2624816
-rwxrwxrwx   1 root     sys            0 Oct 17  2005 authlog
-rwxrwxrwx   1 root     other        254 Oct 17  2005 sysidconfig.log
-rw-r--r--   1 oradb   dba        23212 Feb 17 09:44 syslog_last_100_lines
-rwxrwxrwx   1 root     sys      1343205902 Feb 20 11:15 syslog

need your suggestion
Regards

EAGL · February 20, 2010, 3:55am

First of all try to use

du -sk *

not "h" h is human readable so the ordering is not good as you can see 52 G Bytes is on the bottom. What is in oratest directory, check it, try to compress all of the old logs with tar and then gunzip, not the latest one.
Check debug level, be sure its in error in production env. And then check errors, exceptions in logs especially in the logs under oratest.

check sendmail process with

ps -ef | grep -i sendmail

then the process details with

pargs PID

maooah · February 20, 2010, 7:55am

Hi Jlliagre,

The main issue seems to me there is a processe (or more) constantly trying to send mails to a local mail server (likely sendmail) but the latter is not running. The fix would be then to start the mailserver daemon, not to stop it.

can we stop the process which is trying to sendmails to localserver if yes , how can we find and stop that particular process so that other process will not get affected.

Regards

maooah · February 22, 2010, 6:34am

Hi,

root $du -sk * |sort -rn |head
4496236787      proc
54248518       oratest
53829376        oraprod
49589198        oldddb
48127146        oravis
40591308        oradev
25036669        ora_stag
 2333210 var
 2239583 usr
 1378185 opt

proc size seems to be very big,

size is growing for syslog
root $ls -ltr
total 3904464
-rwxrwxrwx 1 root sys 0 Oct 17 2005 authlog
-rwxrwxrwx 1 root other 254 Oct 17 2005 sysidconfig.log
-rw-r--r-- 1 oraprod dba 23212 Feb 17 09:44 syslog_last_100_lines
-rwxrwxrwx 1 root sys 1998068399 Feb 22 14:31 syslog

please advice me .

Regards

EAGL · February 22, 2010, 1:47pm

ok i will just talk about general debugging. Check what causes Proc size to be very large, any log there which is in debug or finest level? If its so then second step check what causes too much logs, then third step search for any exception or error.
You should be debugging carefully and having good control of which processes runs in the system.
check running processes with

ps -ef

or cpu, mem usage with "prstat". grep errors, warnings or exceptions. If you dont know what log to check then type something general, just an example:

find . -type f -name "*log" -print | xargs grep -i error

maybe sendmail will not give any error after you start it?and queued processes will be completed

---------- Post updated at 09:47 PM ---------- Previous update was at 08:13 PM ----------

I've found something could be very usefull regarding to your sendmail:

You can test connecting to sendmail locally by issuing the command

telnet localhost 25

Note that we are not actually telnetting but attempting to establish a connection on port 25, which is the port mail transfer agents listen on for incoming connections.

If you get something like the following then you were successfully able to connect. To disconnect from sendmail type "quit" and hit enter.

Connected to localhost.
Escape character is '^]'.
220 laptop.electrictoolbox.com ESMTP Sendmail 8.12.8/8.12.8; Sun, 30 Nov 2003 13:19:45 +1300

If you could not connect then you'll see something like the following instead. If you get this then you probably don't have sendmail running, or the appropriate entry in your inetd or xinetd settings, depending on how your machine is configured. Fixing this sort of problem is not within the scope of this article.

Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused

Whether attempting to connect to a local or remote server you will get the same sort of result, either the connection will be refused or you will be greeted by the mail server. To allow access to incoming remote connections, you need to modify the sendmail configuration.

There are two ways to modify sendmail's configuration file. The sendmail.cf file contains all the instructions sendmail needs to run as you intend it to. It is generated automatically from the sendmail.mc file, which is a much easier to read and understand configuration file. Whereever possible you should always modify the snedmail.mc file rather than the sendmail.cf file. However, the are circumstances when someone has changed the sendmail.cf file manually and therefore you need to edit that again to prevent overwriting their changes.

sendmail.cf
To modify sendmail to accept remote connections in the sendmail.cf file, comment out (or delete) the following line:

O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA

The commented out version of this line would then look like so:

#O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA

Restart sendmail after doing this and you should now be able to connect to sendmail from a remote machine. If you commented out the line rather than deleted it you are then able to easily revert back to your previous configuration.

sendmail.mc
The preferred option is to edit the sendmail.mc file instead. It's always a good idea to make a backup copy of the sendmail.cf file though in case something goes wrong and there had been changes made to that file that are not in the sendmail.mc file.

As with the sendmail.cf file you need to comment out (or delete) the same option. In the sendmail.mc file this looks like so:

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

After commenting out the line it will now look like so:

dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

You now need to compile this file into a new sendmail.cf file by issuing the following command:

m4 sendmail.mc > sendmail.cf

and then restarting sendmail. Remember it's important to make a backup copy of the sendmail.cf file first so you can revert back to it if sendmail stops working like it did before.

maooah · February 23, 2010, 3:53am

Hi Eagle,

thanks for your time and effort

DBSERVER@root $ps -ef|grep smmsp
   smmsp  2293  3216  0 20:07:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
   smmsp  3216     1  0   Feb 06 ?        0:00 /usr/lib/sendmail -Ac -q15m
   smmsp 22822  3216  0 10:52:15 ?        0:01 /usr/lib/sendmail -Ac -q15m
   smmsp 25500  3216  0 03:22:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp 19464  3216  0 21:37:14 ?        0:12 /usr/lib/sendmail -Ac -q15m
   smmsp 20652  3216  0   Feb 22 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp 12821  3216  0 23:37:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
    root  4099 13695  0 11:46:46 pts/3    0:00 grep smmsp
   smmsp 18788  3216  0 05:22:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp 11285  3216  0   Feb 22 ?        0:22 /usr/lib/sendmail -Ac -q15m
   smmsp  8401  3216  0   Feb 22 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp  5563  3216  0 01:37:14 ?        0:09 /usr/lib/sendmail -Ac -q15m
   smmsp 15450  3216  0 05:07:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp 18838  3216  0 16:22:14 ?        0:16 /usr/lib/sendmail -Ac -q15m
   smmsp 26269  3216  0 11:52:14 ?        0:20 /usr/lib/sendmail -Ac -q15m
   smmsp 12510  3216  0 18:22:14 ?        0:15 /usr/lib/sendmail -Ac -q15m
   smmsp 19860  3216  0 10:37:15 ?        0:01 /usr/lib/sendmail -Ac -q15m
   smmsp 28117  3216  0 14:37:14 ?        0:19 /usr/lib/sendmail -Ac -q15m
   smmsp 25056  3216  0 22:07:14 ?        0:11 /usr/lib/sendmail -Ac -q15m
   smmsp 29153  3216  0 12:07:14 ?        0:19 /usr/lib/sendmail -Ac -q15m
   smmsp  8481  3216  0 07:07:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp  9579  3216  0 18:07:14 ?        0:15 /usr/lib/sendmail -Ac -q15m
   smmsp  3841  3216  0 17:37:14 ?        0:16 /usr/lib/sendmail -Ac -q15m
   smmsp 23042  3216  0 08:22:14 ?        0:03 /usr/lib/sendmail -Ac -q15m
   smmsp 26698  3216  0   Feb 22 ?        0:23 /usr/lib/sendmail -Ac -q15m
   smmsp  5246  3216  0 20:22:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
   smmsp  8128  3216  0 20:37:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
   smmsp  2810  3216  0 06:37:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp  6460  3216  0 23:07:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
   smmsp 17126  3216  0   Feb 22 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp 24376  3216  0 05:52:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp 21600  3216  0 05:37:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp 27920  3216  0 22:22:14 ?        0:12 /usr/lib/sendmail -Ac -q15m
   smmsp 16673  3216  0 21:22:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
   smmsp 10002  3216  0 23:22:14 ?        0:11 /usr/lib/sendmail -Ac -q15m
   smmsp  2729  3216  0 01:22:14 ?        0:09 /usr/lib/sendmail -Ac -q15m
   smmsp 12603  3216  0 04:52:14 ?        0:06 /usr/lib/sendmail -Ac -q15m
   smmsp  1114  3216  0 03:52:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp  4129  3216  0 15:07:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp 13756  3216  0 13:22:14 ?        0:19 /usr/lib/sendmail -Ac -q15m
   smmsp 22321  3216  0 14:07:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp  6844  3216  0 04:22:14 ?        0:06 /usr/lib/sendmail -Ac -q15m
   smmsp 23508  3216  0   Feb 22 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp 14236  3216  0 07:37:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp 29837  3216  0 01:07:14 ?        0:09 /usr/lib/sendmail -Ac -q15m
   smmsp 21740  3216  0 16:37:14 ?        0:17 /usr/lib/sendmail -Ac -q15m
   smmsp 14232  3216  0   Feb 22 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp  8085  3216  0 09:37:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp   783  3216  0 22:37:14 ?        0:11 /usr/lib/sendmail -Ac -q15m
   smmsp 15660  3216  0 23:52:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
   smmsp 24198  3216  0 00:37:14 ?        0:09 /usr/lib/sendmail -Ac -q15m
   smmsp 15427  3216  0 18:37:14 ?        0:14 /usr/lib/sendmail -Ac -q15m
   smmsp 26965  3216  0 00:52:14 ?        0:09 /usr/lib/sendmail -Ac -q15m
   smmsp 29926  3216  0 06:22:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp   987  3216  0 17:22:14 ?        0:16 /usr/lib/sendmail -Ac -q15m
   smmsp 14254  3216  0 02:22:14 ?        0:08 /usr/lib/sendmail -Ac -q15m
   smmsp  8410  3216  0 01:52:14 ?        0:08 /usr/lib/sendmail -Ac -q15m
   smmsp 15886  3216  0 16:07:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp  4969  3216  0 09:22:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp 25740  3216  0 11:07:15 ?        0:01 /usr/lib/sendmail -Ac -q15m
   smmsp 25224  3216  0 14:22:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp 12943  3216  0 15:52:14 ?        0:17 /usr/lib/sendmail -Ac -q15m
   smmsp 28276  3216  0 03:37:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp 17117  3216  0 07:52:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp 26113  3216  0 08:37:14 ?        0:03 /usr/lib/sendmail -Ac -q15m
   smmsp  2511  3216  0   Feb 22 ?        0:22 /usr/lib/sendmail -Ac -q15m
   smmsp 10940  3216  0 09:52:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp 27097  3216  0 06:07:14 ?        0:05 /usr/lib/sendmail -Ac -q15m
   smmsp 29040  3216  0 08:52:14 ?        0:03 /usr/lib/sendmail -Ac -q15m
   smmsp 17046  3216  0 02:37:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp  5385  3216  0   Feb 22 ?        0:23 /usr/lib/sendmail -Ac -q15m
   smmsp 10068  3216  0 15:37:14 ?        0:17 /usr/lib/sendmail -Ac -q15m
   smmsp  2103  3216  0 12:22:14 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp 11300  3216  0 02:07:14 ?        0:08 /usr/lib/sendmail -Ac -q15m
   smmsp 22245  3216  0 21:52:14 ?        0:12 /usr/lib/sendmail -Ac -q15m
   smmsp 29481  3216  0 19:52:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
   smmsp 13931  3216  0 10:07:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp 22612  3216  0 03:07:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp  1160  3216  0 14:52:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp 16855  3216  0 10:22:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp 18501  3216  0 00:07:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
   smmsp  3942  3216  0 04:07:14 ?        0:06 /usr/lib/sendmail -Ac -q15m
   smmsp 28763  3216  0 11:22:15 ?        0:01 /usr/lib/sendmail -Ac -q15m
   smmsp  3635  3216  0 22:52:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
   smmsp 29623  3216  0   Feb 22 ?        0:23 /usr/lib/sendmail -Ac -q15m
   smmsp  6679  3216  0 17:52:14 ?        0:16 /usr/lib/sendmail -Ac -q15m
   smmsp 23778  3216  0   Feb 22 ?        0:22 /usr/lib/sendmail -Ac -q15m
   smmsp 16597  3216  0 13:37:14 ?        0:19 /usr/lib/sendmail -Ac -q15m
   smmsp 23879  3216  0 19:22:14 ?        0:15 /usr/lib/sendmail -Ac -q15m
   smmsp 19830  3216  0 02:52:14 ?        0:07 /usr/lib/sendmail -Ac -q15m
   smmsp 20057  3216  0 08:07:14 ?        0:03 /usr/lib/sendmail -Ac -q15m
   smmsp 27493  3216  0 17:07:14 ?        0:17 /usr/lib/sendmail -Ac -q15m
   smmsp 10956  3216  0 20:52:14 ?        0:12 /usr/lib/sendmail -Ac -q15m
   smmsp  7903  3216  0 12:52:14 ?        0:20 /usr/lib/sendmail -Ac -q15m
   smmsp  5634  3216  0 06:52:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp  4974  3216  0 12:37:14 ?        0:20 /usr/lib/sendmail -Ac -q15m
   smmsp 13744  3216  0 21:07:14 ?        0:12 /usr/lib/sendmail -Ac -q15m
   smmsp  9818  3216  0 04:37:14 ?        0:06 /usr/lib/sendmail -Ac -q15m
   smmsp  2244  3216  0 11:37:15 ?        0:00 /usr/lib/sendmail -Ac -q15m
   smmsp 10829  3216  0 13:07:14 ?        0:21 /usr/lib/sendmail -Ac -q15m
   smmsp 18225  3216  0 18:52:14 ?        0:14 /usr/lib/sendmail -Ac -q15m
   smmsp 21056  3216  0 19:07:14 ?        0:14 /usr/lib/sendmail -Ac -q15m
   smmsp 24615  3216  0 16:52:14 ?        0:15 /usr/lib/sendmail -Ac -q15m
   smmsp  7182  3216  0 15:22:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp 19474  3216  0 13:52:14 ?        0:18 /usr/lib/sendmail -Ac -q15m
   smmsp  2028  3216  0 09:07:14 ?        0:02 /usr/lib/sendmail -Ac -q15m
   smmsp 11326  3216  0 07:22:14 ?        0:04 /usr/lib/sendmail -Ac -q15m
   smmsp 21388  3216  0 00:22:14 ?        0:10 /usr/lib/sendmail -Ac -q15m
   smmsp 26661  3216  0 19:37:14 ?        0:13 /usr/lib/sendmail -Ac -q15m
DBSERVER@root $

2)DBSERVER@root $telnet localhost 25
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused
DBSERVER@root $telnet localhost 25
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused

Appreciate your early response .

Regards

incredible · February 23, 2010, 4:46am

do you want to kill the process?
kill -9 3216

maooah · February 24, 2010, 5:23am

Hi incredible ,

why it is displaying this many number of process,

Regards

---------- Post updated 02-24-10 at 05:23 AM ---------- Previous update was 02-23-10 at 06:19 AM ----------

Hi,
any update on my previous post.

Regards

jlliagre · February 24, 2010, 5:33am

Because, as we already know, the mail service isn't working on you server for some reason and something is badly trying to send mail.

Please fix the root cause. Fixing symptoms is probably not going to help that much.