Author Topic: Problem with memcached  (Read 2196 times)

0 Members and 1 Guest are viewing this topic.

Offline
***
Problem with memcached
« on: September 27, 2017, 07:49:00 AM »
Hi,

For several days I received four messages with the following titles on a regular basis

lfd on hosting.mydom.com: Suspicious process running under user memcached
lfd on hosting.mydom.com: Suspicious process running under user redis
lfd on hosting.mydom.com: Excessive resource usage: memcached (15470 (Parent PID:15470))
lfd on hosting.mydom.com: Excessive resource usage: redis (31787 (Parent PID:31787))

Pls, help...

BR

Venty

Offline
***
Re: Problem with memcached
« Reply #1 on: September 27, 2017, 02:37:02 PM »
You can safely ignore that warning from LFD if you verify the process is legitimate. :)
https://www.24x7servermanagement.com/
Server Management, Server Security, Server Monitoring.
India's Leading Managed Service Provider !!

Offline
***
Re: Problem with memcached
« Reply #2 on: September 27, 2017, 03:41:24 PM »
I apologize ...

Is it possible for more detailed guidelines for this indication of a legitimate process or where can I read to do it ...

Thanks in advance...

BR
Venty

Offline
*
Re: Problem with memcached
« Reply #3 on: September 28, 2017, 10:33:36 AM »
you are the only one who should know what you have installed on your server and mark then as legit if it was installed by you.

You can whitelist that process in this file, you have examples there also
/etc/csf/csf.pignore

restart lfd after this changes
service lfd restart
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.

Offline
***
Re: Problem with memcached
« Reply #4 on: March 06, 2018, 04:13:14 PM »
Hi,

thank you very much!

where to find the file /etc/csf/csf.pignore and how to edit?

BR
Venty

Offline
*
Re: Problem with memcached
« Reply #5 on: March 06, 2018, 10:39:43 PM »
SSH to you Server.....

and at the prompt type:

nano /etc/csf/csf.pignore

The file will open for editing....

Offline
***
Re: Problem with memcached
« Reply #6 on: March 07, 2018, 07:00:12 AM »
Hi,

thank you very much!

I already knew how to access it, but what did I add to it?

Thanks in advance!

BR
Venty

Offline
*
Re: Problem with memcached
« Reply #7 on: August 30, 2018, 11:05:12 PM »
you are the only one who should know what you have installed on your server and mark then as legit if it was installed by you.

You can whitelist that process in this file, you have examples there also
/etc/csf/csf.pignore

restart lfd after this changes
service lfd restart

I'm having the same issue:
Excessive resource usage: memcached (929 (Parent PID:929))
Excessive resource usage: redis (931 (Parent PID:931))
Excessive resource usage: rpc (646 (Parent PID:646))

How do I get rid of these?

You say to "ignore" which i tried,but i thinking, why should we ignore it, the Excursiveness is being caused for a reason and Excessive  actions are not normal they need to be fixed, suppressing these messages will not resolve the issue.

So what is the fix please, since your suggested method does not as i still keep getting these.

pls dont say i should should if these are legit processes, you were the guys who installed it, not me.

Thanks kindly for your time

Offline
*
Re: Problem with memcached
« Reply #8 on: August 31, 2018, 07:07:22 AM »
Isn't there any staff that can help fix this mess they created?

Offline
*
Re: Problem with memcached
« Reply #9 on: September 06, 2018, 03:05:27 AM »
Well, arent you gonna reply? I paid for this thing, can someone with some decency reply with a fix please?

Offline
**
Re: Problem with memcached
« Reply #10 on: September 06, 2018, 06:50:31 AM »
1. SSH access your server
2. nano /etc/csf/csf.pignore
3. These are the entries I've added for redis:

exe:/usr/bin/redis-server
4. For memcached look at the warning you got in email and put the executable line with a "exe:" before it.


Tell me if it helped.


Offline
*
Re: Problem with memcached
« Reply #11 on: September 09, 2018, 04:42:13 AM »
Ive tried those mate, dont work

Offline
**
Re: Problem with memcached
« Reply #12 on: September 09, 2018, 06:03:12 AM »
Have you restarted lfd after that?

Offline
*****
Re: Problem with memcached
« Reply #13 on: September 09, 2018, 08:34:49 AM »
check the csf documentation upon how to add those in pignore

and do you noticed any high usage by this resources ? or you just triggered with the emails.