Find the answer to your Linux question:
Results 1 to 3 of 3
I while ago I noticed my cpu was 100% load so I typed top and I found shh daemon was taking 99%, stopped the daemon and started it again and ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Apr 2005
    Posts
    14

    sshd taking 99% of my cpu


    I while ago I noticed my cpu was 100% load so I typed top and I found shh daemon was taking 99%, stopped the daemon and started it again and everything goes fine, but I did netstat and I got this:
    tcp 1 1 192.168.1.4:ssh rd.centennialrd.c:59157 LAST_ACK
    ?? Confused żż

  2. #2
    Linux Guru Flatline's Avatar
    Join Date
    Feb 2005
    Posts
    2,204
    When I've seen sshd take up lots of CPU, it usually has been a DoS attempt.
    Is there anything in /var/log/messages that looks suspicious? Try
    Code:
    cat /var/log/messages | grep ssh
    and see what comes up...

    Sorry, had to edit the command...got it wrong the first time
    There are two major products that come out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence.

    - Jeremy S. Anderson

  3. #3
    Linux Guru Flatline's Avatar
    Join Date
    Feb 2005
    Posts
    2,204
    You can also use the command
    Code:
    last
    to see who has logged in. I would highly recommend checking, just to see if anyone actually gained access. If you just want to check the last 20 people who logged in, you could use
    Code:
     last -20
    or
    Code:
     last -20 -a
    if you want to see their hostname.
    There are two major products that come out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence.

    - Jeremy S. Anderson

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •