Is it just me or is this site slow?

[SaintDog]

After viewing the title you would think I meant traffic-wise, but I mean slow as in load speed. Does anyone else notice that this site (as well as vBHacks.com) loads a little slower than it has been in the past couple of days?

Not only do I notice it here, but in my vB Admin Control Panel (seeing how the top part loads from here - the version# and all).

I was just wondering though, is it just me or is there a problem?

(all other sites load fast on my cable modem, just vBulletin.com & vBulletin.org do no load as fast).

SaintDog

[MattR]

It seems to be really, really slow for me as well.

[JamesUS]

Yes it is slow here at the moment. The server load seems to be quite high, so I presume that's what's wrong. But unfortunately we have to wait for someone 'in the know' to come online to fix it

[ja5es]

Yep, slow slow slow... But it's starting to pick up... I think.

[Chris Schreiber]

Yes, it seems both the apache and mysql servers have a very high load right now (both between 6.0-8.0)... I haven't been able to find any processes or problems on the servers yet, and there don't seem to be alot of people on any of the sites.... right now I suspect a denial of service attack, but I can't confirm this yet.

[werehere]

Originally posted by Chris Schreiber
Yes, it seems both the apache and mysql servers have a very high load right now (both between 6.0-8.0)... I haven't been able to find any processes or problems on the servers yet, and there don't seem to be alot of people on any of the sites.... right now I suspect a denial of service attack, but I can't confirm this yet.

Can you just kill all of the processes real quick, or reboot? That would surely help for a minute either way.

[Chris Schreiber]

I've already rebooted both servers.... this helped for a minute, but the loads went right back up again

[MattR]

Have you checked /var/log/messages, apache's error log, and apache's access log?

We get hit by stupid nimbda-type clones and add their IPs to the firewall as needed. Lots of junk in the error log would tend to point to a nimbda-type attack and of course looking in the access log could show a bazillion requests from a single IP (or several) which would help.

I know you know all of this, but it is for my benefit mostly -- that is how I have handled the problem and I'm wondering if that is the 'best' method or if you guys have any other tricks up your sleeve?

Oh also a lot of bounced e-mails tend to bog down our servers as well. So I always check that.

[Chris Schreiber]

Well there are some things in the messages logs which concern me now, on the apache web server:

Feb 25 14:59:30 linux***** kernel: possible SYN flooding on port 80. Sending cookies.

And on the database server:

Feb 25 15:55:50 linux***** kernel: eth1: card reports no RX buffers. 
Feb 25 15:55:52 linux***** kernel: eth1: card reports no resources.

[Dave#]

Originally posted by Chris Schreiber
Well there are some things in the messages logs which concern me now, on the apache web server:

Feb 25 14:59:30 linux***** kernel: possible SYN flooding on port 80. Sending cookies.

And on the database server:

Feb 25 15:55:50 linux***** kernel: eth1: card reports no RX buffers. 
Feb 25 15:55:52 linux***** kernel: eth1: card reports no resources.

Played this game before- turned out to be hardware fault on the NIC- snoop the interface on the webserver

[Chris Schreiber]

Originally posted by Dave#
Played this game before- turned out to be hardware fault on the NIC- snoop the interface on the webserver

Thanks Dave, I have Verio looking at the NICs now.

[MiNd_tRiP]

It doesn't seem to be slow anymore, it was super slow for me about 30 mins ago.

[Joe Gronlund]

its gettin better i though maybe someone wacked a router

[tubedogg]

It's not as fast as it usually is but is has definitely sped up in the last couple minutes.

[Nicole]

Lets see ......
Seems okay for me now...pretty fast- maybe just slightly slower than before but not much at all.