WHM Upgrade to 11.40.0 Excessive Dovecot now

[medfordite]

Since upgrading to WHM 11.40.0 (Build 6), LFD is sending me regular alerts about excessive resource usage:

Time: Mon Oct 14 07:16:29 2013 -0700
Account: dovecot
Resource: Process Time
Exceeded: 31883 > 1800 (seconds)
Executable: /usr/libexec/dovecot/auth
Command Line: dovecot/auth
PID: 30873 (Parent PID:30861)
Killed: No

and

Time: Mon Oct 14 07:16:29 2013 -0700
Account: dovecot
Resource: Process Time
Exceeded: 31883 > 1800 (seconds)
Executable: /usr/libexec/dovecot/anvil
Command Line: dovecot/anvil
PID: 30868 (Parent PID:30861)
Killed: No

I have tried ignoring these in the Process ignore file (csf.ignore), but I am still getting the alerts after restarting the firewall. Is this a bug or something else? I am using CSF v6.36

[kalevala]

I'm having the same problem under same conditions, Cpanel was upgraded to 11.40.0 and the alerts started to appear.

[ForumAdmin]

The latest version of csf.pignore contains the following to deal with those which you can add and then restart lfd:

Code: Select all

exe:/usr/libexec/dovecot/anvil
exe:/usr/libexec/dovecot/auth

[loop]

The latest version of csf.pignore contains the following to deal with those which you can add and then restart lfd:

Code: Select all

exe:/usr/libexec/dovecot/anvil
exe:/usr/libexec/dovecot/auth

as of today 11.40 is on the release tier

so
exe:/usr/libexec/dovecot/anvil
exe:/usr/libexec/dovecot/auth
really did the job.

Thanks

[sahostking]

Thanks just did this which helped. Not sure if it solves as to why it occured in this version itself that may be a dovecot issue but nevertheless could not stand the emails.

Thanks

[cornish]

Hi i have the latest csf installed but still get these messages ?

[sawbuck]

I have the latest csf installed but still get these messages ?

And you've added the csf.pignore lines as suggested?

[cornish]

Yes i have now and all works fine but the post above said the latest had all this included i thought.

[SandPond]

System: CentOS 5.10
cPanel 11.40

The following works to ignore lfd processing tracking and stops email warnings from being sent out, but it does nothing to correct the actual problems caused by the cPanel 11.40 upgrade (CFS/LFD). I am hopeful that this issue will be resolved soon because I am concerned about the exceedingly high and ever-increasing resource usage by Dovecot (See sample email below ***).

(1) Edit cfs.pignore:
cd /etc/csf
nano csf.pignore
Add these two lines:
exe:/usr/libexec/dovecot/anvil
exe:/usr/libexec/dovecot/auth

(2) Restart cfs:
cfs -r

(3) Restart lfd:
service lfd restart

(4) Restart Dovecot:
/etc/init.d/dovecot restart

This is my first post here. Looks like a great forum. THANKS FOLKS !!!

*** SAMPLE EMAIL
Subject: lfd on mydomain.tld: Excessive resource usage: dovecot (12795 (Parent PID:12785))
Time: Mon Nov 11 09:00:58 2013 -0500
Account: dovecot
Resource: Process Time
Exceeded: 127949 > 1800 (seconds)
Executable: /usr/libexec/dovecot/auth
Command Line: dovecot/auth
PID: 12795 (Parent PID:12785)
Killed: No