I got blacklisted!
so then I opened a clear foundation ticket.
4 hours later and 3 experts working we had it fixed!
keeping port 22 closed would have stopped them!
And a username and password were identical. That's what they used!

Just out of curiousity, how did you find out?

My problem was solved.
we discovered someone was using a ssh tunnel on port 25 to pipe email to the world,

Good day, was this issue ever solved? I have the same issue and restarting the service temporarily fix's the problem.

Thanks!

Hello
I just experienced a zarafa crash as well.
I checked the number of connections to system-mysql and got over 300
I restarted system-mysql with

service system-mysqld restart

and checked again and got 23

the system-mysql log is rather empty.
Just a few lines about the restart I had to do to get going again..

OK - looks fine

Do you have any third party clients connecting to the service? perhaps one is not terminating it's connections properly and leaving open database connections. The database has a default number of connections to maintain and can be modified to improve this number (150+) but that would seem only to be a work around and not to understand why its happening

If you're happy to drop to the command line it might be useful to see how many connections are open? 'netstat -ntp | grep 3308'

You can also count the number of connections by piping the output through wc, 'netstat -ntp | grep 3308 | wc -l'

8GB

3 users total / 1 actually being used.

system-mysql

i don't use the mysql server app, everything is using the system database.

Yes i have both webmail and owncloud using only 443, port 80 redirects to the 443 side of the site.

Ill enable reports again but last time i checked there hasn't been any out of the norm traffic spikes or anything of the sort.


Seems to take about 2-3 days to come back with this error and then i cannot log into webmail or owncloud as i get this message when trying.

Hi Nathan, did you see my response here? do you have enough RAM?

How many users? which log file is the error shown in? mysql or system-mysql?
http://www.clearfoundation.com/component/option,com_kunena/Itemid,232/catid,33/func,view/id,64010/limit,10/limitstart,10/#64215

Is your webserver open to the world and could be the result of a brute force type login attack? you might find clues for failed authentication in the OwnCloud logs or monitor incoming port 80/443 traffic

done and done.

took a day longer but ran into the same error still

not sure were its coming from either..

its becoming very irritating because i have to restart my gateway to resolve it.


Anymore ideas? anyone? HALP!

pmacct is one of three programs installed be the app-network-detail-report and is only used by it. To remove it do:

service pmacctd stop

yum remove pmacct

Instead of the service command you could do a "killall pmacctd". Normally be very careful about using "yum remove" as it can remove the heck of a lot of dependencies - "rpm -e" is safer. In this case yum is fine.

Forgive my ignorance,

Whats pmacct? and is that the app name if indeed an app? yum remove pmacct ?

When killing the network reporting apps did you also remove pmacct? If not, please try removing it. I have no other ideas.