PSA-Service crashs every day

[mfgo_parusr]

Hello,

I have a Debian-Plesk-Server and my PSA service crashes pretty every day. The strange thing is that this is pretty much always at the same time happens.

Debian 6.0.7
Plesk 11.0.9 Update #43

To illustrate a screenshot of the CPU usage. The failure of the PSA service reports the watchdog.



I can find absolutely no evidence of the crash in the logs. My provider says that the hardware would also be functional.
To overview here the excerpts from the logs. Maybe I overlooked something. My own domains were replaced for security reasons by "subdomain.domain.de".

The Plesk Web Server service on host subdomain.domain.de is down.
The problem was discovered on Mar 22, 2013 08:20 AM.

The Plesk Web Server service on host subdomain.domain.de has been started on Mar 22, 2013 08:25 AM.

syslog:

Mar 22 08:18:07 server1 /USR/SBIN/CRON[31900]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Mar 22 08:18:07 server1 imapd-ssl: Unexpected SSL connection shutdown.
Mar 22 08:18:17 server1 pop3d-ssl: 1363936697.445662 TIMEOUT, [email protected], ip=[::ffff:80.187.106.98], top=0, retr=0, time=300, rcvd=24, sent=49, maildir=/var/qmail/mailnames/domain1.de/name1/Maildir
Mar 22 08:20:02 server1 imapd-ssl: 1363936802.535455 DISCONNECTED, [email protected], ip=[::ffff:93.222.205.101], headers=0, body=0, rcvd=142, sent=1085, maildir=/var/qmail/mailnames/domain3.de/name2/Maildir
Mar 22 08:20:02 server1 imapd-ssl: Connection, ip=[::ffff:80.187.106.98]
Mar 22 08:20:02 server1 imapd-ssl: Connection, ip=[::ffff:93.222.205.101]
Mar 22 08:20:02 server1 imapd-ssl: Connection, ip=[::ffff:188.97.251.41]
Mar 22 08:20:02 server1 imapd-ssl: IMAP connect from @ [::ffff:93.222.205.101]IMAP connect from @ [::ffff:188.97.251.41]INFO: LOGIN, [email protected], ip=[::ffff:188.97.251.41], protocol=IMAP
Mar 22 08:20:02 server1 imapd-ssl: LOGIN, [email protected], ip=[::ffff:93.222.205.101], protocol=IMAP
Mar 22 08:20:02 server1 imapd-ssl: IMAP connect from @ [::ffff:80.187.106.98]INFO: LOGIN, [email protected], ip=[::ffff:80.187.106.98], protocol=IMAP
Mar 22 08:20:02 server1 pop3d-ssl: Connection, ip=[::ffff:80.187.106.98]
Mar 22 08:20:03 server1 imapd-ssl: 1363936803.134654 DISCONNECTED, [email protected], ip=[::ffff:80.187.106.98], headers=0, body=0, rcvd=970, sent=9714, maildir=/var/qmail/mailnames/domain1.de/office/Maildir
Mar 22 08:20:03 server1 pop3d-ssl: IMAP connect from @ [::ffff:80.187.106.98]INFO: LOGIN, [email protected], ip=[::ffff:80.187.106.98]
Mar 22 08:20:03 server1 pop3d-ssl: 1363936803.901904 LOGOUT, [email protected], ip=[::ffff:80.187.106.98], top=0, retr=0, time=0, rcvd=30, sent=63, maildir=/var/qmail/mailnames/domain1.de/name1/Maildir
Mar 22 08:20:04 server1 pop3d-ssl: Connection, ip=[::ffff:80.187.106.98]
Mar 22 08:20:04 server1 pop3d-ssl: IMAP connect from @ [::ffff:80.187.106.98]INFO: LOGIN, [email protected], ip=[::ffff:80.187.106.98]
Mar 22 08:20:07 server1 /USR/SBIN/CRON[32004]: (root) CMD ([ -x /opt/psa/admin/sbin/backupmng ] && /opt/psa/admin/sbin/backupmng >/dev/null 2>&1)
Mar 22 08:20:07 server1 /USR/SBIN/CRON[32006]: (myjjytugjztshzcq) CMD (wget -q -O /dev/null 'http://domain2.de/shop/cron_jobs/cron_cron.php')
Mar 22 08:20:07 server1 /USR/SBIN/CRON[32008]: (rprzothufjnf) CMD (wget -q -O /dev/null 'http://www.domain3.de/shop/cron_jobs/cron_cron.php')
Mar 22 08:20:07 server1 /USR/SBIN/CRON[32012]: (rprzothufjnf) CMD (wget -q -O /dev/null 'http://www.domain3.de/shop/cron_jobs/cron_newsletter.php')
Mar 22 08:20:07 server1 /USR/SBIN/CRON[32003]: (myjjytugjztshzcq) CMD (wget -q -O /dev/null 'http://domain2.de/shop/cron_jobs/cron_newsletter.php')
Mar 22 08:20:08 server1 imapd-ssl: 1363936808.183770 LOGOUT, [email protected], ip=[::ffff:188.97.251.41], headers=0, body=0, rcvd=193, sent=1224, maildir=/var/qmail/mailnames/domain3.de/name4/Maildir
Mar 22 08:20:08 server1 wdcollect[23532]: Connection to server has been established.
Mar 22 08:20:08 server1 postfix/smtpd[32019]: connect from localhost[127.0.0.1]
Mar 22 08:20:08 server1 postfix/smtpd[32019]: 69E9F3B00941: client=localhost[127.0.0.1]
Mar 22 08:20:08 server1 postfix/cleanup[32023]: 69E9F3B00941: message-id=<[email protected]>
Mar 22 08:20:09 server1 postfix/qmgr[25455]: 69E9F3B00941: from=<[email protected]>, size=732, nrcpt=1 (queue active)
Mar 22 08:20:11 server1 postfix/smtp[32031]: 69E9F3B00941: to=<[email protected]>, relay=mail.domain4.de[141.101.33.67]:25, delay=3.6, delays=1/0.01/2.1/0.5, dsn=2.0.0, status=sent (250 ok 1363936811 qp 549576)
Mar 22 08:20:11 server1 postfix/qmgr[25455]: 69E9F3B00941: removed
Mar 22 08:20:13 server1 pop3d-ssl: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 pop3d-ssl: LOGOUT, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 pop3d: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 pop3d: LOGOUT, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 imapd-ssl: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 imapd-ssl: 1363936813.504598 LOGOUT, ip=[::ffff:127.0.0.1], rcvd=12, sent=218, maildir=/etc/init.d
Mar 22 08:20:13 server1 imapd: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:20:13 server1 imapd: 1363936813.506016 LOGOUT, ip=[::ffff:127.0.0.1], rcvd=12, sent=227, maildir=/etc/init.d
Mar 22 08:20:15 server1 spamd[20027]: spamd: got connection over /tmp/spamd_full.sock
Mar 22 08:20:15 server1 spamd[21921]: prefork: child states: II
Mar 22 08:21:16 server1 postfix/smtpd[32019]: disconnect from localhost[127.0.0.1]
Mar 22 08:21:45 server1 wdcollect[23532]: Connection to SMTP server has been closed.
Mar 22 08:21:49 server1 imapd-ssl: Connection, ip=[::ffff:95.91.243.233]
Mar 22 08:21:50 server1 imapd-ssl: IMAP connect from @ [::ffff:95.91.243.233]INFO: LOGIN, [email protected], ip=[::ffff:95.91.243.233], protocol=IMAP
Mar 22 08:22:15 server1 named[22900]: client 195.91.248.35#62617: query (cache) 'cusp.ru/ANY/IN' denied
Mar 22 08:22:15 server1 named[22900]: client 195.91.248.35#64072: query (cache) 'ns1.cusp.ru/AAAA/IN' denied
Mar 22 08:22:16 server1 named[22900]: client 195.91.248.35#54302: query (cache) 'ns.cusp.ru/AAAA/IN' denied
Mar 22 08:22:45 server1 named[22900]: client 195.91.248.35#59859: query (cache) 'cusp.ru/ANY/IN' denied
Mar 22 08:25:04 server1 pop3d-ssl: 1363937104.811324 TIMEOUT, [email protected], ip=[::ffff:80.187.106.98], top=0, retr=0, time=300, rcvd=24, sent=49, maildir=/var/qmail/mailnames/domain1.de/name1/Maildir
Mar 22 08:25:15 server1 pop3d-ssl: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 pop3d-ssl: LOGOUT, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 pop3d: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 pop3d: LOGOUT, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 imapd-ssl: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 imapd-ssl: 1363937115.852557 LOGOUT, ip=[::ffff:127.0.0.1], rcvd=12, sent=218, maildir=/etc/init.d
Mar 22 08:25:15 server1 imapd: Connection, ip=[::ffff:127.0.0.1]
Mar 22 08:25:15 server1 imapd: 1363937115.854010 LOGOUT, ip=[::ffff:127.0.0.1], rcvd=12, sent=227, maildir=/etc/init.d
Mar 22 08:25:16 server1 wdcollect[23532]: Connection to server has been established.
Mar 22 08:25:16 server1 postfix/smtpd[32262]: connect from localhost[127.0.0.1]
Mar 22 08:25:16 server1 postfix/smtpd[32262]: C12FD3B00941: client=localhost[127.0.0.1]
Mar 22 08:25:16 server1 postfix/cleanup[32265]: C12FD3B00941: message-id=<[email protected]>
Mar 22 08:25:17 server1 postfix/qmgr[25455]: C12FD3B00941: from=<[email protected]>, size=724, nrcpt=1 (queue active)
Mar 22 08:25:17 server1 postfix/smtp[32266]: C12FD3B00941: to=<[email protected]>, relay=mail.domain4.de[141.101.33.67]:25, delay=0.63, delays=0.23/0.01/0.18/0.22, dsn=2.0.0, status=sent (250 ok 1363937116 qp 550156)
Mar 22 08:25:17 server1 postfix/qmgr[25455]: C12FD3B00941: removed
Mar 22 08:25:17 server1 spamd[20027]: spamd: got connection over /tmp/spamd_full.sock
Mar 22 08:25:17 server1 spamd[21921]: prefork: child states: II
Mar 22 08:26:18 server1 postfix/smtpd[32262]: disconnect from localhost[127.0.0.1]
Mar 22 08:26:18 server1 wdcollect[23532]: Connection to SMTP server has been closed.
Mar 22 08:28:45 server1 postfix/smtpd[32361]: connect from smtpout-21.wxdsl.nl[90.145.56.21]
Mar 22 08:28:45 server1 postfix/smtpd[32361]: 79F633B00B41: client=smtpout-21.wxdsl.nl[90.145.56.21]
Mar 22 08:28:45 server1 postfix/smtpd[32361]: disconnect from smtpout-21.wxdsl.nl[90.145.56.21]
Mar 22 08:28:45 server1 /usr/lib/plesk-9.0/psa-pc-remote[24983]: Message aborted.
Mar 22 08:28:45 server1 /usr/lib/plesk-9.0/psa-pc-remote[24983]: Message aborted.
Mar 22 08:28:45 server1 postfix/smtpd[32361]: connect from smtpout-21.wxdsl.nl[90.145.56.21]
Mar 22 08:28:45 server1 postfix/smtpd[32361]: E32633B00B41: client=smtpout-21.wxdsl.nl[90.145.56.21]
Mar 22 08:28:45 server1 postfix/cleanup[32366]: E32633B00B41: message-id=<[email protected]>
Mar 22 08:28:46 server1 /usr/lib/plesk-9.0/psa-pc-remote[24983]: handlers_stderr: SKIP
Mar 22 08:28:46 server1 /usr/lib/plesk-9.0/psa-pc-remote[24983]: SKIP during call 'check-quota' handler
Mar 22 08:28:46 server1 postfix/qmgr[25455]: E32633B00B41: from=<[email protected]>, size=144178, nrcpt=1 (queue active)
Mar 22 08:28:46 server1 postfix-local[32369]: postfix-local: [email protected], [email protected], dirname=/var/qmail/mailnames

PSA Panel Log (/opt/psa/admin/logs/panel.log) shows no errors/entries.


Can you help me here? That part makes me crazy for weeks, and every day one hour of downtime is very ugly. New install or move I would to avoid, otherwise so everything going really well and configured.

Best regards

 

[Tozz]

What do you mean by 'PSA Service' ? The 2-line log snippets seems to indicate your webserver is down, but you are talking about 'PSA Service'?
If you mean that your webserver is down, you should look at your Apache logs. Not your general syslog.

Also, this is weird:
Mar 22 08:20:13 server1 imapd-ssl: 1363936813.504598 LOGOUT, ip=[::ffff:127.0.0.1], rcvd=12, sent=218, maildir=/etc/init.d

maildir=/etc/init.d?