Hi,

Just got a warning from linode that my IO was high. I use my server as a webserver (very low traffic).
I checked the grafic (see image below) and I don't really understand how to find what could have created strange 2-hours high traffic & CPU & IO.

I have checked the apache logs, the mail.log or auth.log but I don't find anything.
Can anybody explain me how to check and/or what to implement to be able to check such events?

Thank you
Alex


Using My Ubuntu 11.04 64bit Profile
Apache 2 MySQL PHP and ESMTP for the emails

Try checking your website access logs?

Hi! I did it (Apache logs) and google analytics too but found nothing.

It will be difficult to figure out what it was. You could could all files for access times and try to see if certain files were modified/created/accessed at the time of the spike, or, for the future, use something like Munin.

I use CSF that also sends out notifications for high load with a ps output, so you could try that as well. Or, maybe this will work as well.

Good luck!