INCIDENT 2026-09-10 09:08:36 trigger: php_procs=67 php_rss=2853MB ================================================================== load: 1.97 1.73 1.63 13/813 887553 ncpu:10 mem_avail: 6113MB/13777MB (44.4%) swap_used:1524MB swapout:0/s blocked(D):0 running:8 iowait:0.1% steal:0.0% php: 67 procs / 2853MB heaviest user: evolution (64 procs, 2433MB) apache: 153 procs tcp_estab: 154 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2863 nobody 152 2816 evolution 73 2491 root 241 883 madalice 2 419 kurri 5 381 netdata 8 255 mailman 20 186 infinium 2 83 dovenull 6 66 wp-toolkit 3 62 cpanellogin 1 55 dovecot 3 28 mailnull 3 22 polkitd 1 15 zabbix 1 9 nscd 1 6 named 1 5 cpanelconnecttrack 1 4 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB evolution 66 2486 madalice 2 419 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4708 MB Active(file): 3504 MB Inactive(file): 1172 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 587 MB CommitLimit: 10984 MB Committed_AS: 16565 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 849368 root 08:36 3096 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 9-06:46:12 3892 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2932584 13.5 Ssl 2-04:23:09 /usr/sbin/mariadbd 166870 1 netdata 198744 2.7 Ssl 4-06:46:18 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3701672 3652415 kurri 175416 0.0 S 06:33:24 spamd child 886841 167896 madalice 173628 8.3 S 00:52 php-fpm: pool madalice_com_au 887347 3701672 kurri 172492 0.0 S 00:05 spamd child (razor2) 3701673 3652415 root 164716 0.0 S 06:33:24 spamd child 3652415 1 root 162076 0.0 Ss 06:43:45 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328754 1 root 155736 0.0 Ss 2-04:23:19 /usr/lib/systemd/systemd-journald 887268 167896 madalice 142048 11.1 S 00:13 php-fpm: pool madalice_com_au 509236 509098 root 66780 0.0 Sl 13-06:48:58 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 887358 848595 evolution 60728 6.0 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 887359 848607 evolution 58972 3.5 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 887401 848616 evolution 58508 2.0 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 625148 1353308 cpanellogin 56684 0.0 S 01:11:27 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 847868 1353308 infinium 56416 0.0 S 10:00 webmaild - serving 1.41.252.211 885019 868591 evolution 45280 0.0 R 02:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42528 0.0 Ss 50-06:27:24 cpsrvd (SSL) - waiting for connections 1469 1 root 41248 0.1 Ss 72-22:58:53 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 885242 884994 evolution 39384 0.0 S 02:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885187 885045 evolution 39380 0.0 S 02:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885353 885252 evolution 39380 0.0 S 02:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885314 865986 evolution 39376 0.0 S 02:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885192 868983 evolution 39352 0.0 S 02:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884978 868599 evolution 39348 0.0 S 02:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885305 865758 evolution 39348 0.0 S 02:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885035 868524 evolution 39344 0.0 S 02:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885029 885022 evolution 39332 0.0 S 02:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885188 885044 evolution 39332 0.0 S 02:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885304 885263 evolution 39328 0.0 S 02:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884963 868946 evolution 39308 0.0 S 02:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885186 885046 evolution 39308 0.0 S 02:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885312 868982 evolution 39276 0.0 S 02:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885243 868273 evolution 39268 0.0 S 02:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885105 868963 evolution 39228 0.0 S 02:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885307 868492 evolution 39228 0.0 S 02:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884959 884907 evolution 39212 0.0 S 02:34 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884680 868085 evolution 39208 0.0 S 02:52 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885316 868600 evolution 39208 0.0 S 02:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885057 885040 evolution 39200 0.0 S 02:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885322 885042 evolution 39196 0.0 S 02:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885244 868984 evolution 39192 0.0 S 02:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885313 885043 evolution 39192 0.0 S 02:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884736 830314 evolution 39184 0.0 S 02:45 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885303 884960 evolution 39176 0.0 S 02:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885208 868555 evolution 39172 0.0 S 02:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885238 885041 evolution 39172 0.0 S 02:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885321 885250 evolution 39172 0.0 S 02:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885323 885075 evolution 39172 0.0 S 02:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885317 868960 evolution 39168 0.0 S 02:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885032 885024 evolution 39160 0.0 S 02:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885194 868593 evolution 39160 0.0 S 02:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885198 885193 evolution 39156 0.0 S 02:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885249 884995 evolution 39120 0.0 S 02:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885190 885025 evolution 39108 0.0 S 02:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885237 868530 evolution 39104 0.0 S 02:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 884685 867900 evolution 39064 0.0 S 02:49 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885185 868243 evolution 39064 0.0 S 02:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 885195 868950 evolution 39064 0.0 S 02:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 887396 865075 evolution 39016 1.0 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 887379 864259 evolution 38612 0.7 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9043434 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 9043432 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT staff.*, sessions.status AS session_status, sessions.id AS session_id FROM staff INNER JOIN sessions_shop_order_procs ON staff.id = sessions_shop_order_procs.staff_id INNER JOIN sessions ON sessions_shop_order_procs.session_id=sessions.id WHERE sessions_ | | 9043362 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT id,name,defaultTemplate,printOptions FROM uploads WHERE category = ? AND subtype LIKE ? AND status = '1' AND (path LIKE '%.htm' OR path LIKE '%.html' OR path IN (?,?)) | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 264 evolution/app.evolutionerp.com.au-ssl_log 142 evolution/portal.evolutionerp.com.au-ssl_log 46 madalice/madalice.com.au-ssl_log 5 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 144 203.54.180.238 142 40.115.94.245 54 103.104.165.99 45 150.228.151.88 26 1.144.107.82 10 203.54.162.106 10 180.181.236.49 8 182.239.240.254 4 147.161.213.71 3 103.104.164.114 2 172.105.25.110 2 1.145.125.62 2 114.119.140.234 1 2a03:2880:f802:a:: 1 165.225.233.87 --- top request paths across all vhosts (last 3 min) --- 153 POST /functions.php 119 GET /api/getItem/LWPG2001KG 30 GET /app/ajax.php 23 GET /heartbeat.php 23 GET /api/getItem/LWFBW2001KG 19 GET /index.php 13 GET / 9 POST /plugins/csvexporter/plugin.php 9 GET /factory_session_checker.php 5 POST /app/ajax/selectFilterSingle.php 5 POST /app/ajax/selectFilter.php 5 POST /app/ajax.php 5 GET /factory_session_processed_qty.php 5 GET /factory_session_joiner.php 4 POST /plugins/fencecosting/plugin.php 4 POST /clienteditsave.php 3 POST /quoteditsave.php 3 POST /login2save.php 3 POST //functions.php 2 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 153 POST /functions.php 30 GET /app/ajax.php 17 GET /index.php 9 POST /plugins/csvexporter/plugin.php 9 GET / 5 POST /app/ajax/selectFilterSingle.php 5 POST /app/ajax/selectFilter.php 5 POST /app/ajax.php 4 POST /plugins/fencecosting/plugin.php 4 POST /clienteditsave.php 3 POST /quoteditsave.php 3 POST /login2save.php -- last 10 requests -- 1.144.107.82 - - [10/Sep/2026:09:08:33 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoicereg&call=getUserSetting&caller=ajaxSubmitLocal&seq=18375290522 HTTP/1.1" 200 92 "https://my.evolutionerp.com.au/index.php?p 182.239.240.254 - - [10/Sep/2026:09:08:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 180.181.236.49 - - [10/Sep/2026:09:08:34 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3DtimesheetHistory&call=getUserSetting&caller=ajaxSubmitLocal&seq=18016740311 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/ind 182.239.240.254 - - [10/Sep/2026:09:08:34 +1000] "GET /index.php?page=quotereg HTTP/1.1" 200 15099 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom 150.228.151.88 - - [10/Sep/2026:09:08:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr 1.144.107.82 - - [10/Sep/2026:09:08:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invoicereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 150.228.151.88 - - [10/Sep/2026:09:08:34 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=TG-PALIS- HTTP/1.1" 200 3226 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2035" "Mozilla/5.0 (Wind 203.54.162.106 - - [10/Sep/2026:09:08:32 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79239§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 203.54.162.106 - - [10/Sep/2026:09:08:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79239§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.162.106 - - [10/Sep/2026:09:08:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79239§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 119 GET /api/getItem/LWPG2001KG 23 GET /api/getItem/LWFBW2001KG -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:09:08:04 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:04 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:04 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:05 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:05 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:06 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:08:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 23 GET /heartbeat.php 9 GET /factory_session_checker.php 5 GET /factory_session_processed_qty.php 5 GET /factory_session_joiner.php 2 GET /index.php 2 GET / -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:09:08:30 +1000] "GET /heartbeat.php?sentAt=1788995291&bytes=106,161,230,219&_=1788957670843 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 140 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /factory_session_joiner.php?id=35256 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET / HTTP/1.1" 200 4941 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /index.php?page=inventory_picking_goods&pickid=38195&seq=6623614594740 HTTP/1.1" 200 11689 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozil 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /heartbeat.php?sentAt=1788995301&bytes=106,161,230,229&_=1788957670844 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:06:04 +1000] "GET / HTTP/1.1" 200 4940 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /index.php?page=processes HTTP/1.1" 200 4958 "https://portal.evolutionerp.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 203.54.180.238 - - [10/Sep/2026:09:08:32 +1000] "GET /heartbeat.php?sentAt=1788995311&bytes=106,161,230,239&_=1788957670845 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-09-10 09:06:10 L1=2.20 run=7 blk=0 avail=5566 (40.4%) swpO=0 conn=23 myRSS=2863 php=122 phpRSS=4999 ap=147 tcp=104 topuser=evolution 2026-09-10 09:06:14 L1=2.20 run=3 blk=0 avail=5920 (43.0%) swpO=0 conn=18 myRSS=2863 php=115 phpRSS=4464 ap=147 tcp=105 topuser=evolution 2026-09-10 09:06:20 L1=2.09 run=4 blk=0 avail=5981 (43.4%) swpO=0 conn=17 myRSS=2863 php=125 phpRSS=4670 ap=146 tcp=90 topuser=evolution 2026-09-10 09:06:24 L1=2.09 run=3 blk=0 avail=5855 (42.5%) swpO=0 conn=17 myRSS=2863 php=131 phpRSS=4900 ap=153 tcp=94 topuser=evolution 2026-09-10 09:06:30 L1=1.92 run=4 blk=0 avail=5631 (40.9%) swpO=0 conn=16 myRSS=2863 php=143 phpRSS=5453 ap=153 tcp=195 topuser=evolution 2026-09-10 09:06:34 L1=1.92 run=3 blk=0 avail=5583 (40.5%) swpO=0 conn=18 myRSS=2863 php=146 phpRSS=5585 ap=153 tcp=201 topuser=evolution 2026-09-10 09:06:40 L1=1.85 run=2 blk=0 avail=5577 (40.5%) swpO=0 conn=17 myRSS=2863 php=145 phpRSS=5548 ap=153 tcp=209 topuser=evolution 2026-09-10 09:06:45 L1=1.79 run=2 blk=0 avail=5580 (40.5%) swpO=0 conn=17 myRSS=2863 php=145 phpRSS=5548 ap=153 tcp=210 topuser=evolution 2026-09-10 09:06:50 L1=1.72 run=2 blk=0 avail=5684 (41.3%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=208 topuser=evolution 2026-09-10 09:06:55 L1=1.66 run=2 blk=0 avail=5678 (41.2%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=207 topuser=evolution 2026-09-10 09:07:01 L1=1.69 run=2 blk=0 avail=5677 (41.2%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=202 topuser=evolution 2026-09-10 09:07:05 L1=1.64 run=2 blk=0 avail=5676 (41.2%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=196 topuser=evolution 2026-09-10 09:07:11 L1=1.58 run=2 blk=0 avail=5680 (41.2%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=194 topuser=evolution 2026-09-10 09:07:15 L1=1.54 run=2 blk=0 avail=5678 (41.2%) swpO=0 conn=17 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=193 topuser=evolution 2026-09-10 09:07:21 L1=1.49 run=2 blk=0 avail=5674 (41.2%) swpO=0 conn=18 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=179 topuser=evolution 2026-09-10 09:07:25 L1=1.45 run=5 blk=0 avail=5673 (41.2%) swpO=0 conn=18 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=178 topuser=evolution 2026-09-10 09:07:31 L1=1.42 run=2 blk=0 avail=5678 (41.2%) swpO=0 conn=18 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=174 topuser=evolution 2026-09-10 09:07:35 L1=1.38 run=2 blk=0 avail=5676 (41.2%) swpO=0 conn=18 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=169 topuser=evolution 2026-09-10 09:07:41 L1=1.35 run=2 blk=0 avail=5677 (41.2%) swpO=0 conn=18 myRSS=2863 php=144 phpRSS=5416 ap=153 tcp=173 topuser=evolution 2026-09-10 09:07:45 L1=1.41 run=4 blk=0 avail=5383 (39.1%) swpO=0 conn=20 myRSS=2863 php=146 phpRSS=5760 ap=153 tcp=174 topuser=evolution 2026-09-10 09:07:51 L1=1.37 run=2 blk=0 avail=5425 (39.4%) swpO=0 conn=18 myRSS=2863 php=146 phpRSS=5701 ap=153 tcp=173 topuser=evolution 2026-09-10 09:07:55 L1=1.34 run=2 blk=0 avail=5395 (39.2%) swpO=0 conn=20 myRSS=2863 php=148 phpRSS=5780 ap=153 tcp=168 topuser=evolution 2026-09-10 09:08:01 L1=1.31 run=3 blk=0 avail=5407 (39.2%) swpO=0 conn=18 myRSS=2863 php=147 phpRSS=5720 ap=153 tcp=157 topuser=evolution 2026-09-10 09:08:06 L1=1.29 run=2 blk=0 avail=5419 (39.3%) swpO=0 conn=18 myRSS=2863 php=147 phpRSS=5724 ap=153 tcp=156 topuser=evolution 2026-09-10 09:08:11 L1=1.27 run=2 blk=0 avail=5532 (40.2%) swpO=0 conn=18 myRSS=2863 php=146 phpRSS=5584 ap=153 tcp=150 topuser=evolution 2026-09-10 09:08:16 L1=1.24 run=2 blk=0 avail=5530 (40.1%) swpO=0 conn=18 myRSS=2863 php=145 phpRSS=5568 ap=153 tcp=143 topuser=evolution 2026-09-10 09:08:21 L1=1.22 run=2 blk=0 avail=5535 (40.2%) swpO=0 conn=18 myRSS=2863 php=145 phpRSS=5568 ap=153 tcp=131 topuser=evolution 2026-09-10 09:08:26 L1=1.21 run=2 blk=0 avail=5522 (40.1%) swpO=0 conn=18 myRSS=2863 php=146 phpRSS=5589 ap=153 tcp=129 topuser=evolution 2026-09-10 09:08:31 L1=1.19 run=2 blk=0 avail=5508 (40.0%) swpO=0 conn=19 myRSS=2863 php=147 phpRSS=5629 ap=153 tcp=134 topuser=evolution 2026-09-10 09:08:36 L1=1.97 run=8 blk=0 avail=6113 (44.4%) swpO=0 conn=11 myRSS=2863 php=67 phpRSS=2853 ap=153 tcp=154 topuser=evolution