Confusing server load!?
On my server:Celeron 2.0
512 RAM
WHM/cPanel
RH 9
Apache 1.3.33
PHP 4.3.10
MySQL 4.0.22-standard
I have big problem, all work fine and in some time load every second be higher and higher and don`t want back bellow 1 much time and when I have load 20-50 I kill httpd (killall -9 httpd) and wait some time and restart Apache, after that server work fine some time load <1-3 and again same thing (after few hours or 20-30-50 minutes), one login to cPanel of my users can generate that high load and I see that few times but I don`t know why...
On that server I have few sites who much use MySQL and when I click on "CPU/Memory/MySQL Usage" MySQL is on top place or root gzip processes (backup):
CPU RAM Mysql
mysql 14.31 82.00 0.0
Top Process %CPU 84.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/name.myserver.net.pid --skip-locking --port3306 --socket/var/lib/mysql/mysql.sock
Top Process %CPU 48.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/name.myserver.net.pid --skip-locking --port3306 --socket/var/lib/mysql/mysql.sock
Top Process %CPU 44.0 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --pid-file/var/lib/mysql/name.myserver.net.pid --skip-locking --port3306 --socket/var/lib/mysql/mysql.sock
Also in var/log/messages I find much lines like this:
Jan 16 07:58:06 name named[2121]: lame server resolving '243.29.195.200.in-addr.arpa' (in '29.195.200.in-addr.arpa'?): 200.195.6.194#53
Jan 16 07:58:06 name named[2121]: lame server resolving '243.29.195.200.in-addr.arpa' (in '29.195.200.in-addr.arpa'?): 200.195.38.18#53
and very much like this:
Jan 16 08:25:33 name kernel: Shorewall:net2all

S=0x00 PREC=0x00 TTL=107 ID=64735 DF PROTO=TCP SPT=3922 DPT=4899 WINDOW=64800 RES=0x00 SYN URGP=0
Jan 16 08:25:33 name kernel: Shorewall:net2all

S=0x00 PREC=0x00 TTL=106 ID=64736 DF PROTO=TCP SPT=3921 DPT=4899 WINDOW=64800 RES=0x00 SYN URGP=0
Also, when I use 'top' command I see that much CPU use mysqld and httpd!
Can somebody help to me, what I can do now, how I can solve this problem?
Thanks