Forums

Resolved
0 votes
I had a blip happen to my Gateway vm yesterday. This issue occurred between 2021-04-14 17:00:10 and 2021-04-14 20:55:51. I was notified by email of the issue, the server seem to respond appropriately. The issue stopped without my intervention.

Low memory; process mcad (22527) killed	2021-04-14 20:55:51
Low memory; process sysmon (7614) killed 2021-04-14 19:55:45
Low memory; process mcad (22412) killed 2021-04-14 19:38:30
Low memory; process mcad (22412) killed 2021-04-14 19:38:30
Low memory; process mcad (22412) killed 2021-04-14 19:38:29
Low memory; process mcad (22361) killed 2021-04-14 19:38:14
Low memory; process mcad (22238) killed 2021-04-14 19:37:51
Low memory; process mcad (22238) killed 2021-04-14 19:37:51
Low memory; process mcad (22238) killed 2021-04-14 19:37:50
Low memory; process mcad (22187) killed 2021-04-14 19:37:19
Low memory; process mcad (22128) killed 2021-04-14 19:37:02
...
Low memory; process mcad (30527) killed 2021-04-14 17:01:11
Low memory; process mcad (30476) killed 2021-04-14 17:01:02
Low memory; process mcad (30425) killed 2021-04-14 17:00:53
Low memory; process mcad (30374) killed 2021-04-14 17:00:45
Low memory; process mcad (30323) killed 2021-04-14 17:00:36
Low memory; process mcad (30272) killed 2021-04-14 17:00:27
Low memory; process mcad (30218) killed 2021-04-14 17:00:18
Low memory; process sysmon (1333) killed 2021-04-14 17:00:12
Low memory; process mcad (1337) killed 2021-04-14 17:00:10


I ran the following cmd while the issue was happening with no results.
ps -eo pid,user,time,%cpu,%mem,sz,tty,ucomm,command | egrep '%|mcad' | egrep -v 'grep|ps'


I also restarted the vm during the event with no changes to the issue.

Does any one know what is the 'mcad' service?
Thursday, April 15 2021, 02:04 PM
Share this post:
Responses (3)
  • Accepted Answer

    Friday, April 16 2021, 02:42 PM - #Permalink
    Resolved
    0 votes
    Finally found out from where this mysterious 'mcad' service message came from. It turns out that one of my Unifi AP appliances was the culprit and was configured to do remote Syslog server logging to my server gateway. Thanks Nick for your suggestions.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, April 15 2021, 05:51 PM - #Permalink
    Resolved
    0 votes
    Hello Nick, this is so weird, same here I also can not find what is this 'mcad' process. Nothing pops out from your suggestions, B.T.W. thanks.

    I think I might have to change business and start growing potatoes instead.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, April 15 2021, 03:51 PM - #Permalink
    Resolved
    0 votes
    I have no idea what the process is. Try "which mcad" and "locate mcad". Neither turn up anything for me. If you see it running, have a look at the process with one of the ps commands.
    The reply is currently minimized Show
Your Reply