Discuss

discuss@lists.centos.org

34753 discussions

Help in troubleshoot cause of high kernel activity
by Noob Centos Admin 30 Mar '08

30 Mar '08

Hi, I had been experiencing a problem on our dedicated server running Centos 5, and unable to successfully track down the problem. Since about 6 days ago, I noticed a spike in load/CPU utilization which went from a typical 0.2x-0.3x to 3.x. At the same time, average traffic also went up and so did the log usage. Prior to this, the server was working fine and there had been no changes to the configuration. Initially, I narrowed it down to the mail system. Exim was generating significantly more log data than usual. This was eventually narrowed down to apparently our server and another server playing ping pong between two users who coincidentally were on vacation and had both their mailboxes filled. Thus it caused an endless loop of "Message Undelivered" and "Auto-reply". Once this was identified and cleared up, I had expected things to go back to normal. However, load/traffic remained high. Looking at "top" output, I noted that %sys was as high and often much higher than %user. However, individual process %CPU just didn't add up to the total top was reporting. Top reports 160~170 sleeping tasks and only 4 active most of the time, which was largely exim then httpd/mysql/php. top Snapshot ========== top - 17:25:03 up 7 days, 19:16, 1 user, load average: 2.03, 2.84, 3.04 Tasks: 168 total, 4 running, 164 sleeping, 0 stopped, 0 zombie Cpu(s): 26.5%us, 50.3%sy, 0.0%ni, 16.6%id, 6.1%wa, 0.0%hi, 0.5%si, 0.0%st Mem: 1915208k total, 1880256k used, 34952k free, 142100k buffers Swap: 16777208k total, 66140k used, 16711068k free, 1276564k cached iostat Snapshot ============ avg-cpu: %user %nice %system %iowait %steal %idle 18.96 0.00 25.57 5.16 0.01 50.30 Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn sda 54.19 63.31 2460.80 42689802 1659234904 sdb 55.12 76.41 2460.80 51521720 1659234904 md1 315.95 139.72 2442.00 94207644 1646554216 md0 0.01 0.00 0.02 1422 14736 dm-0 39.13 65.85 292.50 44399402 197219496 dm-1 267.18 36.18 2110.08 24398010 1422756072 dm-2 9.64 37.68 39.42 25408576 26578648 fd0 0.00 0.00 0.00 16 0 sr0 0.00 0.00 0.00 136 0 Searching around for ways to interpret the output, I tried sar/iostat and essentially, the information off the net indicates there wasn't a disk problem, %io was relatively low and mdadm shows the RAID 1 disks working perfectly fine. Since %sys is consistently highest, it appears that the kernel was doing something outside of norm. The problem is I have no idea what else to do to determine what "something" is. I've looked at netstat and there doesn't appear to be excessive connections, logwatch summary also does not appear to give any clue as there are no records of unusual failed log in attempts. Please advise what else can I look into or check. Thanks in advance!

2 2

virtualbox on centos5.1 PAE
by Stephen Harris 30 Mar '08

30 Mar '08

Quad core duo 2.4Ghz (Q6600) Kernel 2.6.18-53.1.14.el5PAE #1 SMP 4Gb RAM VirtualBox-1.5.6_28266_rhel5-1.i586.rpm The package installed OK. I did KERN_DIR=/usr/src/kernels/2.6.18-53.1.14.el5-i686 /etc/init.d/vboxdrv setup and the module compiles AOK. BUT... at modprobe time: vboxdrv: disagrees about version of symbol struct_module Am I doing something stupid? -- rgds Stephen

2 2

CentOS-announce Digest, Vol 37, Issue 12
by centos-announce-request＠centos.org 30 Mar '08

30 Mar '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0208 Critical CentOS 4 s390(x) seamonkey - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Sat, 29 Mar 2008 19:25:08 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0208 Critical CentOS 4 s390(x) seamonkey - security update To: centos-announce(a)centos.org Message-ID: <20080329172508.GP12282(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2009:0208 https://rhn.redhat.com/errata/RHSA-2008-0208.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/seamonkey-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-chat-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-devel-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-dom-inspector-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-js-debugger-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-mail-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-nspr-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-nspr-devel-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-nss-1.0.9-15.el4.centos.s390.rpm updates/s390/RPMS/seamonkey-nss-devel-1.0.9-15.el4.centos.s390.rpm s390x: updates/s390x/RPMS/seamonkey-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-chat-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-devel-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-dom-inspector-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-js-debugger-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-mail-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-nspr-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-nspr-devel-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-nss-1.0.9-15.el4.centos.s390x.rpm updates/s390x/RPMS/seamonkey-nss-devel-1.0.9-15.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

A few questions regarding CentOS (5.0)
by Morten Nilsen 30 Mar '08

30 Mar '08

Hello list, I'm a former Trustix User (were active in that community since the very first betas), and now that my dear distro is dead, I'm looking to make a switch.. Several people recommended CentOS, so I decided to give it a spin.. I installed one new server with 5.0 a few months back, and I do have a couple of questions.. - Why does the screen flicker on and off several times during boot and when logging in? - Why does floppy.so get loaded? I have no floppy, and having floppy.so loaded while installing certain packages is dreadfully slow. - When I chose a pure console environment, without any X11 stuff, why did a bunch of gnome packages get installed? - Is it possible to get a php-mssql package? -I need this if I'm going to use CentOS at work.. I think that's it for now.. -- Cheers, Morten

13 46

World Writable Files
by Anne Wilson 30 Mar '08

30 Mar '08

I'm curious. Why are so many system-generated files world-writable? On my Mandriva laptop, every day I get warnings that world-writable files are found in /tmp, /far/lib/ /var/run/ and /var/spool, and every day msec reports that it has changed the mode of several files in /var/log/. Why are they created like that? Anne

1 0

SSl Certificate problem
by Tom Diehl 30 Mar '08

30 Mar '08

Hi, I have a c4 server that I am trying to migrate an ssl site over to a new C5 machine with all of the updates. The certificate is an equifax cert and works as advertised on the C4 server. When I move it over to the C5 machine I get error in firefox that says error code -12227 which http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html says is an SSL_ERROR_HANDSHAKE_FAILURE_ALERT. In addition it says that this means that "SSL peer was unable to negotiate an acceptable set of security parameters." If I try to open the site in IE, it prompts for a client certificate. This fails because I am not using client certs. In the apache config for ssl.conf I have "SSLVerifyClient none". I have also tried setting it to "optional" with the same results. In the past moving these sites to a different machine was as simple as copying the certs and the config files over to the new machine, reloading httpd and everyting just worked. Is there something different about ssl on C5? Does anyone know a good way to troubleshoot this. Google and the docs are not helping. What am I missing? Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

2 2

WPA enterprise
by David Hláčik 30 Mar '08

30 Mar '08

Hi i have freeradius mschap ldap working configuration - i am using it for pptpd (VPN server) to authentificate against freeradius with ldap . Windows VPN client can connect to our company network and use it. Next i want to add user/password auth to our WIFI (based on Dlink AP - with radius support). We are currently using wpa-preshared key. i want to use wpa enterprise with ldap authentification (providing username and password) without need to install any certificate on windows. First to make a clear - how do i achieve it? --- i mean exactly which protocol i need to use and how it works (some shortcut to such howto) How do i arrange to use same freeradius for currently working VPN and for my plan to make wpa enterprise. Thanks in advance! David

1 1

Xen Install
by John 29 Mar '08

29 Mar '08

http://wiki.centos.org/HowTos/Xen/InstallingCentOSDomU In reading that How To, will using the GUI Configuration Tools create all the files need to run a "DomU". Will I have manual edit any configuration files? Next question is the machine has 256MBs of ram and Dom0 uses about 225MBs of it. Is that a bit much? VmWare Server does not use that much ram. See #top Below....With out running the Xen Kernel it has no where near the ram usage as with the Xen one. Is that expected? top - 11:32:53 up 5:22, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 101 total, 3 running, 96 sleeping, 1 stopped, 1 zombie Cpu(s): 2.0%us, 0.7%sy, 0.0%ni, 97.4%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 231424k total, 228784k used, 2640k free, 20636k buffers Swap: 524280k total, 16k used, 524264k free, 99324k cached -- ~/john OpenPGP Sig:BA91F079

2 2

sofware caused connection abort
by Gergely Buday 29 Mar '08

29 Mar '08

Hi there, some of my users use putty to connect to my server via ssh protocol. After some time they get the above error message, and it could be that my CentOS-side configuration caused this. Do anybody has experience with this problem? - Gergely

6 7

Cisco PIX vpn software
by Joseph L. Casale 29 Mar '08

29 Mar '08

Anyone got a resource on setting up a CentOS box to connect to a Cisco PIX 5xx VPN using IPSec? I don't know if it matters but an important part of functionality would be split tunneling, I need to maintain that from the windows side of functionality. Thanks! jlc

3 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss