denyhosts seems to be starting to slow down on all of our servers..

root 10464 26.6 0.8 13372 9012 ? Ss 11:00 6:37 /usr/bin/python2.3 /usr/sbin/denyhosts.py -c /etc/denyhosts.cfg


it has been running for 6 1/2 minutes using 26-40% cpu the whole time. heres an strace (before i installed nscd)..

munmap(0x40637000, 4096)                = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 5
connect(5, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("66.33.216.127")}, 28) = 0 send(5, "Hm\1\0\0\1\0\0\0\0\0\0\003144\00299\003100\00210\7in-a"..., 44, 0) = 44
gettimeofday({1147371266, 352638}, NULL) = 0
poll([{fd=5, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(5, FIONREAD, [88])                = 0
recvfrom(5, "Hm\201\200\0\1\0\1\0\0\0\0\003144\00299\003100\00210\7"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("66.33.216.127")}, [16]) = 88
close(5)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 5
connect(5, {sa_family=AF_FILE, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(5)                                = 0
open("/etc/hosts", O_RDONLY)            = 5
fcntl64(5, F_GETFD)                     = 0
fcntl64(5, F_SETFD, FD_CLOEXEC)         = 0
fstat64(5, {st_mode=S_IFREG|0644, st_size=36511, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40637000


and here is one after i instaleld nscd which it was looking for...

connect(5, {sa_family=AF_FILE, path="/var/run/.nscd_socket"}, 110) = 0
writev(5, [{"\2\0\0\0\6\0\0\0\4\0\0\0", 12}, {"\n\3\20\22", 4}], 2) = 16
read(5, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\377\377\377\377\377\377"..., 32) = 32
close(5)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 5
connect(5, {sa_family=AF_FILE, path="/var/run/.nscd_socket"}, 110) = 0
writev(5, [{"\2\0\0\0\6\0\0\0\4\0\0\0", 12}, {"\n\3\20\23", 4}], 2) = 16
read(5, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\377\377\377\377\377\377"..., 32) = 32
close(5)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 5
connect(5, {sa_family=AF_FILE, path="/var/run/.nscd_socket"}, 110) = 0
writev(5, [{"\2\0\0\0\6\0\0\0\4\0\0\0", 12}, {"\n\3\20\24", 4}], 2) = 16
read(5, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\377\377\377\377\377\377"..., 32) = 32
close(5)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 5
connect(5, {sa_family=AF_FILE, path="/var/run/.nscd_socket"}, 110) = 0
writev(5, [{"\2\0\0\0\6\0\0\0\4\0\0\0", 12}, {"\n\3\20\25", 4}], 2) = 16
read(5,  <unfinished ...>


seems like now that i installed nscd it just keeps looking at nscd over and over. any ideas? my auth.log is only 36MB right now.




--
Jordan Tardif
DreamHost


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to