Hi Jeremy, I'm not sure if this is your case, but, the Solaris BSM security audit module needs a good tuning to avoid log storms due to intensive system I/O tasks.
I hope this helps. Regards, Jován González Silva Pre-Sales Manager Etek International - Colombia ISO 9001 certified BS 7799-2 certified Este correo y cualquier archivo anexo son confidenciales y para uso exclusivo de la persona o entidad de destino. Esta comunicación puede contener información protegida por el privilegio de cliente-abogado. Si usted ha recibido este correo por error, equivocación u omisión queda estrictamente prohibido la utilización, copia, reimpresión, reenvió o cualquier acción tomada sobre este correo y puede ser penalizada legalmente. En tal caso, favor notificar en forma inmediata al remitente. This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email or any action taken in reliance on this e-mail is strictly prohibited and may be unlawful. "Durst, Jeremy S." <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 14/11/2006 11:12 a.m. To <[email protected]> cc Subject [ISSForum] Server Sensors and bandwidth Hi all, We have a rather large deployment of server sensors, but on several Solaris boxes we have had crashes. I believe it's because the entire datacenter is gigabit, and when the bandwidth utilization gets high it causes the ISS buffer to fill up, and then stop handing the packets off to the OS. Has anyone successfully tweaked SR4.3 for Solaris to stop the PCD from looking at certain traffic that hogs bandwidth? (ie Ftp / backups). Thanks! Jeremy _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
