Hi Michael!

Thanks for the info. I was talking about both Windows and Solaris and we are using 
them both. I would imagine that the basic issue is the same on Solaris. We have some 
performance monitoring software on all of the system, so I should get wind of any 
performance problems. However, it's nice to know in advance.

Regards,

Jim Mohr


-----Urspr�ngliche Nachricht-----
Von: MICHAEL VANCE [mailto:[EMAIL PROTECTED] 
Gesendet: Donnerstag, 19. Februar 2004 05:50
An: Mohr James; [EMAIL PROTECTED]
Betreff: Re: [ISSForum] Performance when network monitoring in ServerSensor activated


Jim-

You don't say whether you are talking about Windows or Unix, but I'll share some 
experiences with Windows:

The ServerSensor network monitoring process is derived from the BlackICE technology 
that ISS acquired a couple of years ago.  It shows up in TaskMan as a separate 
process, blackd.exe.  This process runs as Low Priority, so the OS will cap its CPU 
utilization at 50%.  That said, if your app is doing something that is both network 
intensive (so blackd.exe maxes out at 50% examining all the packets) and CPU intensive 
(so that the app itself wants lots of CPU), it is very possible to peg the CPU.  
Fortunately, we have only seen it on older hardware.  All of our newer, faster boxes 
seem to handle it without a problem.

- - - - - - - - -
Michael A. Vance, CISSP
mailto:[EMAIL PROTECTED]

_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo

Reply via email to