Guy Harper <[EMAIL PROTECTED]> wrote:
>
> If I ping 20k to the notes machine through the IPM I get a 80ms round
> trip, if I ping from the same network I get a 30-40ms round trip.
A difference of 40 ms will hardly be noticeable.
> The machine is not swapping at all, so I discount RAM.....however,
> inspecting the task list reveals this process:
>
> USER PID %CPU %MEM SIZE RSS TTY STAT START TIME COMMAND
> nobody 929 99.9 1.9 832 264 ? R May 2 42900:35 in.identd -w -t120
This looks like the real culprit. Identd (not to be confused with
inetd!) should never require 99% CPU to do anything at all. It is
clearly broken. You should kill it. Then, if it comes back, disable
it, or upgrade to a newer identd package.
The purpose of identd is very simple. When a remote server receives a
connection from your machine, it can, if it wants to, make a connection
to your identd server, and ask for the identity of the user who made the
socket connection. This allows associating a username with a network
connection on the remote server.
So, identd's job is very simple: Scan the socket table, and find the
connection, and determine which user owns that connection, then return
the information. That's a 0.1% CPU job, not a 99% CPU job. :)
You will find that the stock identd does not work well with masquerade
clients tunnelling socket connections through your server, because your
masq server does not know what users are on the other machines. Another
package, such as midentd, can help in that regard.
> Ok, so I could use a faster processor, but I will learn nothing if
> that cures it....this command is initialized in inetd.conf, but I
> don't know what it is!!
No, a faster processor would only run the infinite loop more quickly.
It would still get loaded down by an errant process like this. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Nothing takes the taste out of peanut
sometimes known as David DeSimone || butter quite like unrequited love."
http://www.dallas.net/~fox/ || -- Charlie Brown
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
