-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Maurizio,
- -------- Original Message -------- From: Maurizio Molina <[EMAIL PROTECTED]> To: nfsen-discuss ML <[email protected]> Subject: [Nfsen-discuss] when will nfsen's processing become too much? Date: Thu Aug 31 2006 14:58:30 GMT+0200 (CEST) > Hi, > I'm observing that with 20 sources and 85 active profiles (around > 15Mbytes of data per 5 min slot), if I don't do anything else with > nfsen, the cpu occupation of nfsen-run will raise (at almost 100%) at > HH:MM:30 (where MM is a multiple of 5) and drop again at very low levels > roughly after 3 minutes. well - 20 sources and 85 profiles is no longer really lite weight, :) when having around 100MB per source and time slice. > So, it looks that I still have a 2 min cushion before the system gets > instable... > I note that If I do something else that involves some heavy processing > (like looking for the 10 top src IP addresses over the past 24 hours on > the live profile...) nfsen-run's utilization stays almost continuously > high, even well after the other process has terminated. It may mean that > since nfsen's normal activities cannot terminate in the 5 min slot, due > to a competing process, they are nicely queued and terminate when there > is time later on. > Question: is this the way it works? If there is a "queue" of such Yes. > activities, how long can it be? and is there any way of realizing when > nfsen becomes instable, in this respect? NfSen does not become instable. As you noted, it processes as fast as your system resources allow, until NfSen gets in sync again. There is no Queue as such, because NfSen knows at each cycle, which timeslot it needs to process and what timeslots have already been processed. If NfSen recongizes such a gap, it reports that in the syslog file and continues processing next slots without sleeping. It does that until it's in sync again. Therefore the number of slots to process is relevant, and they can grow ( hopefully they do not ) indefinitely. If you come close to such limits, you should either reduce load from NfSen, or upgrade the hardware ( CPU/memory ). NfSen as such does not get instable. - Peter > Thanks, > Maurizio > > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Nfsen-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/security -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iQCVAwUBRQVwWf5AbZRALNr/AQLwLgP8CG6ZNSoIxmjsNuqIM4s5YCXVALrI+jsc 5BgkM+X4H85fFplWe4y/UaUecQWZ7PHjqKjpRn6fgOYfKmy3yoztt3gAYbab5Nu0 yH0eiCmGl2BJBWb3qpnOh3uDvkVou7RiMBBozQusbG52pAa3tO+CAqu6OaHzoEHm qJhbhWlSQjU= =ddww -----END PGP SIGNATURE----- ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
