are you running anything that faces the outside world that
might be doing auth? if you don't have a /sys/log/auth, you
might want to create it and watch it for any external attacks.
i've found that to be a source of big syscall loads on some of
our systems.
- erik
On Tue Apr 17 11:38:33 EDT 2007, [EMAIL PROTECTED] wrote:
> 2007/4/17, Devon H. O'Dell <[EMAIL PROTECTED]>:
> > 2007/4/17, Uriel <[EMAIL PROTECTED]>:
> > > fossil
> >
> > I attempted to tprof fossil and I don't get any useful output. I even did:
> >
> > for (i in `{ps a | grep fossil | awk '{ print $2 }'})
> > echo profile > /proc/$i/ctl
> >
> > [wait a while for spike]
> >
> > for (i in `{ps a | grep fossil | awk '{ print $2 }'}) {
> > echo $i
> > tprof $i
> > }
> >
> > All I get is a bunch of lines saying ``total: 0''.
> >
> > What'm I missing? :(
>
> I found the [undocumented] startsyscall argument to the process ctl
> file, but I cannot get it to work. If I echo startsyscall >
> /proc/N/ctl, I get ``echo: write error: bad process or channel control
> request''.
>
> What gives?
>
> --dho
>
> > --dho
> >
> > > On 4/17/07, Devon H. O'Dell <[EMAIL PROTECTED]> wrote:
> > > > Hi,
> > > >
> > > > I've been having syscall spikes. It's really weird. There will be
> > > > >40,000 in 1 second, (according to stats(8)) and it appears at a
