Hmm I liked it better before I implemented Monit. Blissful ignorance ☺
I got am email from one of my servers with the following:
Event: Resource limit matched
Service
3016-Tilton-CM1
Date: Tue, 29 Aug 2017 16:26:14
Action: alert
Host: 3016-Tilton-CM1
Description: loadavg(5min) of 2.2 matches resource limit
[loadavg(5min) > 2.0]
I found this in the logs of the server:
Aug 29 16:04:23 3016-Tilton-CM1 user.info kernel: AIF:Port 0 OS fingerprint:
IN=ppp0 OUT= MAC= SRC=221.122.59.98 DST=115.187.184.60 LEN=69 TOS=0x00
PREC=0x00 TTL=44 ID=31131 PROTO=UDP SPT=6973 DPT=0 LEN=49
Aug 29 16:04:56 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING:
pcap_dispatch took too long (took 1023275970 nsec, over threshold of 1000000000
nsec)
Aug 29 16:04:56 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event
processing took longer than a second (took 1319566069 nsec, over threshold of
1000000000 nsec)
Aug 29 16:05:02 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING:
pcap_dispatch took too long (took 1274262839 nsec, over threshold of 1000000000
nsec)
Aug 29 16:05:02 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event
processing took longer than a second (took 1461235038 nsec, over threshold of
1000000000 nsec)
Aug 29 16:05:04 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event
processing took longer than a second (took 1057674551 nsec, over threshold of
1000000000 nsec)
Aug 29 16:05:11 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event
processing took longer than a second (took 1513263031 nsec, over threshold of
1000000000 nsec)
Aug 29 16:05:14 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING:
pcap_dispatch took too long (took 1548211950 nsec, over threshold of 1000000000
nsec)
Aug 29 16:05:14 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event
processing took longer than a second (took 2129665587 nsec, over threshold of
1000000000 nsec)
..... and lots more
Should I turn off the Netstat server? I assume this turns off darkstat!
Regards
Michael Knill
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
