So do you think I should turn it off by default and only turn it on when I need 
it?

Regards
Michael Knill

From: Michael Knill <michael.kn...@ipcsolutions.com.au>
Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net>
Date: Wednesday, 30 August 2017 at 9:01 am
To: AstLinux List <astlinux-users@lists.sourceforge.net>
Subject: [Astlinux-users] Getting high processor load on ALIX box

Hmm I liked it better before I implemented Monit. Blissful ignorance ☺

I got am email from one of my servers with the following:
Event:                    Resource limit matched
                                                                Service    
3016-Tilton-CM1
                Date:        Tue, 29 Aug 2017 16:26:14
                Action:      alert
                Host:        3016-Tilton-CM1
                Description: loadavg(5min) of 2.2 matches resource limit 
[loadavg(5min) > 2.0]

I found this in the logs of the server:
Aug 29 16:04:23 3016-Tilton-CM1 user.info kernel: AIF:Port 0 OS fingerprint: 
IN=ppp0 OUT= MAC= SRC=221.122.59.98 DST=115.187.184.60 LEN=69 TOS=0x00 
PREC=0x00 TTL=44 ID=31131 PROTO=UDP SPT=6973 DPT=0 LEN=49
Aug 29 16:04:56 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: 
pcap_dispatch took too long (took 1023275970 nsec, over threshold of 1000000000 
nsec)
Aug 29 16:04:56 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event 
processing took longer than a second (took 1319566069 nsec, over threshold of 
1000000000 nsec)
Aug 29 16:05:02 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: 
pcap_dispatch took too long (took 1274262839 nsec, over threshold of 1000000000 
nsec)
Aug 29 16:05:02 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event 
processing took longer than a second (took 1461235038 nsec, over threshold of 
1000000000 nsec)
Aug 29 16:05:04 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event 
processing took longer than a second (took 1057674551 nsec, over threshold of 
1000000000 nsec)
Aug 29 16:05:11 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event 
processing took longer than a second (took 1513263031 nsec, over threshold of 
1000000000 nsec)
Aug 29 16:05:14 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: 
pcap_dispatch took too long (took 1548211950 nsec, over threshold of 1000000000 
nsec)
Aug 29 16:05:14 3016-Tilton-CM1 daemon.debug darkstat[1424]: WARNING: event 
processing took longer than a second (took 2129665587 nsec, over threshold of 
1000000000 nsec)

..... and lots more

Should I turn off the Netstat server? I assume this turns off darkstat!

Regards
Michael Knill
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to