2016-02-08 12:39 GMT+09:00 David H. Gutteridge <dhgutteri...@sympatico.ca>: >>> > >>>>pflogd process consume CPU. >>> > >>>>Because of that in load average is too high. >>> > >>> Can you ktrace it? >>> > >>this is kdump output. >>> > >>sakura# kdump ktrace.out >>> > >> 974 1 pflogd EMUL "netbsd" >>> > >> 974 1 pflogd CALL read(3,0xbb912000,0x80000) >>> > >> 974 1 pflogd RET read -1 errno 35 Resource temporarily >>> > >> unavailable >>> > > And what does 'fstat -p 974' say about fd 3? >>> > >>> > fd 3 is bpf. >>> >>> I've seen something similar with arpwatch (might have been against bpf too), >>> and with nagios reading a pipe (see my post today on current-users@ >>> about this). >> >>I guess this is a 32bit host (i386 maybe) ? > > I've been encountering this for the past few months on i386, as > originally reported back in September. I haven't ever seen the same > issue on evbarm, both architectures running 7.0_STABLE and using PF. > > http://mail-index.netbsd.org/netbsd-users/2015/09/24/msg016939.html
oh. My host is 32bit. % file /bin/ls /bin/ls: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for NetBSD 7.0, not stripped (Please wait try "ktrace") -- miwarin
