Hyperthreading and Java (was RE: Tale of two servers)
From: Graham Reeds [mailto:[EMAIL PROTECTED] Also disable HyperThreading in the BIOS on the new Dell. HT and Java is not a happy combination. Interesting... do you have any recommended reading on that, Graham? - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Hyperthreading and Java (was RE: Tale of two servers)
Peter Crowther wrote: From: Graham Reeds [mailto:[EMAIL PROTECTED] Also disable HyperThreading in the BIOS on the new Dell. HT and Java is not a happy combination. Interesting... do you have any recommended reading on that, Graham? Love these urban-legend types of warnings (don't flash your headlights...). I think Graham is referring to a bug in the 1.4.2 line of JVMs where under certain circumstances, the HotSpot compiler trips over the garbage collector, and causes mysterious VM aborts. I believe there have been fixes in 1.4.2_06 and 1.4.2_07, and also in 1.5.0_01. It's triggered more easily in an HT or MP machine, but the important thing is that it can also be tripped on non-HT, single-processor machines (though much more rarely). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
The offender is a super duper new dell desktop with 4gb of ram, etc. It's running java 1.5 and is committed to nothing by tomcat. Also disable HyperThreading in the BIOS on the new Dell. HT and Java is not a happy combination. G. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
Thanks for all responses. I have some new info. 1. Reverse lookup is disabled on both machines. That probably rules out DNS resolution. 2. The better-but-slower machine is running java 1.5. The worse-but-faster machine is running 1.4.2 with the compatibility package. 3. Finally, and the most hopeful point, the better-but-slower server is running Norton virus services. Restarting the machine in safe mode (w/ networkin) solved the problem. Does this settle it? If so, what particular setting in Norton is responsible for this? Many thanks in advance, Dola --- George Sexton [EMAIL PROTECTED] wrote: The most common thing for this kind of issue is DNS resolution. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 On Thu, 10 Feb 2005 01:19:10 -0800 (PST), Dola Woolfe [EMAIL PROTECTED] wrote: The offender is a super duper new dell desktop with 4gb of ram, etc. It's running java 1.5 and is committed to nothing by tomcat. The winner is a rinky-dink 2 year old laptop with little ram, and lots of spyware sucking out cpu. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
From: Dola Woolfe [mailto:[EMAIL PROTECTED] 3. Finally, and the most hopeful point, the better-but-slower server is running Norton virus services. Restarting the machine in safe mode (w/ networkin) solved the problem. Does this settle it? If so, what particular setting in Norton is responsible for this? Real-time scanning. Turn it off completely if you can; turn it off on your webapp and any application directory, plus your database files, if you can't. If your IT team insist that you run real-time scanning, insist that they buy you a big enough server to cope with their paranoia ;-). - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
Sorry for being dumb, but where is that option? Can't seem to find it. The Option categories I have are Auto-Protect Script Blocing Manual Scan Email Instant Messenger LiveUpdate Threat Categories Mescellaneous Thanks --- Peter Crowther [EMAIL PROTECTED] wrote: From: Dola Woolfe [mailto:[EMAIL PROTECTED] 3. Finally, and the most hopeful point, the better-but-slower server is running Norton virus services. Restarting the machine in safe mode (w/ networkin) solved the problem. Does this settle it? If so, what particular setting in Norton is responsible for this? Real-time scanning. Turn it off completely if you can; turn it off on your webapp and any application directory, plus your database files, if you can't. If your IT team insist that you run real-time scanning, insist that they buy you a big enough server to cope with their paranoia ;-). - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Mail - now with 250MB free storage. Learn more. http://info.mail.yahoo.com/mail_250 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
From: Dola Woolfe [mailto:[EMAIL PROTECTED] Sorry for being dumb, but where is that option? Can't seem to find it. The Option categories I have are Auto-Protect Sorry, Dola, I meant auto-protect - different AVs have different names for it. You may wish to turn it off temporarily by right-clicking the Norton icon in the system tray and disabling it, to see what effect it has. - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
Not sure if this will work but I think the option referred to is not available on the newer versions. Try to add the Tomcat folder to the list of exclusions under the Auto-Protect menu. Doug - Original Message - From: Dola Woolfe [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Monday, February 14, 2005 12:21 PM Subject: RE: Tale of two servers Sorry for being dumb, but where is that option? Can't seem to find it. The Option categories I have are Auto-Protect Script Blocing Manual Scan Email Instant Messenger LiveUpdate Threat Categories Mescellaneous Thanks --- Peter Crowther [EMAIL PROTECTED] wrote: From: Dola Woolfe [mailto:[EMAIL PROTECTED] 3. Finally, and the most hopeful point, the better-but-slower server is running Norton virus services. Restarting the machine in safe mode (w/ networkin) solved the problem. Does this settle it? If so, what particular setting in Norton is responsible for this? Real-time scanning. Turn it off completely if you can; turn it off on your webapp and any application directory, plus your database files, if you can't. If your IT team insist that you run real-time scanning, insist that they buy you a big enough server to cope with their paranoia ;-). - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Mail - now with 250MB free storage. Learn more. http://info.mail.yahoo.com/mail_250 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
Dola Woolfe wrote: Thanks for all responses. I have some new info. 3. Finally, and the most hopeful point, the better-but-slower server is running Norton virus services. Restarting the machine in safe mode (w/ networkin) solved the problem. Does this settle it? If so, what particular setting in Norton is responsible for this? Antivirus software on a production system? You must be joking ;)! Are you reading emails on that box or what? You should consider restricting access to the box only to the authorized people, and have some sort of policy what sortware and for what pupose can be installed on that box. This will be the ultimate antivirus software thought. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
From: Mladen Turk [mailto:[EMAIL PROTECTED] Antivirus software on a production system? You must be joking ;)! rant Unfortunately not. All too often, corporate policy says that *all* boxes must have AV installed on them, and it is increasingly a sacking offence to disable it. The larger the corporation, it seems, the more likely that this is the policy. Yes, this is a knee-jerk reaction. No, I wouldn't expect it to change - in fact, I'd expect it to get worse as more middle managers play things 'safe'. So we'll get poorly-performing systems at best, and subtle errors that cost organisations millions of pounds at worst, as perfectly innocent filesystem accesses time out due to poor AV configuration. But, never mind, some manager has covered his/her ass, so everything's fine. /rant - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
Hi, Proud to say I'm not going to cover my ass (if I don't have to :). But I remember there were some worms that hit your computer even if you didn't do anything on it. One day my non-av'ed computer just went down with SoBig, I think, while Norton caught it on all other computers. So perhaps it is a good idea even on servers with restricted access. Dola --- Peter Crowther [EMAIL PROTECTED] wrote: From: Mladen Turk [mailto:[EMAIL PROTECTED] Antivirus software on a production system? You must be joking ;)! rant Unfortunately not. All too often, corporate policy says that *all* boxes must have AV installed on them, and it is increasingly a sacking offence to disable it. The larger the corporation, it seems, the more likely that this is the policy. Yes, this is a knee-jerk reaction. No, I wouldn't expect it to change - in fact, I'd expect it to get worse as more middle managers play things 'safe'. So we'll get poorly-performing systems at best, and subtle errors that cost organisations millions of pounds at worst, as perfectly innocent filesystem accesses time out due to poor AV configuration. But, never mind, some manager has covered his/her ass, so everything's fine. /rant - Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
On Mon, 14 Feb 2005 13:41:22 -0800 (PST), Dola Woolfe [EMAIL PROTECTED] wrote: Hi, Proud to say I'm not going to cover my ass (if I don't have to :). But I remember there were some worms that hit your computer even if you didn't do anything on it. One day my non-av'ed computer just went down with SoBig, I think, while Norton caught it on all other computers. So perhaps it is a good idea even on servers with restricted access. This is where you need to block ports and disable services on the servers that shouldn't be there plus if SoBig or another variety of virus/worm is getting on your network then the hole is elsewhere not on your server. Alternatively it makes a damn good business case to move your Tomcat over to Linux or a flavour of Unix. :) Regards, -- Jason Bainbridge KDE - Conquer Your Desktop - http://kde.org KDE Web Team - [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
Proud to say I'm not going to cover my ass (if I don't have to :). Covering your backside is fine, just make sure you cover it with something appropriate and effective. But I remember there were some worms that hit your computer even if you didn't do anything on it. One day my non-av'ed computer just went down with SoBig, I think, while Norton caught it on all other computers. That's kind of like saying it's good to make everyone wear those 80+ pound suits of armor so you can leave the fort gate open. So perhaps it is a good idea even on servers with restricted access. Armor rusts, too: http://securityresponse.symantec.com and check the updates for Symantec. I understand anyone using Symantec products is being encouraged to be sure those updates are in place ASAP. Whether management wants to bog servers down with anti-v or not is their decision, but if they want to be good neighbors and good citizens, they need to hire or train someone who can set up correct firewalls and demilitarized zones, etc. -- Joel Rees [EMAIL PROTECTED] digitcom, inc. 株式会社デジコム Kobe, Japan +81-78-672-8800 ** http://www.ddcom.co.jp ** - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
The most common thing for this kind of issue is DNS resolution. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 On Thu, 10 Feb 2005 01:19:10 -0800 (PST), Dola Woolfe [EMAIL PROTECTED] wrote: The offender is a super duper new dell desktop with 4gb of ram, etc. It's running java 1.5 and is committed to nothing by tomcat. The winner is a rinky-dink 2 year old laptop with little ram, and lots of spyware sucking out cpu. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tale of two servers
More details please. Are both machine running the same version of Java. Are they both connecting to an external database? Exact same versions of Tomcat 5.5.x ? On Thu, 10 Feb 2005 01:19:10 -0800 (PST), Dola Woolfe [EMAIL PROTECTED] wrote: Hi, I'm running TC5.5 on two different servers in the same office. Both run XP Pro SP2. Both servers are programmatically queried by users and are bombarded with thousands of requests. One of the servers responds much more quickly than the other. In fact, one of them causes timeouts. The offender is a super duper new dell desktop with 4gb of ram, etc. It's running java 1.5 and is committed to nothing by tomcat. The winner is a rinky-dink 2 year old laptop with little ram, and lots of spyware sucking out cpu. So this is obviously counterintuitive and I'm wondering if anyone could suggest where to begin looking for problems! Many thank in advance, Dola __ Do you Yahoo!? All your favorites on one personal page Try My Yahoo! http://my.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tale of two servers
does the fast one run any anti-virus software? That's been known to kill performance. Mike Curwen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
