On 6/15/10 6:16 PM, Trent O'Callaghan wrote:
> Hi Tom,
>
> For comparison I have attached the requested
> 'sh -x /sbin/shorewall safe-restart 2> trace ' as trace-safe.txt
> And
> 'sh -x /sbin/shorewall restart 2> trace-ok' as trace-ok.txt
> for comparison.
>
> The process wait during safe-restart (150 seconds) is occurring during;
> + awk BEGIN { sline=""; };\
> /^-j/ { print sline $0; next };\
> /-m policy.*-j/ { print $0; next };\
> /-m policy/ { sline=$0; next };\
> /--mask ff/ { sub( /--mask ff/, "--mask 0xff" ) };\
> { print ; sline="" }
You apparently possess insight which I lack; the above invocation of
'awk' is part of a pipeline of two commands; from the source:
do_save() {
local status
status=0
if [ -f ${VARDIR}/firewall ]; then
if $iptables_save | iptablesbug > ${VARDIR}/restore-$$; then
cp -f ${VARDIR}/firewall $g_restorepath
mv -f ${VARDIR}/restore-$$ ${g_restorepath}-iptables
chmod +x $g_restorepath
echo " Currently-running Configuration Saved to
$g_restorepath"
The 'awk' command ia the active statement in 'iptablesbug (if awk isn't
installed, iptablesbug runs 'cat'). So it is still not obvious why your
system produces the awkward pause (pun intended :-) ).
Does 'shorewall save' show a similar pause on your system?
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
