Hello Martin, Martin Englund wrote: > Nathan, > > On Sep 21, 2007, at 13:40 , Nathan Dietsch wrote: > >> Is there any data within Sun as to how expensive auditing is? Obviously >> any measurement would be workload-specific, but removing the IO >> component of logging, is there a finger-in-the-air figure of what sort >> of overhead auditing generates per audit event? Is there roughly a >> common set of operations performed for each audit event? >> > I'm working on that, but I haven't had time to finish it. You can read > about my initial findings here: > <http://blogs.sun.com/martin/entry/measuring_the_impact_of_auditing> That is excellent news. I would be very interested in seeing your results as you come across them. The 1.8% overhead on the execve call is acceptable in my situation, I would be very interested to see a syscall-by-syscall breakdown if you are taking it that far. Having actual figures to show people of what auditing would cost them would be really valuable.
Kind Regards, Nathan Dietsch
