Hello Matt,
Thursday, June 14, 2007, 1:56:19 PM, you wrote:
|
> |
Pete, I have left all of those processes active for troubleshooting, and they are still there and definitely Sniffer. Process Explorer even shows what command line the executable was run with so I was able to do some digging in the logs for specifics. I found that Declude was recording errors related to Sniffer, and Sniffer was not logging the messages or associated events at all. Here's what Declude is showing: 06/14/2007 09:11:01.665 q3d2b00d400009610.smd ERROR: External program SNIFFER-IP didn't finish quick enough; terminating. 06/14/2007 09:11:01.665 q3d2b00d400009610.smd Couldn't get external program exit code |
I see. So then there was a large spike of traffic and then Declude began shutting down SNF instances before they finished. Perhaps, unsuccessfully.
<snip/>
|
> |
My server has 8 cores in it, and if it reached 100% CPU, it only did so for a moment in time. |
An important thing to remember about the current version of SNF, especially under persistent mode, is that it runs in a single thread. The next version (in alpha now) is fully multi-threaded and would have taken this event in stride I believe.
|
> |
This very likely could be associated with heap issues, but I did double my heap memory the other day, and normally it doesn't cause processes like this to just hang in the background doing nothing. That other application that hung about 10 times during this period is what suggests that it could be a heap issue because I know that app to be the first to go under stress (it is not a service). That app does an average of over 50 DNS lookups and has a lot more latency than Sniffer does, so it is remarkable that Sniffer hung 100 times and that app only hung 10 times. That suggests to me that maybe something better could be done in terms of cleaning up these processes. |
If there were heap issues that might explain why instances of SNF would still be hanging around -- they are apparently broken and parked. Neither their own time-out nor Declude's attempt to kill them has been successful apparently.
Thanks for the details on this.
_M
--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.
############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
