On Wed, 22 Dec 2010 11:00:43 -0600 Marsh Ray <[email protected]> wrote:
> But a typical box doesn't have "hundreds and hundreds" of processes or > unpredictable event sources. There are 300 or so references in the > source tree, but most of them are in code that doesn't run on any given > machine. > > A special-purpose box (e.g. a IPsec VPN gateway) may have very few other > than network events, which are known to an outside observer to a > significant degree. Well I would have thought it's certainly better, though I'm not in the crypto internals know and haven't been studying very closely, so I can't comment. Cron, Mail server, web server, relays all create many processes and you should be monitoring any important system too. The unix philosophy of many small programs means a high number of processes is rather likely. The daily script itself uses many, though admittedly in this case only once a day. Isn't the stream used for random pids e.g. all processes?
