06-20-06 12:23 AM
"pan" <bandianxing@hotmail.com> said:
> IĦĦhave two HP 4410 and each one with 8 cpu. Now one machine system
>time is hight
>and about 30% and before it would almost be 0. and from the output of
>vmstat, the cs is
>very high. I don't know why it is so and how to resolv it.
A lot of context switches and high system time usage. This sounds like
a fork bomb (though not one of the worst kind, and most possibly
an inadvertent one, just a software behaving badly, not one created with
malicious intent). Could be other reasons, but this would be the most
probable cause.
Now, the trick is to find the process which is creating all these new
processes. "top" (if you even have it installed) will most probably
not help with these (the generated processes are short-lived, and as
such only show as random flashes in 'top', and the parent process
creating all these new processes is consuming only a small fraction
of the system resources; most of the consumption is on these new
processes).
You could try running a few iterations of "ps -ef"; look for processes
which appear in only one of the listings and go away. You should find
several of these. Now the key will be the process which is the parent
for all of these short-lived processes. Kill the parent process, and
restart it if it is needed for system operation (in other words, if it
is not just a leftover from a broken terminal session or something
like that).
If you have Glance+ available, you could try filtering the
process list there to show the processes with highest system call
rate, or perhaps even filter to the specific system call (fork
is what I would expect to see here a lot). The GUI version of
Glance+ (gpm) is somewhat of a video game, but provides a good tool
just for this kind of situations.
--
Wolf a.k.a. Juha Laiho Espoo, Finland
(GC 3.0) GIT d- s+: a C++ ULSH++++$ P++@ L+++ E- W+$@ N++ !K w !O !M V
PS(+) PE Y+ PGP(+) t- 5 !X R !tv b+ !DI D G e+ h---- r+++ y++++
"...cancel my subscription to the resurrection!" (Jim Morrison)
[ Post a follow-up to this message ]
| 
