Security Basics mailing list archives

Re: System Monitor


From: FocusHacks <focushacks () gmail com>
Date: Sun, 29 Jan 2006 06:48:55 -0600

Some applications are just hungry for CPU and RAM.  I haven't heard of
Moodle before, so I don't know what's up with that.

The position and resources used by a single thread as shown in the
"top" utility isn't all that accurate.  You can tell how hard the
system's being pushed by looking at it's CPU load.  This can be found
by running "uptime" or often toward the top of the "top" screen.

A good rule of thumb is that a load of significantly more than 1.0 per
processor is where performance starts to deteriorate.  The load
average usually shows 3 columns.  One is the current load and the
other two are load averages over time (1 minute and 5 minute IIRC?).

If the current load jumps a good bit over 1.0 per CPU momentarily,
it's not such a bad thing.  If the load averages start to hover above
1.0 per CPU, the system is being run out of resources.

On 1/26/06, Gabriel Orozco <gabriel_orozco () mx sumida com> wrote:
Hello Every buddy

I'm checking another computer on the network. thats has an stranger
behavior. Let me explain

This is a Linux/Debian computer installed some 9 days ago. Assigned user
want to run Moodle on it.
But they called me asking why with 40 users the server went to top
processor and memory.
Hardware is a Sun-Ultra, with 2GB of RAM, and plenty of scsi disk space...

The problem:
when I run "top" I have between 43% to 52% of processor used by "Sys"
(System Tasks)
and I cannot identify what is taking these process power.
top does not give anything using the system
nothing is being transfered (checked with iptraf)
no disk usage (using iostat)
no root kits, checked with ckrootkit some minutes ago
no programs listening, checked with netstat

I don't know which tool can help me to find the problem.
I know there should be one and am surfing freshmeat.net, but I can
happily accept any help you can give

Thanks in advance

Gabriel Orozco



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
http://www.FocusHacks.com - The Ford Focus Modification Site!

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: