*BSD News Article 93905


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!news.maxwell.syr.edu!news-feed.inet.tele.dk!cph-1.news.DK.net!dkuug!dknet!funny.bahnhof.se!seunet!news2.swip.net!nike.volvo.se!cyklop.volvo.se!peter
From: peter@cyklop.volvo.se (peter hakanson)
Newsgroups: comp.security.firewalls,comp.unix.bsd.bsdi.misc
Subject: Re: Gauntlet/BSD "transitions" every hour
Followup-To: comp.security.firewalls,comp.unix.bsd.bsdi.misc
Date: 19 Apr 1997 08:16:32 GMT
Organization: Volvo Corp.
Lines: 50
Message-ID: <5j9v10$sfa@nike.volvo.se>
References: <5j8nrf$5dh@news4.digex.net>
NNTP-Posting-Host: cyklop.volvo.se
X-Newsreader: TIN [version 1.2 PL2]
Xref: euryale.cc.adfa.oz.au comp.security.firewalls:7352 comp.unix.bsd.bsdi.misc:6669


Tom,
It seems that "standard TIS" runs sendmail 20 minutes into each hour.
And given less enough memory (17 megs seems awfully little to me)
might push the machine into starvation. (and a small time scew)

What does "top" say during these periods ? And systat ?

Peter h (using 128M going to 256)

Tom Krotchko (tomk@access.digex.net) wrote:
: I've got a TIS Gauntlet v3.2 installed on an Intel/BSDI system.  It uses token ring
: cards (although I'm not sure that's relevant).  Its a pentium with 16M of RAM.

: Every hour at about 17 minutes after the hour (EVERY hour, mind you), 
: connectivity goes away on this machine.  You can ping it, but you can't
: telnet, ftp, or http through it.  At about 21 minutes after the hour, 
: connectivity resumes.  Its just like clockwork.

: I checked the cron table, and there is nothing there.

: Weirder still, I just discovered today while trying to diagnose with
:   systat -netstat

: That just after the connectivity comes back, I get the message at the bottom
: of the display:
:    "Kernel In State of Transition"

: I have no idea why this is occuring or what this error message means.  But
: I think the two events are related.

: 1) Since this happens so regularly, I've got to believe the kernel is doing 
: something that is killing the application portion of IP.  Does something
: happen in a stock BSD machine every hour like this?

: 2) Is this the firewall doing something?

: 3) What does the "transition" message mean?

: Any help would be appreciated.


: -- 
: Tom Krotchko
: <tomk@access.digex.net>


--
--
<peter.devnull@cyklop.volvo.se> (remove ".devnull" before use!)
Peter Hakanson  VolvoData Dep 2580 phone +46 31 66 74 27