[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tru64-unix-managers
Subject:    Something su-ing fron root to root a lot
From:       Tarasyuk Nik <NTarasyuk () snowyhydro ! com ! au>
Date:       2002-04-30 7:33:03
[Download RAW message or body]

Hi Managers

/var on one our servers got filled up.

The culprit was sialog, which was full of "Successful authentication for =
su from root to root" messages.
We cleaned the log, it started to grow again fast.

We've done reboot, it did NOT help.

CPU's idle time is zero, top shows that no specific process takes CPU =
time, but
CPU system time is high.

iowait is exremely high, network utilization is low, disk utilization is =
high.

So, some process does hundreds of su's per second, and it's logged by =
sialogd.

How to find out which one?

We are running 4.0f kit 4 on ES40.

Thanks in advance.

Nik Tarasyuk
Software Engineer
Snowy Hydro
Australia

[prev in list] [next in list] [prev in thread] [next in thread]