That's odd because every box that I have looked at has the
0.0.0.0:PORTNUM in the netstat list if there is a service listening on a
particular port.
I know most programs will allow one to specify on which interface to
listen, but it doesn't look as if syslogd has such an option.
As an additional piece of information, I've tried tweaking xinetd.conf,
but those messages are still being logged into /var/log/messages.
Thanks for your help,
Andy.
-----Original Message-----
From: Richard B. Johnson [mailto:root@chaos.analogic.com]
Sent: Monday, September 09, 2002 11:36 AM
To: Rechenberg, Andrew
Cc: linux-kernel@vger.kernel.org
Subject: Re: syslogd: recvfrom inet: resource temporarily unavailable
On Mon, 9 Sep 2002, Rechenberg, Andrew wrote:
> I am using a Dell PowerEdge 2300 running Red Hat Linux 7.2 for a
> syslog consolidation machine. It is also our network monitoring
> system and it runs Cricket, NMIS, and cflowd and Flowscan for Cisco
> NetFlow collection.
>
[SNIPPED]
> Lately the machine has been running extremely slow whenever anything
> that happens on the box needs to syslog something (su, logins, etc.).
> I've checked /var/log/messages and it repeatedly contains the
> following line:
[SNIPPED]
> ESTABLISHED
> udp 0 0 0.0.0.0:32768 0.0.0.0:*
> udp 41056 0 0.0.0.0:514 0.0.0.0:*
> udp 0 0 0.0.0.0:2055 0.0.0.0:*
> udp 0 0 0.0.0.0:69 0.0.0.0:*
> udp 0 0 0.0.0.0:69 0.0.0.0:*
> udp 0 0 0.0.0.0:734 0.0.0.0:*
> udp 0 0 0.0.0.0:111 0.0.0.0:*
I think that all these 0.0.0.0 addresses are handled just like
broadcast addresses, i.e., your driver will get interrupted for
every packet on the wire. If so, this is not good and will severely
affect the performance of your computer. I think you need a real
"network(ed)" address for these, i.e., 10.0.0.1, 10.0.0.2, etc.
In the "olden" days, 0.0.0.0 was the broadcast address and I think
that Linux still maintains that compatibility.
> Andrew Rechenberg
> Infrastructure Team, Sherman Financial Group
> arechenberg@shermanfinancialgroup.com
> Phone: 513.677.7809
> Fax: 513.677.7838
> -
Cheers,
Dick Johnson
Penguin : Linux version 2.4.18 on an i686 machine (797.90 BogoMips).
The US military has given us many words, FUBAR, SNAFU, now ENRON.
Yes, top management were graduates of West Point and Annapolis.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sun Sep 15 2002 - 22:00:17 EST