High eDir CPU Utilization

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What is "appreciable traffic" specifically? One query to an unindexed
value can send a server to high utilization. If it is happening on
multiple boxes though then that's a little bit weird. Anything that hits
LDAP should document how it queries so you can add indexes as appropriate
to relevant attributes.

Otherwise at this point I typically fall back on a LAN trace and watch for
TCP sessions that have large gaps between packets and then focus on those.
If you send in an LDAP request and all you get are empty time or TCP
Keep-alive packets for ten minutes then that's bad. Same with any other
TCP connection.

Good luck.





smo989 wrote:
> Yes, unplugging the network cable makes the utilization drop. So what
> I'm gathering is that I should look for a misbehaving client? Is there
> a way to see where the requests are coming from short of running thru
> the connection list in monitor? dstrace +ldap shows no appreciable
> traffic. We do have a firewall that uses ldap for lookup of client
> access to the internet. That firewall points to a specific server (with
> a RW replica) but all servers that contain a replica of root are showing
> high utilization on ds.nlm.
> There are about 1000 users on this network on very current, late
> model server hardware. I wouldnt think that it would struggle to make
> it's way through day to day requests. Any suggestions how I could
> figure out what protocol, ncp request, service is causing this?
> Again thanks in advance for assisting
> Sean
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJK9KIbAAoJEF+XTK08PnB5aA4QAJJHlTeoZt iE92cw/hIyozwg
6vLVkJffZT8PUh++60EwuzNjm5GCn/RjKnF8DIXyz0Z+Ph2SZaO0WAxh5+6x5w2p
P5Ts31dNPe8jdTG4yYsOoh6c76mdsz/JVcY6h6dzYIRWpTyVuObyp8pZQJF5Xzsi
kV0hRTROV7xdKZlBnfqczMKKLQL+mRAyTn1rwcmtQir2VtSI9t Tj9W2BXtsatJ7M
X9BW31au446lORfcSfD94njpQmNRkCVOvHaI0JsbxnPPN8+z0F 11gggth13cPAv8
ZDjQgTRlrDP5HJk/HxHM8j1qM2PRcMFpxDBwrWx0PziHydiNYNjhJu9GMrjz5h9s
9A4P/YMNu7pazaVcLRxDz2RuSuhCFYJ6cik/rx2Y0AhMHE/De77n91Wai5RtCQx/
aT6TpIoZK0HBwdFb9FZ96iNKbYZ0FddC23xY3SQ/bsPh+Ix45un2dprJbocDjRd8
iAuOKYhOK8Hzze+hev596Ob9U/XE5VEqzXFkb7QE6Tr8JbPVXu8+kApbcyyJK0ig
bxtx5kqn2VG8EkvyKFLk4FFdwXo97V2zEIsi7GVwHkVxxonrnw NqaZ5yX7KPDUfF
gouag62PlKVcqHkF3n6piXhAUmWC8fKyiZB0c7TTeeK+lcMJdp/mi/0HajMqqi6r
G851HUMBCPzsl9e+lPon
=FUga
-----END PGP SIGNATURE-----