[ARGUS] ra* performance
Peter Van Epp
vanepp at sfu.ca
Mon May 10 14:23:39 EDT 2004
On Mon, May 10, 2004 at 12:36:37PM -0400, cleric at gwu.edu wrote:
> Hello All,
>
> I'm a new Argus user and as such I am still learning the capabilities of
> the software. I'm excited about the possibilities, but I have encountered
> some performance issues that I hope you can help with.
>
<snip>
Running out of memory would be my first guess, although that said
on a FreeBSD box that I haven't yet applied Eric's fix to (to boost the hard
limit on memory beyond a gig) your command as stated did something (I'm not
sure something is right, mind, but it did something):
%ramon -M topn -r archive/2004/05/09/*
09 May 04 01:36:06 vo181-95.dial-up. 1 1 54 62
09 May 04 01:36:05 211.177.228.178 1 1 54 62
09 May 04 01:35:47 218.18.142.14 0 6 0 372
09 May 04 01:35:41 ppp3-084.dialup.a 0 2 0 124
09 May 04 01:35:49 4.15.17.6 0 1 0 42
09 May 04 01:36:05 east.daze.net 1 1 79 174
09 May 04 01:35:41 hbpp-p-144-139-19 0 3 0 186
09 May 04 01:35:41 82-168-189-205-bb 0 3 0 186
...
There are several things about this. First no -n means that DNS lookups
are being done which can vastly slow down performance. Then I'd expect
TopN to be sorting in reverse order which it doesn't seem to be (and it isn't
anywhere near finishing thinking about it to see if the top appears at the
end of the listing :-)). It wants a fair amount of memory (around 350 megs in
my case):
vanepp 19198 0.0 44.8 350168 349808 p0 S+ 11:03AM 2:54.15 ramon -M topn -r archive/2004/05/09/argus.2004.05.09.00.00.00.gz archive/2004/05/09/argus.2004.05.09.01.00.00.gz archive/2004/05/09/argus.2004.05.09.02.00.00.gz archive/2004/05/09/argus.2004.05.09.03.00.00.gz archive/2004/05/09/argus.2004.05.09.04.00.00.gz archive/2004/05/09/argus.2004.05.09.05.00.00.gz archive/2004/05/09/argus.2004.05.09.06.00.00.gz archive/2004/05/09/argus.2004.05.09.07.00.00.gz archive/2004/05/09/argus.2004.05.09.08.00.01.gz archive/2004/05/09/argus.2004.05.09.09.00.00.gz archive/2004/05/09/argus.2004.05.09.10.00.00.gz archive/2004/05/09/argus.2004.05.09.11.00.00.gz archive/2004/05/09/argus.2004.05.09.12.00.00.gz archive/2004/05/09/argus.2004.05.09.13.00.00.gz archive/2004/05/09/argus.2004.05.09.14.00.00.gz archive/2004/05/09/argus.2004.05.09.15.00.00.gz archive/2004/05/09/argus.2004.05.09.16.00.01.gz ar
chive/2004/05/09/argus.2004.05.09.17.00.00.gz archive/2004/05/09/argus.2004.05.09.18.00.0!
0.gz archive/2004/05/09/argus.2004.05.09.19.00.00.gz archive/2004/05/09/argus.2004.05.09.20.00.00.gz archive/2004/05/09/argus.2004.05.09.21.00.00.gz archive/2004/05/09/argus.2004.05.09.22.00.00.gz archive/2004/05/09/argus.2004.05.09.23.00.00.gz
and the archive directory it is reading (around 20 to 30 megs average
probably) on an hourly archive cycle:
archive/2004/05/09:
total 1229104
-rw-r--r-- 1 root wheel 45126009 May 9 01:00 argus.2004.05.09.00.00.00.gz
-rw-r--r-- 1 root wheel 46511393 May 9 02:00 argus.2004.05.09.01.00.00.gz
-rw-r--r-- 1 root wheel 49468203 May 9 03:00 argus.2004.05.09.02.00.00.gz
-rw-r--r-- 1 root wheel 46456348 May 9 04:00 argus.2004.05.09.03.00.00.gz
-rw-r--r-- 1 root wheel 48237738 May 9 05:00 argus.2004.05.09.04.00.00.gz
-rw-r--r-- 1 root wheel 44895491 May 9 06:00 argus.2004.05.09.05.00.00.gz
-rw-r--r-- 1 root wheel 48647251 May 9 07:00 argus.2004.05.09.06.00.00.gz
-rw-r--r-- 1 root wheel 47333807 May 9 08:00 argus.2004.05.09.07.00.00.gz
-rw-r--r-- 1 root wheel 51159807 May 9 09:00 argus.2004.05.09.08.00.01.gz
-rw-r--r-- 1 root wheel 50941727 May 9 10:00 argus.2004.05.09.09.00.00.gz
-rw-r--r-- 1 root wheel 52255306 May 9 11:00 argus.2004.05.09.10.00.00.gz
-rw-r--r-- 1 root wheel 57889111 May 9 12:00 argus.2004.05.09.11.00.00.gz
-rw-r--r-- 1 root wheel 61219294 May 9 13:00 argus.2004.05.09.12.00.00.gz
-rw-r--r-- 1 root wheel 56012464 May 9 14:00 argus.2004.05.09.13.00.00.gz
-rw-r--r-- 1 root wheel 55675060 May 9 15:00 argus.2004.05.09.14.00.00.gz
-rw-r--r-- 1 root wheel 53398155 May 9 16:00 argus.2004.05.09.15.00.00.gz
-rw-r--r-- 1 root wheel 50712771 May 9 17:00 argus.2004.05.09.16.00.01.gz
-rw-r--r-- 1 root wheel 53027042 May 9 18:00 argus.2004.05.09.17.00.00.gz
-rw-r--r-- 1 root wheel 57584961 May 9 19:00 argus.2004.05.09.18.00.00.gz
-rw-r--r-- 1 root wheel 58456980 May 9 20:00 argus.2004.05.09.19.00.00.gz
-rw-r--r-- 1 root wheel 58040678 May 9 21:00 argus.2004.05.09.20.00.00.gz
-rw-r--r-- 1 root wheel 58663243 May 9 22:00 argus.2004.05.09.21.00.00.gz
-rw-r--r-- 1 root wheel 53283015 May 9 23:00 argus.2004.05.09.22.00.00.gz
-rw-r--r-- 1 root wheel 52980087 May 10 00:00 argus.2004.05.09.23.00.00.gz
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list