Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

RE: [ISSForum] Site Protector and the ISS database on VMware CPU 100%

Subject: RE: [ISSForum] Site Protector and the ISS database on VMware CPU 100%
Date: Wed, 30 Mar 2005 08:13:51 -0500
Simple VMware.

However we are looking at ESX for later this year.

We did discover at least part of the problem with the high utilization.
As part of the debugging process, I went thru the event log and discovered a 
spooler error.
We reported this to our server team and asked if this could cause the condition 
that we are experiencing.

This was their response and after the server guy did his thing, we are running 
much better.
Thanks for the responses to my question.

"You guys need the spooler service for any reason?  It's got a corrupt perfmon 
dll for the spooler service.  Doesn't seem like a big deal right?  Well, I've 
seen these perflib errors kill a servers performance before.  If you don't need 
performance monitoring on the spooler service I would recommend running the 
Extensible Counter Tool from MS to disable the spooler counter so it won't keep 
trying to retrieve this info.  Let me know if you want me to do this."

MRM


-----Original Message-----
From: Cooper, Stephen [mailto:Stephen.Cooper@bis.org]
Sent: Tuesday, March 29, 2005 3:19 AM
To: Ballerini, Jean Paul (ISS EMEA); McLean, Michael R;
issforum@atla-mm1.iss.net
Subject: RE: [ISSForum] Site Protector and the ISS database on VMware
CPU 100%


Is this the ESX server product or a simple VMWARE machine?

Our company has a very good reason to consider ESX and we are about to
test Server Sensor in it. Anyone had any experience with this? 

-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On
Behalf Of Ballerini, Jean Paul (ISS EMEA)
Sent: Friday 25, March, 2005 11:21
To: McLean, Michael R; issforum@atla-mm1.iss.net
Subject: RE: [ISSForum] Site Protector and the ISS database on VMware
CPU 100%

Most likely the problem lies in the memory swapping.
The OS inside VMware swaps and the native OS swaps, they all use the
same drives so they all wait for their turn to do something.

There is a very good reason no to deploy SP in a VMware.

Jean Paul

-----Original Message-----
From: issforum-bounces@atla-mm1.iss.net On Behalf Of McLean, Michael R
Sent: Wednesday, March 23, 2005 7:41 PM
To: issforum@atla-mm1.iss.net
Subject: [ISSForum] Site Protector and the ISS database on VMware CPU
100%

Anyone have any experience with this, the guy is pegging 100%?

Thanks,
MRM

Reboot does not clear it up.
If I stop the issdaemon, it drops, and when I start it goes to 100%

SP 2.0 5.1

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.


Disclaimer

This e-mail message shall not be construed as legally binding on the Bank for 
International Settlements (BIS). As internet communications are not secure, the 
BIS does not accept responsibility for the content of this message.

This message is intended only for the recipient(s) named above. Any 
unauthorised disclosure, use or dissemination, either in whole or in part, of 
this message is prohibited. If you have received this message in error, please 
inform the sender immediately by return e-mail and delete this message and any 
attachments thereto from your system. 

Thank you for your cooperation.


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>