Hi Jeremy,
I'm not sure if this is your case, but, the Solaris BSM security audit
module needs a good tuning to avoid log storms due to intensive system I/O
tasks.
I hope this helps.
Regards,
Jován González Silva
Pre-Sales Manager
Etek International - Colombia
ISO 9001 certified
BS 7799-2 certified
Este correo y cualquier archivo anexo son confidenciales y para uso
exclusivo de la persona o entidad de destino. Esta comunicación puede
contener información protegida por el privilegio de cliente-abogado. Si
usted ha recibido este correo por error, equivocación u omisión queda
estrictamente prohibido la utilización, copia, reimpresión, reenvió o
cualquier acción tomada sobre este correo y puede ser penalizada
legalmente. En tal caso, favor notificar en forma inmediata al remitente.
This e-mail and any files transmitted with it are for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message. Any
unauthorized review, use, disclosure, dissemination, forwarding, printing
or copying of this email or any action taken in reliance on this e-mail is
strictly prohibited and may be unlawful.
"Durst, Jeremy S." <JEREMY.S.DURST@saic.com>
Sent by: issforum-bounces@atla-mm1.iss.net
14/11/2006 11:12 a.m.
To
<issforum@iss.net>
cc
Subject
[ISSForum] Server Sensors and bandwidth
Hi all,
We have a rather large deployment of server sensors, but on several
Solaris boxes we have had crashes. I believe it's because the entire
datacenter is gigabit, and when the bandwidth utilization gets high it
causes the ISS buffer to fill up, and then stop handing the packets off
to the OS. Has anyone successfully tweaked SR4.3 for Solaris to stop
the PCD from looking at certain traffic that hogs bandwidth? (ie Ftp /
backups).
Thanks!
Jeremy
_______________________________________________
ISSForum mailing list
ISSForum@atla-mm1.iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@atla-mm1.iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
