I have some old "cyberspace situational awareness" PHP code I used for a visualization project a few years ago, which captures and stores details information on web session activity; this code has proven handy identifying rouge bots in the past.
So, I have modified that code to capture and store detailed session information, including the number of hits per IP address, the user agent string, country code, etc. when the 1 minute load average is above 20 and less than 50.
So, let's see what happens the next time we get a spike... this should be interesting.
we have an unix system which has
load average normally about 20.
but while i am running a particular unix batch which performs heavy
operations on filesystem and database average load
reduces to 15.
how can we explain this situation?
while running that batch idle cpu time is about %60-65... (0 Replies)
Hello all, I have a question about load averages.
I've read the man pages for the uptime and w command for two or three different flavors of Unix (Red Hat, Tru64, Solaris). All of them agree that in the output of the 2 aforementioned commands, you are given the load average for the box, but... (3 Replies)
Hello, Here is the output of top command. My understanding here is,
the load average 0.03 in last 1 min, 0.02 is in last 5 min, 0.00 is in last 15 min.
By seeing this load average, When can we say that, the system load averge is too high?
When can we say that, load average is medium/low??... (8 Replies)
Hi,
i have installed solaris 10 on t-5120 sparc enterprise.
I am little surprised to see load average of 2 or around on this OS.
when checked with ps command following process is using highest CPU. looks like it is running for long time and does not want to stop, but I do not know... (5 Replies)
Hello AlL,..
I want from experts to help me as my load average is increased and i dont know where is the problem !!
this is my top result :
root@a4s # top
top - 11:30:38 up 40 min, 1 user, load average: 3.06, 2.49, 4.66
Mem: 8168788k total, 2889596k used, 5279192k free, 47792k... (3 Replies)
Hi ,
I am using 48 CPU sunOS server at my work.
The application has facility to check the current load average before starting a new process to control the load.
Right now it is configured as 48. So it does mean that each CPU can take maximum one proces and no processe is waiting.
... (2 Replies)
Hi,
I am getting a high load average, around 7, once an hour. It last for about 4 minutes and makes things fairly unusable for this time.
How do I find out what is using this. Looking at top the only thing running at the time is md5sum.
I have looked at the crontab and there is nothing... (10 Replies)
Here we go....
Preface:
..... so in a galaxy far, far, far away from commercial, data sharing corporations.....
For this project, I used the ESP-WROOM-32 as an MQTT (publish / subscribe) client which receives Linux server "load averages" as messages published as MQTT pub/sub messages.... (6 Replies)
Discussion started by: Neo
6 Replies
LEARN ABOUT SUSE
mail::spamassassin::sqlbasedaddrlist
Mail::SpamAssassin::SQLBasedAddrList(3) User Contributed Perl Documentation Mail::SpamAssassin::SQLBasedAddrList(3)NAME
Mail::SpamAssassin::SQLBasedAddrList - SpamAssassin SQL Based Auto Whitelist
SYNOPSIS
my $factory = Mail::SpamAssassin::SQLBasedAddrList->new()
$spamtest->set_persistent_addr_list_factory ($factory);
... call into SpamAssassin classes...
SpamAssassin will call:
my $addrlist = $factory->new_checker($spamtest);
$entry = $addrlist->get_addr_entry ($addr, $origip);
...
DESCRIPTION
A SQL based persistent address list implementation.
See "Mail::SpamAssassin::PersistentAddrList" for more information.
Uses DBI::DBD module access to your favorite database (tested with MySQL, SQLite and PostgreSQL) to store user auto-whitelists.
The default table structure looks like this: CREATE TABLE awl (
username varchar(100) NOT NULL default '',
email varchar(255) NOT NULL default '',
ip varchar(16) NOT NULL default '',
count int(11) NOT NULL default '0',
totscore float NOT NULL default '0',
signedby varchar(255) NOT NULL default '',
PRIMARY KEY (username,email,signedby,ip) ) TYPE=MyISAM;
Your table definition may change depending on which database driver you choose. There is a config option to override the table name.
This module introduces several new config variables:
user_awl_dsn
user_awl_sql_username
user_awl_sql_password
user_awl_sql_table
user_awl_sql_override_username
see "Mail::SpamAssassin::Conf" for more information.
new
public class (Mail::SpamAssassin::SQLBasedAddrList) new ()
Description: This method creates a new instance of the SQLBasedAddrList factory and calls the parent's (PersistentAddrList) new method.
new_checker
public instance (Mail::SpamAssassin::SQLBasedAddrList) new_checker (\% $main)
Description: This method is called to setup a new checker interface and return a blessed copy of itself. Here is where we setup the SQL
database connection based on the config values.
get_addr_entry
public instance (\%) get_addr_entry (String $addr, String $signedby)
Description: This method takes a given $addr and splits it between the email address component and the ip component and performs a lookup
in the database. If nothing is found in the database then a blank entry hash is created and returned, otherwise an entry containing the
found information is returned. If a with_awl_signer configuration option is enabled only addresses signed by the given signing identity
are taken into account, or, if $signedby is undefined (or empty) only unsigned entries are considered.
A key, "exists_p", is set to 1 if an entry already exists in the database, otherwise it is set to 0.
add_score
public instance (\%) add_score (\% $entry, Integer $score)
Description: This method adds a given $score to a given $entry. If the entry was marked as not existing in the database then an entry will
be inserted, otherwise a simple update will be performed.
NOTE: This code uses a self referential SQL call (ie set foo = foo + 1) which is supported by most modern database backends, but not
everything calling itself a SQL database.
remove_entry
public instance () remove_entry (\% $entry)
Description: This method removes a given $entry from the database. If the ip portion of the entry address is equal to "none" then remove
any perl-IP entries for this address as well.
finish
public instance () finish ()
Description: This method provides the necessary cleanup for the address list.
_unpack_addr
private instance (String, String) _unpack_addr(string $addr)
Description: This method splits an autowhitelist address into it's two components, email and ip address.
perl v5.12.1 2010-03-16 Mail::SpamAssassin::SQLBasedAddrList(3)