Linux is the generic term for a UNIX-like open source operating system based on the Linux kernel.

learn more… | top users | synonyms (1)

6
votes
0answers
3k views

kworker consuming +90% IO and zero disk write

this is a standard apache web server on AWS Linux AMI + EBS. We are noticing high load average (+8) and iotop -a shows: Total DISK READ: 0.00 B/s | Total DISK WRITE: 2.37 M/s TID PRIO USER ...
5
votes
0answers
75 views

Q: MDADM mismatch_cnt > 0. Any way to identify which blocks are in disagreement?

Okay. After a routine scrub, my MDADM RAID5 is reporting mismatch_cnt = 16. As I understand, this means that while no device reported a read error, there are 16 blocks for which the data and parity ...
5
votes
0answers
188 views

How to automate zabbix web scenarios for vhosts?

I'm new to Zabbix and enterprise monitoring. I've just finished installing Zabbix 2.4. I'm trying to monitor the state of all our vhosts dislocated on different servers. Until now the only solution ...
4
votes
0answers
2k views

nginx recv() failed (104: Connection reset by peer) while reading response header from upstream

I have recently upgrade my magento from 1.5 to 1.9 and when ever I add a certain product to basket, I started to receive this error: 502 Bad Gateway There were no log entries in the var/log/ folder: ...
4
votes
0answers
336 views

TCP Window Scaling Problem over MPLS

After extensive troubleshooting why the TCP speed over an MPLS circuit is slow in one direction, I figured out that by adjusting the TCP window size the situation improved a lot. Maybe you can tell me ...
4
votes
0answers
341 views

TCP congestion collapse

I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
4
votes
0answers
511 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
4
votes
0answers
680 views

Adaptec pm80xx Driver Drops Drives Randomly

I'm building a ZFS NAS using an Adaptec ASA-71605H HBA on Ubuntu 12.04.4. Modern Linux kernels ship with the open-source version of the required pm80xx kernel module. Adaptec provides a driver for ...
4
votes
0answers
176 views

grep is inconsistently defaulting to grep -P?

I have a script that does some housekeeping that works perfectly well when invoked from an interactive shell, but did nothing when invoked by cron. To troubleshoot this I started a shell with a ...
4
votes
0answers
402 views

snmp MIB-TCP::tcp not showing any usage

I am trying to configure MRTG on all of my servers for making a network weathermap, this requires running SNMP which MRTG gets the information from. So, I installed it on two servers the exact same ...
4
votes
0answers
126 views

reprepro use when multiple sources have the same codename

I'm investigating the use of reprepro to control what updates get propagated to our servers, and when. The idea is to vet updates by Debian and Ubuntu, and only apply the ones we choose. We want to ...
4
votes
0answers
622 views

keepalived config is not working correctly with virtualbox vms

my keepalived configuration is not working correctly. I have two virtual testing machines (virtualbox) to try some things out with keepalived/vrrp. Bot can ping each other flawlessly (internal ...
4
votes
0answers
2k views

NAT64 configuration with tayga on Debian 6

I'm trying to implement NAT64 with tayga on my server and came to a point where I'm not sure how to proceed. My server is connected via one IPv4 address and one /64 IPv6 address block to the ...
4
votes
0answers
7k views

TCP Keepalive and firewall killing idle sessions

In a customer site, the network team added a firewall between the client and the server. This is causing idle connections to get disconnected after about 40 minutes of idle time. The network people ...
4
votes
0answers
852 views

How do I configure OpenSwan to allow pure IPsec (not L2TP) connections from an iPhone?

Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys ...
4
votes
0answers
1k views

how to tune NFS client on MacOS to get Linux like performance?

I have a NFS server running Linux and exporting a couple of shares. Both Linux and MacOS clients connect to the server, and while with the Linux clients I get ~ 75MB/s write speed, the MacOS clients ...
3
votes
0answers
28 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
3
votes
0answers
56 views

ARP behavior in Linux

I have a L3 switch. Port 1 and port 2 of the switch are added to VLAN 30 and an IP address (30.0.0.1) is assigned to it. Port1 and port2 are connected to Host1 and Host2 respectively. Host 1 and ...
3
votes
0answers
39 views

lspci “Memory at…” vs /proc/bus/pci/devices BAR address

I have a userspace application that I use to write to the registers of a pci device. It takes the base memory address of the device as an argument. Instead of looking this up via lspci on each ...
3
votes
0answers
24 views

what are the memory impacts of increasing a NIC's ring buffer?

What impact (if any) does NIC ring buffer tuning (e.g. via ethtool -G eth0 …) have on system memory utilization? For example, does increasing the ring buffer consume more RAM? And if so, how much? Or ...
3
votes
0answers
41 views

Strange values in linux system load

I am trying to understand system load on one linux server: $uptime 15:01:45 up 52 days, 19:48, 1 user, load average: 0.63, 1.76, 4.81 Loads are always 1 minute < 5 minutes < 15 minutes. ...
3
votes
0answers
29 views

industry standards for using google-authenticator with linux users?

Would like to ask, particularly those who run large environments with lots of users, if there are any standardized- or industry-recommended ways to securely distribute the verification codes to remote ...
3
votes
0answers
61 views

What causes SCSI command timeout over 30 seconds?

System description: CentOS 7. SuperMicro X9DRW-iF board. Latest BIOS (and SCU option ROM), using SCU option ROM. Four 300GB WD HDDs connected to the board's SCU. Six HDDs connected to the six ...
3
votes
0answers
75 views

`at` jobs running tens of minutes later than expected

I have an issue with at jobs being queued successfully and running successfully, but sometimes tens of minutes after they are scheduled to run. I confirmed that atd is running: me@hostname:~$ ps -ef ...
3
votes
0answers
81 views

iptables is occasionally logging MAC addresses. Why?

I have logging enabled on specific iptables packet drops. The rules I'm using are IP/port related only and this is what I can easily see in the logs, however occasionally I do get MAC address ...
3
votes
0answers
67 views

On Linux, what is the size of pages reported by vmstat command and/or /proc/vmstat?

As many have stated on StackExchange and elsewhere, a typical kernel/mmu page size for Linux is 4 KiB. I have verified that this is the case on my OS/architecture (RHEL 6.6, Intel Xeon E5-2690). Now ...
3
votes
0answers
158 views

How to find disconnected xrdp sessions?

I have a Xubuntu 14.04 Server here that runs xrdp to have a couple of users connect to it. Now there's one problem: users who access this server via RDP from Windows thin clients often use the "X" to ...
3
votes
0answers
95 views

Getting FTP return code 450 for GET but not for MGET command

I have an FTP-server (ProFTPD 1.3.4b) on Linux and an FTPS client (MOVEit Freely 4.5.1.2 - Secure FTP Client) on Windows. I connect like this 220 ProFTPD 1.3.4b Server (FTP with TLS) [1.2.3.4] 234 ...
3
votes
0answers
117 views

Query string parameters get shuffled

We're observing some strange behavior of the data send to our systems from a javascript since 9/9/2015. The problem shows up when the query string is send to our servers. Some values of the ...
3
votes
0answers
77 views

Server high %ni (nice) load

I have following problem with debian 7 (LAMP stack): top - 12:16:08 up 16:36, 4 users, load average: 27.97, 27.66, 27.42 Tasks: 240 total, 2 running, 238 sleeping, 0 stopped, 0 zombie ...
3
votes
0answers
160 views

Linux device route without broadcast

I have the following setup: A network namespace, ns1 A pair of virtual interfaces, ns_ext1 and ns_int1. ns_ext exists in the global namespace, and ns_int1 exists in ns1. A GRE device, gre1, which ...
3
votes
0answers
105 views

How to apply memory limits to all cron jobs?

On a shared server (Debian Jessie), there are some memory limits (and other limits, like number of processes) that apply for a group of users, configured in /etc/security/limits.conf. It seems that ...
3
votes
0answers
54 views

NGINX Worker Process, Burst Read Speed to only 1918kb/s

I am running an NGINX/1.8 server on Centos6.6 with multiple worker_processes, however while observing iotop I notice they burst up to 1918kb/s Read speed and rarely if at all pass that limit. I want ...
3
votes
0answers
157 views

Leap second addition in linux - how to make sure kernel detects it correctly

For the upcoming leap second addition on June 30 I have been working on making sure the Red Hat Linux detects the time smoothly. I have installed the updated tzdata and ntpd package on all RHEL5 and ...
3
votes
0answers
249 views

Data recovery for XFS partition

I want to recover data from a XFS partition. It seems that I need to xfs_repair the partition but I am not sure I would lose the data, so I prefer to ask to experts. I run a Virtual Box Linux Mint. ...
3
votes
0answers
86 views

Can pacemaker retry monitor action on error?

I created simple pacemaker agent for managing MySQL. It works quite well, but there is 1 thing that I can't understand. When resource is "Started", and monitor action returns one of: ...
3
votes
0answers
58 views

Raid 1 seeding to speed up identical installs

I was thinking of installing Ubuntu on one of our Dell servers in a RAID 1 configuration, then using the mirrored drive as the primary drive in a second identical server with another RAID 1 setup. ...
3
votes
0answers
219 views

proc-sys-fs-binfmt_misc.automount failed service

I am using ubuntu 14.10. I have just installed systemd and I have a failing service, proc-sys-fs-binfmt_misc.automount. I've seen here it's a part of systemd: Is this file important? How do I solve ...
3
votes
0answers
215 views

elasticsearch fails periodically on ubuntu with systemd : how to resolve this?

I am using Elasticsearch on Ubuntu 14.10 and it's periodically going down (entering a failed state). When down, this throws exceptions on my website, users can't search, connect or update database ...
3
votes
0answers
138 views

Solving an asymetric HA Firewall/router

I have an old Linux HA firewall/router setup that never quite worked. As it was never quite put into true production (just testing and demo's), I always had to have one firewall shutdown to make it ...
3
votes
0answers
244 views

Source IP rate limiting in iptables: hashlimit vs recent

I want to perform rate limiting per source IP in iptables. For example, limit the rate at which a host can establish new SSH connections to 5 per minute. To my knowledge there are two ways of doing ...
3
votes
0answers
672 views

Using Rsnapshot with sync_first, link_dest, and use_lazy_deletes

I've set up rsnapshot with the configuration below and it seems to work fine. However, if I understand what I have read correctly, in the rsnapshot docs and other tutorials, the operation would be ...
3
votes
0answers
793 views

Multiple Reverse SSH Tunnels using Single Port

I am able to accept reverse SSH connections from multiple remote systems on a single server using a port for each connection: Remote A: ssh -fN -R5000:localhost:22 user@server-ip -p22 Remote B: ssh ...
3
votes
0answers
669 views

What does “connections reset due to unexpected data” in netstat -s mean

I'm running a memcached server under heavy load from multiple web servers. While investigating some odd app level behaviour, we spotted that netstat -s on the memcached box was showing a lot of ...
3
votes
0answers
2k views

Can't write to other users “you have write permission turned off”

For some reason I'm not able to write to other users on my system. [root@hostname ~]# write write: you have write permission turned off. [root@hostname ~]# mesg y [root@hostname ~]# mesg is y ...
3
votes
0answers
669 views

TCP connections in FIN-WAIT-2 state on linux not timing out according to tcp_fin_timeout

We run a service with lots of embedded devices in the field, their tcp stack is a bit buggy and sometimes does not close connections properly, resulting in some connections being stuck in FIN-WAIT-2 ...
3
votes
0answers
311 views

What ZFS file structure to use for zfs-root linux system?

In ZFS, you can build your filesystem hiearchy to include different fs-attributes per filesystem. For insance, compression in one area, no-exec/suid in others, noatime. For example, a HOWTO for ...
3
votes
0answers
9k views

ksoftirqd process overloads CPU with high-bandwidth and multiple network connections

I got a 10GBit Server with proxmox 2.1 installed. There's an OpenVZ container running with Ubuntu 10.04 64bit. I can get 200-300MB/sec with wget from data-center internal servers (-O /dev/null) which ...
2
votes
0answers
25 views

network access issue and triage

We have two hosts in same vlan with same route rules. One of them is able to connect to an outside IP while on another I get failed: Connection timed out when testing the connectivity through netcat. ...
2
votes
0answers
34 views

How to use an IPv6 Edge router in an IPv4 network?

Background I have the following set-up: I use 6LOWPAN (IPv6 implementation in IEEE 802.15.4) on my sensor link that have IPv6 addresses (stateless) as aaaa::xx/64 It uses RaspberryPi (RPI) as an ...