Advanced Techniques for

HP-UX System Administrators

Bill Hassell
Director of IT
Systems and Methods, Inc.
2
Agenda
Setting up new systems
Standardizing for easy administration
Performance and Kernel Tuning
Memory Management
Disk space management
Logfile management
Useful tools
Additional resources
3
Setting up new systems
Disk layout
Internal/external issues
VG00 design
Massive lvols, flat directories
Networking
SAM, netconf, set_parms
100BaseT issues
Cron jobs
Logfiles, cleanup, backup
4
Setting up new systems
Roots shell
/sbin/sh
POSIX /usr/bin/sh vs. Bourne
/usr/bin/sh vs. Korn shell
Users can change: chsh login-name /usr/bin/some_shell
Login tty settings:
# is erase 1 char (backspace)
Fix all logins with a one-time command:
s11y s11y s11y s11y erase 'R` < 1dev1 erase 'R` < 1dev1 erase 'R` < 1dev1 erase 'R` < 1dev111yconf 11yconf 11yconf 11yconf
Add others such as:
s11y s11y s11y s11y erase "R" k1JJ "u" erase "R" k1JJ "u" erase "R" k1JJ "u" erase "R" k1JJ "u" 1n1r 1n1r 1n1r 1n1r "0" "0" "0" "0" eof eof eof eof "0" "0" "0" "0" - -- -par11y par11y par11y par11y 1xoff 1xoff 1xoff 1xoff
Use to set tty defaults such as baud rate
5
Setting up new systems
Basic security fixes
f1nd 1 f1nd 1 f1nd 1 f1nd 1usr usr usr usr1JocaJ 1JocaJ 1JocaJ 1JocaJ - -- -1ype d 1ype d 1ype d 1ype d - -- -pr1n1 pr1n1 pr1n1 pr1n1 - -- -exec exec exec exec chnod chnod chnod chnod 755 {} 755 {} 755 {} 755 {} ( (( (
umask is missing in /etc/profile and /etc/csh.login
unask unask unask unask 022 022 022 022
unask unask unask unask 077 077 077 077
Search for world-write permissions in important directories:
f1nd 1e1c 1 f1nd 1e1c 1 f1nd 1e1c 1 f1nd 1e1c 1usr usr usr usr 1op1 1dev 1 1op1 1dev 1 1op1 1dev 1 1op1 1dev 1sb1n sb1n sb1n sb1n 1s1and 1s1and 1s1and 1s1and - -- -pern pern pern pern - -- -002 002 002 002
Add: ( (( ({ { { { - -- -1ype d 1ype d 1ype d 1ype d - -- -o o o o - -- -1ype f 1ype f 1ype f 1ype f ( (( () )) ) to look at just files and directories
Add secure database mountpoints, etc
6
Setting up new systems
Basic security fixes (continued)
1e1c1pa1h 1e1c1pa1h 1e1c1pa1h 1e1c1pa1h
World-writable directories
pWd (:: :: :: :: or :.: :.: :.: :.: or :. :. :. :.)
Symlinks
Duplicate paths
Non-existent directories
scan-path script
Password and group file checks
pWck
grpck
Check /etc/passwd for duplicate UIDs:
Jog1ns -d
7
Setting up new systems
Basic security fixes (continued)
1e1c1hos1s.equ1v .rhos1s
World-writable?
Valid user?
Root?
suid scripts/programs
No scripts allowed
Purpose
Owner
Location
1e1c1fs1ab: nosu1d
8
Standardizing for easy administration
Login methods
telnet
remsh/rlogin
Xwindows
SSH
Shells
POSIX (/usr/bin/sh)
Bourne (/usr/old/bin/sh)
Korn shell (/use/bin/ksh)
C shell
Bash, tcsh, etc
9
Standardizing for easy administration
Standard profiles
se1 -u
ulimit settings:
uJ1n11 -a
11ne{seconds) unJ1n11ed
f1Je{bJocks) unJ1n11ed
da1a{kby1es) 65536
s1ack{kby1es) 8192
nenory{kby1es) unJ1n11ed
coredunp{bJocks) 0
nof1Jes{descr1p1ors) 60
Eliminate core files: uJ1n11 -Sc 0
10
Standardizing for easy administration
Standard profiles
Interactive versus batch
Errors: s11y: no1 a 1ypeWr11er
Separate the interactive commands:
Multiple 1f 1n1erac11ve statements
Or separate the interactive portion in a separate
script
Interactive commands: s11y 1pu1 11y1ype
Interactive settings: $TZ $01SPLAY
Login controls: 1e1c1noJog1n
11.0 with security patches, standard on 11i
Add: N0L061N=1 to /etc/default/security
11
Standardizing for easy administration
Standard profiles
$R0|E1.prof1Je
1e1c1skeJ to standardize new users, or replace
Cant keep from being changed by users ($R0|E must be writable
which means no file is safe)
Same interactive issues with batch logins
May want to have $R0|E1.JocaJprof1Je for user mods
Download sample profiles:
ftp://contrib:[email protected]/sysadmin/profiles
12
Standardizing for easy administration
Other /etc/skel files:
.exrc (vi defaults)
noWs (dont wrap searches around)
1c (ignore case on searches)
a1 (follow prev left indent)
aW (update source at shell escapes: !)
Wn (wrap to next line, =0 no wrap)
repor1 (shows # of lines changed)
shoWnode (INPUT or REPLACE MODE tag)
se1 noWs 1c au1o1nden1 au1oWr11e Wrapnarg1n=2 .
13
Standardizing for easy administration
Restricted access methods
Restricted shells: rsh, rksh, rcsh
$HOME is / for user
NO access to /usr or any other directrories
Must create a local bin with binaries and set $PATH
Usually simpler to use a menu script (no shell)
Backup procedures
Classic tools: tar cpio pax dump
No index, no search, no error recovery, no changer support, no
largefiles
fbackup/frecover
Index on every tape, high speed search, error recovery, change hooks,
largefile-capable
14
Standardizing for easy administration
Backup procedures (contd)
Features:
Largefiles, error recovery, changer support, parallel tape drives,
network backup/restore, multi-platform, centralized indexing
Commercial backup programs
OmniBack
Veritas
Legato
Disaster recovery (loss of boot disk)
Mirroring
Ignite/UX
15
Standardizing for easy administration
pr1n1_nan1fes1 (from Ignite/UX)
from the contributed software archive:
f1p:11con1r1b:9unsupp80hprc.ex1ernaJ.hp.con
ga1herer.sh
n1gh1oWJ
n1ckeJ (HTML generator)
Webmin: WWW.Webn1n.con (Perl-based)
Included with HPs Apache
16
Standardizing for easy administration
pr1n1_nan1fes1 (from Ignite/UX)
17
Standardizing for easy administration
Centralized patching
Pick a central server
Create a hierarchical structure (test, pre-production,
production)
Use swcopy to add patches and patch depots
Use swreg to make the depot visible on the network (dont
use NFS)
On clients, use swlist to view the remote depot(s)
swlist l depot @ patch_servername
Network installs:
swinstall s depot_name@patch_servername file_set (or \*)
18
Standardizing for easy administration
Spooler management
Connections
Parallel, serial, SCSI, Network
Remote (Windows, Linux, solaris, AIX)
RFC 1179
Control files and options
Printer scripts and filters
Network (HP JetDirect)
Port 9100
Jetadmin now HP Printer Installer
addqueue, removequeue, transferqueue
Troubleshooting
Spoolkick procedure
19
Performance and Kernel Tuning
What can be changed
Performance measurement
Built-in tools
SarCheck
MetaView, Performance Gallery
Glance/gpm, Measureware
Kernel parameters
Filesystems
Processes
RAM and virtual memory
Network
20
Performance and Kernel Tuning
What can be changed
Most kernel params size tables, provide limits
or set behavior
CPU bound
Multi-CPU features
I/O bound
Disk
Swap (memory limited)
LAN
21
Performance and Kernel Tuning
nfile: 14min, no limit
Every opened file (including multiple opens)
Formula scales with maxusers
Every process has a minimum of 3
nflocks: 2min, 200def, no limit
Maximum number of open file-locks
One file may have several locks
Application dependent
Databases may need hundreds
Filesystem parameters
22
ninode: 14min, no limit
In-memory cache of unique current and recent HFS file
locations
Speeds re-open, multi-process file access
Indirectly controls the size of the DNLC, ncsize, ncdnode and
vx_ninode.
1000 to 8192, lower if ncsize is adjusted
Formula in SAM is not useful for large systems
Best recommendations are in NFS Performance book by Dave
Olker
Performance and Kernel Tuning
Filesystem parameters
23
ncdnode: 14min, no limit
In-memory cache of unique current and recent CDFS
file locations (CDROM)
Speeds re-open, multi-process file access
Usually OK unless multiple user access needed for
CDROM or multiple CDROM drives
Performance and Kernel Tuning
Filesystem parameters
24
maxfiles: 60 default
Maximum number of files opened by a single process
Used to control runaway processes
Override with setrlimit(2) system call or ulimit n
Hard ceiling is maxfiles_lim
Commonly recommended too high (4096) by database vendors
Commonly recommended maxfiles = maxfiles_lim but not a good
idea (use ulimit as needed)
Performance and Kernel Tuning
Filesystem parameters
25
fs_async:
0 = synchronous writes to directory structures
1 = async
Apx. 20-30% faster write speed (no read change)
Very high probability of data loss with a powerfail or system panic
(fsck fails to fix)
Default_disk_ir:
0 = no immediate reporting (waits for writes to complete
1 = immediate reporting (disk buffers writes)
Applies to all disks including raw devices
Performance and Kernel Tuning
Filesystem parameters
26
disksort_seconds:
HP-UX gives priority to serial rd/wt queues
Intense serial I/O slows random I/O
Value in seconds to wait before changing priority
Performance and Kernel Tuning
Filesystem parameters
27
Performance and Kernel Tuning
nproc:
Maximum processes to run at same time
Often way too low in servers
maxuprc:
Maximum processes owned by a single UID
Collective, not per login
Generic logins can require hundreds or more
Process parameters
28
maxdsiz: 256 megs default (was 64megs)
32bit programs only
Max can be 2Gb (SAM) but mapping limits are 960 and 1750
depending on compiler (or chatr) options. 3+ Gb with tricks.
ulimit d to create a lower limit
maxdsiz_64: 64 megs default
64bit programs only
Max is 4000 Gb
Mem_mgt + proc_mgt note (/usr/share/doc not 11i)
Performance and Kernel Tuning
Process parameters
29
maxssiz: 8 megs default
32bit programs only
Seldom needs changing
Exception for specialized programs or poor design (pass by data
not address/pointer)
maxtsiz: 64megs default
Maximum for unchanging instructions
Directly related to executables file size
2Gb max (32bit) or 4096Gb (64bit)
Performance and Kernel Tuning
Process parameters
30
maxswapchunks:
Used to size maximum swap (32Gb)
Useable swap is:
maxswapchunks * swchunk * dev_bsize where: swchunk=2048 and
dev_bsize=1024
Leave swchunk as default
Formula simplifies to:
maxswapchunks=DESIRED-SWAP / 2097152
nswapdev, nswapfs:
Maximum swap devices and filesystems
Performance and Kernel Tuning
Process parameters
31
SWAP SWAP
500 meg 500 meg
RAM RAM
1 Gb 1 Gb
Unusable for Unusable for
processes processes
swapmem_on=0
In this example, only 500 megs is usable for
processes since Virtual Memory is only 500
megs.
Performance and Kernel Tuning
32
SWAP SWAP
1 Gb 1 Gb
RAM RAM
1 Gb 1 Gb
swapmem_on = 0
In this example, 1 Gb is usable for processes
since Virtual Memory is 1 Gb too...but no
paging will take place
Performance and Kernel Tuning
33
Performance and Kernel Tuning
SWAP SWAP
2 Gb 2 Gb
RAM RAM
1 Gb 1 Gb
swapmem_on = 0
In this example, 2 Gb is usable for processes
since Virtual Memory is 2 Gb too...some paging
may be take place
34
Performance and Kernel Tuning
SWAP SWAP
1 Gb 1 Gb
RAM RAM
1 Gb 1 Gb
swapmem_on = 1
In this example, 1.75 Gb is usable for
processes since Virtual Memory is 1 Gb
plus .75 Gb in RAM which is not pageable
Total Total
Vmemory Vmemory = =
1750 megs 1750 megs
35
timezone, dst:
Default value for environments without $TZ (daemons)
dst controls a limited number of daylight saving rules
npty nstrpty,nstrtel:
Controls maximum interactive network sessions
Must match device files (insf)
Use SAM to handle device files automatically
maxusers:
Not a parameter but a formula adjustment
No relation to user licenses or session limits
Performance and Kernel Tuning
Process parameters
36
Vocabulary
I/O Bound
Disk Thrashing
Swap Thrashing
Resource Limits
Performance and Kernel Tuning
Performance tuning
37
Measurement:
uptime:
User count (standard logins)
Load average (runqueue)
up11ne
6:37pn up 81 days, 23:43, 103 users,
Joad average: 0.07, 0.08, 0.07
up11ne
8:11pn up 181 days, 23:43, 907 users,
Joad average: 43.07, 22.08, 16.07
Performance and Kernel Tuning
Performance tuning
38
Performance and Kernel Tuning
sar (system activity reporter)
-b buffer cache activity
-c System Calls
-d Block Device Activity
-u CPU Utilization
Performance tuning
39
Performance and Kernel Tuning
40
Performance and Kernel Tuning
41
Performance and Kernel Tuning
42
Performance and Kernel Tuning
43
sar (system activity reporter)
-a File Access
-v Kernel Parameters
Performance and Kernel Tuning
Performance tuning
44
Performance and Kernel Tuning
45
Performance and Kernel Tuning
46
iostat - report I/O Statistics
Number of seeks per second
Kbytes transferred per second
Milliseconds per average seek
Performance and Kernel Tuning
Performance tuning
47
Performance and Kernel Tuning
Run 1 = zeros Run 1 = zeros
48
vmstat
vmstat [-dnS] [interval [count]]
vmstat -f | -s | -z
Virtual Memory Statistics
-d Adds disk transfers per second
-n Format for 80 columns
-S Processes swapped rather than paging
Performance and Kernel Tuning
Performance tuning
49
Performance and Kernel Tuning
50
Performance and Kernel Tuning
51
vmstat (cont)
-f fork and page summary:
vmstat -f
9043939 forks, 448300514 pages, average= 49.57
-s Summary
-z Zero kernel sums
Performance and Kernel Tuning
Performance tuning
52
Performance and Kernel Tuning
53
top:
System data - Summary
name and time
Load Average 1,5,15 minutes
% time in user,nice,system,idle,etc
Memory:Virtual and Real
Individual Processes
Performance and Kernel Tuning
Performance tuning
54
Performance and Kernel Tuning
Performance tuning
55
Performance and Kernel Tuning
Performance tuning
56
Glance/Plus
HP measurement package
midaemon for better metrics
character mode interface
gpmfor Xwindcows
Extensive measurement options
Alarms
Performance and Kernel Tuning
Performance tuning
57
Performance and Kernel Tuning
Glance/Plus
Performance tuning
58
Performance and Kernel Tuning
Glance/Plus
Performance tuning
59
Performance and Kernel Tuning
Glance/Plus
Performance tuning
60
Performance and Kernel Tuning
Glance/Plus
Performance tuning
61
Performance and Kernel Tuning
Glance/Plus
Performance tuning
62
Performance and Kernel Tuning
Glance/Plus
Performance tuning
63
Performance and Kernel Tuning
Glance/Plus
Performance tuning
64
Performance and Kernel Tuning
Glance/Plus
Performance tuning
65
Performance and Kernel Tuning
Glance/Plus
Performance tuning
66
Performance and Kernel Tuning
Glance/Plus
Performance tuning
67
Performance and Kernel Tuning
Glance/Plus
Performance tuning
68
Performance and Kernel Tuning
Glance/Plus
Performance tuning
69
gpm:
Xwindows
interface
Performance and Kernel Tuning
Performance
tuning
70
Performance and Kernel Tuning
71
Performance and Kernel Tuning
72
Performance and Kernel Tuning
73
Performance and Kernel Tuning
74
Performance and Kernel Tuning
75
Performance and Kernel Tuning
76
What can you change:
Move busy filesystems to other disks
Move disks to additional channels
Add more processors (and/or change processor speed)
Add more RAM (application dependent)
Change large data area programs to use large memory pages
(chatr) to reduce TLB misses
Use AutoPort Aggregation (APA) for parallel data transfers (and
fallback reliability)
Performance and Kernel Tuning
Performance tuning
77
Memory Management
32/64 bit
32 bit Data area
32 bit Shared memory
Memory windows
78
Memory Management
32/64 bit
HP-UX operating system
Hardware dependent
32bit only
32/64bit (either)
64bit only (new machines)
32bit programs run in either
64bit programs only for 64bit HP-UX
64bit programs remove memory map limitations, not a
performance feature
79
Memory Management
32 bit Data area
32bit programs have four 1000meg quadrants
Default data area = 960megs apx.
Compiler or chatr options for EXEC_MAGIC allow
quadrant 1 and 2 to be combined for about 1750 megs
total data area
Adjust maxdsiz if necessary
Documentation in /usr/share/doc for mem_mgt and
proc_mgt (missing in 11i)
80
Memory Management
32 bit Shared memory
Most common limitation for 32bit database programs
Oracle: SGA is shared memory
Similar limits (960megs and 1750 megs)
Use SHMEM_MAGIC option for 1750 meg access
(all sharing processes must match)
ALL 32bit shared memory processes have one map
(fragmentation, memory mapped files, shared libraries)
Use ipcs bmop for a snapshot (does not show fragmentation)
Get shminfo from the hprc.external.hp.com ftp site:
ftp://contrib:[email protected]/sysadmin
81
Memory Management
Memory windows
Reserves a separate memory map to remove
fragmentation issues
Memory-mapped files, shared libraries are in memory
window 0 (plus normal shared memory processes)
Need patches for 11.0 to enable
Set kernel param for quantity of windows
Start ALL sharing programs with memory window
startup command.
82
Disk space management
Root filesystem
VG00 size and management
HP-UX only, possibly user $HOME
3-6Gb typical
New systems have 36/72Gb internal (too big)
Or use external disks
SCSI vs. fibre channel
Boot issues for external arrays
NAS versus SAN
Mirroring
Ignite/UX and VG00
Striping VG00
83
Disk space management
Small versus large disks
JBODs
Arrays
Large lvols
Large files versus thousands of small files
Flat versus hierarchical directory structure
Performance
System impact (from users)
Managing files and backups
84
Disk space management
Filesystem types:
HFS (Fast FileSystem - BSD, circa 1984)
VxFS (Veritas FileSystem, aka Journaled FileSystem)
or JFS
CDFS (CDROM FileSystem - ISO 9660 only)
NFS (Network FileSystem)
85
Disk space management
HFS (Fast FileSystem - BSD, circa 1984)
McKusick HPF and fragmentation
fsck proportional to directory size
Inode count fixed at creation
resizing
up = umount, lvextend, extendfs
down = umount, backup, lvreduce, newfs,
reload from backup, mount
86
Disk space management
JFS (Veritas filesystem, not Volume Manager)
Aka: Journaled FileSystem or JFS
Inodes created as needed
Very busy filesystem may need defrag
Online (Advanced) JFS option needed for online
resizing and advanced options
Better overall performance than HFS
87
Disk space management
CDFS (CDROM filesystem)
ISO 9660 only (see below)
8.3 UPPERCASE filenames plus ;1 version
11.0 patch for ocdcase to lower UPPERCASE and remove ;1
version (but no long filenanes
HP makes special (non-standard) CDs for Core, Application,
SupportPlus, etc that have long filenames
PFS (Portable FileSystem) to perform RockRidge or long
filename translation
Recent patches add orr to natively handle long filenames
No direct support for Joliet, audio, multimedia, DVD
No direct support for CD writers
88
Disk space management
NFS (Network FileSystem)
Network-based filesystem (server and clients)
Stateless so performance issues exist
Does require tuning for heavy usage
Version 2 = no largefiles
Version 3 = largefile-capable
nfsstat very useful
biod and nfsd quantity
Network quality
NFS Performance book by Dave Olker
89
Disk space management
VG00 filesystem design
/ (root) lvol
HP-UX only, rest = mountpoints
Static: size to about 256 megs
/etc /dev /sbin (thats all!)
/stand lvol
Only HFS filesystem
Holds bootable kernels (current and previous)
60-200 megs
90
Disk space management
VG00 filesystem design - other HP-UX mountpoints
/usr = HP-UX and local executables, libraries
/bin and /lib
/usr/local versus /usr/contrib
Perhaps 400-1000 megs
/opt = application installation directories
/opt/app-name
bin doc lib lbin etc man
Perhaps 500-1500 megs
/tmp = system temporary directory (note: system)
Not for users, scripts, etc
Perhaps 200-400 megs
91
Disk space management
VG00 filesystem design - other HP-UX mountpoints
/var = variable directory
Most critical directory in HP-UX
When full, daemons and processes abort
Used by many unrelated subsystems
Ideally, separate mountpoint lvols will be created for the most intrusive
directories:
/var/mail
/var/spool
/var/tmp
/var/adm
/var/adm/crash
/var/adm/sw
92
Disk space management
VG00 filesystem design - other HP-UX mountpoints
/home = user home directories
Highly variable
When full, cause little impact to production processes
May require active space management or quotas
93
Disk space management
XVG
Contributed Xwindow program
Visualize disk layout
Highlight swap, free space, filesystem types
Highlight non-contigous areas
Download from:
ftp://contrib:[email protected]/sysadmin
94
Xvg Display Program
95
Xvg Display Program
96
Xvg Display Program
97
Xvg Display Program
98
Xvg Display Program
99
Xvg Display Program
100
Xvg Display Program
101
Xvg Display Program
102
Xvg Display Program
103
Xvg Display Program
104
Xvg Display Program
105
Xvg - continued
106
Xvg - continued
107
Xvg - continued
108
Xvg - continued
109
Xvg - continued
110
Xvg - continued
111
Logfiles:
Where did the space go?
Dont look for big files!
Look for big directories (10,000 small files)
Use du as in:
du du du du - -- -kx kx kx kx 1 11 1
9 1Jos1+found 9 1Jos1+found 9 1Jos1+found 9 1Jos1+found
1682 1e1c1 1682 1e1c1 1682 1e1c1 1682 1e1c1Jvnconf Jvnconf Jvnconf Jvnconf
464 1e1c1hp02400 464 1e1c1hp02400 464 1e1c1hp02400 464 1e1c1hp02400
2 1e1c1sW11ch 2 1e1c1sW11ch 2 1e1c1sW11ch 2 1e1c1sW11ch
8 1e1c1 8 1e1c1 8 1e1c1 8 1e1c1e1sa e1sa e1sa e1sa
18 1e1c1 18 1e1c1 18 1e1c1 18 1e1c1skeJ skeJ skeJ skeJ1.eJn 1.eJn 1.eJn 1.eJn
1 1e1c1 1 1e1c1 1 1e1c1 1 1e1c1skeJ skeJ skeJ skeJ1|a1J 1|a1J 1|a1J 1|a1J (oopsnot sorted)
112
Where did the space go?
Use du as in (sorted):
du du du du - -- -kx kx kx kx 1 ] sor1 1 ] sor1 1 ] sor1 1 ] sor1 - -- -rn rn rn rn ] nore ] nore ] nore ] nore
36048 1 36048 1 36048 1 36048 1
15215 1 15215 1 15215 1 15215 1sb1n sb1n sb1n sb1n
14196 1e1c 14196 1e1c 14196 1e1c 14196 1e1c
8032 1e1c1 8032 1e1c1 8032 1e1c1 8032 1e1c1Jp Jp Jp Jp
7927 1e1c1 7927 1e1c1 7927 1e1c1 7927 1e1c1Jp Jp Jp Jp11n1erface 11n1erface 11n1erface 11n1erface
6864 1e1c1 6864 1e1c1 6864 1e1c1 6864 1e1c1Jp11n1erface1nodeJ.or1g Jp11n1erface1nodeJ.or1g Jp11n1erface1nodeJ.or1g Jp11n1erface1nodeJ.or1g
6509 1roo1 6509 1roo1 6509 1roo1 6509 1roo1
3868 1 3868 1 3868 1 3868 1sb1n1fs sb1n1fs sb1n1fs sb1n1fs
113
Database directories
Databases
files vs raw access
raw: document! (1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab)
114
Database directories
Databases
files vs raw access
raw: document! (1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab)
fixed file count and size
minfree (10% and 0%)
inodes (HFS only)
115
Database directories
Databases
files vs raw access
raw: document! (1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab)
fixed file count and size
minfree (10% and 0%)
inodes (HFS only)
Mount options (advanced VxFS)
Table space (/u01 /u02 )
minfree=direct,convosync=direct,nodatainlog
116
Database directories
Databases
files vs raw access
raw: document! (1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab 1e1c1fs1ab)
fixed file count and size
minfree (10% and 0%)
inodes (HFS only)
Mount options (advanced VxFS)
Table space (/u01 /u02 )
minfree=direct,convosync=direct,nodatainlog
Redo logs, archived redo logs, indexes
executables
117
Growing directories
New application installs
Ask vendor for inventory and size
Require all apps to install in /opt
Or create a symlink (ln -s)
logfiles
Always grow
Require regular trim
core (ulimit Sc 0) and other files
118
Log Files
/var/adm:
rbootd.log
rpc.lockd.log
rpc.statd.log
sbtab
shutdownlog@ -> /etc/shutdownlog
streams/
sulog
sw/
syslog/
vtdaemonlog
wtmp
wtmpold
var/adm:
acct/
automount.log
btmp
crash/
cron/
diag/
dmesg.log
eisa/
inetd.sec
lp/
netstat_data
nettl.LOG00
ps_data
ptydaemonlog
119
Core Files
Identify with file command:
# sleep 999 &
# ps
11244 ttyp3 0:00 sleep
# kill -SIGQUIT 11244
# ll core
-rw-------1 root sys 243140 Nov 27 16:16 core
# file core
core: core file from 'sleep'-received SIGQUIT
120
Core Files - cleanup
Find and remove:
find / -fsonly vxfs -type f -name core -exec rm {} \;
add -mtime for development (save for a while)
-mtime +3 (older than 3 days)
-mtime -3 (newer than 3 days)
121
Cron Monitoring
diskspace.sh:
monitors all mountpoints
selectable limits
automated notification
run from cron
Download from ftp site
122
Logfiles
Characteristics and locations
syslog, the big one
User Activity logs (*tmp)
Miscellaneous logs
123
Logfiles - what to do?
Cant live with em, cant live without em
Why?
Where?
How?
Huh?
124
Filesystem Full!
White paper (9.x and 10.x/11.x)
ftp://contrib:[email protected]
find versus du
find = files only
du = directory sums:
du -x /home | sort -rn > /usr/tmp/du.home
125
Where?
/var/adm
Most system logfiles
diag logs
/var/adm/lp
log, lpd.log, lpana.log
(and others in /var/adm)
applications!
126
Syslog - everythings here
/var/adm/syslog/syslog.log
Bootup info
daemons, kernel, errors, info
applications
user-defined messages
127
Logfiles and crash dumps
Example entries:
Jan 19 02:00:01 Jan 19 02:00:01 Jan 19 02:00:01 Jan 19 02:00:01 banban banban banban banban naned naned naned naned| || |3790 3790 3790 3790: : : : reJoad1ng reJoad1ng reJoad1ng reJoad1ng naneserver naneserver naneserver naneserver
\ \ \ \___ message
\ \ \_process[PID]
\ \_machine
\_Date/time
128
syslog boot messages
sysJogd sysJogd sysJogd sysJogd: res1ar1 : res1ar1 : res1ar1 : res1ar1
vnun1x vnun1x vnun1x vnun1x: 8116 bus_adap1er : 8116 bus_adap1er : 8116 bus_adap1er : 8116 bus_adap1er
vnun1x vnun1x vnun1x vnun1x: Log1caJ voJune 64, 0x3 conf1gured as R00T : Log1caJ voJune 64, 0x3 conf1gured as R00T : Log1caJ voJune 64, 0x3 conf1gured as R00T : Log1caJ voJune 64, 0x3 conf1gured as R00T
vnun1x vnun1x vnun1x vnun1x: |enory 1nforna11on: : |enory 1nforna11on: : |enory 1nforna11on: : |enory 1nforna11on:
vnun1x vnun1x vnun1x vnun1x: phys1caJ page s1ze = 4096 by1es, Jog1caJ page s1ze = : phys1caJ page s1ze = 4096 by1es, Jog1caJ page s1ze = : phys1caJ page s1ze = 4096 by1es, Jog1caJ page s1ze = : phys1caJ page s1ze = 4096 by1es, Jog1caJ page s1ze =
4096 4096 4096 4096
vnun1x vnun1x vnun1x vnun1x: Phys1caJ: 131072 Kby1es, JockabJe: 90036 Kby1es, : Phys1caJ: 131072 Kby1es, JockabJe: 90036 Kby1es, : Phys1caJ: 131072 Kby1es, JockabJe: 90036 Kby1es, : Phys1caJ: 131072 Kby1es, JockabJe: 90036 Kby1es,
ava1JabJe ava1JabJe ava1JabJe ava1JabJe
129
More syslog oneliners
ne11J|593: ne11J|593: ne11J|593: ne11J|593: ne11J ne11J ne11J ne11J s1ar11ng up. s1ar11ng up. s1ar11ng up. s1ar11ng up.
1ne1d|749: Read1ng conf1gura11on 1ne1d|749: Read1ng conf1gura11on 1ne1d|749: Read1ng conf1gura11on 1ne1d|749: Read1ng conf1gura11on
1ne1d|749: f1p1 1ne1d|749: f1p1 1ne1d|749: f1p1 1ne1d|749: f1p11cp 1cp 1cp 1cp: Added serv1ce, server 1 : Added serv1ce, server 1 : Added serv1ce, server 1 : Added serv1ce, server 1usr1Jb1n1f1pd usr1Jb1n1f1pd usr1Jb1n1f1pd usr1Jb1n1f1pd
1ne1d|19760: au1h1 1ne1d|19760: au1h1 1ne1d|19760: au1h1 1ne1d|19760: au1h11cp 1cp 1cp 1cp: 0onnec11on fron 13125Jn : 0onnec11on fron 13125Jn : 0onnec11on fron 13125Jn : 0onnec11on fron 13125Jn
xn1pd|864: offse1 xn1pd|864: offse1 xn1pd|864: offse1 xn1pd|864: offse1 - -- -0.001348 freq 0.001348 freq 0.001348 freq 0.001348 freq - -- -26.23103 conp 6 26.23103 conp 6 26.23103 conp 6 26.23103 conp 6
f1pd|8204: user f1pd|8204: user f1pd|8204: user f1pd|8204: user hasseJJ hasseJJ hasseJJ hasseJJ: Log1n 1ncorrec1 : Log1n 1ncorrec1 : Log1n 1ncorrec1 : Log1n 1ncorrec1
sysJogd sysJogd sysJogd sysJogd: go1ng doWn on s1gnaJ 1 : go1ng doWn on s1gnaJ 1 : go1ng doWn on s1gnaJ 1 : go1ng doWn on s1gnaJ 1
130
Still more syslog
snnpd|5706: EX0EPT10NS: bad vers1on: 1 snnpd|5706: EX0EPT10NS: bad vers1on: 1 snnpd|5706: EX0EPT10NS: bad vers1on: 1 snnpd|5706: EX0EPT10NS: bad vers1on: 1
Jas1 nessage repea1ed 3 11nes Jas1 nessage repea1ed 3 11nes Jas1 nessage repea1ed 3 11nes Jas1 nessage repea1ed 3 11nes
do_11neou1s{) do_11neou1s{) do_11neou1s{) do_11neou1s{) - -- - canno1 canno1 canno1 canno1 unnoun1 unnoun1 unnoun1 unnoun1 XXX:1 XXX:1 XXX:1 XXX:1
do_11neou1s{) check do_11neou1s{) check do_11neou1s{) check do_11neou1s{) check synJ1nk synJ1nk synJ1nk synJ1nk on XXX on XXX on XXX on XXX
fs fs fs fs 1s busy 1s busy 1s busy 1s busy - -- - keep 1he J1nk keep 1he J1nk keep 1he J1nk keep 1he J1nk (automount -v msg)
boo1pd|266: found 15.17.186.105 e3109569 boo1pd|266: found 15.17.186.105 e3109569 boo1pd|266: found 15.17.186.105 e3109569 boo1pd|266: found 15.17.186.105 e3109569
boo1pd|266: reques1 fron hardWare address 524153200044 boo1pd|266: reques1 fron hardWare address 524153200044 boo1pd|266: reques1 fron hardWare address 524153200044 boo1pd|266: reques1 fron hardWare address 524153200044
(bootp patch or /etc/syslog.conf)
131
syslog.conf
facility:
kern, na1J, kern, na1J, kern, na1J, kern, na1J, Jpr Jpr Jpr Jpr, , , ,
daenon, au1h, daenon, au1h, daenon, au1h, daenon, au1h,
JocaJ0...JocaJ7, nark JocaJ0...JocaJ7, nark JocaJ0...JocaJ7, nark JocaJ0...JocaJ7, nark
level:
debug, 1nfo, no11ce, debug, 1nfo, no11ce, debug, 1nfo, no11ce, debug, 1nfo, no11ce,
Warn1ng, err, aJer1, Warn1ng, err, aJer1, Warn1ng, err, aJer1, Warn1ng, err, aJer1,
energ energ energ energ, , , , cr11 cr11 cr11 cr11, none , none , none , none
destination/action:
pathname/file:
1var1 1var1 1var1 1var1adn1nyJogf1Je adn1nyJogf1Je adn1nyJogf1Je adn1nyJogf1Je
device:
1dev1consoJe 1dev1consoJe 1dev1consoJe 1dev1consoJe
usernames (logged in)
* (every user)
132
syslog examples
kern,nark.debug kern,nark.debug kern,nark.debug kern,nark.debug 1dev1consoJe 1dev1consoJe 1dev1consoJe 1dev1consoJe
na1J.debug na1J.debug na1J.debug na1J.debug 1var1 1var1 1var1 1var1adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog
*.1nfona1J.none *.1nfona1J.none *.1nfona1J.none *.1nfona1J.none 1var1 1var1 1var1 1var1adn1sysJog1sysJog.Jog adn1sysJog1sysJog.Jog adn1sysJog1sysJog.Jog adn1sysJog1sysJog.Jog
*.aJer1 *.aJer1 *.aJer1 *.aJer1 1dev1consoJe 1dev1consoJe 1dev1consoJe 1dev1consoJe
*.aJer1 *.aJer1 *.aJer1 *.aJer1 roo1,er1c roo1,er1c roo1,er1c roo1,er1c, , , , hasseJJ hasseJJ hasseJJ hasseJJ
*. *. *. *.energ energ energ energ * ** *
*. *. *. *.energ energ energ energ 0 adn1n.hp.con 0 adn1n.hp.con 0 adn1n.hp.con 0 adn1n.hp.con
133
logger
shell script log entries:
Jogger | Jogger | Jogger | Jogger |- -- -1 1ag | 1 1ag | 1 1ag | 1 1ag |- -- -p p p p pr1 pr1 pr1 pr1 | | | |- -- -f f1Je f f1Je f f1Je f f1Je nsg nsg nsg nsg
Jogger Jogger Jogger Jogger - -- -1 1 1 1 |yScr1p1 |yScr1p1 |yScr1p1 |yScr1p1 - -- -p p p p Jpr.Warn Jpr.Warn Jpr.Warn Jpr.Warn Tes11ng Tes11ng Tes11ng Tes11ng
Jogger Jogger Jogger Jogger - -- -1 bJh 1 bJh 1 bJh 1 bJh- -- -cron cron cron cron - -- -p kern.aJer1 "s1ep 3 ok" p kern.aJer1 "s1ep 3 ok" p kern.aJer1 "s1ep 3 ok" p kern.aJer1 "s1ep 3 ok"
Jogger Jogger Jogger Jogger - -- -p JocaJ3.1nfo "NeWs 1hro11Jed" p JocaJ3.1nfo "NeWs 1hro11Jed" p JocaJ3.1nfo "NeWs 1hro11Jed" p JocaJ3.1nfo "NeWs 1hro11Jed"
Test syslog.conf entries
Debug scripts with no tty output
134
Facility Logging
Idea: separate syslog files
sysJog.kern sysJog.kern sysJog.kern sysJog.kern
sysJog.na1J sysJog.na1J sysJog.na1J sysJog.na1J
sysJog.Jpr sysJog.Jpr sysJog.Jpr sysJog.Jpr
sysJog.daenon sysJog.daenon sysJog.daenon sysJog.daenon
sysJog.au1h sysJog.au1h sysJog.au1h sysJog.au1h
etc...
135
Summarizing syslog
Filtering syslog
skipping uninteresting messages easier to filter
summarize similar messages:
|YR0ST=${hos1nane)
ca1 1var1adn1sysJog1sysJog.Jog (
] sed -e "s1.*$|YR0ST11" -e `s1(||0-9*(11` (
] grep -v "xn1pd: offse1" (
] grep -v "xn1pd: synchron1zed" (
] grep -v "sshd: Accep1ed" (
] grep -v "PA|_TEXT_1NF0" (
] grep -v "above nessage repea1s" (
] sor1 (
] un1q -c (
] sor1 -rn
136
Summarizing syslog
Example summary:
293 f1pd: FTP sess1on cJosed
32 f1pd: AN0NY|0uS FTP L061N FR0| snoopy |192.168.1.3, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| scooby |192.168.1.29, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| redbaron |192.168.1.4, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| J1nus |192.168.1.7, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| ghos1 |192.168.1.5, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| garf1eJd |192.168.1.6, f1p
32 f1pd: AN0NY|0uS FTP L061N FR0| casper |192.168.1.8, f1p
32 Lv|: 1usr1sb1n1JvJnboo1 -v
16 0|-0|0: cnge1conf -v
14 f1pd: AN0NY|0uS FTP L061N FR0| babyk |192.168.1.2, f1p
9 f1pd: FTP L061N FR0| redbaron |192.168.1.4, roo1
9 f1pd: FTP L061N FR0| ghos1 |192.168.1.5, roo1
9 f1pd: FTP L061N FR0| babyk |192.168.1.2, roo1
8 vnun1x:
8 f1pd: FTP L061N FR0| snoopy |192.168.1.3, roo1
8 f1pd: FTP L061N FR0| J1nus |192.168.1.7, roo1
8 f1pd: FTP L061N FR0| casper |192.168.1.8, roo1
137
User Activity Logs
u1np u1np u1np u1np (zeroed at reboot)
W1np W1np W1np W1np (cumulative!)
b1np b1np b1np b1np (create!)
Jas1, Who, Wr11e, Jog1n Jas1, Who, Wr11e, Jog1n Jas1, Who, Wr11e, Jog1n Jas1, Who, Wr11e, Jog1n
fW1np fW1np fW1np fW1np to decode (1 11 1usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np)
138
The *tmp files
*tmp files are all in binary format
1e1c1 1e1c1 1e1c1 1e1c1u1np u1np u1np u1np
active login/logout
rebuilt at bootup
needs valid logouts
user programs or actions can corrupt
(nus1 Jog1n a1 JoWes1 JeveJ sheJJ nus1 Jog1n a1 JoWes1 JeveJ sheJJ nus1 Jog1n a1 JoWes1 JeveJ sheJJ nus1 Jog1n a1 JoWes1 JeveJ sheJJ)
139
More *tmp files
1var1 1var1 1var1 1var1adn1W1np adn1W1np adn1W1np adn1W1np
comprehensive and cumulative:
logins/logouts
init changes
boot time
accounting
Always needs trimming!
View: Jas1 Jas1 Jas1 Jas1 - -- -R R R R - -- -<q1y> Jog1n <q1y> Jog1n <q1y> Jog1n <q1y> Jog1n- -- -nane nane nane nane
140
Still more *tmp files
1var1 1var1 1var1 1var1adn1b1np adn1b1np adn1b1np adn1b1np:
Bad logins by UID and tty port
Never allow group/user readable
Jas1b Jas1b Jas1b Jas1b (section 1, not 1m, hence warning)
watch for sudden jumps in size and repeated failures for root or
other users
141
fwtmp
Program is hiding:
1 11 1usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np usr1sb1n1acc11fW1np
decodes u1np u1np u1np u1np, , , , W1np W1np W1np W1np, , , , b1np b1np b1np b1np into ASCII
no errors!
Converts either direction
142
lp logfiles
1var1 1var1 1var1 1var1adn1Jp adn1Jp adn1Jp adn1Jp:
Jog Jog Jog Jog (Jpsched Jpsched Jpsched Jpsched - -- -v vv v for verbose entries)
Jpd.Jog Jpd.Jog Jpd.Jog Jpd.Jog (rJpdaenon rJpdaenon rJpdaenon rJpdaenon - -- -J JJ J to enable logging)
Jpana.Jog Jpana.Jog Jpana.Jog Jpana.Jog (Jpsched Jpsched Jpsched Jpsched - -- -a aa a to add Jpana Jpana Jpana Jpana logging)
143
JetDirect logfiles
11np1< 11np1< 11np1< 11np1<queuenane queuenane queuenane queuenane> >> >:
Jp Jp Jp Jp - -- -o o o o debugn debugn debugn debugn
logs the output of the printer script
1var11np1 1var11np1 1var11np1 1var11np1hpnpfJog hpnpfJog hpnpfJog hpnpfJog
hpnpf hpnpf hpnpf hpnpf - -- -x < x < x < x <1p 1p 1p 1p> > > > - -- -N N N N - -- -J 1sone1 J 1sone1 J 1sone1 J 1sone1asc11 asc11 asc11 asc11- -- -f1Je f1Je f1Je f1Je
logs the network protocol
144
cron
1var1 1var1 1var1 1var1adn1cron1Jog adn1cron1Jog adn1cron1Jog adn1cron1Jog
Format:
> 0|0: connand 1o run > 0|0: connand 1o run > 0|0: connand 1o run > 0|0: connand 1o run
> oWner P10 c1a s1ar1 11ne > oWner P10 c1a s1ar1 11ne > oWner P10 c1a s1ar1 11ne > oWner P10 c1a s1ar1 11ne
< oWner P10 c1a s1ar1 11ne < oWner P10 c1a s1ar1 11ne < oWner P10 c1a s1ar1 11ne < oWner P10 c1a s1ar1 11ne
Sample:
> 0|0: 1 > 0|0: 1 > 0|0: 1 > 0|0: 1usr1sb1n1dnesg usr1sb1n1dnesg usr1sb1n1dnesg usr1sb1n1dnesg - -- - >> 1var1 >> 1var1 >> 1var1 >> 1var1adn1dnesg.Jog adn1dnesg.Jog adn1dnesg.Jog adn1dnesg.Jog
> roo1 10034 c Sun |ar 4 01:11:00 EST 2001 > roo1 10034 c Sun |ar 4 01:11:00 EST 2001 > roo1 10034 c Sun |ar 4 01:11:00 EST 2001 > roo1 10034 c Sun |ar 4 01:11:00 EST 2001
< roo1 10034 c Sun |ar 4 01:11:00 EST 2001 < roo1 10034 c Sun |ar 4 01:11:00 EST 2001 < roo1 10034 c Sun |ar 4 01:11:00 EST 2001 < roo1 10034 c Sun |ar 4 01:11:00 EST 2001
> 0|0: $R0|E1 > 0|0: $R0|E1 > 0|0: $R0|E1 > 0|0: $R0|E1cronf1Jes1b1n1badboy cronf1Jes1b1n1badboy cronf1Jes1b1n1badboy cronf1Jes1b1n1badboy
> roo1 10206 c Sun |ar 4 01:15:00 EST 2001 > roo1 10206 c Sun |ar 4 01:15:00 EST 2001 > roo1 10206 c Sun |ar 4 01:15:00 EST 2001 > roo1 10206 c Sun |ar 4 01:15:00 EST 2001
< roo1 10206 c Sun |ar 4 01:15:01 EST 2001 < roo1 10206 c Sun |ar 4 01:15:01 EST 2001 < roo1 10206 c Sun |ar 4 01:15:01 EST 2001 < roo1 10206 c Sun |ar 4 01:15:01 EST 2001
145
sulog
1var1 1var1 1var1 1var1adn1suJog adn1suJog adn1suJog adn1suJog
logs every su change (good or bad)
1e1c1 1e1c1 1e1c1 1e1c1secure11y secure11y secure11y secure11y to force su - root
Use: consoJe consoJe consoJe consoJe (not 1dev1consoJe 1dev1consoJe 1dev1consoJe 1dev1consoJe)
man Jog1n Jog1n Jog1n Jog1n
146
/etc/shutdownlog
Make sure it exists
logs every normal shutdown
logs abnormal restarts and can decode a panic
(crash) if 1var1 1var1 1var1 1var1adn adn adn adn1crash 1crash 1crash 1crash is OK
147
mail logs
1var1 1var1 1var1 1var1adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog adn1sysJog1na1J.Jog
email transactions
Sample:
Jan 19 22:58:28 Jan 19 22:58:28 Jan 19 22:58:28 Jan 19 22:58:28 hpuerca hpuerca hpuerca hpuerca sendna1J|2524: sendna1J|2524: sendna1J|2524: sendna1J|2524:
AA025201: AA025201: AA025201: AA025201: nsg1d nsg1d nsg1d nsg1d=<19980.. =<19980.. =<19980.. =<19980..
148
more mail logs
fron=<baae260npse1.con.nx fron=<baae260npse1.con.nx fron=<baae260npse1.con.nx fron=<baae260npse1.con.nx
1o=<rex70banban.a1J.hp.con>, deJay=00:00:05, 1o=<rex70banban.a1J.hp.con>, deJay=00:00:05, 1o=<rex70banban.a1J.hp.con>, deJay=00:00:05, 1o=<rex70banban.a1J.hp.con>, deJay=00:00:05,
s1a1=Sen1, na1Jer=JocaJ s1a1=Sen1, na1Jer=JocaJ s1a1=Sen1, na1Jer=JocaJ s1a1=Sen1, na1Jer=JocaJ
1o= 1o= 1o= 1o=o_ans1rong0hp.con o_ans1rong0hp.con o_ans1rong0hp.con o_ans1rong0hp.con, deJay=10:00:04, , deJay=10:00:04, , deJay=10:00:04, , deJay=10:00:04,
s1a1=0eferred: s1a1=0eferred: s1a1=0eferred: s1a1=0eferred:
<1h1s_1s_no10ny.ena1J.address.con>... <1h1s_1s_no10ny.ena1J.address.con>... <1h1s_1s_no10ny.ena1J.address.con>... <1h1s_1s_no10ny.ena1J.address.con>... unresoJvabJe unresoJvabJe unresoJvabJe unresoJvabJe
hos1 nane ny.ena1J.address.con,check your hos1 nane ny.ena1J.address.con,check your hos1 nane ny.ena1J.address.con,check your hos1 nane ny.ena1J.address.con,check your
conf1gura11on., na1Jer= conf1gura11on., na1Jer= conf1gura11on., na1Jer= conf1gura11on., na1Jer=1cp 1cp 1cp 1cp, |X , |X , |X , |X
hos1= hos1= hos1= hos1=paJsn1px.hp.con paJsn1px.hp.con paJsn1px.hp.con paJsn1px.hp.con., address=|15.81.184.10 ., address=|15.81.184.10 ., address=|15.81.184.10 ., address=|15.81.184.10
149
Install/SD logs
Software Distributor
1var1 1var1 1var1 1var1adn1sW adn1sW adn1sW adn1sW
sWagen1.Jog sWagen1.Jog sWagen1.Jog sWagen1.Jog sWconf1g.Jog sWconf1g.Jog sWconf1g.Jog sWconf1g.Jog sW1ns1aJJ.Jog sW1ns1aJJ.Jog sW1ns1aJJ.Jog sW1ns1aJJ.Jog
sWpackage.Jog sWpackage.Jog sWpackage.Jog sWpackage.Jog sWrenove.Jog sWrenove.Jog sWrenove.Jog sWrenove.Jog sWagen1d.Jog sWagen1d.Jog sWagen1d.Jog sWagen1d.Jog sWcopy.Jog sWcopy.Jog sWcopy.Jog sWcopy.Jog
sWnod1fy.Jog sWnod1fy.Jog sWnod1fy.Jog sWnod1fy.Jog sWreg.Jog sWreg.Jog sWreg.Jog sWreg.Jog sWver1fy.Jog sWver1fy.Jog sWver1fy.Jog sWver1fy.Jog
cJeanup cJeanup cJeanup cJeanup program
sWJ1s1 sWJ1s1 sWJ1s1 sWJ1s1 - -- -J f1Jese1 J f1Jese1 J f1Jese1 J f1Jese1 - -- -a da1e a da1e a da1e a da1e - -- -a s1a1e a s1a1e a s1a1e a s1a1e - -- -a a a a pa1ch_s1a1e pa1ch_s1a1e pa1ch_s1a1e pa1ch_s1a1e
shoW_pa1ches shoW_pa1ches shoW_pa1ches shoW_pa1ches
sWnod1fy sWnod1fy sWnod1fy sWnod1fy - -- -x pa1ch_conn11=1rue <pa1ch_nane> x pa1ch_conn11=1rue <pa1ch_nane> x pa1ch_conn11=1rue <pa1ch_nane> x pa1ch_conn11=1rue <pa1ch_nane>
150
logtrim
Trim common logfiles
archive older information
log -> log.1
log.1 -> log.2 etc
compress the archives
ensure no data loss
correct permissions/ownerships
available from:
f1p:11con1r1b:9unsupp80hprc.ex1ernaJ.hp.con1cooJscr1p1s f1p:11con1r1b:9unsupp80hprc.ex1ernaJ.hp.con1cooJscr1p1s f1p:11con1r1b:9unsupp80hprc.ex1ernaJ.hp.con1cooJscr1p1s f1p:11con1r1b:9unsupp80hprc.ex1ernaJ.hp.con1cooJscr1p1s
151
Useful tools (ftp site)
au1osun au1osun au1osun au1osun
bdfnegs bdfnegs bdfnegs bdfnegs
cs1n cs1n cs1n cs1n- -- -cpu cpu cpu cpu
cs1n cs1n cs1n cs1n- -- -nen nen nen nen
cs1n cs1n cs1n cs1n- -- -per1ph per1ph per1ph per1ph
cs1n cs1n cs1n cs1n- -- -aJJ aJJ aJJ aJJ
errno errno errno errno
e11nfo e11nfo e11nfo e11nfo
Jan1nfo Jan1nfo Jan1nfo Jan1nfo
Jd1spJay Jd1spJay Jd1spJay Jd1spJay
JJs JJs JJs JJs
JJ1 JJ1 JJ1 JJ1
Jp1nfo Jp1nfo Jp1nfo Jp1nfo
Joadned1a Joadned1a Joadned1a Joadned1a
nx nx nx nx
psbynane psbynane psbynane psbynane
psgrep psgrep psgrep psgrep, , , , psJgrep psJgrep psJgrep psJgrep
psran psran psran psran
pWgrep pWgrep pWgrep pWgrep
renshaJJ renshaJJ renshaJJ renshaJJ { {{ {rexecaJJ rexecaJJ rexecaJJ rexecaJJ) )) )
res1ar1 res1ar1 res1ar1 res1ar1
sysJogdecode sysJogdecode sysJogdecode sysJogdecode
v1nan v1nan v1nan v1nan
152
Additional resources
Web help:
A1: A1: A1: A1: docs.hp.con docs.hp.con docs.hp.con docs.hp.con
1hpux1onJ1nedocs19391K0Parns1 1hpux1onJ1nedocs19391K0Parns1 1hpux1onJ1nedocs19391K0Parns1 1hpux1onJ1nedocs19391K0Parns1
K0parans.0verv1eWAJJ.h1nJ K0parans.0verv1eWAJJ.h1nJ K0parans.0verv1eWAJJ.h1nJ K0parans.0verv1eWAJJ.h1nJ
1 11 1usr usr usr usr1share1doc 1share1doc 1share1doc 1share1doc (11.0, not 11i)
11rc.hp.con 11rc.hp.con 11rc.hp.con 11rc.hp.con docs.hp.con docs.hp.con docs.hp.con docs.hp.con
sof1Ware.hp.con sof1Ware.hp.con sof1Ware.hp.con sof1Ware.hp.con J1cens1ng.hp.con J1cens1ng.hp.con J1cens1ng.hp.con J1cens1ng.hp.con
eproduc1s.hp.con eproduc1s.hp.con eproduc1s.hp.con eproduc1s.hp.con par1surfer.hp.con par1surfer.hp.con par1surfer.hp.con par1surfer.hp.con
educa11on.hp.con educa11on.hp.con educa11on.hp.con educa11on.hp.con
Interex-Netherlands: sysadmin mail list
echo subscr1be echo subscr1be echo subscr1be echo subscr1be hpux hpux hpux hpux- -- -adn1n ] adn1n ] adn1n ] adn1n ]
na1Jx na1Jx na1Jx na1Jx - -- -sSubscr1be sSubscr1be sSubscr1be sSubscr1be naordono0du1chWorks.nJ naordono0du1chWorks.nJ naordono0du1chWorks.nJ naordono0du1chWorks.nJ
Co-produced by: