Messages in this thread | | | Date | Tue, 14 Jun 2005 08:55:24 +0200 | From | Bernardo Innocenti <> | Subject | Audit / Netlink slowness |
| |
Hello,
on a server running kernel 2.6.11-1.1369_FC4, both ssh and su where taking a longish amount of time (over >1.5 sec.)
Running "strace -r 2>strace.out su", I discovered that netlink communication is the major cause of slowdown.
"su" connects to a NETLINK_AUDIT socket 3 or 4 times. Each time it does 2 sendto() + recvfrom() operations, with a latency of ~200ms. This adds up to 800ms wasted time.
Disabling CONFIG_AUDIT in the kernel makes su and ssh very fast again.
Is this behavior to be expected? CONFIG_AUDIT is enabled by default in FC4, so many people are going to be hit by this problem.
Please Cc me in replies as I'm not subrscribed to the lkml.
-- // Bernardo Innocenti - Develer S.r.l., R&D dept. \X/ http://www.develer.com/
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |