Mailing List Archive

strange "top"?
Recently, I have noticed one our servers (running Gentoo) shows something
strange in the "top" command.

The CPU usage % column shows *integer* values intead of *decimal*.

The server is a (dual?) Pentium4, running an SMP kernel.

chrootkit doesn't show anything really unusual, no unusual ports appear to
be open, and the kernel doesn't allow loading of modules.

Is this just an artifact of SMP kernels or is something strange going on?

Thanks

-Alex
--
gentoo-security@gentoo.org mailing list
Re: strange "top"? [ In reply to ]
Confirmed on my system as well. What package have we updated lately
that caused this?



Alex wrote:
> Recently, I have noticed one our servers (running Gentoo) shows
> something strange in the "top" command.
>
> The CPU usage % column shows *integer* values intead of *decimal*.
>
> The server is a (dual?) Pentium4, running an SMP kernel.
>
> chrootkit doesn't show anything really unusual, no unusual ports appear
> to be open, and the kernel doesn't allow loading of modules.
>
> Is this just an artifact of SMP kernels or is something strange going on?
>
> Thanks
>
> -Alex

--
Jason R
--
Every gun that is made, every warship launched, every rocket fired,
signifies in the final sense a theft from those who hunger and are not
fed, those who are cold and are not clothed.
Dwight D. Eisenhower
--
gentoo-security@gentoo.org mailing list
Re: strange "top"? [ In reply to ]
Alex wrote :

>Recently, I have noticed one our servers (running Gentoo) shows something
>strange in the "top" command.
>
>The CPU usage % column shows *integer* values intead of *decimal*.
>
>
Hi Alex,

I had exactly the same symptoms and emailed Albert D. Cahalan which name
is mentioned in the man page for bugs. Unfortunately I didn't received
any reponse so far. Here is a copy of the mail I sent him:

Hi Albert,

I'm writting to you because your name is mentionned in the top man page.
If you're not concerned accept my apologies.

Looking at the time used by john the ripper to verify my users's password,
I noticed that it was displayed in a strange way for this process only as
you can see on this page:
http://christophe.garault.free.fr/top.gif

At the same time I looked at the process stat, but I'm not familiar at all
with what is called jiffies, so I don't know how to interpret these
values, nor as how to correlate them with what top displays.


marge 565 # cat stat
565 (john) R 1 565 21379 0 -1 0 1418 0 134 0 25034157 40796 0 0 19 19 0
100 484316767 7073792 1434 4294967295 134512640 134628740 3221222240
3221221388 134610107 0 0 0 8413187 0 0 0 17 0
marge 565 #

Could you explain that to me or refer to a place where explanation is given?

Thanks in advance.

--
Regards.
Christophe Garault


--
gentoo-security@gentoo.org mailing list
Re: strange "top"? [ In reply to ]
On Wed, 2006-04-26 at 10:14 -0500, Alex wrote:
> Recently, I have noticed one our servers (running Gentoo) shows something
> strange in the "top" command.
>
> The CPU usage % column shows *integer* values intead of *decimal*.
>
> The server is a (dual?) Pentium4, running an SMP kernel.
>
> chrootkit doesn't show anything really unusual, no unusual ports appear to
> be open, and the kernel doesn't allow loading of modules.
>
> Is this just an artifact of SMP kernels or is something strange going on?
>
> Thanks
>
> -Alex
you've obviously upgraded procps.
I've verified that CPU is decimal on <=sys-process/procps-3.2.5-r1 and
integer on sys-process/procps-3.2.6

good news: it's not security relate.
bad news: I got used to the decimal output, too.


--
gentoo-security@gentoo.org mailing list
Re: strange "top"? [ In reply to ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alex,

On Wed, 26 Apr 2006 at 10:14am, Alex wrote:

> Recently, I have noticed one our servers (running Gentoo) shows something
> strange in the "top" command.
>
> The CPU usage % column shows *integer* values intead of *decimal*.
>
> The server is a (dual?) Pentium4, running an SMP kernel.
>
> chrootkit doesn't show anything really unusual, no unusual ports appear to be
> open, and the kernel doesn't allow loading of modules.
>
> Is this just an artifact of SMP kernels or is something strange going on?

There was some discussion of this issue on the procps mailing list
that indicated that this is a change that was added with version
3.2.6, which went stable in portage a bit over a month ago.

Based on the following message, it sounds like this is a known issue
with the current version of procps:

http://sourceforge.net/mailarchive/forum.php?thread_id=10047072&forum_id=12454

chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFET6sOM5TknMKatUwRAik7AJ9LVc+OG8Yw5VJi98vGREaU5Ai71gCeKLRe
GENUgQ7fg5Se4OGBXA0NOUE=
=MJzu
-----END PGP SIGNATURE-----
--
gentoo-security@gentoo.org mailing list
Re: [OT] strange "top"? [ In reply to ]
Jeff Schmidt schrieb:
> [..]
> you've obviously upgraded procps.
> I've verified that CPU is decimal on <=sys-process/procps-3.2.5-r1 and
> integer on sys-process/procps-3.2.6
>
> good news: it's not security relate.
> bad news: I got used to the decimal output, too.
>

huh?

magrathea ~ # equery list procps
[ Searching for package 'procps' in all categories among: ]
* installed packages
[I--] [ ] sys-process/procps-3.2.6 (0)
magrathea ~ # top
top - 19:29:37 up 52 days, 19:37, 1 user, load average: 0.02, 0.02, 0.00
Tasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.0% us, 0.7% sy, 0.0% ni, 99.3% id, 0.0% wa, 0.0% hi, 0.0% si
[..]

Christian

P.S. marked Subject "OT"


--
gentoo-security@gentoo.org mailing list
Re: [OT] strange "top"? [ In reply to ]
On Wed, 2006-04-26 at 19:31 +0200, Christian Bricart wrote:
> Jeff Schmidt schrieb:
> > [..]
> > you've obviously upgraded procps.
> > I've verified that CPU is decimal on <=sys-process/procps-3.2.5-r1 and
> > integer on sys-process/procps-3.2.6
> >
> > good news: it's not security relate.
sorry, "related".

> > bad news: I got used to the decimal output, too.
my point - I liked the decimal output...

> >
>
> huh?
>
> magrathea ~ # equery list procps
> [ Searching for package 'procps' in all categories among: ]
> * installed packages
> [I--] [ ] sys-process/procps-3.2.6 (0)
> magrathea ~ # top
> top - 19:29:37 up 52 days, 19:37, 1 user, load average: 0.02, 0.02, 0.00
> Tasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie
> Cpu(s): 0.0% us, 0.7% sy, 0.0% ni, 99.3% id, 0.0% wa, 0.0% hi, 0.0% si
> [..]
not the Cpu(s) /row/...
you've omitted the %CPU /column/, to which this discussion is related.

> Christian
>
> P.S. marked Subject "OT"
OT, indeed. :^)

Jeff

--
gentoo-security@gentoo.org mailing list