Mailing List Archive

[Bug 948] high CPU in sshd after tcp_wrappers deny
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From dtucker@zip.com.au 2005-01-19 20:01 -------
Also worth trying: patch #772 in bug #973



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From dtucker@zip.com.au 2005-01-20 22:28 -------
I think attachment #773 should solve this (it fixed 973). Could you please test
it and report?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948


dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |DUPLICATE




------- Additional Comments From dtucker@zip.com.au 2005-01-24 22:15 -------
I'm now pretty sure this is a dupe of bug #973. Please reopen this bug if the
patch on bug #973 does not resolve this problem.

*** This bug has been marked as a duplicate of 973 ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948


senthilkumar_sen@hotpop.com changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |REOPENED
Resolution|DUPLICATE |




------- Additional Comments From senthilkumar_sen@hotpop.com 2005-01-25 17:16 -------
I tested with the patch but still the sshd process goes to the high end of CPU
cycles. This happens in hpux 11.11. This also happens irrespective of -r option
for sshd.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948


dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|REOPENED |ASSIGNED




------- Additional Comments From dtucker@zip.com.au 2005-01-25 17:43 -------
OK I'll see if I can reproduce it.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From dtucker@zip.com.au 2005-01-25 19:51 -------
Could you please provide the debugging requested in comment #2? Specifically:

When it happens, can you run /usr/ucb/ps auxwww and pick out the pid of the
errant process? It should have a few hints about what stage the process is at
in the process title.

Also, can you reproduce it with sshd in debug mode (eg /path/to/sshd -ddde)? If
so, please attach (note: use "Create New Attachment") the debug log to this bug.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From senthilkumar_sen@hotpop.com 2005-01-25 23:39 -------
Created an attachment (id=788)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=788&action=view)
ps output for sshd taking high end of CPU

Im not able to reproduce the problem in debug mode. Here are few things that I
found in hpux. The listening sshd goes to high end after the denied message of
tcp_wrappers. I checked it with top command. Particularly, in hpux 11.11 this
happens after 3rd blocked connection. However, in hpux 11.23 this happens after
5th connection.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948


dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
OS/Version|Solaris |All
Platform|Sparc |All




------- Additional Comments From dtucker@zip.com.au 2005-01-26 00:36 -------
Have not been able to reproduce on either Solaris or HP-UX. Marking bug as
all-platform.

Senthil: a couple of questions:
- what options did you build OpenSSH with?
- what do the deny rules generally look like (eg deny by IP or DNS name)?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From senthilkumar_sen@hotpop.com 2005-01-26 01:50 -------
>what options did you build OpenSSH with?
./configure --prefix --with-pam --with-ssl-dir --with-tcp-wrappers
--with-zlib --with-kerberos5 --with-rand-helper --with-md5-passwords --with-4in6

>what do the deny rules generally look like (eg deny by IP or DNS name)?
deny by IP.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 948] high CPU in sshd after tcp_wrappers deny [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From dtucker@zip.com.au 2005-01-26 23:33 -------
Still can't reproduce it. Another thing to try: doing a system call trace the
cpu-eating sshd and see what it's doing.

That's truss on Solaris and tusc on HP-UX. (tusc is an unsupported tool
supplied by HP: ftp://ftp.cup.hp.com/dist/networking/tools/)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.