LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 03-14-2009, 06:38 AM   #1
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Rep: Reputation: 39
aaa help! X eats up cpu 100%!


hello everyone,
i am using slackware 11 and have been for the past 2 years now. it is a server machine so i dont fiddle around with it much...

then last week i realised (while listening to music from another pc) that there were silent gaps while playing the songs on the playlist..
looking around into what happened, i connected a monitor, mouse and keyboard directly to the server and tried to log on from a kdm greeter window... well everything was frozen there... no mouse movement either...
i switched back to the other pc and connected to the server through ssh just to realise (using top command) that the X was consuming all processor resources..

a restart later the pc was working fine again for a few mins... then same thing happens... i really dunno where to start looking for a problem... i mean i ve been listening to music everyday ... and i didnt have these silent gaps until midweek... then X starts hanging.. no wonder there are no resources for samba to share in 'real time' even an mp3 on the network...

i swtched to runlevel 3 for now and among the last resort solution would be to reinstall slack 12 on top (what do u think? too risky?)... but i would like to figure this out instead of just covering it all up...
any hints would be appreciated! where should i start from
thank you in advance!
nass
 
Old 03-14-2009, 10:37 AM   #2
guanx
Senior Member
 
Registered: Dec 2008
Posts: 1,185

Rep: Reputation: 237Reputation: 237Reputation: 237
Is there any attackers? Try blocking them using iptables:

Code:
iptables -A INPUT -p TCP -s ! 127.0.0.1 --dport 6000:6009 -j REJECT --reject-with tcp-reset
ip6tables -A INPUT -p TCP -s ! ::1 --dport 6000:6009 -j REJECT --reject-with tcp-reset
 
Old 03-14-2009, 12:42 PM   #3
hitest
Guru
 
Registered: Mar 2004
Location: Canada
Distribution: Slackware, Debian
Posts: 7,351

Rep: Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750
You may wish to scan for rootkits. Just a thought.
 
Old 03-14-2009, 02:36 PM   #4
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
how do i scan for rootkits?

i have ports 6000-6002 open intentionally... and would like to avoid losing the option to use them...
 
Old 03-14-2009, 03:31 PM   #5
hitest
Guru
 
Registered: Mar 2004
Location: Canada
Distribution: Slackware, Debian
Posts: 7,351

Rep: Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750Reputation: 3750
Quote:
Originally Posted by nass View Post
how do i scan for rootkits?

i have ports 6000-6002 open intentionally... and would like to avoid losing the option to use them...
You could install rkhunter. It is at slackbuilds.org.

http://slackbuilds.org/repository/12.2/system/rkhunter/

To run rkhunter after you install it you navigate to: /usr/bin

then update it with: # rkhunter --update

to scan: # rkhunter --checkall

Last edited by hitest; 03-14-2009 at 03:32 PM.
 
Old 03-16-2009, 11:40 AM   #6
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
so i did run rkhunter and got the following warnings:

Quote:
Warning: The command '/bin/groups' has been replaced by a script: /bin/groups: Bourne shell script text executable
Warning: The command '/usr/bin/ldd' has been replaced by a script: /usr/bin/ldd: Bourne shell script text executable
Warning: The command '/usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: Bourne shell script text executable
Warning: The command '/usr/sbin/adduser' has been replaced by a script: /usr/sbin/adduser: Bourne-Again shell script text executable
Warning: Found enabled inetd service: time
Warning: Found enabled inetd service: time
Warning: Found enabled inetd service: comsat
Warning: Found enabled inetd service: auth
Warning: SSH protocol version 1 has been enabled in the SSH configuration file (/etc/ssh/sshd_config).

One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
i am using slackware 11. Is it possible to get some MD5 checksums on the commands ldd, whatis, adduser and groups, just to verify that there is nothing that have been tampered with?
i guess i could get those checksums from the installation CD but i dont have it here and will not for the next few hours..
 
Old 03-16-2009, 12:02 PM   #7
bgeddy
Senior Member
 
Registered: Sep 2006
Location: Liverpool - England
Distribution: slackware64 13.37 and -current, Dragonfly BSD
Posts: 1,810

Rep: Reputation: 232Reputation: 232Reputation: 232
The source disks have md5sums but as far as I know they are just md5sums for the packages and not the programs. These warnings are normal from rkhunter however if you are worried why not just replace the programs mentioned with the originals from the source media ?

The md5sums for the packages are available from a mirror for example here are the sums for Slackware 11.
 
Old 03-16-2009, 12:18 PM   #8
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
if you tell me this warning as normal then i will look no further...
i either way had very few worries about a rootkit... i try to keep the system well out of intruders reach....

which brings us back to the beginning... what could be wrong with the X and it juices up processor resources...?
 
Old 03-16-2009, 01:46 PM   #9
guanx
Senior Member
 
Registered: Dec 2008
Posts: 1,185

Rep: Reputation: 237Reputation: 237Reputation: 237
You can get Slackware-11.0 packages from various mirrors. e.g. http://mirror.switch.ch/ftp

I have a simple and stupid idea: Reinstall the X packages and see if it cures. If not, we try other ways.
 
Old 03-23-2009, 04:24 PM   #10
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
X freezing caused by nvidia driver and kernel bug??

well, i am reviving this topic, after i have done some research but have not found a suitable solution..

my problem, which i managed to dig from dmesg has to do with the nvidia driver rather than with some problem with X..
i came across similar posts several times:

http://www.nvnews.net/vbulletin/show...0&postcount=14
http://www.linuxquestions.org/questi...errors-385117/
http://www.fedoraforum.org/forum/sho...08&postcount=3
this last one is more informative
http://www.nvnews.net/vbulletin/arch...p/t-92255.html

better yet the problem lies with the kernel as nvidia states
Quote:
The NVIDIA Linux graphics drivers rely on the Linux kernel's change_page_attr() interface function to change the kernel mappings' cache attributes for system memory pages used in DMA transfers. It is crucial for reliable operation that this interface is working correctly. Unfortunately, many presently deployed Linux 2.4 and Linux 2.6 kernels have known problems in their implementations of this interface.
http://www.nvnews.net/vbulletin/showthread.php?t=58498

as for me i tried all the kernel boot options that nvidia suggests (nommconf, maxcpus=1,idle=poll)

since my gpu (Nv GF7100 GS) is connected to the pci-e bus, i don't have a NvAGP option to try out... and of course the rest of the options are 64-bit bus related..and as such don't concern me.

so i startup in runlevel 3 at this point ... and if i try to 'startx' i have approx 10-15 secs until X freezes... if that doesn't do the job and i attempt to run 'glxgears', the gears won't even start to rotate and im already frozen ... crap....

what im basically getting at is, anyone knows whats going on with the kernel and nvidia ? if this is a known kernel bug, anyone knows when will it be dealt with?

as a last resort i'm willing to switch back to a rather old nvidia driver i have. the ' NVIDIA-Linux-x86-1.0-9755-pkg1.run'... cause things were working with this driver and its not like ill try to play a game ... but how to i unistall the current (180.29) gpu driver??

thank you in advance for your help
nass
 
Old 03-23-2009, 04:28 PM   #11
manwichmakesameal
Member
 
Registered: Aug 2006
Distribution: Slackware
Posts: 804

Rep: Reputation: 110Reputation: 110
Just out of curiosity, since no one has addressed it yet, what kind of server is it, and does it absolutely require X?
 
Old 03-23-2009, 05:16 PM   #12
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
well its a home server and im using it as a file, proxy, web, vpn even vnc server etcetc.... no it doesnt need to have an X server running... especially since i have the vnc server... but still would you like to know the system is not working 100% ? especially a slackware system!
 
Old 03-23-2009, 08:14 PM   #13
manwichmakesameal
Member
 
Registered: Aug 2006
Distribution: Slackware
Posts: 804

Rep: Reputation: 110Reputation: 110
Have you looked through all the usual log files to see if anything is amiss? Can you run top and post the output?
 
Old 03-24-2009, 06:10 AM   #14
disturbed1
Senior Member
 
Registered: Mar 2005
Location: USA
Distribution: Slackware
Posts: 1,133
Blog Entries: 6

Rep: Reputation: 224Reputation: 224Reputation: 224
Quote:
Originally Posted by nass View Post
as a last resort i'm willing to switch back to a rather old nvidia driver i have. the ' NVIDIA-Linux-x86-1.0-9755-pkg1.run'... cause things were working with this driver and its not like ill try to play a game ... but how to i unistall the current (180.29) gpu driver??

thank you in advance for your help
nass
Run the Nvidia installer with --uninstall


Wonder why everything was working, then now not working correctly. Did you recently update any packages or the Nvidia driver. Something had to change between working --- not working.

/var/log/Xorg.0.log might contain some info.
 
Old 03-25-2009, 01:20 PM   #15
nass
Member
 
Registered: Apr 2006
Location: Athens, Greece
Distribution: slackware, debian, ubuntu
Posts: 666

Original Poster
Rep: Reputation: 39
manwichmakesameal, well ill haven't been @ the servers location lately and i will avoid starting X remotely, cause i will not be able to reboot the machine (yes the crashing seems to render rebooting impossible)..
basically top shows that X is using up 99% - 100% of CPU... if it is smth else you would like to know though, ill post top output asap...

disturbed1, likewise i 'll do the same with the output of dmesg... but its very similar to the ones i found in the posts i attached.. the Xorg.0.log contains nothing after a crash, probably because X is in an state that is impossoble to log anything
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Xmoto slow, eats up CPU adriv Slackware 4 05-22-2008 03:22 AM
Fluxbox eats 100% of CPU after slackpkg upgrade-all derzok Slackware 1 06-01-2007 07:05 PM
copying over lan eats CPU Sammael Linux - General 6 08-21-2006 02:47 PM
FireFox eats 98% of my CPU athens101 Linux - Software 5 03-19-2005 04:35 PM
kio_thumbnail eats user CPU gavinbeatty Mandriva 0 06-15-2004 11:29 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 01:37 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration