December 2009 - Darwin-kernel

Re: Question about the vfs_rootvnode when calling VFS_UNMOUNT
by Dan Heller 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com The odds are that someone is watching the root of your filesystem with a kqueue. How are you cleaning up that vnode? A vflush() without SKIPROOT, even without FORCECLOSE, should reclaim it. Cheers, Dan On Dec 17, 2009, at 12:18 PM, Alain Renaud wrote: > Hello all, > > I am working on a filesystem implementation for macosx that is working > fine with macosx 10.5 now for the 10.6 port I have an issue as I cannot > seem to release the mountpoint vnode. > > My problem is that with 10.6 when VFS_UNMOUNT is called my vfs rootvnode > as the usecount and kusecount set to 1 which prevent me from releasing > this vnode. The same code with 10.5 the usecount/kusecount are set to 0 > so I am then able to release the vnode and delete all reference to the > filesystem before returning to the dounmount code. > > The Question: Is this an expected new behavior with the 10.6 kernel or > do I have a bug elsewhere in the code that increase the > usecount/kusecount without reducing it after. > > Hope this make sense and thanks in advance for any help. > > -- > Alain Renaud -- > ---------------------------------------- > Always willing to share my ignorance... > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/daniel.h%40apple.com > > This email sent to daniel.h(a)apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Question about the vfs_rootvnode when calling VFS_UNMOUNT
by Alain Renaud 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.23 (X11/20090817) Hello all, I am working on a filesystem implementation for macosx that is working fine with macosx 10.5 now for the 10.6 port I have an issue as I cannot seem to release the mountpoint vnode. My problem is that with 10.6 when VFS_UNMOUNT is called my vfs rootvnode as the usecount and kusecount set to 1 which prevent me from releasing this vnode. The same code with 10.5 the usecount/kusecount are set to 0 so I am then able to release the vnode and delete all reference to the filesystem before returning to the dounmount code. The Question: Is this an expected new behavior with the 10.6 kernel or do I have a bug elsewhere in the code that increase the usecount/kusecount without reducing it after. Hope this make sense and thanks in advance for any help. -- Alain Renaud -- ---------------------------------------- Always willing to share my ignorance... _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

How to add mbuf to the head of mbuf chain
by Dmitriy Arekhta 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=eq2BAMp1Ys9nSNTJLh5+tbA32SAbvo5Vk3UCAuPBtPY=; b=T6NrTHRA4AM/h/5HpP0fG3tL5h/NYH3PZsIxXUTfAilhbXfjHEOAJItOzhCcgty3xb r+zMR2b7YEsc/edtnt/l6shcJSXHl2DrNhRH6TQcosXMlKAXjXJt/VgOwx9HhdfsfEHT kt9jFded3o9/8G8CuteW6pixIiI/SKfwUbcW4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=AvZJGmTWu0FsGAuJ8QvfWpGkmTjImZtW2s2V77/H7Hfss1idgEKMg2m1CQpaNoRJ2p vVx37M93XbWNRZ5/c7f79ExdL6P5rU/bUtpY1BrKn00V8lXS4wRebC75GSrI/5sULuOy UztJj+wFm0GEwl7aSFs7uxNUycGR4o2343cDY= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Serious Interruptive Pauses
by George Plymale 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Well, the plot thickens perhaps. I came back to my workstation this morning and sometime over the last couple of hours it panicked: Interval Since Last Panic Report: 2474835 sec Panics Since Last Report: 1 Anonymous UUID: 852B0371-2211-4D84-82DC-69791532D2B8 Thu Dec 17 11:46:03 2009 panic(cpu 6 caller 0xffffff80002ccf74): Kernel trap at 0xffffff8000535668, type 14=page fault, registers: CR0: 0x000000008001003b, CR2: 0x0000000000000000, CR3: 0x0000000000100000, CR4: 0x0000000000000660 RAX: 0x00000000e00002c2, RBX: 0xffffff801794a480, RCX: 0x0000000000000000, RDX: 0xffffff801794a480 RSP: 0xffffff80ed633e60, RBP: 0xffffff80ed633e70, RSI: 0x0000000000000000, RDI: 0x0000000000000000 R8: 0x0000000000000001, R9: 0x0000000000000003, R10: 0x0000000000000006, R11: 0xffffff80004ec1ce R12: 0xffffff801ce04c00, R13: 0x0000000000000000, R14: 0xffffff7f80725a6a, R15: 0x00000000000000fd RFL: 0x0000000000010246, RIP: 0xffffff8000535668, CS: 0x0000000000000008, SS: 0x0000000000000010 Error code: 0x0000000000000000 Backtrace (CPU 6), Frame : Return Address 0xffffff80ed633b00 : 0xffffff8000204ae6 0xffffff80ed633c00 : 0xffffff80002ccf74 0xffffff80ed633d50 : 0xffffff80002dee8a 0xffffff80ed633d60 : 0xffffff8000535668 0xffffff80ed633e70 : 0xffffff7f80725ad9 0xffffff80ed633ed0 : 0xffffff7f80735e4f 0xffffff80ed633f20 : 0xffffff7f807abe9d 0xffffff80ed633f40 : 0xffffff7f80735493 0xffffff80ed633f60 : 0xffffff8000282e1a 0xffffff80ed633fa0 : 0xffffff80002c4597 Kernel Extensions in backtrace (with dependencies): com.apple.driver.AppleUSBEHCI(3.7.5)@0xffffff7f807a0000->0xffffff7f807b3fff dependency: com.apple.iokit.IOUSBFamily(3.8.5)@0xffffff7f8071f000 dependency: com.apple.iokit.IOPCIFamily(2.6)@0xffffff7f80604000 com.apple.iokit.IOUSBFamily(3.8.5)@0xffffff7f8071f000->0xffffff7f80752fff dependency: com.apple.iokit.IOPCIFamily(2.6)@0xffffff7f80604000 BSD process name corresponding to current thread: kernel_task Mac OS version: 10C540 Kernel version: Darwin Kernel Version 10.2.0: Tue Nov 3 10:35:19 PST 2009; root:xnu-1486.2.11~1/RELEASE_X86_64 System model name: MacPro3,1 (Mac-F42C88C8) System uptime in nanoseconds: 47462238906241 unloaded kexts: (none) loaded kexts: com.microsoft.driver.MicrosoftMouseBluetooth 7.1 com.microsoft.driver.MicrosoftKeyboardBluetooth 7.1 com.microsoft.driver.MicrosoftKeyboard 7.1 com.vmware.kext.vmnet 3.0.0 com.vmware.kext.vmioplug 3.0.0 com.vmware.kext.vmci 3.0.0 com.vmware.kext.vmx86 3.0.0 com.parallels.kext.prl_vnic 5.0 9220.531002 com.parallels.kext.prl_netbridge 5.0 9220.531002 xxx.qnation.PeerGuardian 1.1.10 com.parallels.kext.prl_usb_connect 5.0 9220.531002 com.parallels.kext.prl_hid_hook 5.0 9220.531002 com.parallels.kext.prl_hypervisor 5.0 9220.531002 com.Cycling74.driver.Soundflower 1.4.4 com.DataRobotics.driver.iSCSIInitiator 1.4.20 com.microsoft.driver.MicrosoftMouseUSB 7.1 com.microsoft.driver.MicrosoftMouse 7.1 com.TrustedData.driver.VendorSpecificType00 1.3.3 at.obdev.nke.LittleSnitch 2.2.05 com.apple.filesystems.afpfs 9.6 - last loaded 53131104387 com.apple.nke.asp_tcp 5.0 com.apple.driver.AppleBluetoothMultitouch 30.9 com.apple.driver.IOBluetoothBNEPDriver 2.2.4f3 com.apple.filesystems.autofs 2.1.0 com.apple.driver.AppleTyMCEDriver 1.0.1d8 com.apple.driver.AppleHWSensor 1.9.2d0 com.apple.driver.AppleUpstreamUserClient 3.1.0 com.apple.driver.AudioAUUC 1.0 com.apple.kext.ATIFramebuffer 6.0.6 com.apple.driver.AppleIntelPenrynProfile 17 com.apple.Dont_Steal_Mac_OS_X 7.0.0 com.apple.ATIRadeonX2000 6.0.6 com.apple.driver.AppleIntelNehalemProfile 11 com.apple.driver.AudioIPCDriver 1.1.2 com.apple.driver.AppleHDA 1.7.9a4 com.apple.driver.AppleIntel8254XEthernet 2.1.1b7 com.apple.driver.AppleIntelMeromProfile 19 com.apple.driver.AppleMCEDriver 1.1.9 com.apple.driver.Apple_iSight 4.0.1 com.apple.driver.ACPI_SMC_PlatformPlugin 4.0.1d0 com.apple.driver.AppleLPC 1.4.9 com.apple.driver.CSRHIDTransitionDriver 2.2.4f3 com.apple.driver.StorageLynx 2.5.1 com.apple.driver.Oxford_Semi 2.5.1 com.apple.driver.LSI_FW_500 2.5.1 com.apple.driver.IOFireWireSerialBusProtocolSansPhysicalUnit 2.5.1 com.apple.driver.initioFWBridge 2.5.1 com.apple.iokit.SCSITaskUserClient 2.6.0 com.apple.driver.PioneerSuperDrive 2.5.1 com.apple.driver.AppleRAID 4.0.6 com.apple.driver.AppleUSBHub 3.8.4 com.apple.iokit.IOAHCIBlockStorage 1.6.0 com.apple.driver.AppleFWOHCI 4.4.0 com.apple.BootCache 31 com.apple.driver.AppleUSBEHCI 3.7.5 com.apple.driver.AppleEFINVRAM 1.3.0 com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1 com.apple.driver.AppleAHCIPort 2.0.1 com.apple.driver.AppleIntelPIIXATA 2.5.0 com.apple.driver.AppleUSBUHCI 3.7.5 com.apple.driver.AppleACPIButtons 1.3 com.apple.driver.AppleRTC 1.3 com.apple.driver.AppleHPET 1.4 com.apple.driver.AppleSMBIOS 1.4 com.apple.driver.AppleACPIEC 1.3 com.apple.driver.AppleAPIC 1.4 com.apple.security.sandbox 0 com.apple.security.quarantine 0 com.apple.nke.applicationfirewall 2.1.11 com.apple.driver.AppleIntelCPUPowerManagementClient 96.0.0 com.apple.driver.AppleIntelCPUPowerManagement 96.0.0 com.apple.driver.IOBluetoothHIDDriver 2.2.4f3 com.apple.driver.AppleMultitouchDriver 204.9 com.apple.driver.AppleHDAPlatformDriver 1.7.9a4 com.apple.driver.AppleProfileReadCounterAction 17 com.apple.driver.AppleProfileTimestampAction 10 com.apple.driver.AppleProfileThreadInfoAction 14 com.apple.driver.AppleProfileRegisterStateAction 10 com.apple.driver.AppleProfileKEventAction 10 com.apple.driver.AppleProfileCallstackAction 20 com.apple.iokit.IOSurface 73.0 com.apple.iokit.IOBluetoothSerialManager 2.2.4f3 com.apple.iokit.IOSerialFamily 10.0.3 com.apple.iokit.IOSCSIParallelFamily 2.0.0 com.apple.driver.AppleHDAHardwareConfigDriver 1.7.9a4 com.apple.driver.DspFuncLib 1.7.9a4 com.apple.iokit.IONDRVSupport 2.0 com.apple.kext.ATI2600Controller 6.0.6 com.apple.kext.ATISupport 6.0.6 com.apple.iokit.IOFireWireIP 2.0.3 com.apple.iokit.IONetworkingFamily 1.9 com.apple.driver.AppleUSBAudio 2.6.6b2 com.apple.iokit.IOAudioFamily 1.7.2fc1 com.apple.kext.OSvKernDSPLib 1.3 com.apple.iokit.AppleProfileFamily 41 com.apple.driver.AppleHDAController 1.7.9a4 com.apple.iokit.IOGraphicsFamily 2.0 com.apple.iokit.IOHDAFamily 1.7.9a4 com.apple.driver.AppleSMC 3.0.1d2 com.apple.driver.IOPlatformPluginFamily 4.0.1d0 com.apple.driver.CSRUSBBluetoothHCIController 2.2.4f3 com.apple.driver.AppleUSBBluetoothHCIController 2.2.4f3 com.apple.iokit.IOBluetoothFamily 2.2.4f3 com.apple.driver.AppleUSBHIDKeyboard 1.2.0a3 com.apple.iokit.IOUSBHIDDriver 3.8.4 com.apple.driver.AppleHIDKeyboard 1.2.0a3 com.apple.iokit.IOUSBMassStorageClass 2.5.1 com.apple.driver.AppleUSBMergeNub 3.8.5 com.apple.driver.AppleUSBComposite 3.7.5 com.apple.iokit.IOSCSIBlockCommandsDevice 2.6.0 com.apple.iokit.IOFireWireSerialBusProtocolTransport 2.0.0 com.apple.iokit.IOFireWireSBP2 4.0.5 com.apple.iokit.IOSCSIMultimediaCommandsDevice 2.6.0 com.apple.iokit.IOBDStorageFamily 1.6 com.apple.iokit.IODVDStorageFamily 1.6 com.apple.iokit.IOCDStorageFamily 1.6 com.apple.driver.XsanFilter 402.1 com.apple.iokit.IOATAPIProtocolTransport 2.5.0 com.apple.iokit.IOSCSIArchitectureModelFamily 2.6.0 com.apple.iokit.IOUSBUserClient 3.8.5 com.apple.iokit.IOFireWireFamily 4.1.7 com.apple.driver.AppleFileSystemDriver 2.0 com.apple.iokit.IOAHCIFamily 2.0.2 com.apple.iokit.IOATAFamily 2.5.0 com.apple.iokit.IOUSBFamily 3.8.5 com.apple.driver.AppleEFIRuntime 1.3.0 com.apple.iokit.IOHIDFamily 1.6.1 com.apple.iokit.IOSMBusFamily 1.1 com.apple.security.TMSafetyNet 6 com.apple.kext.AppleMatch 1.0.0d1 com.apple.driver.DiskImages 281 com.apple.iokit.IOStorageFamily 1.6 com.apple.driver.AppleACPIPlatform 1.3 com.apple.iokit.IOPCIFamily 2.6 com.apple.iokit.IOACPIFamily 1.3.0 Model: MacPro3,1, BootROM MP31.006C.B05, 8 processors, Quad-Core Intel Xeon, 3 GHz, 10 GB, SMC 1.25f4 Graphics: ATI Radeon HD 2600 XT, ATI Radeon HD 2600, PCIe, 256 MB Memory Module: global_name Bluetooth: Version 2.2.4f3, 2 service, 1 devices, 1 incoming serial ports Network Service: Ethernet 1, Ethernet, en0 PCI Card: ATI Radeon HD 2600, Display, Slot-1 Serial ATA Device: WDC WD5000AAVS-00ZTB0, 465.76 GB Serial ATA Device: WDC WD3000HLFS-01G6U0, 279.46 GB Serial ATA Device: WDC WD3000HLFS-01G6U0, 279.46 GB Parallel ATA Device: PIONEER DVD-RW DVR-112D USB Device: Hub, 0x050d (Belkin Corporation), 0x0237, 0xfd500000 USB Device: iPhone, 0x05ac (Apple Inc.), 0x1294, 0xfd570000 USB Device: C-Media USB Headphone Set, 0x0d8c (C-MEDIA ELECTRONICS INC.), 0x000c, 0xfd520000 USB Device: Mass Storage Device, 0x1c6b (Philips & Lite-ON Digital Solutions Corporation), 0xa122, 0xfd510000 USB Device: Hub, 0x0424 (SMSC), 0x2512, 0xfd300000 USB Device: Keyboard Hub, 0x05ac (Apple Inc.), 0x1006, 0xfd320000 USB Device: Microsoft Trackball Explorer®, 0x045e (Microsoft Corporation), 0x0024, 0xfd321000 USB Device: Apple Keyboard, 0x05ac (Apple Inc.), 0x0220, 0xfd322000 USB Device: Hub, 0x0424 (SMSC), 0x2602, 0xfd310000 USB Device: Hub, 0x0424 (SMSC), 0x2512, 0xfd312000 USB Device: Hub, 0x0424 (SMSC), 0x2602, 0xfd312100 USB Device: Flash Card Reader, 0x0424 (SMSC), 0x2228, 0xfd312110 USB Device: Flash Card Reader, 0x0424 (SMSC), 0x2228, 0xfd311000 USB Device: Bluetooth USB Host Controller, 0x05ac (Apple Inc.), 0x8206, 0x5d200000 FireWire Device: built-in_hub, Up to 800 Mb/sec FireWire Device: Rev2, Drobo, Up to 800 Mb/sec FireWire Device: iSight, Apple Computer, Inc., Up to 200 Mb/sec FireWire Device: unknown_device, Unknown On Dec 16, 2009, at 7:22 PM, Dominic Giampaolo wrote: > The only thing that I can think that may indicate some sort of issue are the following entries in my system.log: > Dec 16 18:54:49 hostname fseventsd[63]: SLOWDOWN: client 0x104001800 (pid 728) sleeping due to too many errors (num usleeps 76) > Dec 16 18:55:34 hostname fseventsd[63]: SLOWDOWN: client 0x103805800 (pid 813) sleeping due to too many errors (num usleeps 89) > It would be interesting to know who pid 728 and 813 are. However this only indicates that some user level process stopped reading the stream of fsevent messages. It can happen when stops responding on the run loop that contains the fsevent stream source. It is entirely a user level app specific bug and indicates nothing is wrong with the rest of the system. Are there any messages with the string "fsevent" in your /var/log/kernel.log file (assuming you're on snowleopard). --dominic _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: OT: Hey we made xkcd today!
by Alexander von Below 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thanks for sharing! Excellent! Am 17.12.2009 um 04:00 schrieb Godfrey van der Linden: > http://xkcd.com/676/ > > Cheers > > Godfrey > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/below%40mac.com > > This email sent to below(a)mac.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

OT: Hey we made xkcd today!
by Godfrey van der Linden 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com http://xkcd.com/676/ Cheers Godfrey _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Serious Interruptive Pauses
by Dominic Giampaolo 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com It would be interesting to know who pid 728 and 813 are. However this only indicates that some user level process stopped reading the stream of fsevent messages. It can happen when stops responding on the run loop that contains the fsevent stream source. It is entirely a user level app specific bug and indicates nothing is wrong with the rest of the system. Are there any messages with the string "fsevent" in your /var/log/kernel.log file (assuming you're on snowleopard). --dominic _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… The only thing that I can think that may indicate some sort of issue are the following entries in my system.log: Dec 16 18:54:49 hostname fseventsd[63]: SLOWDOWN: client 0x104001800 (pid 728) sleeping due to too many errors (num usleeps 76) Dec 16 18:55:34 hostname fseventsd[63]: SLOWDOWN: client 0x103805800 (pid 813) sleeping due to too many errors (num usleeps 89) This email sent to site_archiver(a)lists.apple.com

1 0

Re: Serious Interruptive Pauses
by George Plymale 17 Dec '09

17 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Well folks, thanks for the input and updates before. I've really struggled with this issue seriously. I thought that it may be a bad drive, however I've exhausted this avenue it seems. I don't even want to get into the details of what I've gone through and the near fights I've had with Drobo over their horrific customer service and putrid "policies." Word of warning: this company does not have robust failsafe warnings and user accessible diagnostic information. If you'd like more details on what they do wrong, I'd be happy to let you know, but "buyer beware." ANYWAY, moving forward: I am not sure where to go from here and what exactly is causing the pauses that I'm experiencing. There is a chance that the Drobo could be the culprit, however there is no indication that it is as the pauses are happening independent of it being accessed and it is *not* predictable. The only thing that I can think that may indicate some sort of issue are the following entries in my system.log: Dec 16 18:54:49 hostname fseventsd[63]: SLOWDOWN: client 0x104001800 (pid 728) sleeping due to too many errors (num usleeps 76) Dec 16 18:55:34 hostname fseventsd[63]: SLOWDOWN: client 0x103805800 (pid 813) sleeping due to too many errors (num usleeps 89) Dec 16 18:55:34 hostname fseventsd[63]: SLOWDOWN: client 0x103010e00 (pid 813) sleeping due to too many errors (num usleeps 90) If anyone has any further thoughts on how to isolate out the issue I would very much appreciate the input. Kind regards & seasons greetings, -George _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Debugging a hard system wedge
by Andrew Myrick 11 Dec '09

11 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Dec 10, 2009, at 7:05 PM, Godfrey van der Linden wrote: > G'day, All. > > Really there is no other place to ask this. I mean if you have a hammer (some knowledge of kernel programming) everything looks like a nail. > > On my brand new MacBookPro5,3 (2.66Ghz) 10.6.2 system I have been getting unexplained hard wedges. The symptoms:- > > - The menu clock seconds counter keeps ticking. > - The mouse still moves > - The fans do not spin up. > - top in terminal stops reporting > - ssh into the system doesn't work. > - After a wakeup the login window works to type the password in, but it hangs around with a spinning cog and never logs me in. > - I suspect that mDNS isn't going either as the machines <name>.local doesn't seem to resolve, though I'm not sure of that. > > I haven't attempted to connect to the system with GDB yet as the symptoms feels wrong to me as a kernel hang. I'd like the groups opinion on the utility of showallstacks and other magic kgmacros to track this down. I'd recommend starting with capturing a few stackshots and looking at what the system's doing. You can enable the stackshot keychord with `sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.stackshot.plist`. Then when the problem reproduces, pressing CMD+OPT+CTRL+SHIFT+<Period> will capture a stackshot. If you can grab a spindump, that would be even better, but I suspect you can't run command line tools in this state. > - May be unrelated, the system never, ever goes to idle sleep. I must close the lid or it will happily sit there for hours with the screen off but otherwise running. It is probably unrelated. Run `sudo fs_usage -w -f filesys` and let the system run for as long as your idle sleep timer is set plus a few minutes. Afterwards, look at the fs_usage log for any processes that are generating disk I/O after your idle timer has expired. Every time the disk is touched, we extend the idle sleep timer for a minute to prevent the system from sleeping during long running, user-initiated tasks like downloading a large file in Safari, but this heuristic also allows poorly written applications to prevent idle sleep altogether. -Andrew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: audit warning?
by Stacey Son 11 Dec '09

11 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Dec 10, 2009, at 5:27 PM, Godfrey van der Linden wrote: > Probably the wrong list, but darwin-dev seems to have died and the cocoa lists aren't really the right place either. > > Saw these few lines go past in my secure.log yesterday. I don't recognise them and I'm a bit concerned. Can anybody out there explain them? > > Dec 10 19:47:13 [snipped] [ loginwindow[38]: in pam_sm_authenticate(): Failed to determine Kerberos principal name. > Dec 10 19:47:14 [snipped] [9430]: audit warning: allsoft These warning messages are generated by auditd... The above indicates that the soft (disk space) limit for all filesystems has been exceeded. Your system is running low on disk space. > Dec 10 19:47:14 [snipped] [[9431]: audit warning: soft /var/audit The above indicates that the soft limit for this directory has been exceeded. > Dec 10 19:47:14 [snipped] [[9433]: audit warning: closefile /var/audit/20091208225521.20091210084714 The above indicates that a trail file has been closed, so can now be post-processed. After the audit log gets larger than a certain size (see /etc/security/audit_control) auditd will close the trail file and open a new one. For more information see auditd(8), audit_warn(5), and audit_control(5). You may want also see the documentation on trustedbsd.org: http://www.trustedbsd.org/docs.html Best Regards, -stacey. ---- Stacey Son sson(a)FreeBSD.org _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0