Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 3 subscribers
  • Views 1859 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Poor Webmin performance (7.104)

BarryG
I'm having a LOT of trouble creating packetfilter rules and activating them right now, in 7.104. I have not had this problem previously in 7.x

Several times, I have gotten a message about something taking longer than 30 seconds, do I want to abort?

Now, as I'm typing this, it's gotten better.
I ran 'top' while it was acting up, and nothing was using more than 10% CPU. The hard disk is not swapping (free shows 56Kbytes swapped).

I only have 13 PF rules, so I don't think it's too many [:P]

Barry


This thread was automatically locked due to age.
  • 0
    My "daily executive report" came just after I finished the above post. Perhaps that was slowing things down?
    As I said though, TOP didn't show much going on.

    Barry
  • 0 in reply to BarryG
    Barry, I suspect that the MySQL backend was probably busy during the executive report generation; I haven't had any issues with rule creation, etc. on 7.104 (working on a deployment right now in fact on a 7.104 appliance).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Can one change the time the reports are generated? Right before midnight is when I do a lot of maintainance/upgrades for work.
    (I know they can be disabled)

    Barry
  • 0 in reply to BarryG
    You could probably change the schedule with crontab.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I'm wondering if I set it to run at 4am if it'd run for the right day.
    I suspect it runs at 11:58pm instead of after midnight for a reason.

    # cat crontab.execreport
    58 23 * * *     root    /usr/local/bin/report_render.pl --sendmail


    Barry
  • 0 in reply to BarryG
    Just realized my problems were BEFORE 11:58pm, so it couldn't have been the Executive Report that was causing the slowdown.

    Barry
  • 0 in reply to BarryG
    anti-spam reports, maybe?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I'm not using the SMTP or POP proxy or any of the mail features (and never receive reports about them).

    Barry
  • 0 in reply to BarryG
    I get this issue a lot when the reports are generating especially the weekly ones. Current the cluster has been at 100% since 2am. Generaly it is the mysql that 'appears' to cause it.
  • 0 in reply to BarryG
    I'm wondering if I set it to run at 4am if it'd run for the right day.
    I suspect it runs at 11:58pm instead of after midnight for a reason.
    Barry


    Hi Barry, 
    the reason it is running before midnight is that we still have very detailed data available for the current day at that time. If we wait until after midnight, we'd have to query "yesterday" for the daily executive report, and because of the aggregation that takes place this would make us lose some detail (in graphs, for example). Because of the special way that this is implemented, setting the executive report to 4AM would yield a report showing everything that happened between midnight and 4AM.

    Mysql is only used for the email security backend, so if you don't use SMTP or POP3 it is unlikely to be the cause for any slowdown, not even report generation; the executive report does not query the mysql database, either.

    Unfortunately I still can't make a good guess what is happening with the webadmin, but maybe I can help to find out why the report generation took so long. Try running 'time /usr/local/bin/report_render.pl'; it will generate a daily report but not send it. If that works OK, the report probably got delayed in a SMTP proxy queue or something.

    Cheers,
     andreas