Evening all,
This is now the second time I've encountered this issue. The last time was about a month or so ago and to fix it I reinstalled the astaro software and restored from a backup configuration and all was fine. I didn't really expect it to happen again but unfortunately last night it did... although this time I really want to get to the bottom of the issue.
Basically what's happening is whenever you load a webpage I seem to get an awful lot of latency and even total packet loss. I can test this by doing a ping to either one of my servers (on a DMZ network) or any external address. Once the page is loaded the pin returns to a normal level. Now I know that I should expect to see a little rise in ping times but this rise is up into the ten's of thousands of ms and as I said sometimes total loss of maybe 5-10 packets.
The above ONLY happens when I have the IPS system activated. The instance I disable the IPS the ping times remain rock solid when doing anything on the network.
This kinda says to me that something (probably due to the IPS) has gotten corrupt but i'm really not sure on this. One thing I noticed is when IPS is active the cpu load is 100% constantly. Here is a process list. Snort only appears to be 27% though. If you look down the cpu% you can see that a process by root is apparently using 300% of the cpu cycles. (the process is "ps auxwf") - No idea what this is but I guess it is related to the IPS as when I disable the IPS this process goes down to 0%.
http://dl.dropbox.com/u/321823/cpulog.txt
Please can anyone make any sense out of this? I really want to get to the bottom of this so I know its not going to happen again as it really ruins my VOIP! I have ordered another HDD to replace this one in case there is something wrong with it causing corruption - but seeing as it worked fine in between the two issues I have no real reason to believe it is a problematic drive.
Please let me know if there is any other information you require and thank you for any help as I've been fiddling all day and i'm out of ideas!
This thread was automatically locked due to age.
