Re: Accounting resumed, Accounting suspended repeatedly (Was: Re: dump broken with new kernel)

From: Dan Nelson <dnelson_at_allantgroup.com>
Date: Tue, 7 Dec 2004 23:06:20 -0600
In the last episode (Dec 07), Andre Guibert de Bruet said:
> On Mon, 6 Dec 2004, Manfred Antar wrote:
> 
> >I'm also seeing alot of :
> >Dec  6 10:06:53 pozo kernel: Accounting resumed
> >Dec  6 10:07:23 pozo kernel: Accounting suspended
> >Dec  6 10:07:38 pozo kernel: Accounting resumed
> >Dec  6 10:12:23 pozo kernel: Accounting suspended
> >Dec  6 10:12:38 pozo kernel: Accounting resumed
> >Dec  6 10:12:53 pozo kernel: Accounting suspended
> 
> Ditto. Running accton all by itself to turn off accounting stops
> these cycles from occuring (Hardly a fix as you end up without logs
> to run reports from).

It's a safety device that prevents accounting records from filling up
your hard drive in the event of forkbombs, configure scripts or other
things that cause high process turnover.  It's controlled by the
following sysctls:

kern.acct_chkfreq: frequency for checking the free space (seconds)
kern.acct_resume: percentage of free disk space above which accounting resumes
kern.acct_suspend: percentage of free disk space below which accounting stops

-- 
	Dan Nelson
	dnelson_at_allantgroup.com
Received on Wed Dec 08 2004 - 04:06:22 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:24 UTC