topic Re: too much work at interrupt in Operating System - Linux

too much work at interrupt

kcpant — Mon, 31 Jan 2005 01:42:27 GMT

hi friends,

I have a RH FC-1 based setup used as SQUID and mail server. before setting up this server, client was using another machine on fedora core 1 for simple many to one SNAT to provide internet and mail service to LAN, but it was working very slow from last 20 days, and I suspect it was because of some DOS or hack attack.client is connected to WAN through a DSL router. now I 've configured very tightly on security point the new setup I made.I've made iptable most secure to my knowledge, but today, I'm getting the same problem which was with old one, very slow performance. the error displayed on console " Eth0: too much work at inetrrupt" and " Eth0: transmit timed out resetting..." very frequently.I still suspect it might be caused by a DOD attack. can anybody sugest me how to further secure the setup, and if possible, any best configured iptables sample?

waiting for a good advice..
thanks & regards

Re: too much work at interrupt

Vitaly Karasik_1 — Mon, 31 Jan 2005 06:24:32 GMT

regarding " Eth0: too much work at inetrrupt" - it may be bad NIC/cable too.
Try to replace NIC/port in network switch.

Re: too much work at interrupt

kcpant — Tue, 01 Feb 2005 00:50:47 GMT

Dear vitaly,

I've already done changes on hardware end, like chnged NIC, cable, changed the PCI slot etc etc, but no luck...

thanks & regards,

Re: too much work at interrupt

Vitaly Karasik_1 — Tue, 01 Feb 2005 02:38:37 GMT

What about upgrade to RHEL or some free RHEL clone?
BTW, what NIC do you use?

http://www.redhat.com/software/rhel/ Red Hat Enterprise Linux

RHEL clones:
http://www.raimokoski.com/pipermail/enterprise_linux/2004-November/000001.html
http://www.fedoraforum.org/forum/archive/index.php/t-10649.html
White Box seems to be very promising!

Re: too much work at interrupt

xyko_1 — Tue, 01 Feb 2005 07:03:25 GMT

Hi kcpant,

what hardware are you running ? server, nic are the most important information.

From a quick research on Internet using google :

see that are issues about old hardware and slow machines running high traffic workload.
http://www.uwsg.iu.edu/hypermail/linux/net/9512.0/0021.html

Another point : http://www.linuxquestions.org/questions/archive/31/2004/08/4/222327

As you may see the problem may also be because software (driver) misconfiguration.
http://www.ussg.iu.edu/hypermail/linux/kernel/0402.2/1617.html

So, I guess we have to know more about your hardware and software to try to determine your point.

regards,
Xyko

Re: too much work at interrupt

kcpant — Tue, 01 Feb 2005 07:53:41 GMT

Hi Xyko,

The NICs used are Intel Ethernet Pro 100 . I've already searched google before posting here, and read the threads you sent. I've also chnged NIC, cable and switch....

thanks & regards

Re: too much work at interrupt

xyko_1 — Tue, 01 Feb 2005 11:16:50 GMT

Hi kcpant,

looking at Internet (google) I found a lot of discussion regarding this type of error, all of them ralating to kernel or driver bugs. I suggest you to update your kernel to the newer one and also the driver.

That's all for now.

Regards,
Xyko

Re: too much work at interrupt

kcpant — Fri, 25 Feb 2005 05:56:54 GMT

closing thread