patches problem

[V. V. Ravi Kumar_1]

hi all,

i have hp-ux 11.00 running on L-1000 server with 2 processors and 2gb memory.
recently we have removed two patches PHNE_25116 and PHKL_24268 from the machine to improve the performance of some other process. but suddenly the server became very slow and telnet to the server is taking long time. sql plus response is also slow.

then i reinstalled PHNE_25116 and PHKL_25775 (supercede of PHKL_24268), but the problem is not solved, the server is still slow.

can anybody suggest what to do?

thanks in advance
ravi

[David Burgess]

Check the syslog / dmesg for any clues.

Maybe a patch is in a funny state :-

If you run swlist -l fileset -a state you should see all the filesets as configured.

Use swconfig to configure any that are configured.

Check performance :-

Run top and sar to see if anything is hammering the cpu etc.

sar -d 5 5 will show you if there is a disk i/o bottleneck. avwait shouldn't exceed avserv.

sar -u 5 5 will show you the cpu. Look to see if %idle is low.

Take a look at the man pages for sar, iostat.

I've attached a document hp sent me when I had performance problems. You might find something by following the steps in the document. Then perhaps you can link the problem to a patch. ie if it's a cpu bottleneck you might find that a patch you've got installed has caused that problem.

HTH

Dave.

[V. V. Ravi Kumar_1]

hi again,

i observed for all bottle necks but there seems to be no problem.

even "netstat -a" is also taking long time to display each line, why?

regds
ravi

[David Burgess]

Maybe there's a patch on the system that is dependent on the one's you've removed.

Take a look in /tmp/PHTXT

grep -i depend *text | grep -vi none should pick up any dependencies. Although you may need to take a closer look.

One thought before you start looking at the patches. I wonder if it's DNS lookup issue. How long is telnet hanging before the login prompt apeears? About aminute would suggest a DNS lookup timeout.

Try netstat -an

The n means it doesn't try and resolve the ip addresses to names. If it's quicker then it could be DNS.

Dave.

[V. V. Ravi Kumar_1]

hi David,

there is no problem with patch dependencies, but as u said "netstat -an" output is fast.
while telnet, it is waiting just more than a minute before login prompt comes, but immediately after reboot it is taking 4-5 minutes. further it is a trusted system.

there is no DNS configured on it.

one more thing is the following message is flashing on the console.

NIS: server not responding for domain "n"; still trying

but there is no NIS configured on this server.

thanks
ravi



hope

[Clemens van Everdingen]

Hi,

Check in /etc/rc.config.d/namesvrs if this is commented to 0

NIS_MASTER_SERVER=0
NIS_SLAVE_SERVER=0
NIS_CLIENT="0"
NISPLUS_SERVER=0

C.

[David Burgess]

As Clemens said (thanks) , make sure the NIS settings are set to 0. Also have you got an /etc/nsswitch.conf file? If so what is is set to?

[David Burgess]

If /etc/nsswitch.conf contains entries for nis then you'll want to look at copying /etc/nsswitch.files to /etc/nsswitch.conf

Dave.

[David Burgess]

How did you get on?

Regards,

Dave.

[V. V. Ravi Kumar_1]

hi,

still the problem is there. i set teh NIS entries in namesvrs as given. but "netstat -a" is still taking long time as is the case with telnet.
no nis client or server is not running.

is there any daemon that i should stop for changes to be effect.

thanks
ravi

[pap]

Hi,
Some network patches overwrites the network configuration files. So please recheck all the network related files.

/etc/nsswitch.conf
/etc/inetd.conf
/etc/services
/etc/rc.config.d/netconf
/namesvrs
/etc/resolv.conf
/etc/hosts

please check the above files and then do your stuff.

Also PHNE_25116 can be uninstalled if you wish. This patch has warnings associated with it.

You can user custom patch manager to build your machine with all latest patches that might solve yuour problem othersie.

-pap

[V. V. Ravi Kumar_1]

hi pap,

what is custom patch manager i could not get it.
pl reply

regds
ravi

[Clemens van Everdingen]

Hi,

Custom patch manager you will find on this link !

http://europe-support.external.hp.com/common/bin/doc.pl/sid=12f272981682b3f521

C.

[David Burgess · Accepted solution]

ps -ef | grep yp will show if there are any NIS processes running.

What do you get?

Have you rebooted since?

Dave.

[pap]

HI Ravi,
Sorry for replying you late.

Custom patch manager is a very good item which you can use it from HP's ITRC. If you have software support contract with HP then only you can use it. Otherwise you have to pay $99 for one time use.

Here is brief explanation about Custom Patch Manager.

1.It will give you a script to be dwonloaded from ITRC.
2. You have to run that script on your machine under consideration.This script will basically considers all the softwares installed on your machine including patches, and do analysis on it and verifies which patches are needed to be installed on the system in order to make the system up to date.
3. FInally it will give you the list of patches required to be intalled on your machine along with the analysis description which tell you if there is any conflict among the patches. It will also ask you to add if any dependent patches required.

This is a most reliable PATCHES Installation on sensitive machines. YOU MUST USE THIS FOR YOUR MACHINE and it is highly recommended.


From the patches results given by custom patch manager, you can slect HP's Recommended patches rather than latest patches. Also try to avoid any patches which includes warnings.

-pap

[V. V. Ravi Kumar_1]

hi all,

the problem is solved.

ypbind was running, i killed the process.
i don't know how it was started when no NIS configuration was done.

thanks to all
regds
ravi

[Clemens van Everdingen]

Hi,

Ypbind was started as the NIS variables where set in namesvrs to 1.
Probably by patch.
You should have stopped them after correcting the file.

Or possible reboot would have done the trick.

Regards,
C.

[pap]

Hi Ravi,
As I told you before in my previsou reply to your question some network related patches changes the network related files ( I also mentioned /etc/rc.config.d/namesvrs) . Your "ypbind" process started because that file set to default variables value and caused to change NIS_CLIENT=1 or NIS_SERVER=1.

You will be gain in same problem when you reboot your machine. To permenantly get rid of the problem you have to changed that file and set the variables to "0" instead of 1.

-pap