rpc.ttdbserver process with high %CPU hangs

[Ibrahim_6]

Hi
We just bought two new B2000 boxes. I installed extra 256MB RAM and an 18 GB hard dirve in each of them.
I experined two peoblems which might be realted to eachother.
- SAM crash (with coredumped) when started from by pressing SAM icon.
- the process rpc.ttdbserver hangs all the time with ~%91 of the CPU.
I checked the dr_dt and it contains no errors.

Any help will be appreciated.
Jim

PS: I am new to this forum so please explain to me how to assign points.

[Vincent Stedema]

Hi Jim,

Welcome to the forum.

It looks like rpc.ttdb is misbehaving and this may have caused the core dump from sam. Did you install the latest General Release Patches after installing the OS? Have you tried switching back and forth to a different run-level in order to restart CDE?

Vincent

ps: click the "assign points" button next to the answers to assign points.

[Alex Glennie · Accepted solution]

some thoughts .....

what & file on core file ?
contents of syslog.log ?
What's the O/S
Make sure patched recently for CDE
Any funnies ie nfs mounted $Home dirs ?

Try this ?

1. Have all users log out of CDE.
2. Login at the command line as root. Or, better yet,
use telnet or rlogin. 3. Stop CDE-login
/sbin/init.d/dtlogin.rc stop
4. Prevent rpc.ttdbserver from restarting:
A. Comment out rpc.ttdbserver in /etc/inetd.conf.
Note: There will only be one line that contains a reference to
rpc.ttdbserver. Insert a '#' before the line, and save
the /etc/inetd.conf file. So the line in
/etc/inetd.conf would look similar to this line:
# rpc stream tcp swait root /usr/dt/bin/rpc.ttdbserver 100083 1 /usr/dt/bin/rpc.tt dbserver
B. Reread the inetd.conf file: /etc/inetd -c
5. Kill rpc.ttdbserver and verify it stays away:
kill `ps -e | grep rpc.ttdb | awk '{ print $1 }' `
Verify that rpc.ttdb is not running: ps -ef |grep rpc.ttdb
should return nothing.
6. To delete the TT_DB-directories there are two possibilities:
A. for i in ` find / -name TT_DB` do
# Remove all files under each TT_DB subdirectory found
# under each local file system mount point. It doesn't
# matter if one of the mount points does not have a
# TT_DB subdirectory, since the 'rm -f' will not produce
# an error. rm -rf $i/* done
Note that solution 6A searches nfsmounts as well,
which may not be the behavior wanted.
B. for i in `df -F vxfs | awk '{ print $1 }'` do
# Remove all files under each TT_DB subdirectory found
# under each local file system mount point. It doesn't
# matter if one of the mount points does not have a
# TT_DB subdirectory, since the 'rm -f' will not produce
# an error. rm -rf $i/TT_DB/* done
7. Uncomment rpc.ttdbserver in /etc/inetd.conf and
execute this command to reread inetd.conf: /etc/inetd -c
8. Start CDE again: /sbin/init.d/dtlogin.rc start

[Ibrahim_6]

No, I did not do any patches update.
The OS is HP-UX 11.00

Alex,
Thanks for the detailed steps.
I tried the proceedure you suggested however I faced two problems:
1. Whenever I killed the rpc.ttdbserver process using the command that you suggetsed, it comes (runs) again
2. I could not found the TT_DB directory. It seems to be not existed.

Regards,
Jim

[ken_5]

http://www.kb.cert.org/vuls/id/AAMN-4ZLV8U

I found a link that may help you to disable this process. I had the same problem and followed these instructions to disable. I still have some quesitons, What does this service do? Why is installed if I do not need it? and why does the latest CDE patches from hp trigger this condition under HP/UX 11.0?
tks,