Syslog Message

[John Waller]

Does anyone know what causes the following message found in /var/adm/syslog/syslog.log:

MMM DD hh:mm:ss syslog: do_accept : too many open files

I am receiving about 4 or 5 messages a day. "sar -v" does not show any problem with the nfile kernel parameter and everything appears to be working OK with the system.

Many thanks in advance.

[Paula J Frazer-Campbell]

Hi
Check your nfile settings in kernal and increase it.

HTH

Paula

[Paula J Frazer-Campbell]

Hi
Check your nfile settings in kernal and increase it.

HTH

Paula

[Paula J Frazer-Campbell]

Hi
Check your nfile settings in kernal and increase it.

HTH

Paula

[Paula J Frazer-Campbell]

Hi
Check your nfile settings in kernal and increase it.

HTH

Paula

[Paula J Frazer-Campbell]

Hi
Check your nfile settings in kernal and increase it.

HTH

Paula

[Paula J Frazer-Campbell]

Oppppsss Sorreeee

[Lasse Knudsen]

OK then but what about maxfiles and maxfiles_lim.

Your syslog entry says nothing about what process made the entry, by 'do_accept' sounds like some kind of daemon that has to many open sockets - perhaps a webserver.

I would try to increase the above mentioned parms.

[Dan Hetzel]

Hi John,

The error could indicate too many files for a process as well as globally.
You may need to use SAM to increase the 'maxfile' kernel parameter if you're sure about 'nfile'.

Dan

[Dan Hetzel]

Hi Paula,

Do you feel nervous this morning ??
;-))

Dan

[John Waller]

"sar -v" shows the nfile parameter and also logs if any "overflows" have occured the output is :

0:00:01 text-sz ov proc-sz ov inod-sz ov file-sz ov
01:00:00 N/A N/A 96/704 0 769/2760 0 895/2314 0
02:00:00 N/A N/A 99/704 0 833/2760 0 899/2314 0
03:00:00 N/A N/A 102/704 0 1316/2760 0 908/2314 0
04:00:00 N/A N/A 99/704 0 833/2760 0 902/2314 0
05:00:01 N/A N/A 96/704 0 769/2760 0 895/2314 0
06:00:00 N/A N/A 96/704 0 769/2760 0 895/2314 0
07:00:00 N/A N/A 96/704 0 826/2760 0 895/2314 0
08:00:00 N/A N/A 96/704 0 770/2760 0 895/2314 0
08:15:00 N/A N/A 96/704 0 840/2760 0 895/2314 0
08:30:00 N/A N/A 96/704 0 826/2760 0 895/2314 0
08:45:00 N/A N/A 96/704 0 837/2760 0 895/2314 0

As you can see we are well below the nfile limit.

[John Waller]

Alan,
Its seems to be syslog which is reporting the problem on itself. The maxfiles parameter is currently set to 240 , which is well above the default of 60. but I will try to increase even higher at the next available admin slot.

[Paula J Frazer-Campbell]

Hi Dan
No my hands are not shaking it just that the submit is being a pain again.

Paula

[Dan Hetzel]

John,

What about the 'maxfiles' and 'maxfiles_lim' parameters?

Dan

[Paula J Frazer-Campbell]

Hi John
What is your maxfiles_lim set to?

[John Waller]

maxfiles = 240 , maxfiles_lim=1024. As a side note as it was mentioned that it may be a daemon that has too many sockets open I have stopped and restarted syslogd, so I will continue to monitor for the next 24 hours to see if I still receive the messages.