Re: [cobalt-users] gmon???

[flash22@xxxxxxx]

On Thu, 11 Oct 2001, Jamie Martino wrote:

> >
> > What happens when you do "updatedb", then after it finishes do "locate
> > gmon.out"?  The database used by locate is updated every 24 hours so it's
> > not unusual for it to return files that don't exist anymore.  If you want
> to
> > check the filesysytem run "find" (see a tutorial on the web to get up to
> > speed) or run "updatedb" and locate to go from a recent snapshot.
> >
> > --
> > Steve Werby
> > President, Befriend Internet Services LLC
> > http://www.befriend.com/
> >
> 
> Ok, ran updatedb and then did locate again and got a lot more than what's
> below, but cut it for size...  It looks to me like the long
> "desktop/desktop/................" is corrupting the db????  I dunno, Just a
> thought I had since gmon is located in "/usr/include/sys/" and when you look
> at the results of locate the end of the first line below says
> "/desktop/deusr/include/sys/gmon.h"  If you look at it, you can see "deusr"
> which is a combo of desktop and usr.....  That was one thought..
> 
> Also, where would the "gmon.out" files come from in other dirs of the same

gmon is the output file you get when running a program compiled for
profiling, i hate to tell you this, but i think your user acct got
compromised, i have found the exact same pattern by doing google searches
on 2 other web servers....suppose it could be a really bizzare coincidence
;)

See if you have any of these files:
gcrtO.o (older than crtO.o in /lib) , libc_p.a, gprof,bb.out,bbconv.out

More likely someone patched,thwarted, or overrode a system library....i
doubt cobalt built everything with profiling turned on -/

Run 'du' instead of locate , from in the site web/ folder, it will recurse
the actual directories ...(locate does have a 1024 char filename limit i
think)

who owns the gmon.out files? user/group?

Also, if you get a trusted clean gprof, you can dump those and see what
program they are from...

gsh