audit_get_reply() returns EBADE

audit_get_reply() returns EBADE

[Matthew Booth]

[-- Attachment #1.1: Type: text/plain, Size: 725 bytes --]

A few times now I've seen audit_get_reply() return EBADE (Invalid 
exchange). This coincides with a particular job which results in an 
output rate of about 5.5k records/sec. The system remains responsive, 
and it always fixes itself when the rate comes back down again.

What exactly does EBADE mean in this context? I assume I'm dropping 
audit messages from the kernel while this is going on. Is there any way 
I can determine how many? Is there any way to tune things to survive 
this temporary stress event?

Thanks,

Matt
-- 
Matthew Booth, RHCA, RHCSS
Red Hat, Global Professional Services

M:       +44 (0)7977 267231
GPG ID:  D33C3490
GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]

Re: audit_get_reply() returns EBADE

[Steve Grubb]

On Monday 03 March 2008 06:26:44 Matthew Booth wrote:
> A few times now I've seen audit_get_reply() return EBADE (Invalid
> exchange). This coincides with a particular job which results in an
> output rate of about 5.5k records/sec. The system remains responsive,
> and it always fixes itself when the rate comes back down again.
>
> What exactly does EBADE mean in this context?

No idea. A quick grep in the kernel source shows it only comes from a couple 
places. bluetooth, sparc, and dlm are the main places. none of which seem to 
be netlink related.


> I assume I'm dropping audit messages from the kernel while this is going on.
> Is there any way I can determine how many?

I think you'd have to patch the kernel to prove that to yourself.


> Is there any way to tune things to survive this temporary stress event?

I can't see how you are getting this in the first place. Have you grepped 
around to see where its coming from?

-Steve