Re: [nv-l] Slow event processing

[James Shanks <jshanks@us.ibm.com>]

No.  This is netstat output showing the UNIX domain sockets open to trapd (that's why they say "stream").  And UNIX domain sockets are those open between processes on your own box, not externally.    You won't find any indication about DNS here, because  trapd does not open a socket to DNS.  He uses the operating system calls gethostbyaddr / gethostbyname  to resolve the addresses in traps.  

There are several things you can do to improve hostname resolution time, and many of them are discussed in detail in the archive.  They are also OS dependent, and since you didn't mention either your OS or NetView-level, I'd suggest that you look there. 

Alternatively, I'd open a call to Support because poor DNS name resolution is only one of many things that might slow down your events.  But it is important to diagnose where the problem lies.  How did you determine that they are slow and how slow are they?  How many event windows are there?  If you close some, do vents speed up?  Are you using customer rulesets?   Are you certain that you are not having a trap storm?  Or that you didn't just have one?   Is there a big gap between the time events get written to the trapd.log and when you see them on the screen?  


James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

Peter.Ingleson@gerlingncm.com 08/13/2003 08:42 AM

To:        nv-l@lists.tivoli.com         cc:                 Subject:        [nv-l] Slow event processing

List, 

My event screen is running very slowly and the time between trapd and its
display is large. I have been told that DNS lookup could be to blame, below
I have listed number of trapd occurrences, could this number of DNS lookup
waits be causing my troubles?

sc_cws:gbping1:/usr/OV/log >netstat -a | grep trapd
tcp4       0      0  *.nvtrapd-             *.*                    LISTEN
70220600 stream      0      0        0 702bc900        0        0
/usr/OV/sockets/trapd.socket
701d9e00 stream      0      0        0 70192080        0        0
/usr/OV/sockets/trapd.socket
7028d400 stream      0      0        0 7019cac0        0        0
/usr/OV/sockets/trapd.socket
7019b800 stream      0      0        0 7019ce00        0        0
/usr/OV/sockets/trapd.socket
70194000 stream      0      0        0 7019c840        0        0
/usr/OV/sockets/trapd.socket
701e8000 stream      0      0        0 70192940        0        0
/usr/OV/sockets/trapd.socket
70225e00 stream      0      0        0 702bc540        0        0
/usr/OV/sockets/trapd.socket
70196800 stream      0      0 13a7ba70        0        0        0
/usr/OV/sockets/trapd.socket
70295200 stream      0      0        0 702bc6c0        0        0
/usr/OV/sockets/trapd.socket
7028d200 stream      0      0        0 702bc500        0        0
/usr/OV/sockets/trapd.socket
70361800 stream      0      0        0 7019c4c0        0        0
/usr/OV/sockets/trapd.socket
7023d800 stream      0      0        0 702bce40        0        0
/usr/OV/sockets/trapd.socket
701b0c00 stream      0      0        0 702bcec0        0        0
/usr/OV/sockets/trapd.socket
70239400 stream      0      0        0 70299000        0        0
/usr/OV/sockets/trapd.socket
702dc400 stream      0      0        0 70192640        0        0
/usr/OV/sockets/trapd.socket
702ca800 stream      0      0        0 70192240        0        0
/usr/OV/sockets/trapd.socket
70361000 stream      0      0        0 70299040        0        0
/usr/OV/sockets/trapd.socket

Regards
Peter


------------------------------------------------------------------------------------------------------------
This message is intended for the addressee or its representative only. 
Any form of unauthorized use, publication, reproduction, copying or 
disclosure of the content of this e-mail is not permitted. If you are 
not the intended recipient of this e-mail message and its contents, 
please notify the sender immediately and delete this message and 
all its attachments subsequently.


---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)