From owner-freebsd-security@FreeBSD.ORG Fri Sep 9 06:33:38 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E6DAE16A41F for ; Fri, 9 Sep 2005 06:33:38 +0000 (GMT) (envelope-from yar@comp.chem.msu.su) Received: from comp.chem.msu.su (comp.chem.msu.su [158.250.32.97]) by mx1.FreeBSD.org (Postfix) with ESMTP id 139BF43D48 for ; Fri, 9 Sep 2005 06:33:34 +0000 (GMT) (envelope-from yar@comp.chem.msu.su) Received: from comp.chem.msu.su (localhost [127.0.0.1]) by comp.chem.msu.su (8.13.3/8.13.3) with ESMTP id j896XUZr050913; Fri, 9 Sep 2005 10:33:30 +0400 (MSD) (envelope-from yar@comp.chem.msu.su) Received: (from yar@localhost) by comp.chem.msu.su (8.13.3/8.13.3/Submit) id j896XSgT050912; Fri, 9 Sep 2005 10:33:29 +0400 (MSD) (envelope-from yar) Date: Fri, 9 Sep 2005 10:33:28 +0400 From: Yar Tikhiy To: Antony Mawer Message-ID: <20050909063328.GA47579@comp.chem.msu.su> References: <431F6941.20006@gmail.com> <20050908001830.6A33270DCDB@mail.npubs.com> <431F841A.1060302@mawer.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <431F841A.1060302@mawer.org> User-Agent: Mutt/1.5.9i Cc: freebsd-security@freebsd.org, nielsen@memberwebs.com, talonz Subject: Re: ee using 99% cpu after user ssh session terminates abnormaly X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Sep 2005 06:33:39 -0000 On Thu, Sep 08, 2005 at 10:21:46AM +1000, Antony Mawer wrote: > On 8/09/2005 10:18 AM, Nate Nielsen wrote: > > talonz wrote: > >>Recently i have been using a dialup 56k account to access the net > >>and have noticed that when my ssh session times out and I am editing > >>a file in ` ee ' the system goes to 99% cpu usage and stays like > >>this till the pid is killed. > >>This is a standard user account (not root/su) > > > > This happens all the time on servers I manage. It's a real pain because > > it's hard to see the actual load of the machine. We have a dumb hack of > > a script that kill these off when they happen. > > Another "me too" -- usually when we notice our server (running FreeBSD > 4.11) starting to crawl, the culprit is an "ee" session using up 99% > cpu. I just reproduced it then by logging in via ssh, running "ee" (not > opening any file) and then killing the Putty window. BTW, isn't the problem in bin/65892? http://www.freebsd.org/cgi/query-pr.cgi?pr=65892 -- Yar