Go Back   The macosxhints Forums > OS X Help Requests > System



Reply
 
Thread Tools Rating: Thread Rating: 7 votes, 5.00 average. Display Modes
Old 05-05-2004, 10:55 AM   #1
chaim
Prospect
 
Join Date: May 2004
Location: NY
Posts: 28
'netstat' is invading my processors

I am working in Digital Performer 4.12 (multitrack recording program) on OS 10.3.3 and all is fine and snappy (on a G5 dual 2 Ghz), and as I'm progressing and continuing to work the system is responding slower and slower.

I open the app: Activity Monitor and click on the %CPU tab and see that Process name: 'netstat' is gobbling 90 - 100% of both processors constantly!

What is this?

How do I kill it?

Should I not?

Any body? Please?
chaim is offline   Reply With Quote
Old 05-05-2004, 01:26 PM   #2
hayne
Site Admin
 
Join Date: Jan 2002
Location: Montreal
Posts: 32,473
netstat is a command that can be used to report statistics about network activity. It is not normally running. Some other program must have started it. Use the hierarchical mode in Activity Monitor to find out what its parent process is.
hayne is offline   Reply With Quote
Old 05-05-2004, 01:34 PM   #3
chaim
Prospect
 
Join Date: May 2004
Location: NY
Posts: 28
Thank You.
chaim is offline   Reply With Quote
Old 05-05-2004, 02:18 PM   #4
hayne
Site Admin
 
Join Date: Jan 2002
Location: Montreal
Posts: 32,473
Quote:
Originally Posted by chaim
Thank You.

Please tell us what the problem turned out to be.
It will not only satisfy my curiosity but also perhaps help others who have a similar problem later.
hayne is offline   Reply With Quote
Old 05-05-2004, 08:48 PM   #5
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
Funny, this has been happening to me a LOT lately. I did as you suggest above, and all it tells me is that it's parent is something called "kernel_task". The entire parent path is netstat(9529)->sh(9528)->sh(9527)->configd(86)->mach_init(2)->init(1)->kernel_task(0). This doesn't mean anything to me, does it to you hayne??
jiclark is offline   Reply With Quote
Old 05-05-2004, 08:50 PM   #6
yellow
Moderator
 
Join Date: Jan 2002
Posts: 10,677
That's bizarre. Do tell, what login items do you have that startup automatically when you login?
yellow is offline   Reply With Quote
Old 05-05-2004, 08:59 PM   #7
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
A bunch:

iBeeZz
PTHPasteboard
PTHClock
iKey
LiteSwitchX
MaxMenus
ClipboardSharing
Synergy
PowerMateDriver
Huevos
iTunes
iCal
Mail
iCalAlarmScheduler
Address Book
Snapz Pro X
pearCalc
Peripheral Vision
CNQL2405_ButtonManager [canon scanner]
teleportd
System Events
The Unread

I can see that teleportd as the most likely culprit, but how do I find out?

BTW, it's a cool piece of beta software that lets you control another mac over the network, with the mouse on the first mac. You can have your laptop on the table some distance away from you and run it from your desktop instead of having to swing around to do it. But it IS beta software...
jiclark is offline   Reply With Quote
Old 05-05-2004, 09:02 PM   #8
yellow
Moderator
 
Join Date: Jan 2002
Posts: 10,677
Quote:
Originally Posted by jiclark
I can see that teleportd as the most likely culprit, but how do I find out?

I completely agree. You have 2 options.. remove it from the list, log out and then log back in. See if it's still there, or (better idea) create a new user and log in as that user and see what's happening. If it still shows up you know it's not one of your many login items.

Remote management is quite useful.. I've been using Timbuktu for many years and it's saved my fat @$$ from having to waddle over to a user to explain that email isn't "broken", when the email client says 'wrong password', it actually means 'you typed the wrong password, genius'.

Last edited by yellow; 05-05-2004 at 09:04 PM.
yellow is offline   Reply With Quote
Old 05-05-2004, 09:15 PM   #9
hayne
Site Admin
 
Join Date: Jan 2002
Location: Montreal
Posts: 32,473
Quote:
Originally Posted by jiclark
The entire parent path is netstat(9529)->sh(9528)->sh(9527)->configd(86)->mach_init(2)->init(1)->kernel_task(0). This doesn't mean anything to me, does it to you hayne??

kernel_task is basically the OS
The interesting parentage is that netstat was run by a shell script which was run by another shell script which was run by configd.
configd is a daemon (process that runs all the time watching for changes) that watches for changes in your setup - e.g. your network configuration.
hayne is offline   Reply With Quote
Old 05-05-2004, 11:03 PM   #10
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
Thanks for the input hayne. I'm not too worried about it as it only appears once or twice a week, and even then I notice the fans running a little more, fire up Activity Monitor and just quit the netstat process and all's well...

BTW (again) what's the story with the countdown timer? Predicted new G5s??
jiclark is offline   Reply With Quote
Old 05-05-2004, 11:15 PM   #11
stetner
MVP
 
Join Date: Jan 2002
Location: Brisbane, Australia
Posts: 1,108
what happens when you run netstat from the terminal?
__________________
Douglas G. Stetner
UNIX Live Free Or Die
stetner is offline   Reply With Quote
Old 05-05-2004, 11:21 PM   #12
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
This is what happens (greek to me!):

Mercury:~ jc$ netstat
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp4 0 0 192.168.2.2.54956 forums.macosxhin.http CLOSE_WAIT
tcp4 0 0 192.168.2.2.54955 forums.macosxhin.http CLOSE_WAIT
tcp4 0 0 192.168.2.2.54953 forums.macosxhin.http CLOSE_WAIT
tcp4 0 0 192.168.2.2.54952 forums.macosxhin.http CLOSE_WAIT
tcp4 0 0 192.168.2.2.54947 64.215.172.7.http ESTABLISHED
tcp4 0 0 192.168.2.2.54946 64.215.172.7.http ESTABLISHED
tcp4 0 0 192.168.2.2.54945 64.215.172.7.http ESTABLISHED
tcp4 0 0 192.168.2.2.54944 64.215.172.7.http ESTABLISHED
tcp4 0 0 localhost.52939 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.52938 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.52919 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.52918 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.51832 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.51831 localhost.ipp CLOSE_WAIT
tcp4 0 0 192.168.2.2.51815 versioncheck.bar.http CLOSE_WAIT
tcp4 0 0 localhost.50362 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.50336 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.64075 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.64072 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.62818 localhost.ipp CLOSE_WAIT
tcp4 0 0 localhost.62815 localhost.ipp CLOSE_WAIT
tcp4 0 0 192.168.2.2.61632 fmysql.tu-graz.a.dict CLOSE_WAIT
tcp4 0 0 localhost.netinfo-loca localhost.877 ESTABLISHED
tcp4 0 0 localhost.877 localhost.netinfo-loca ESTABLISHED
udp4 0 0 *.* *.*
udp4 0 0 *.* *.*
udp4 0 0 *.svrloc *.*
udp4 0 0 *.mdns *.*
udp4 0 0 192.168.2.2.ntp *.*
udp4 0 0 localhost.ntp *.*
udp4 0 0 *.ntp *.*
udp4 0 0 *.rockwell-csp2 *.*
udp4 0 0 192.168.2.2.50242 192.168.2.15.44176
udp4 0 0 *.* *.*
udp4 0 0 *.ipp *.*
udp4 0 0 localhost.49165 localhost.1022
udp4 0 0 localhost.49164 localhost.1022
udp4 0 0 localhost.1022 *.*
udp4 0 0 localhost.49163 localhost.1023
udp4 0 0 localhost.1023 *.*
udp4 0 0 *.bootpc *.*
udp4 0 0 localhost.netinfo-loca *.*
udp4 0 0 *.syslog *.*
udp6 0 0 *.514 *.*
icm6 0 0 *.* *.*
icm6 0 0 *.* *.*
Active LOCAL (UNIX) domain sockets
Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
32c85e8 stream 0 0 3633be8 0 0 0 /tmp/slp_ipc
55dccb0 stream 0 0 0 32c8690 0 0 /var/tmp/SCDynamicStoreNotifyFileDescriptor-146007
32c8690 stream 0 0 0 55dccb0 0 0
55dcdc8 stream 0 0 0 55dcc08 0 0
55dcc08 stream 0 0 0 55dcdc8 0 0
55dcd90 stream 0 0 0 55dce70 0 0 /var/tmp/SCDynamicStoreNotifyFileDescriptor-103939
55dce70 stream 0 0 0 55dcd90 0 0
55dcb28 stream 0 0 0 32c8658 0 0
32c8658 stream 0 0 0 55dcb28 0 0
55dce00 stream 0 0 0 32c8000 0 0
32c8000 stream 0 0 0 55dce00 0 0
32c8038 stream 0 0 0 55dce38 0 0
55dce38 stream 0 0 0 32c8038 0 0
55dcf50 stream 0 0 0 55dcee0 0 0
55dcee0 stream 0 0 0 55dcf50 0 0
32c83b8 stream 0 0 0 32c8578 0 0
32c8578 stream 0 0 0 32c83b8 0 0
32c8380 stream 0 0 0 32c84d0 0 0
32c84d0 stream 0 0 0 32c8380 0 0
32c8540 stream 0 0 0 32c8738 0 0
32c8738 stream 0 0 0 32c8540 0 0
32c8310 stream 0 0 0 32c8348 0 0
32c8348 stream 0 0 0 32c8310 0 0
32c87e0 stream 0 0 0 32c8ee0 0 0
32c8ee0 stream 0 0 0 32c87e0 0 0
32c8700 stream 0 0 0 32c87a8 0 0
32c87a8 stream 0 0 0 32c8700 0 0
32c8968 stream 0 0 0 32c89d8 0 0
32c89d8 stream 0 0 0 32c8968 0 0
32c8888 stream 0 0 0 32c8770 0 0
32c8770 stream 0 0 0 32c8888 0 0
32c8850 stream 0 0 0 32c8a48 0 0
32c8a48 stream 0 0 0 32c8850 0 0
32c8b98 stream 0 0 0 32c8bd0 0 0 /tmp/.com.symantec.APSock
32c8bd0 stream 0 0 0 32c8b98 0 0
32c8d20 stream 0 0 36da4e0 0 0 0 /tmp/.com.symantec.APSock
32c8c08 stream 0 0 36dae60 0 0 0 /var/run/mDNSResponder
32c8d90 stream 0 0 366adc8 0 0 0 /var/run/pppconfd
55dcab8 dgram 0 0 0 32c8fc0 0 55dcb98
55dcb98 dgram 0 0 0 32c8fc0 0 55dca48
55dca48 dgram 0 0 0 32c8fc0 0 32c8268
32c8268 dgram 0 0 0 32c8fc0 0 32c8818
32c8230 dgram 0 0 0 32c80e0 32c80e0 0
32c80e0 dgram 0 0 0 32c8230 32c8230 0
32c8818 dgram 0 0 0 32c8fc0 0 32c86c8
32c86c8 dgram 0 0 0 32c8fc0 0 55dcc78
55dcf18 dgram 0 0 0 32c8620 32c8620 0
32c8620 dgram 0 0 0 55dcf18 55dcf18 0
32c8070 dgram 0 0 0 55dcd58 55dcd58 0
55dcd58 dgram 0 0 0 32c8070 32c8070 0
55dcc78 dgram 0 0 0 32c8fc0 0 55dcfc0
55dcce8 dgram 0 0 0 32c8ab8 32c8ab8 0
32c8ab8 dgram 0 0 0 55dcce8 55dcce8 0
32c80a8 dgram 0 0 0 55dcf88 55dcf88 0
55dcf88 dgram 0 0 0 32c80a8 32c80a8 0
55dcfc0 dgram 0 0 0 32c8fc0 0 32c8150
32c8118 dgram 0 0 0 32c82a0 32c82a0 0
32c82a0 dgram 0 0 0 32c8118 32c8118 0
32c8150 dgram 0 0 0 32c8fc0 0 32c8498
32c8188 dgram 0 0 0 32c81c0 32c81c0 0
32c81c0 dgram 0 0 0 32c8188 32c8188 0
32c8498 dgram 0 0 0 32c8fc0 0 32c85b0
32c85b0 dgram 0 0 0 32c8fc0 0 32c8428
32c8428 dgram 0 0 0 32c8fc0 0 32c8930
32c8930 dgram 0 0 0 32c8fc0 0 32c89a0
32c89a0 dgram 0 0 0 32c8fc0 0 32c8a10
32c8a10 dgram 0 0 0 32c8fc0 0 32c88c0
32c88c0 dgram 0 0 0 32c8fc0 0 32c8a80
32c8a80 dgram 0 0 0 32c8fc0 0 32c88f8
32c88f8 dgram 0 0 0 32c8fc0 0 32c8f18
32c8f18 dgram 0 0 0 32c8fc0 0 32c8b28
32c8b28 dgram 0 0 0 32c8fc0 0 32c8b60
32c8b60 dgram 0 0 0 32c8fc0 0 32c8c78
32c8c78 dgram 0 0 0 32c8fc0 0 32c8ce8
32c8ce8 dgram 0 0 0 32c8fc0 0 32c8e00
32c8c40 dgram 0 0 0 32c8cb0 32c8cb0 0
32c8cb0 dgram 0 0 0 32c8c40 32c8c40 0
32c8e00 dgram 0 0 0 32c8fc0 0 32c8dc8
32c8ea8 dgram 0 0 0 32c8d58 32c8d58 0
32c8d58 dgram 0 0 0 32c8ea8 32c8ea8 0
32c8dc8 dgram 0 0 0 32c8fc0 0 32c8f88
32c8f88 dgram 0 0 0 32c8fc0 0 32c8e38
32c8e38 dgram 0 0 0 32c8fc0 0 32c8e70
32c8e70 dgram 0 0 0 32c8fc0 0 32c8f50
32c8f50 dgram 0 0 0 32c8fc0 0 0
32c8fc0 dgram 0 0 33fb7b8 0 55dcab8 0 /var/run/syslog
jiclark is offline   Reply With Quote
Old 05-05-2004, 11:23 PM   #13
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
...and it just runs and finishes. No big CPU impact at all.
jiclark is offline   Reply With Quote
Old 05-06-2004, 07:11 AM   #14
yellow
Moderator
 
Join Date: Jan 2002
Posts: 10,677
Quote:
Originally Posted by jiclark
BTW (again) what's the story with the countdown timer? Predicted new G5s??

Imminent end to my bachelorhood. But who is counting?
yellow is offline   Reply With Quote
Old 05-06-2004, 06:49 PM   #15
stetner
MVP
 
Join Date: Jan 2002
Location: Brisbane, Australia
Posts: 1,108
Quote:
Originally Posted by jiclark
...and it just runs and finishes. No big CPU impact at all.

That is what I was curious about, but it seems there is no problem there....

Do you change any network settings just before the run away occurs?
__________________
Douglas G. Stetner
UNIX Live Free Or Die
stetner is offline   Reply With Quote
Old 05-06-2004, 11:08 PM   #16
chaim
Prospect
 
Join Date: May 2004
Location: NY
Posts: 28
Hi,

(the topic starter here)

I only got one email notification on new posts and now I see a hole bunch. (yes I have instant email notification checked.)

Any way since I restarted the G5 the other day, I didn't have any crazy issues with netstat.

Thanks to all.
chaim is offline   Reply With Quote
Old 06-03-2004, 01:31 PM   #17
JonMntjy
Prospect
 
Join Date: Jun 2004
Posts: 10
I get it too

and it's driving me crazy. I had to kill netstat 5 times today.. same process hierarchy as previously posted. Running on 10.3.4.

I notice that when it starts playing up, then it will always play up again after I reconnect (using modem). This sometimes prevents modem from reconnecting.

Unlike previous poster, the only startup items I have are desktop manager, quicksilver and ical. I don't believe it is one of these.

Also, it runs from configd indicating its an OS issue surely?
JonMntjy is offline   Reply With Quote
Old 06-03-2004, 01:36 PM   #18
yellow
Moderator
 
Join Date: Jan 2002
Posts: 10,677
Quote:
Originally Posted by JonMntjy
Also, it runs from configd indicating its an OS issue surely?

Nope. Something you've installed and are running is doing this. I've many (many, many, many) Panther boxes and none of them have this problem.
What do you have in /Library/StatupItems/?
yellow is offline   Reply With Quote
Old 06-03-2004, 01:41 PM   #19
jiclark
Major Leaguer
 
Join Date: Jan 2002
Location: San Juan Mts, Colo.
Posts: 283
[For some reason, I never got an email notification of your post. Just got one about the latest post this morning, so I'll chime back in...]

Quote:
Do you change any network settings just before the run away occurs?

No, I normally just notice the fans cranking up, and then that CeePeeYou is showing heavy processor load... I'm on a broadband connection, so no need to change any settings.
jiclark is offline   Reply With Quote
Old 06-03-2004, 01:46 PM   #20
JonMntjy
Prospect
 
Join Date: Jun 2004
Posts: 10
Yellow, I only have a single startup item, for PostgreSQL, in /Library/StatupItems. And that works fine, and contains no netstats.

What would cause this thing to be fired after a modem dial-out though..
JonMntjy is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT -5. The time now is 06:26 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Site design © IDG Consumer & SMB; individuals retain copyright of their postings
but consent to the possible use of their material in other areas of IDG Consumer & SMB.