Summary : syslogd is using 10% of cpu on T2000

All:
I was able to figure it.
The problem was that the /etc/inet/ipnodes file had the hostname 'loghost' as an alias for the system.
Since the syslogd is configured to send all log messages to loghost, the system was trying to send messages to itself instead of the real loghost.
It was in a loop sending to itself over and over.
The iptables shows as 
#
# Internet host table
#
::1     localhost
127.0.0.1       localhost
10.16.134.13    bud
Before it was reading as,
The iptables shows as 
#
# Internet host table
#
::1     localhost
127.0.0.1       localhost
10.16.134.13    bud       loghost
I do not know how it got there.  Can you check other new install and may have the same.
Once this was fixed, we no longer have the issue.
Thanks to Steve for responding,
-Balki
-------------- Original message -------------- 
From: bkc777@comcast.net 

Hi Guru's:

I just recieved a T2000 and noticed that the syslogd is using about 10 of cpu.  Here is extract from prstat.
# prstat -a
   PID USERNAME  SIZE   RSS STATE  PRI NICE      TIME  CPU   PROCESS/NLWP       
   307 root               15M   13M  cpu30    0    0     135:23:34   9.4% syslogd/14



The messages file is growing. Here is size
   -rw-r--r-- 1 root root 6663681081 Jun 16 17:13 messages
I notice this message repeating itself.  specially the timestamp is not changing.  It is alway 14:48:39.
 # tail messages
 Jun 16 14:48:39 bud genunix: [ID 936769 kern.info] devinfo0 is  /pseudo/devinfo@0 
Jun 16 14:48:39 bud pseudo: [ID 129642 kern.info]  pseudo-device: devinfo0
 Jun 16 14:48:39 bud genunix: [ID 936769 kern.info] devinfo0 is  /pseudo/devinfo@0 
Jun 16 14:48:39 bud pseudo: [ID 129642 kern.info]  pseudo-device: devinfo0
 Jun 16 14:48:39 bud genunix: [ID 936769 kern.info] devinfo0 is  /pseudo/devinfo@0 
Jun 16 14:48:39 bud pseudo: [ID 129642 kern.info]  pseudo-device: devinfo0
 Jun 16 14:48:39 bud genunix: [ID 936769 kern.info] devinfo0 is  /pseudo/devinfo@0 
Jun 16 14:48:39 bud pseudo: [ID 129642 kern.info]  pseudo-device: devinfo0
 Jun 16 14:48:39 bud genunix: [ID 936769 kern.info] devinfo0 is  /pseudo/devinfo@0
KSH#uname -a
SunOS xxx 5.10 Generic_118833-03 sun4v sparc SUNW,Sun-Fire-T200
The server is 1 cpu @1GHz, 8-core with 8GB RAM.
I have opened a case with Sun.  But I would like to know if some has experienced this before on T2000.  I shall update for benfit of all.
Thanks,
-Balki
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers