Re: FYI: monitoring OpenBSD

[h1kari <h1kari@dachb0den.com>]

It looks like you're just polling if_data info. You can do the same by just
using the SIOCGIFDATA sockio ioctl, so you don't have to access /dev/kmem.

Cheers,
-h1kari


On 8/28/02 3:23 AM, "Artur Grabowski" <art@blahonga.org> wrote:

> Willem Dijkstra <wpd@xs4all.nl> writes:
> 
>> Hi all,
>> 
>> I built a tool that allows active non-intrusive monitoring of
>> cpu-states, memory usage, interface and io statistics for OpenBSD
>> hosts. It allows 5 second interval measurements without noticable
>> performance impact, and was built with security as a main design goal.
>> 
>> I dubbed the package 'mon', and it consists of 3 parts:
>> 
>> - mon: a small daemon that performs the actual measurements. mon needs
>>   priviledges to access kernel mem as the interface and io probes are
>>   via kvm_read. mon has been kept small as a direct result of this.
> 
> Any reason why those measurements can't be done through sysctls?
> Just give me a list of information you need and I'll implement sysctls
> for it. Reading /dev/kmem is never a good idea, we're trying to move away
> from that.
> 
> //art

-- 
David Hulton <h1kari@dachb0den.com>
Senior Researcher, Dachb0den Labs
http://www.dachb0den.com