Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

Process nfdumpd has been stopped to prevent a memory overload

 

Information

 

Summary:

Process nfdumpd has been stopped to prevent a memory overload.

Environment:

Product: Flowmon

Version: any

Platform: any

Question/Problem Description:

In system messages appeared Process nfdumpd has been stopped to prevent a memory overload.

Also you can find these related messages in dmesg:

Out of memory: Kill process X (nfdump) score X or sacrifice child

Killed process X (nfdumpd), UID 500, total-vm:X kB, anon-rss:X kB, file-rss:XkB, shmem-rss:X kB

System memory is almost full. Turn off some unnecessary functions

Steps to Reproduce:  
Error Message: Process nfdumpd has been stopped to prevent a memory overload.
Defect Number:  
Enhancement Number:  
Cause:

In general, this can cause a query for a large amount of flows where sorting or aggregation was used. In that case, not all flows fit in memory, so nfdump was killed by the OOM killer.

Resolution:

You can try to find this query in /data/components/nftools/log/nfdump.log and determine parameters of the query, how much memory it took and which user made this query.

Nfdump process is for a queries to analyze and for a calculating of reports. Some queries are created by concurring an argument and therefore this message is logged. It has no effect on the flowmon functionality.

We recommend use shorter interval for the analysis.

Workaround:  
Notes:  

Comments