Process nfdumpd has been stopped to prevent a memory overload
Information
| Summary: |
Process nfdumpd has been stopped to prevent a memory overload. |
| Environment: |
Product: Flowmon Version: any Platform: any |
| Question/Problem Description: |
In system messages appeared Process nfdumpd has been stopped to prevent a memory overload. Also you can find these related messages in dmesg: Out of memory: Kill process X (nfdump) score X or sacrifice child Killed process X (nfdumpd), UID 500, total-vm:X kB, anon-rss:X kB, file-rss:XkB, shmem-rss:X kB System memory is almost full. Turn off some unnecessary functions |
| Steps to Reproduce: | |
| Error Message: | Process nfdumpd has been stopped to prevent a memory overload. |
| Defect Number: | |
| Enhancement Number: | |
| Cause: |
In general, this can cause a query for a large amount of flows where sorting or aggregation was used. In that case, not all flows fit in memory, so nfdump was killed by the OOM killer. |
| Resolution: |
You can try to find this query in /data/components/nftools/log/nfdump.log and determine parameters of the query, how much memory it took and which user made this query. Nfdump process is for a queries to analyze and for a calculating of reports. Some queries are created by concurring an argument and therefore this message is logged. It has no effect on the flowmon functionality. We recommend use shorter interval for the analysis. |
| Workaround: | |
| Notes: |