samba - Aug 2006 - Rogue process

An old problem has started to reappear with our Solaris (2.8) Samba (3.0.23b). 
This was after an upgrade from 3.0.22 in which the problem was worse. 
Occasionally an smbd process will go "rogue" and start consuming CPU
cycles
until killed. I did a truss of the process and got back this tight loop.

fcntl(27, F_SETLKW64, 0xFFBEEF98)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF010)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF208)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF280)               = 0
time()                                          = 1156517189
fcntl(27, F_SETLKW64, 0xFFBEEEC8)               = 0
fcntl(27, F_SETLKW64, 0xFFBEEF40)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF138)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF1B0)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF138)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF1B0)               = 0
fcntl(17, F_SETLKW64, 0xFFBEEB40)               = 0
fcntl(17, F_SETLKW64, 0xFFBEEB40)               = 0
time()                                          = 1156517189
fcntl(17, F_SETLKW64, 0xFFBEE850)               = 0
fcntl(17, F_SETLKW64, 0xFFBEE8C8)               = 0
write(25, "\0\0\0A7FF S M B %\0\0\0".., 171)    = 171
poll(0xFFBEF7C0, 2, 60000)                      = 1
read(25, "\0\0\0 {", 4)                         = 4
read(25, "FF S M B %\0\0\0\01807D8".., 123)     = 123
time()                                          = 1156517189
fcntl(27, F_SETLKW64, 0xFFBEEF98)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF010)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF208)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF280)               = 0
time()                                          = 1156517189
fcntl(27, F_SETLKW64, 0xFFBEEEC8)               = 0
fcntl(27, F_SETLKW64, 0xFFBEEF40)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF138)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF1B0)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF138)               = 0
fcntl(27, F_SETLKW64, 0xFFBEF1B0)               = 0
fcntl(17, F_SETLKW64, 0xFFBEEB40)               = 0
fcntl(17, F_SETLKW64, 0xFFBEEB40)               = 0
time()                                          = 1156517189
fcntl(17, F_SETLKW64, 0xFFBEE850)               = 0
fcntl(17, F_SETLKW64, 0xFFBEE8C8)               = 0
write(25, "\0\0\0A7FF S M B %\0\0\0".., 171)    = 171
poll(0xFFBEF7C0, 2, 60000)                      = 1
read(25, "\0\0\0 {", 4)                         = 4
read(25, "FF S M B %\0\0\0\01807D8".., 123)     = 123
 
Can anyone explain to me what I am seeing so that I can stop this? Please let 
me know if I've left anything helpful out. I'm new at this.
-- 
Jonathan M. Prigot
Brigham and Women's Hospital
900 Commonwealth Ave., East
Boston, MA 02215-1213
617-278-0794
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20060825/7bfae695/attachment.bin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan M. Prigot wrote:
> Can anyone explain to me what I am seeing so that I 
> can stop this? Please let  me know if I've left
> anything helpful out. I'm new at this.
Are you sure this is not a chatty client sending a
lot of network traffic?   Get a trace from ethereal
and look for a large amount of traffic from a single
client.




cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE7yYNIR7qMdg1EfYRAsoCAKC8rw0a1aMu9U8Mhec7t6Wp7xl5xQCePVyB
CSiadC6Mpe+hNRGiKabl8ms=t7Dl
-----END PGP SIGNATURE-----