SOLVED Windows 10 Idle + FreeNAS 9.10 = FreeNAS 100% CPU Usage?

Status
Not open for further replies.
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
Very strange, I know. Logs can be provided if needed. Here's my situation:

Usually I'll have Foobar2000 running in the background while I do other stuff around the house. Recently, it's been skipping like crazy after about 10 minutes, and after pulling up Freenas and looking at the Display System Processes, 'smdb' all of a sudden is using 100% of the CPU on the Freenas machine. Insane thing is, if I start messing with my Windows machine again, I can literally WATCH the CPU drop to normal levels on my Freenas box. So it's Windows, that's causing Freenas to go nutso :D.

Pretty crazy and strange. Anyone had the same issues? Or can point me to an answer?
 
Last edited:
SweetAndLow

SweetAndLow

Sweet'NASty
Joined
Nov 6, 2013
Messages
6,421
Is there network traffic happening? Windows is probably loading data in the background or something similar.

Sent from my Nexus 5X using Tapatalk
 
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
But if, say I have a Youtube video on Mute, while Foobar is running, both machines still operate "Normally". Once FreeNAS reaches that 100% state, it's no longer accepting Network Traffic, because it can't handle it. It's like Windows is "Pushing" FreeNAS to continue, but FreeNAS can't because of the huge CPU use. It's strange, because it could be a bug in Foobar2000 (unlikely), Windows (Most Likely), or FreeNAS (Semi Likely).

EDIT: I'll do some more experimenting (so many hours wasted so far :D), and maybe find some logs if I can. Hopefully it's simple enough that someone knows why first though :D.

EDIT 2: I am seeing huge Memory Usage spikes in FreeNAS during that time too. It's tough to get logs, but working on it :).

EDIT 3: As well as ARC Requests (not sure what that is, myself, but might help :) )
 
Last edited:
D

darkwarrior

Patron
Joined
Mar 29, 2015
Messages
336
Wasse said:
But if, say I have a Youtube video on Mute, while Foobar is running, both machines still operate "Normally". Once FreeNAS reaches that 100% state, it's no longer accepting Network Traffic, because it can't handle it. It's like Windows is "Pushing" FreeNAS to continue, but FreeNAS can't because of the huge CPU use. It's strange, because it could be a bug in Foobar2000 (unlikely), Windows (Most Likely), or FreeNAS (Semi Likely).

EDIT: I'll do some more experimenting (so many hours wasted so far :D), and maybe find some logs if I can. Hopefully it's simple enough that someone knows why first though :D.

EDIT 2: I am seeing huge Memory Usage spikes in FreeNAS during that time too. It's tough to get logs, but working on it :).

EDIT 3: As well as ARC Requests (not sure what that is, myself, but might help :) )
Click to expand...


Hi there,
what are your system specs ?
Looks like you don't have a lot of performance headroom on your server.
What is the Windows version (and associated SMB version) ?
Did you tune your SAMBA settings ? (Disabling atime, etc )
 
wblock

wblock

Documentation Engineer
Joined
Nov 14, 2014
Messages
1,506
Virus scan on the Windows system scanning the Samba share on the FreeNAS system? That would explain why it suddenly stops when there is some interactive load on the Windows system. Likewise, the latest Windows update scans run a lot (it's a terrible single-thread dependency resolution) for a long time (generally a couple of hours on a fast machine) and suddenly go away when they detect interactive use. But that should only be on the Windows system drive, and would not affect the FreeNAS server unless it was in a VM on that same computer. Or you're somehow net-booting Windows and have the system drive on a share, which I don't even want to imagine.
 
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
wblock said:
Virus scan on the Windows system scanning the Samba share on the FreeNAS system? That would explain why it suddenly stops when there is some interactive load on the Windows system. Likewise, the latest Windows update scans run a lot (it's a terrible single-thread dependency resolution) for a long time (generally a couple of hours on a fast machine) and suddenly go away when they detect interactive use. But that should only be on the Windows system drive, and would not affect the FreeNAS server unless it was in a VM on that same computer. Or you're somehow net-booting Windows and have the system drive on a share, which I don't even want to imagine.
Click to expand...

Reproduce the problem and post following:
  • smbstatus output
  • Contents of /var/log/samba4/log.smbd
  • Contents of /usr/local/etc/smb4.conf
Enclose output in [ code ] tags.
 
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
darkwarrior said:
Hi there,
what are your system specs ?
Looks like you don't have a lot of performance headroom on your server.
What is the Windows version (and associated SMB version) ?
Did you tune your SAMBA settings ? (Disabling atime, etc )
Click to expand...

It's been running like a champ since I built it, so it's hard to say if it's hardware if it's just been happening recently. But they are
  • Pentium G3258
  • 16GB RAM (non ECC)
  • 12TB (6x2TB Drives in Raid 0)
  • Intel Gigabit Ethernet
  • FreeNAS-9.10.1-U4
The Windows machine is Windows 10, running SMB 3.1.1. Ya, played with all the Samba settings, off on, nothing helped :(

wblock said:
Virus scan on the Windows system scanning the Samba share on the FreeNAS system?
Click to expand...

I don't have any anti-virus software (I stick with the idea that the best Anti-Virus available, is common sense :D )

anodos said:
Reproduce the problem and post following:
  • smbstatus output
  • Contents of /var/log/samba4/log.smbd
  • Contents of /usr/local/etc/smb4.conf
Enclose output in [ code ] tags.
Click to expand...

Sounds good, I'll get to it and report back :). Thanks everyone!
 
wblock

wblock

Documentation Engineer
Joined
Nov 14, 2014
Messages
1,506
Wasse said:
I don't have any anti-virus software (I stick with the idea that the best Anti-Virus available, is common sense :D )
Click to expand...
In that case, it's a virus infecting every file on the Samba share.
 
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
anodos said:
Reproduce the problem and post following:
  • smbstatus output
  • Contents of /var/log/samba4/log.smbd
  • Contents of /usr/local/etc/smb4.conf
Enclose output in [ code ] tags.
Click to expand...

Alrighty, they are bellow :). I condensed the log.smdb output to what appear over and over and over again :D.

wblock said:
In that case, it's a virus infecting every file on the Samba share.
Click to expand...

I really don't think it's a virus, or ant-virus. If that were the case, I'd have huge Read/Writes to disk when the 100% CPU on the FreeNAS box hits. And that still wouldn't cause 100% CPU usage, just 100% Disk Usage.

smbstatus -
Code:
CPU: 50.0% user,  0.0% nice,  0.6% system,  0.0% interrupt, 49.4% idle
Mem: 110M Active, 440M Inact, 14G Wired, 721M Free
ARC: 13G Total, 3413M MFU, 9176M MRU, 176K Anon, 52M Header, 795M Other
Swap: 14G Total, 14G Free

  PID USERNAME	 THR PRI NICE   SIZE	RES STATE   C   TIME	WCPU COMMAND
89859 root		   1 102	0   332M 31552K CPU1	1   0:37 100.00% smbd
3130 root		  12  20	0   211M 21016K nanslp  0   2:45   0.00% collectd
2856 root		   1  52	0   221M 64120K select  0   0:57   0.00% python2.7
2881 root		   6  20	0   333M   155M select  1   0:15   0.00% python2.7
1591 root		   1 -52   r0  6300K  2272K nanslp  0   0:04   0.00% watchdogd
87537 root		   2  20	0   111M 24500K select  0   0:02   0.00% python2.7
1911 root		   1  20	0 30252K 18100K select  1   0:02   0.00% ntpd
1431 root		   1  20	0 68916K  8892K kqread  0   0:01   0.00% syslog-ng
3826 root		   1  52	0   161M 49676K ttyin   1   0:00   0.00% python2.7
89280 root		   4  52	0   169M 48916K usem	1   0:00   0.00% python2.7
3774 root		   1  52	0 20736K  2340K nanslp  0   0:00   0.00% cron
2616 root		   1  31   10 17060K  3572K wait	0   0:00   0.00% sh
89878 root		   1  20	0 26060K  3120K CPU0	0   0:00   0.00% top
41540 www			1  20	0 34112K  6456K kqread  0   0:00   0.00% nginx
2585 root		   1  20	0 30724K  4632K nanslp  0   0:00   0.00% smartd
88312 root		   1  20	0 88144K  7636K select  1   0:00   0.00% sshd
1166 root		   1  20	0 13772K  5496K select  0   0:00   0.00% devd
88316 root		   1  20	0 27712K  4040K pause   0   0:00   0.00% csh
3764 root		   1  20	0 51704K  4816K select  0   0:00   0.00% zfsd
89193 nobody		 1  20	0 17032K  2716K select  1   0:00   0.00% mdnsd
89766 root		   1  20	0   285M 24860K select  1   0:00   0.00% smbd
89771 root		   1  20	0   270M 21520K select  0   0:00   0.00% winbindd
89762 root		   1  20	0   229M 17680K select  0   0:00   0.00% nmbd
89773 root		   1  20	0   273M 21612K select  0   0:00   0.00% winbindd
1077 _dhcp		  1  20	0 14620K  2204K select  0   0:00   0.00% dhclient
1020 root		   1  52	0 14620K  2176K select  0   0:00   0.00% dhclient
2759 root		   1  20	0 34112K  6116K pause   1   0:00   0.00% nginx
89860 root		   1  20	0   277M 21864K select  0   0:00   0.00% winbindd
89770 root		   1  20	0   282M 24476K select  1   0:00   0.00% smbd
2396 root		   1  20	0 65436K  6968K select  0   0:00   0.00% sshd
3831 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3830 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3828 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3827 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3833 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3832 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3829 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3219 root		   1  20	0 14456K  2000K sigwai  1   0:00   0.00% daemon
2613 root		   1  52	0 12792K  2452K select  0   0:00   0.00% rsync
90004 root		   1  31   10  8224K  1880K nanslp  1   0:00   0.00% sleep
1430 root		   1  52	0 38412K  3600K wait	0   0:00   0.00% syslog-ng
2969 messagebus	 1  52	0 21256K  2780K select  1   0:00   0.00% dbus-daemon




[root@Avalon] ~# smbstatus

Samba version 4.3.11-GIT-UNKNOWN
PID	 Username	  Group		 Machine			Protocol Version
------------------------------------------------------------------------------
89859	 nobody		nobody		Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)
89859	 nobody		nobody		Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)
89859	 Wasse		 wheel		 Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)

Service	  pid	 machine	   Connected at
-------------------------------------------------------
IPC$		 89859   Excalibur	 Wed Dec  7 21:44:20 2016
Avalon	   89859   Excalibur	 Wed Dec  7 21:39:11 2016

Locked files:
Pid		  Uid		DenyMode   Access	  R/W		Oplock		   SharePath   Name   Time
--------------------------------------------------------------------------------------------------
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_freedb2.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/avutil-fb2k-55.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Wasse/Programs   Wed Dec  7 21:39:21 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_dsp_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_dsp_eq.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/zlib1.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Wasse/Programs/foobar2000   Wed Dec  7 21:39:18 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_rgscan.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x120089	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Public/Audio/Music/Queensrÿche/Sign of the Times The Best of Queensrÿche (2007)/10 Jet City Woman.flac   Wed Dec  7 21:39:23 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Public/Audio   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_albumlist.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/avcodec-fb2k-57.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_fileops.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/shared.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   .   Wed Dec  7 21:39:11 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   .   Wed Dec  7 21:39:12 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/foobar2000.exe   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_unpack.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_ALL   0x120196	WRONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/running   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_cdda.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/user-components/foo_input_monkey/foo_input_monkey.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_ui_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_input_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_converter.dll   Wed Dec  7 21:39:20 2016


log.smbd -
Code:
[2016/12/06 00:04:47.072648,  0] ../source3/smbd/negprot.c:686(reply_negprot)
  No protocol supported !


smb4.conf
Code:
[global]
	server max protocol = SMB3_11
	encrypt passwords = yes
	dns proxy = no
	strict locking = no
	oplocks = yes
	deadtime = 15
	max log size = 51200
	max open files = 468245
	logging = file
	load printers = no
	printing = bsd
	printcap name = /dev/null
	disable spoolss = yes
	getwd cache = yes
	guest account = nobody
	map to guest = Bad User
	obey pam restrictions = yes
	directory name cache size = 0
	kernel change notify = no
	panic action = /usr/local/libexec/samba/samba-backtrace
	nsupdate command = /usr/local/bin/samba-nsupdate -g
	server string = Avalon File Server
	ea support = yes
	store dos attributes = yes
	lm announce = yes
	hostname lookups = yes
	time server = yes
	acl allow execute always = true
	dos filemode = yes
	multicast dns register = yes
	domain logons = no
	local master = no
	idmap config *: backend = tdb
	idmap config *: range = 90000001-100000000
	server role = standalone
	netbios name = AVALON
	workgroup = WORKGROUP
	security = user
	pid directory = /var/run/samba
	create mask = 0666
	directory mask = 0777
	client ntlmv2 auth = yes
	dos charset = CP437
	unix charset = UTF-8
	log level = 1


[Avalon]
	path = /mnt/Avalon
	comment = Welcome to Avalon!
	printable = no
	veto files = /.snapshot/.windows/.mac/.zfs/
	writeable = yes
	browseable = yes
	shadow:snapdir = .zfs/snapshot
	shadow:sort = desc
	shadow:localtime = yes
	shadow:format = auto-%Y%m%d.%H%M-1w
	shadow:snapdirseverywhere = yes
	vfs objects = shadow_copy2 zfs_space zfsacl aio_pthread
	hide dot files = no
	guest ok = no
	nfs4:mode = special
	nfs4:acedup = merge
	nfs4:mode = special
	nfs4:acedup = merge
	nfs4:chown = true
	zfsacl:acesort = dontcare
 
D

darkwarrior

Patron
Joined
Mar 29, 2015
Messages
336
Wasse said:
It's been running like a champ since I built it, so it's hard to say if it's hardware if it's just been happening recently. But they are
  • Pentium G3258
  • 16GB RAM (non ECC)
  • 12TB (6x2TB Drives in Raid 0)
  • Intel Gigabit Ethernet
  • FreeNAS-9.10.1-U4
Click to expand...

OMFG! You are having a 6 disk stripe! Are your serious ?! :confused:
I hope for you will not open any post saying that you lost your pool .... :rolleyes:
 
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Wasse said:
Alrighty, they are bellow :). I condensed the log.smdb output to what appear over and over and over again :D.



I really don't think it's a virus, or ant-virus. If that were the case, I'd have huge Read/Writes to disk when the 100% CPU on the FreeNAS box hits. And that still wouldn't cause 100% CPU usage, just 100% Disk Usage.

smbstatus -
Code:
CPU: 50.0% user,  0.0% nice,  0.6% system,  0.0% interrupt, 49.4% idle
Mem: 110M Active, 440M Inact, 14G Wired, 721M Free
ARC: 13G Total, 3413M MFU, 9176M MRU, 176K Anon, 52M Header, 795M Other
Swap: 14G Total, 14G Free

  PID USERNAME	 THR PRI NICE   SIZE	RES STATE   C   TIME	WCPU COMMAND
89859 root		   1 102	0   332M 31552K CPU1	1   0:37 100.00% smbd
3130 root		  12  20	0   211M 21016K nanslp  0   2:45   0.00% collectd
2856 root		   1  52	0   221M 64120K select  0   0:57   0.00% python2.7
2881 root		   6  20	0   333M   155M select  1   0:15   0.00% python2.7
1591 root		   1 -52   r0  6300K  2272K nanslp  0   0:04   0.00% watchdogd
87537 root		   2  20	0   111M 24500K select  0   0:02   0.00% python2.7
1911 root		   1  20	0 30252K 18100K select  1   0:02   0.00% ntpd
1431 root		   1  20	0 68916K  8892K kqread  0   0:01   0.00% syslog-ng
3826 root		   1  52	0   161M 49676K ttyin   1   0:00   0.00% python2.7
89280 root		   4  52	0   169M 48916K usem	1   0:00   0.00% python2.7
3774 root		   1  52	0 20736K  2340K nanslp  0   0:00   0.00% cron
2616 root		   1  31   10 17060K  3572K wait	0   0:00   0.00% sh
89878 root		   1  20	0 26060K  3120K CPU0	0   0:00   0.00% top
41540 www			1  20	0 34112K  6456K kqread  0   0:00   0.00% nginx
2585 root		   1  20	0 30724K  4632K nanslp  0   0:00   0.00% smartd
88312 root		   1  20	0 88144K  7636K select  1   0:00   0.00% sshd
1166 root		   1  20	0 13772K  5496K select  0   0:00   0.00% devd
88316 root		   1  20	0 27712K  4040K pause   0   0:00   0.00% csh
3764 root		   1  20	0 51704K  4816K select  0   0:00   0.00% zfsd
89193 nobody		 1  20	0 17032K  2716K select  1   0:00   0.00% mdnsd
89766 root		   1  20	0   285M 24860K select  1   0:00   0.00% smbd
89771 root		   1  20	0   270M 21520K select  0   0:00   0.00% winbindd
89762 root		   1  20	0   229M 17680K select  0   0:00   0.00% nmbd
89773 root		   1  20	0   273M 21612K select  0   0:00   0.00% winbindd
1077 _dhcp		  1  20	0 14620K  2204K select  0   0:00   0.00% dhclient
1020 root		   1  52	0 14620K  2176K select  0   0:00   0.00% dhclient
2759 root		   1  20	0 34112K  6116K pause   1   0:00   0.00% nginx
89860 root		   1  20	0   277M 21864K select  0   0:00   0.00% winbindd
89770 root		   1  20	0   282M 24476K select  1   0:00   0.00% smbd
2396 root		   1  20	0 65436K  6968K select  0   0:00   0.00% sshd
3831 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3830 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3828 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3827 root		   1  52	0 14484K  2048K ttyin   1   0:00   0.00% getty
3833 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3832 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3829 root		   1  52	0 14484K  2048K ttyin   0   0:00   0.00% getty
3219 root		   1  20	0 14456K  2000K sigwai  1   0:00   0.00% daemon
2613 root		   1  52	0 12792K  2452K select  0   0:00   0.00% rsync
90004 root		   1  31   10  8224K  1880K nanslp  1   0:00   0.00% sleep
1430 root		   1  52	0 38412K  3600K wait	0   0:00   0.00% syslog-ng
2969 messagebus	 1  52	0 21256K  2780K select  1   0:00   0.00% dbus-daemon




[root@Avalon] ~# smbstatus

Samba version 4.3.11-GIT-UNKNOWN
PID	 Username	  Group		 Machine			Protocol Version
------------------------------------------------------------------------------
89859	 nobody		nobody		Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)
89859	 nobody		nobody		Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)
89859	 Wasse		 wheel		 Excalibur	(ipv4:192.168.1.4:50395) Unknown (0x0311)

Service	  pid	 machine	   Connected at
-------------------------------------------------------
IPC$		 89859   Excalibur	 Wed Dec  7 21:44:20 2016
Avalon	   89859   Excalibur	 Wed Dec  7 21:39:11 2016

Locked files:
Pid		  Uid		DenyMode   Access	  R/W		Oplock		   SharePath   Name   Time
--------------------------------------------------------------------------------------------------
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_freedb2.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/avutil-fb2k-55.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Wasse/Programs   Wed Dec  7 21:39:21 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_dsp_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_dsp_eq.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/zlib1.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Wasse/Programs/foobar2000   Wed Dec  7 21:39:18 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_rgscan.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x120089	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Public/Audio/Music/Queensrÿche/Sign of the Times The Best of Queensrÿche (2007)/10 Jet City Woman.flac   Wed Dec  7 21:39:23 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   Public/Audio   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_albumlist.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/avcodec-fb2k-57.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_fileops.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/shared.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   .   Wed Dec  7 21:39:11 2016
89859		1001	   DENY_NONE  0x100081	RDONLY	 NONE			 /mnt/Avalon   .   Wed Dec  7 21:39:12 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/foobar2000.exe   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_unpack.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_ALL   0x120196	WRONLY	 EXCLUSIVE+BATCH  /mnt/Avalon   Wasse/Programs/foobar2000/running   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_cdda.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/user-components/foo_input_monkey/foo_input_monkey.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_ui_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_input_std.dll   Wed Dec  7 21:39:20 2016
89859		1001	   DENY_WRITE 0x1000a1	RDONLY	 LEVEL_II		 /mnt/Avalon   Wasse/Programs/foobar2000/components/foo_converter.dll   Wed Dec  7 21:39:20 2016


log.smbd -
Code:
[2016/12/06 00:04:47.072648,  0] ../source3/smbd/negprot.c:686(reply_negprot)
  No protocol supported !


smb4.conf
Code:
[global]
	server max protocol = SMB3_11
	encrypt passwords = yes
	dns proxy = no
	strict locking = no
	oplocks = yes
	deadtime = 15
	max log size = 51200
	max open files = 468245
	logging = file
	load printers = no
	printing = bsd
	printcap name = /dev/null
	disable spoolss = yes
	getwd cache = yes
	guest account = nobody
	map to guest = Bad User
	obey pam restrictions = yes
	directory name cache size = 0
	kernel change notify = no
	panic action = /usr/local/libexec/samba/samba-backtrace
	nsupdate command = /usr/local/bin/samba-nsupdate -g
	server string = Avalon File Server
	ea support = yes
	store dos attributes = yes
	lm announce = yes
	hostname lookups = yes
	time server = yes
	acl allow execute always = true
	dos filemode = yes
	multicast dns register = yes
	domain logons = no
	local master = no
	idmap config *: backend = tdb
	idmap config *: range = 90000001-100000000
	server role = standalone
	netbios name = AVALON
	workgroup = WORKGROUP
	security = user
	pid directory = /var/run/samba
	create mask = 0666
	directory mask = 0777
	client ntlmv2 auth = yes
	dos charset = CP437
	unix charset = UTF-8
	log level = 1


[Avalon]
	path = /mnt/Avalon
	comment = Welcome to Avalon!
	printable = no
	veto files = /.snapshot/.windows/.mac/.zfs/
	writeable = yes
	browseable = yes
	shadow:snapdir = .zfs/snapshot
	shadow:sort = desc
	shadow:localtime = yes
	shadow:format = auto-%Y%m%d.%H%M-1w
	shadow:snapdirseverywhere = yes
	vfs objects = shadow_copy2 zfs_space zfsacl aio_pthread
	hide dot files = no
	guest ok = no
	nfs4:mode = special
	nfs4:acedup = merge
	nfs4:mode = special
	nfs4:acedup = merge
	nfs4:chown = true
	zfsacl:acesort = dontcare
Click to expand...

Foobar2000? Exactly.

Why am I seeing oplocked DLL files for this application on your samba share? Running an application directly off of a samba share is probably not a good idea.
 
Last edited:
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
You guys seem to think I am dumber than I really am, I'll figure it out myself if all I'm going to get is disrespect...

darkwarrior said:
OMFG! You are having a 6 disk stripe! Are your serious ?! :confused:
Click to expand...

I have another 12TB Backup Linux Machine that does daily Rsync of it. As well as a Weekly Offsite 12TB Machine Backup. 6 Disk Stripe means no worrying about rebuilding errors if something goes down. I don't trust anything higher than Raid 0, from experience :(.

anodos said:
Foobar2000? Exactly.
Click to expand...

The Portable install of Foobar2000 that runs off the server, hasn't changed in years, the only thing that has is FreeNAS and Windows. To test, I moved it OFF the server, and ran it straight from the Windows Machine... Still, 100% CPU usage in FreeNAS. It's defiantly not Foobar causing it.

anodos said:
Windows defender is baked into windows 10. If security depended on common sense, we'd all be doomed.
Click to expand...

Windows Defender can be disabled if you are running Windows 10 Pro and disable it under Group Policy, which I have done. I know, trust, and vet the software I install on my machines. If I don't, I run it in a Virtual Machine on one of my servers. If there's a vulnerability in the software I'm running, and Anti-Virus won't fix that, updates will. If a virus is bundled into something I install, the chances that the Anti-Virus can identify it are not 100%, and can't 100% clean it. So in the end, Anti-Viruses best for Common Users, and Common Sense is best for Advanced. Same reason running an Anti-Virus on Linux is a little pointless... If you're screwed, your screwed :D
 
Last edited:
anodos

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Wasse said:
I won't post it, but I will do it, and take a look through it on my own. Thanks guys, I'll take it from here :).
Click to expand...

If you get stuck, try increasing Samba's logging verbosity through "services" -> "SMB".
A few other things to look at:

- dtrace the smbd process that is at 100%
- use tcpdump to perform a packet capture on network traffic from the host that is causing smbd to go to 100%. You can find the host by comparing "top" output with "smbstatus" output.

Basically, try to figure out what the client is doing / trying to do.
 
D

darkwarrior

Patron
Joined
Mar 29, 2015
Messages
336
Wasse said:
You guys seem to think I am dumber than I really am, I'll figure it out myself if all I'm going to get is disrespect...

I have another 12TB Backup Linux Machine that does daily Rsync of it. As well as a Weekly Offsite 12TB Machine Backup. 6 Disk Stripe means no worrying about rebuilding errors if something goes down. I don't trust anything higher than Raid 0, from experience :(.
Click to expand...

Mate, did not mean to be disrespectful, but dude what's the point of running ZFS without redundancy ?
But well is your choice, so I will not think about it anymore :cool:

You seem to think you know what you're doing, so good luck on your endeavors, especially running without Anti-Virus software ...
 
Wasse

Wasse

Dabbler
Joined
Dec 20, 2014
Messages
13
anodos said:
If you get stuck, try increasing Samba's logging verbosity through "services" -> "SMB".
A few other things to look at:

- dtrace the smbd process that is at 100%
- use tcpdump to perform a packet capture on network traffic from the host that is causing smbd to go to 100%. You can find the host by comparing "top" output with "smbstatus" output.

Basically, try to figure out what the client is doing / trying to do.
Click to expand...

Thank you, I will try that out. You have been the most helpful in this thread, and I appreciate it :)

darkwarrior said:
Mate, did not mean to be disrespectful, but dude what's the point of running ZFS without redundancy ?
Click to expand...

My redundancy is on two other 12TB systems, one local, and one off-site. Relying on anything higher than Raid0 is asking for trouble by relying on rebuilding errors

darkwarrior said:
especially running without Anti-Virus software ...
Click to expand...

A 0 Day vulnerability wouldn't be caught by crap like Norton (which I consider a Virus itself). Or Windows Defender for DAYS. Installing something on Windows with Admin Privileges (which all programs do) lets that program do whatever it wants while installing, virus or not. Norton could catch it... but probably won't.

So all that's really left is Common Sense. Install open-source programs that you trust. Know what you're downloading. Read the install pages in case they want to install ad-ware, and click "No".

Just to prove my point, I ran a Windows Defender scan on my entire network, Samba shares, and Windows machines... 100% clean... and that's after no Anti-Virus for a years and years.
 
JRG

JRG

Cadet
Joined
Dec 27, 2016
Messages
3
The thread title says "Solved", but I don't a post indicating what the problem was — just curious, it might save someone else running into the problem.
 
Status
Not open for further replies.

Similar threads

P
Windows 10 vm bhyve 100% cpu
Replies
3
Views
2K
photograaf16
P
F
  • Locked
python 3.6 causes high cpu usage on idle
Replies
2
Views
2K
vlado99
vlado99
A
FreeNAS 11.3-U2.1 virtual machine for Windows 10 install keep rebooting
Replies
4
Views
2K
anchen
A
C
  • Locked
FreeNAS to send shutdown signal to Windows 10 PC when UPS on battery power
Replies
3
Views
3K
m0nkey_
m0nkey_
D
  • Locked
Windows VM freezing
Replies
5
Views
4K
chris crude
C
Top