[Zeek] Workers occasionally using 102% CPU

Jon Siwek jsiwek at corelight.com
Wed Mar 4 20:48:15 PST 2020


On Wed, Mar 4, 2020 at 12:44 PM Doug Burks <doug.burks at gmail.com> wrote:

> Just a quick note to confirm that I'm seeing much time spent in `threading::Manager::NextTimestamp` here as well.

That didn't turn out to be directly related, but I did ultimately hunt
down a race condition in Broker as explanation for it getting stuck at
full CPU load.  This is the incoming patch:

    https://github.com/zeek/broker/pull/97

Thanks for the assists in tracking this down.  Any further help in
verifying the patch would also be great.

- Jon


More information about the Zeek mailing list