|
Message-ID: <BLU118-W462848D6D79F300E8C4205D0E90@phx.gbl> Date: Sun, 28 Dec 2008 02:34:42 +0000 From: Ruben Lara <bermejator@...mail.com> To: <john-users@...ts.openwall.com> Subject: RE: large pot and --show problem Hi all! > Date: Fri, 26 Dec 2008 05:43:31 +0300 > From: solar@...nwall.com > You mentioned that your pot file is 400 MB. How large is the password > file that is slow to --show? And just how much time does --show on it > take to complete? Password file is about 55 MB, to burte force it take ~3 hours, and --show never end :P, well i get it running about 3 days, and continue... > That's weird. If the process consumes very little CPU as you say (below 1%) > and presumably not all memory it could get, then what does it spend most > of its time on? Can you perhaps copy & paste the first few lines of "top" > output while the process is running - those lines that show user vs. > system CPU time percentages, as well as memory and swap usage info? > Also include the line for the "john" process. Tasks: 53 total, 3 running, 50 sleeping, 0 stopped, 0 zombie Cpu(s): 4.7%us, 3.7%sy, 0.0%ni, 0.0%id, 91.3%wa, 0.3%hi, 0.0%si, 0.0%st Mem: 516480k total, 511476k used, 5004k free, 212k buffers Swap: 996020k total, 382872k used, 613148k free, 13344k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2579 bermejo 20 0 575m 325m 348 R 0.7 64.5 0:15.28 john > Then, can you please run "/sbin/hdparm -t" on any relevant hard drive > devices (where your files reside, where the swap partition resides) - > and post the output? bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda4 <---( /home/ where passfiles and john reside) /dev/hda4: Timing buffered disk reads: 80 MB in 3.06 seconds = 26.13 MB/sec bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda2 <--- (Swap) /dev/hda2: Timing buffered disk reads: 92 MB in 3.02 seconds = 30.47 MB/sec bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda3 <--- ( / ) /dev/hda3: Timing buffered disk reads: 92 MB in 3.06 seconds = 30.07 MB/sec >If any IDE hard drives are involved, then please > also do "/sbin/hdparm -d /dev/hda" and the like. One guess is that you > might not have DMA on an IDE drive enabled, and indeed reading 400 MB > without DMA will take ages (well, it may take 2 minutes). bermejo@...MEJO-VIEJO:~$ sudo hdparm -d /dev/hda /dev/hda: using_dma = 1 (on) Look like, it's ok, it's all very strange :/ Thank you for your time Rubén Lara _________________________________________________________________ Algo más que mensajes: comprueba el resto de Windows Live™. http://www.microsoft.com/windows/windowslive/
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.