Its glusterfs and glusterfsd process.
I looked at the capture file and see that the lookup is
being made on random files.
[guru@srv2 ~]$ sudo netstat -tpn | grep
49152
tcp 0 0 127.0.0.1:49152
127.0.0.1:1012 ESTABLISHED
18611/glusterfsd
tcp 0 0 127.0.0.1:49152
127.0.0.1:1016 ESTABLISHED
18611/glusterfsd
tcp 0 0 127.0.0.1:1016
127.0.0.1:49152 ESTABLISHED
18625/glusterfs
tcp 0 0 10.8.0.6:1021
10.8.0.1:49152 ESTABLISHED 1055/glusterfs
tcp 0 0 10.8.0.6:49152
10.8.0.1:1017 ESTABLISHED
18611/glusterfsd
tcp 0 0 10.8.0.6:1020
10.8.0.1:49152 ESTABLISHED
18629/glusterfs
tcp 0 0 127.0.0.1:1023
127.0.0.1:49152 ESTABLISHED
18629/glusterfs
tcp 0 0 10.8.0.6:49152
10.8.0.1:1022 ESTABLISHED
18611/glusterfsd
tcp 0 0 10.8.0.6:49152
10.8.0.1:1021 ESTABLISHED
18611/glusterfsd
tcp 0 0 127.0.0.1:49152
127.0.0.1:1023 ESTABLISHED
18611/glusterfsd
tcp 0 0 127.0.0.1:1012
127.0.0.1:49152 ESTABLISHED 1055/glusterfs
tcp 0 0 10.8.0.6:1019
10.8.0.1:49152 ESTABLISHED
18625/glusterfs
[guru@srv2 ~]$ ps -v 18611
Warning: bad syntax, perhaps a bogus '-'?
See /usr/share/doc/procps-3.2.8/FAQ
PID TTY STAT TIME MAJFL TRS
DRS RSS %MEM COMMAND
18611 ? Ssl 14:12 0 0
650068 20404 2.0 /usr/sbin/glusterfsd -s srv2
--volfile-id gv0.srv2.root-gluster-vol0 -p
/var/lib/glusterd/vols/gv0
[guru@srv2 ~]$ ps -v 18629
Warning: bad syntax, perhaps a bogus '-'?
See /usr/share/doc/procps-3.2.8/FAQ
PID TTY STAT TIME MAJFL TRS
DRS RSS %MEM COMMAND
18629 ? Ssl 0:04 0 0
333296 17380 1.7 /usr/sbin/glusterfs -s localhost
--volfile-id gluster/glustershd -p
/var/lib/glusterd/glustershd/r
[guru@srv2 ~]$
[guru@srv2 ~]$
[guru@srv2 ~]$ ps -v 18629
Warning: bad syntax, perhaps a bogus '-'?
See /usr/share/doc/procps-3.2.8/FAQ
PID TTY STAT TIME MAJFL TRS
DRS RSS %MEM COMMAND
18629 ? Ssl 0:04 0 0
333296 17380 1.7 /usr/sbin/glusterfs -s localhost
--volfile-id gluster/glustershd -p
/var/lib/glusterd/glustershd/run/glustershd.pid -l
/var/log/glusterfs/glustershd.log -S
/var/run/823fa3197e2d1841be888
[guru@srv2 ~]$
[guru@srv2 ~]$
[guru@srv2 ~]$
[guru@srv2 ~]$
[guru@srv2 ~]$ ps -v 18629
Warning: bad syntax, perhaps a bogus '-'?
See /usr/share/doc/procps-3.2.8/FAQ
PID TTY STAT TIME MAJFL TRS
DRS RSS %MEM COMMAND
18629 ? Ssl 0:04 0 0
333296 17380 1.7 /usr/sbin/glusterfs -s localhost
--volfile-id gluster/glustershd -p
/var/lib/glusterd/glustershd/run/glustershd.pid -l
/var/log/glusterfs/glustershd.log -S
/var/run/823fa3197e2d1841be8881500723b063.socket
--xlator-option *replicate*.node-uuid=84af83c9-0a29-
[guru@srv2 ~]$
[guru@srv2 ~]$
[guru@srv2 ~]$ ps -v 18625
Warning: bad syntax, perhaps a bogus '-'?
See /usr/share/doc/procps-3.2.8/FAQ
PID TTY STAT TIME MAJFL TRS
DRS RSS %MEM COMMAND
18625 ? Ssl 0:03 0 0
239528 41040 4.0 /usr/sbin/glusterfs -s localhost
--volfile-id gluster/nfs -p
/var/lib/glusterd/nfs/run/nfs.pid -l
/var/log/glusterfs/nfs.log -S
/var/run/5ad5b036fd636cc5dddffa73593e4089.socket
[guru@srv2 ~]$ sudo nethogs tun0
[guru@srv2 ~]$ rpm -qa | grep gluster
glusterfs-3.5.1-1.el6.x86_64
glusterfs-cli-3.5.1-1.el6.x86_64
glusterfs-libs-3.5.1-1.el6.x86_64
glusterfs-fuse-3.5.1-1.el6.x86_64
glusterfs-server-3.5.1-1.el6.x86_64
glusterfs-api-3.5.1-1.el6.x86_64
[guru@srv2 ~]$
I don’t see anything odd here. Please suggest.
Gurdeep.