LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-09-2007, 12:15 AM   #1
Perquisitor
Member
 
Registered: Jul 2004
Location: Panama City Beach, Florida
Distribution: Debian Etch
Posts: 150

Rep: Reputation: 15
how can I check my system?


I've been running Debian for over a year now with no problems until about two weeks ago. I noticed that my browser, Iceweasel, just sits there when I'm trying to access a web site. Sometimes it is just sluggish...taking a few moments to load the page; other times it sits there for a couple minutes before loading......sometimes it never loads...just stalls. I have cabel high speed, I have guarddog installed.
I thought it was my internet provider, but when I use the windows side of my computer with firefox, I can browse the internet lightning fast...never stalling or even a bit sluggish.
My concern is that I may have hackers or spyware on my linux side which is using up my cpu. How can I check my system? I have no idea what programs are available to disinfect a linux system.
 
Old 12-09-2007, 07:32 AM   #2
esaym
Member
 
Registered: Nov 2006
Distribution: Lots of Debian
Posts: 165

Rep: Reputation: 32
I have also noticed sluggishness with iceweasel but I run debian-testing with kde. When iceweasel starts running slow, if I use konqueror it is always nice and snappy.

Not sure what to tell you. I am almost positive that you don't have any spyware or viruses since that is almost impossible.
 
Old 12-09-2007, 08:22 AM   #3
elluva
Member
 
Registered: Aug 2003
Location: Belguim, Ostend and Ghent
Distribution: Ubuntu
Posts: 600

Rep: Reputation: 30
I am quite sure that you're not infected with anything. You should check check if the settings for your internet connection are ok (address, netmask,...). Do you have the same problem with other (internal and external) network traffic? Have you tried turning off your firewall?
 
Old 12-09-2007, 10:12 AM   #4
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by Perquisitor
I noticed that my browser, Iceweasel, just sits there when I'm trying to access a web site. Sometimes it is just sluggish...taking a few moments to load the page; other times it sits there for a couple minutes before loading......sometimes it never loads...just stalls.
While there is no way of knowing that your box hasn't been cracked all kinds of ways, the symptoms you describe in this post wouldn't lead me to that conclusion.

Is it more often sluggish while resolving names (before the page starts to load at all)? Or does the page start to load right away, but then takes a very long time to finish?

While we're at it, you may as well post the results of the following commands:
  • cat /etc/resolv.conf (to see if you're using some router/NAT device as a nameserver)
  • /sbin/ifconfig (to see if your NIC is reporting errors)
 
Old 12-09-2007, 06:11 PM   #5
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Additionally, open a new account on the box and then see if the fresh browser on said account behaves slugishly also. If it doesn't, then at least you know the slugishness is confined to your account. In that case, backup your current browser config and see if starting with a fresh one helps.

Last edited by win32sux; 12-09-2007 at 06:17 PM.
 
Old 12-10-2007, 01:07 AM   #6
Perquisitor
Member
 
Registered: Jul 2004
Location: Panama City Beach, Florida
Distribution: Debian Etch
Posts: 150

Original Poster
Rep: Reputation: 15
to the /sbin/ifconfig command:

eth0 Link encap:Ethernet HWaddr 00:15:F23:0A:1F
inet addr:69.73.118.61 Bcast:69.73.118.255 Mask:255.255.255.0
inet6 addr: fe80::215:f2ff:fed3:a1f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1012 errors:0 dropped:0 overruns:0 frame:0
TX packets:732 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:620297 (605.7 KiB) TX bytes:118481 (115.7 KiB)
Interrupt:209 Base address:0xc400

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:58 errors:0 dropped:0 overruns:0 frame:0
TX packets:58 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3460 (3.3 KiB) TX bytes:3460 (3.3 KiB)


to the cat /etc/resolv.conf :

search knology.net
nameserver 69.1.30.50
nameserver 69.1.30.51


and.... it's very sluggish, or stalls for a considerable amount of time ( two to three minutes ) before the page starts loading. It will stay on the page I'm on, indicating that it's looking up the next URL, but nothing happens for some time.
 
Old 12-10-2007, 02:14 AM   #7
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by Perquisitor View Post
and.... it's very sluggish, or stalls for a considerable amount of time ( two to three minutes ) before the page starts loading. It will stay on the page I'm on, indicating that it's looking up the next URL, but nothing happens for some time.
Even on a brand-new user account?

Last edited by win32sux; 12-10-2007 at 02:16 AM.
 
Old 12-10-2007, 08:58 AM   #8
Perquisitor
Member
 
Registered: Jul 2004
Location: Panama City Beach, Florida
Distribution: Debian Etch
Posts: 150

Original Poster
Rep: Reputation: 15
sorry about that; didn't realize you were asking for that info from new user account. Here is info from new user account:

rosco@oregon:~$ cat etc/resolv.conf
cat: etc/resolv.conf: No such file or directory

rosco@oregon:~$ /sbin/ifconfig
eth0 Link encap:Ethernet HWaddr 00:15:F23:0A:1F
inet addr:69.73.118.61 Bcast:69.73.118.255 Mask:255.255.255.0
inet6 addr: fe80::215:f2ff:fed3:a1f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:18742 errors:0 dropped:0 overruns:0 frame:0
TX packets:11768 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:22298028 (21.2 MiB) TX bytes:1290687 (1.2 MiB)
Interrupt:209 Base address:0xc400

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:78 errors:0 dropped:0 overruns:0 frame:0
TX packets:78 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4620 (4.5 KiB) TX bytes:4620 (4.5 KiB)
 
Old 12-10-2007, 09:02 AM   #9
Perquisitor
Member
 
Registered: Jul 2004
Location: Panama City Beach, Florida
Distribution: Debian Etch
Posts: 150

Original Poster
Rep: Reputation: 15
and oh... forgot to add.... yes, it's still very sluggish in the new user account as well. it took several minutes to post these two comments. very aggravating.... I've had such good luck with Linux for such a long time; especially not knowing much about its internal workings.
 
Old 12-10-2007, 09:44 AM   #10
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
cat etc/resolv.conf
and you forgot a /


Which debian is it?
 
Old 12-10-2007, 10:50 AM   #11
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by Perquisitor
it's very sluggish, or stalls for a considerable amount of time ( two to three minutes ) before the page starts loading. It will stay on the page I'm on, indicating that it's looking up the next URL, but nothing happens for some time.
What a pain. I'd suggest trying out a different nameserver.

You don't have to keep it this way permanently, but for testing purposes, change your /etc/resolv.conf file to look exactly like this:
Code:
nameserver 208.67.222.222
nameserver 208.67.220.220
Those nameservers are provided by opendns. Make those changes (i.e. remove what used to be there and replace it with what I posted) and save the /etc/resolv.conf file. Now try cruising the web -- is it quicker?
 
Old 12-10-2007, 11:00 AM   #12
Perquisitor
Member
 
Registered: Jul 2004
Location: Panama City Beach, Florida
Distribution: Debian Etch
Posts: 150

Original Poster
Rep: Reputation: 15
oh.... yes, yes I did forget a / perhaps this will work...

rosco@oregon:~$ cat /etc/resolv.conf
search knology.net
nameserver 69.1.30.50
nameserver 69.1.30.51
rosco@oregon:~$


and I'm using Debian Etch (stable)
 
Old 12-10-2007, 12:04 PM   #13
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
Try the stuff from anomie.
Quote:
search knology.net
Argg these search lines are really a pain, I superseed them in dhclient.conf to "search ."

wasn't there something to tweak for firefox to not do IPV6 also?

Last edited by nx5000; 12-10-2007 at 12:05 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
An error Occurred during the file system check. Dropping you to shell; the system wil aneikei Linux - Newbie 3 02-11-2010 07:38 PM
how to check why a system crash seefor Linux - Server 5 07-19-2007 10:33 PM
file system check GoBoy Linux - Software 1 03-27-2005 04:39 AM
What to Check to make sure system is OK asmith1972 Linux - Newbie 7 05-20-2004 07:13 AM
file system check nakkaya Linux - Software 5 03-14-2003 11:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration