secons -i Function Display Run-time Statistics on UNIX

Valid on UNIX
capamsc141
Valid on UNIX
The secons utility displays 
PAM Server Control
run-time statistics about system behavior including:
Network connection requests.
  • Current service levels for FILE protection rules
  • The size of the audit and error log queues
  • The size of cached tables
  • The size of the database
  • The number of records in each part of the database
This command has the following format:
secons -i
  • -i
    Displays runtime statistics as formatted text.
Example: Display run-time data
The following example shows the output of the secons -i command:
Runtime Statistics:
--------------------
           INet statistics:
                 Requests denied   : 0
                 Requests granted  : 17
                 Errors found      : 0
           Queues size:
                 Audit log: 0
                 Error log: 0
           Cached tables info:
                 ACEE handles      :      11
                 Protected clients :      0
                 Trusted programs  :      77
                 Untrusted programs:      3
           Database info: (Record count & first free ID)
                 Classes     :    235 ( CID     0x00f0 )
                 Properties  :   4829 ( PID     0x1346 )
                 Objects     :    842 ( OID 0x0000035a )
                 PropVals    :   4109 ( N/A )
CA PAMSC memory utilization statistics:
-----------------------------------------------
CA PAMSC security daemon (seosd, pid=4265 Total=13MB Res=8MB)
CA PAMSC agent daemon (seagent, pid=4268 Total=10MB Res=3MB)
CA PAMSC watchdog daemon (seoswd, pid=4276 Total=6MB Res=3MB)
CA PAMSC policyfetcher daemon (policyfetcher, pid=4331 Total=11MB Res=1MB)
CA PAMSC AgentManager daemon (AgentManager, pid=4561 Total=22MB Res=3MB)
Kernel load statistic:
Queue: ----- FILE: SEOS current queue depth : 0 SEOS max queue depth : 1 SEOS current queue rate  : 0 req/msec SEOS max queue rate  : 0 req/msec SURROGATE: SEOS current queue depth : 0 SEOS max queue depth : 1 SEOS current queue rate  : 0 req/msec SEOS max queue rate  : 0 req/msec Total: SEOS current queue depth : 0 SEOS max queue depth : 2 SEOS current queue rate  : 0 req/msec SEOS max queue rate  : 20 req/msec Syscalls: ------- FILE: Active SEOS handlers : 0 syscs SEOS hanlers calling rate  : 0.086678 sysc/msec(406 handlers within 4684 msecs) Average processing time  : 0.014742 msecs (407 handlers within 6 msecs) SURROGATE: Active SEOS handlers : 0 syscs SEOS hanlers calling rate  : 0.000043 sysc/msec(363 handlers within 8368826 msecs) Average processing time  : 0.126374 msecs (364 handlers within 46 msecs)
          ----------------------
The following code explains each line in the preceding output:
INet statistics:
      Requests denied   : 0
      Requests granted  : 17
      Errors found      : 0
Displays statistics of network access authorization that is performed by
PAM Server Control
. These lines summarize the number of denials, grants, and errors during the authorization of network requests.
Queues size:
      Audit log: 0
      Error log: 0
The product creates logging with file locking and so it is possible that certain events are held in memory and written to log files after a while. If these values exceed 10, then an error could be interfering with the product logging facility.
Cached tables info:
      ACEE handles      :      11
      Protected clients :      0
      Trusted programs  :      77
      Untrusted programs:      3
Displays information about the size of cached tables 
PAM Server Control
uses:
  • Accessor Element Entry (
    ACEE)
    is a table containing logged-in processes.
  • Protected clients
    list the number of cached clients. Usually, this value is 0.
  • Trusted Programs
    lists the number of entries in class PROGRAM that are cached in memory. Typically, all programs should be cached as trusted.
  • Untrusted Programs
    displays the number of programs that were found to be untrusted.
Database info: (Record count & first free ID)
      Classes     :    235 ( CID     0x00f0 )
      Properties  :   4829 ( PID     0x1346 )
      Objects     :    842 ( OID 0x0000035a )
      PropVals    :   4109 ( N/A )
General information regarding the size of the database and the number of records in each part of the database.
Displays information about the size of the memory the following daemons use: seosd, seagent, seoswd, policyfetcher, and AgentManager:
CA PAMSC memory utilization statistics:
-----------------------------------------------
CA PAMSC security daemon (seosd, pid=4265 Total=13MB Res=8MB)
CA PAMSC agent daemon (seagent, pid=4268 Total=10MB Res=3MB)
CA PAMSC watchdog daemon (seoswd, pid=4276 Total=6MB Res=3MB)
CA PAMSC policyfetcher daemon (policyfetcher, pid=4331 Total=11MB Res=1MB)
CA PAMSC AgentManager daemon (AgentManager, pid=4561 Total=22MB Res=3MB)
The 
PAM Server Control
Watchdog daemon monitors the memory use of the daemons based on the interval that is defined in the ProcVSizeInterval token. If a process exceeds the specified watermark in the ProcVSizeHigh token, the Watchdog restarts the process within the time frame that is defined in the ProcRestartHours token. If a process exceeds the memory size that is specified in the ProcVSizeCritical token, the Watchdog daemon immediately restarts the process.