blob: 7f268f327d750e725f1e5ca5ddfe99dcb8014cd5 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001------------------------------------------------------------------------------
2 T H E /proc F I L E S Y S T E M
3------------------------------------------------------------------------------
4/proc/sys Terrehon Bowden <terrehon@pacbell.net> October 7 1999
5 Bodo Bauer <bb@ricochet.net>
6
72.4.x update Jorge Nerin <comandante@zaralinux.com> November 14 2000
8------------------------------------------------------------------------------
9Version 1.3 Kernel version 2.2.12
10 Kernel version 2.4.0-test11-pre4
11------------------------------------------------------------------------------
12
13Table of Contents
14-----------------
15
16 0 Preface
17 0.1 Introduction/Credits
18 0.2 Legal Stuff
19
20 1 Collecting System Information
21 1.1 Process-Specific Subdirectories
22 1.2 Kernel data
23 1.3 IDE devices in /proc/ide
24 1.4 Networking info in /proc/net
25 1.5 SCSI info
26 1.6 Parallel port info in /proc/parport
27 1.7 TTY info in /proc/tty
28 1.8 Miscellaneous kernel statistics in /proc/stat
29
30 2 Modifying System Parameters
31 2.1 /proc/sys/fs - File system data
32 2.2 /proc/sys/fs/binfmt_misc - Miscellaneous binary formats
33 2.3 /proc/sys/kernel - general kernel parameters
34 2.4 /proc/sys/vm - The virtual memory subsystem
35 2.5 /proc/sys/dev - Device specific parameters
36 2.6 /proc/sys/sunrpc - Remote procedure calls
37 2.7 /proc/sys/net - Networking stuff
38 2.8 /proc/sys/net/ipv4 - IPV4 settings
39 2.9 Appletalk
40 2.10 IPX
41 2.11 /proc/sys/fs/mqueue - POSIX message queues filesystem
Jan-Frode Myklebustd7ff0db2006-09-29 01:59:45 -070042 2.12 /proc/<pid>/oom_adj - Adjust the oom-killer score
43 2.13 /proc/<pid>/oom_score - Display current oom-killer score
Roland Kletzingf9c99462007-03-05 00:30:54 -080044 2.14 /proc/<pid>/io - Display the IO accounting fields
Kawai, Hidehirobb901102007-07-19 01:48:31 -070045 2.15 /proc/<pid>/coredump_filter - Core dump filtering settings
Ram Pai2d4d4862008-03-27 13:06:25 +010046 2.16 /proc/<pid>/mountinfo - Information about mounts
Linus Torvalds1da177e2005-04-16 15:20:36 -070047
48------------------------------------------------------------------------------
49Preface
50------------------------------------------------------------------------------
51
520.1 Introduction/Credits
53------------------------
54
55This documentation is part of a soon (or so we hope) to be released book on
56the SuSE Linux distribution. As there is no complete documentation for the
57/proc file system and we've used many freely available sources to write these
58chapters, it seems only fair to give the work back to the Linux community.
59This work is based on the 2.2.* kernel version and the upcoming 2.4.*. I'm
60afraid it's still far from complete, but we hope it will be useful. As far as
61we know, it is the first 'all-in-one' document about the /proc file system. It
62is focused on the Intel x86 hardware, so if you are looking for PPC, ARM,
63SPARC, AXP, etc., features, you probably won't find what you are looking for.
64It also only covers IPv4 networking, not IPv6 nor other protocols - sorry. But
65additions and patches are welcome and will be added to this document if you
66mail them to Bodo.
67
68We'd like to thank Alan Cox, Rik van Riel, and Alexey Kuznetsov and a lot of
69other people for help compiling this documentation. We'd also like to extend a
70special thank you to Andi Kleen for documentation, which we relied on heavily
71to create this document, as well as the additional information he provided.
72Thanks to everybody else who contributed source or docs to the Linux kernel
73and helped create a great piece of software... :)
74
75If you have any comments, corrections or additions, please don't hesitate to
76contact Bodo Bauer at bb@ricochet.net. We'll be happy to add them to this
77document.
78
79The latest version of this document is available online at
80http://skaro.nightcrawler.com/~bb/Docs/Proc as HTML version.
81
82If the above direction does not works for you, ypu could try the kernel
83mailing list at linux-kernel@vger.kernel.org and/or try to reach me at
84comandante@zaralinux.com.
85
860.2 Legal Stuff
87---------------
88
89We don't guarantee the correctness of this document, and if you come to us
90complaining about how you screwed up your system because of incorrect
91documentation, we won't feel responsible...
92
93------------------------------------------------------------------------------
94CHAPTER 1: COLLECTING SYSTEM INFORMATION
95------------------------------------------------------------------------------
96
97------------------------------------------------------------------------------
98In This Chapter
99------------------------------------------------------------------------------
100* Investigating the properties of the pseudo file system /proc and its
101 ability to provide information on the running Linux system
102* Examining /proc's structure
103* Uncovering various information about the kernel and the processes running
104 on the system
105------------------------------------------------------------------------------
106
107
108The proc file system acts as an interface to internal data structures in the
109kernel. It can be used to obtain information about the system and to change
110certain kernel parameters at runtime (sysctl).
111
112First, we'll take a look at the read-only parts of /proc. In Chapter 2, we
113show you how you can use /proc/sys to change settings.
114
1151.1 Process-Specific Subdirectories
116-----------------------------------
117
118The directory /proc contains (among other things) one subdirectory for each
119process running on the system, which is named after the process ID (PID).
120
121The link self points to the process reading the file system. Each process
122subdirectory has the entries listed in Table 1-1.
123
124
125Table 1-1: Process specific entries in /proc
126..............................................................................
David Rientjesb813e932007-05-06 14:49:24 -0700127 File Content
128 clear_refs Clears page referenced bits shown in smaps output
129 cmdline Command line arguments
130 cpu Current and last cpu in which it was executed (2.4)(smp)
131 cwd Link to the current working directory
132 environ Values of environment variables
133 exe Link to the executable of this process
134 fd Directory, which contains all file descriptors
135 maps Memory maps to executables and library files (2.4)
136 mem Memory held by this process
137 root Link to the root directory of this process
138 stat Process status
139 statm Process memory status information
140 status Process status in human readable form
141 wchan If CONFIG_KALLSYMS is set, a pre-decoded wchan
142 smaps Extension based on maps, the rss size for each mapped file
Linus Torvalds1da177e2005-04-16 15:20:36 -0700143..............................................................................
144
145For example, to get the status information of a process, all you have to do is
146read the file /proc/PID/status:
147
148 >cat /proc/self/status
149 Name: cat
150 State: R (running)
151 Pid: 5452
152 PPid: 743
153 TracerPid: 0 (2.4)
154 Uid: 501 501 501 501
155 Gid: 100 100 100 100
156 Groups: 100 14 16
157 VmSize: 1112 kB
158 VmLck: 0 kB
159 VmRSS: 348 kB
160 VmData: 24 kB
161 VmStk: 12 kB
162 VmExe: 8 kB
163 VmLib: 1044 kB
164 SigPnd: 0000000000000000
165 SigBlk: 0000000000000000
166 SigIgn: 0000000000000000
167 SigCgt: 0000000000000000
168 CapInh: 00000000fffffeff
169 CapPrm: 0000000000000000
170 CapEff: 0000000000000000
171
172
173This shows you nearly the same information you would get if you viewed it with
174the ps command. In fact, ps uses the proc file system to obtain its
175information. The statm file contains more detailed information about the
Kees Cook18d96772007-07-15 23:40:38 -0700176process memory usage. Its seven fields are explained in Table 1-2. The stat
177file contains details information about the process itself. Its fields are
178explained in Table 1-3.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700179
180
181Table 1-2: Contents of the statm files (as of 2.6.8-rc3)
182..............................................................................
183 Field Content
184 size total program size (pages) (same as VmSize in status)
185 resident size of memory portions (pages) (same as VmRSS in status)
186 shared number of pages that are shared (i.e. backed by a file)
187 trs number of pages that are 'code' (not including libs; broken,
188 includes data segment)
189 lrs number of pages of library (always 0 on 2.6)
190 drs number of pages of data/stack (including libs; broken,
191 includes library text)
192 dt number of dirty pages (always 0 on 2.6)
193..............................................................................
194
Kees Cook18d96772007-07-15 23:40:38 -0700195
196Table 1-3: Contents of the stat files (as of 2.6.22-rc3)
197..............................................................................
198 Field Content
199 pid process id
200 tcomm filename of the executable
201 state state (R is running, S is sleeping, D is sleeping in an
202 uninterruptible wait, Z is zombie, T is traced or stopped)
203 ppid process id of the parent process
204 pgrp pgrp of the process
205 sid session id
206 tty_nr tty the process uses
207 tty_pgrp pgrp of the tty
208 flags task flags
209 min_flt number of minor faults
210 cmin_flt number of minor faults with child's
211 maj_flt number of major faults
212 cmaj_flt number of major faults with child's
213 utime user mode jiffies
214 stime kernel mode jiffies
215 cutime user mode jiffies with child's
216 cstime kernel mode jiffies with child's
217 priority priority level
218 nice nice level
219 num_threads number of threads
Leonardo Chiquitto2e01e002008-02-03 16:17:16 +0200220 it_real_value (obsolete, always 0)
Kees Cook18d96772007-07-15 23:40:38 -0700221 start_time time the process started after system boot
222 vsize virtual memory size
223 rss resident set memory size
224 rsslim current limit in bytes on the rss
225 start_code address above which program text can run
226 end_code address below which program text can run
227 start_stack address of the start of the stack
228 esp current value of ESP
229 eip current value of EIP
230 pending bitmap of pending signals (obsolete)
231 blocked bitmap of blocked signals (obsolete)
232 sigign bitmap of ignored signals (obsolete)
233 sigcatch bitmap of catched signals (obsolete)
234 wchan address where process went to sleep
235 0 (place holder)
236 0 (place holder)
237 exit_signal signal to send to parent thread on exit
238 task_cpu which CPU the task is scheduled on
239 rt_priority realtime priority
240 policy scheduling policy (man sched_setscheduler)
241 blkio_ticks time spent waiting for block IO
242..............................................................................
243
244
Linus Torvalds1da177e2005-04-16 15:20:36 -07002451.2 Kernel data
246---------------
247
248Similar to the process entries, the kernel data files give information about
249the running kernel. The files used to obtain this information are contained in
Kees Cook18d96772007-07-15 23:40:38 -0700250/proc and are listed in Table 1-4. Not all of these will be present in your
Linus Torvalds1da177e2005-04-16 15:20:36 -0700251system. It depends on the kernel configuration and the loaded modules, which
252files are there, and which are missing.
253
Kees Cook18d96772007-07-15 23:40:38 -0700254Table 1-4: Kernel info in /proc
Linus Torvalds1da177e2005-04-16 15:20:36 -0700255..............................................................................
256 File Content
257 apm Advanced power management info
258 buddyinfo Kernel memory allocator information (see text) (2.5)
259 bus Directory containing bus specific information
260 cmdline Kernel command line
261 cpuinfo Info about the CPU
262 devices Available devices (block and character)
263 dma Used DMS channels
264 filesystems Supported filesystems
265 driver Various drivers grouped here, currently rtc (2.4)
266 execdomains Execdomains, related to security (2.4)
267 fb Frame Buffer devices (2.4)
268 fs File system parameters, currently nfs/exports (2.4)
269 ide Directory containing info about the IDE subsystem
270 interrupts Interrupt usage
271 iomem Memory map (2.4)
272 ioports I/O port usage
273 irq Masks for irq to cpu affinity (2.4)(smp?)
274 isapnp ISA PnP (Plug&Play) Info (2.4)
275 kcore Kernel core image (can be ELF or A.OUT(deprecated in 2.4))
276 kmsg Kernel messages
277 ksyms Kernel symbol table
278 loadavg Load average of last 1, 5 & 15 minutes
279 locks Kernel locks
280 meminfo Memory info
281 misc Miscellaneous
282 modules List of loaded modules
283 mounts Mounted filesystems
284 net Networking info (see text)
285 partitions Table of partitions known to the system
Randy Dunlap8b607562007-05-09 07:19:14 +0200286 pci Deprecated info of PCI bus (new way -> /proc/bus/pci/,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700287 decoupled by lspci (2.4)
288 rtc Real time clock
289 scsi SCSI info (see text)
290 slabinfo Slab pool info
291 stat Overall statistics
292 swaps Swap space utilization
293 sys See chapter 2
294 sysvipc Info of SysVIPC Resources (msg, sem, shm) (2.4)
295 tty Info of tty drivers
296 uptime System uptime
297 version Kernel version
298 video bttv info of video resources (2.4)
299..............................................................................
300
301You can, for example, check which interrupts are currently in use and what
302they are used for by looking in the file /proc/interrupts:
303
304 > cat /proc/interrupts
305 CPU0
306 0: 8728810 XT-PIC timer
307 1: 895 XT-PIC keyboard
308 2: 0 XT-PIC cascade
309 3: 531695 XT-PIC aha152x
310 4: 2014133 XT-PIC serial
311 5: 44401 XT-PIC pcnet_cs
312 8: 2 XT-PIC rtc
313 11: 8 XT-PIC i82365
314 12: 182918 XT-PIC PS/2 Mouse
315 13: 1 XT-PIC fpu
316 14: 1232265 XT-PIC ide0
317 15: 7 XT-PIC ide1
318 NMI: 0
319
320In 2.4.* a couple of lines where added to this file LOC & ERR (this time is the
321output of a SMP machine):
322
323 > cat /proc/interrupts
324
325 CPU0 CPU1
326 0: 1243498 1214548 IO-APIC-edge timer
327 1: 8949 8958 IO-APIC-edge keyboard
328 2: 0 0 XT-PIC cascade
329 5: 11286 10161 IO-APIC-edge soundblaster
330 8: 1 0 IO-APIC-edge rtc
331 9: 27422 27407 IO-APIC-edge 3c503
332 12: 113645 113873 IO-APIC-edge PS/2 Mouse
333 13: 0 0 XT-PIC fpu
334 14: 22491 24012 IO-APIC-edge ide0
335 15: 2183 2415 IO-APIC-edge ide1
336 17: 30564 30414 IO-APIC-level eth0
337 18: 177 164 IO-APIC-level bttv
338 NMI: 2457961 2457959
339 LOC: 2457882 2457881
340 ERR: 2155
341
342NMI is incremented in this case because every timer interrupt generates a NMI
343(Non Maskable Interrupt) which is used by the NMI Watchdog to detect lockups.
344
345LOC is the local interrupt counter of the internal APIC of every CPU.
346
347ERR is incremented in the case of errors in the IO-APIC bus (the bus that
348connects the CPUs in a SMP system. This means that an error has been detected,
349the IO-APIC automatically retry the transmission, so it should not be a big
350problem, but you should read the SMP-FAQ.
351
Joe Korty38e760a2007-10-17 18:04:40 +0200352In 2.6.2* /proc/interrupts was expanded again. This time the goal was for
353/proc/interrupts to display every IRQ vector in use by the system, not
354just those considered 'most important'. The new vectors are:
355
356 THR -- interrupt raised when a machine check threshold counter
357 (typically counting ECC corrected errors of memory or cache) exceeds
358 a configurable threshold. Only available on some systems.
359
360 TRM -- a thermal event interrupt occurs when a temperature threshold
361 has been exceeded for the CPU. This interrupt may also be generated
362 when the temperature drops back to normal.
363
364 SPU -- a spurious interrupt is some interrupt that was raised then lowered
365 by some IO device before it could be fully processed by the APIC. Hence
366 the APIC sees the interrupt but does not know what device it came from.
367 For this case the APIC will generate the interrupt with a IRQ vector
368 of 0xff. This might also be generated by chipset bugs.
369
370 RES, CAL, TLB -- rescheduling, call and TLB flush interrupts are
371 sent from one CPU to another per the needs of the OS. Typically,
372 their statistics are used by kernel developers and interested users to
373 determine the occurance of interrupt of the given type.
374
375The above IRQ vectors are displayed only when relevent. For example,
376the threshold vector does not exist on x86_64 platforms. Others are
377suppressed when the system is a uniprocessor. As of this writing, only
378i386 and x86_64 platforms support the new IRQ vector displays.
379
380Of some interest is the introduction of the /proc/irq directory to 2.4.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700381It could be used to set IRQ to CPU affinity, this means that you can "hook" an
382IRQ to only one CPU, or to exclude a CPU of handling IRQs. The contents of the
Max Krasnyansky18404752008-05-29 11:02:52 -0700383irq subdir is one subdir for each IRQ, and two files; default_smp_affinity and
384prof_cpu_mask.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700385
386For example
387 > ls /proc/irq/
388 0 10 12 14 16 18 2 4 6 8 prof_cpu_mask
Max Krasnyansky18404752008-05-29 11:02:52 -0700389 1 11 13 15 17 19 3 5 7 9 default_smp_affinity
Linus Torvalds1da177e2005-04-16 15:20:36 -0700390 > ls /proc/irq/0/
391 smp_affinity
392
Max Krasnyansky18404752008-05-29 11:02:52 -0700393smp_affinity is a bitmask, in which you can specify which CPUs can handle the
394IRQ, you can set it by doing:
Linus Torvalds1da177e2005-04-16 15:20:36 -0700395
Max Krasnyansky18404752008-05-29 11:02:52 -0700396 > echo 1 > /proc/irq/10/smp_affinity
397
398This means that only the first CPU will handle the IRQ, but you can also echo
3995 which means that only the first and fourth CPU can handle the IRQ.
400
401The contents of each smp_affinity file is the same by default:
402
403 > cat /proc/irq/0/smp_affinity
Linus Torvalds1da177e2005-04-16 15:20:36 -0700404 ffffffff
405
Max Krasnyansky18404752008-05-29 11:02:52 -0700406The default_smp_affinity mask applies to all non-active IRQs, which are the
407IRQs which have not yet been allocated/activated, and hence which lack a
408/proc/irq/[0-9]* directory.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700409
Max Krasnyansky18404752008-05-29 11:02:52 -0700410prof_cpu_mask specifies which CPUs are to be profiled by the system wide
411profiler. Default value is ffffffff (all cpus).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412
413The way IRQs are routed is handled by the IO-APIC, and it's Round Robin
414between all the CPUs which are allowed to handle it. As usual the kernel has
415more info than you and does a better job than you, so the defaults are the
416best choice for almost everyone.
417
418There are three more important subdirectories in /proc: net, scsi, and sys.
419The general rule is that the contents, or even the existence of these
420directories, depend on your kernel configuration. If SCSI is not enabled, the
421directory scsi may not exist. The same is true with the net, which is there
422only when networking support is present in the running kernel.
423
424The slabinfo file gives information about memory usage at the slab level.
425Linux uses slab pools for memory management above page level in version 2.2.
426Commonly used objects have their own slab pool (such as network buffers,
427directory cache, and so on).
428
429..............................................................................
430
431> cat /proc/buddyinfo
432
433Node 0, zone DMA 0 4 5 4 4 3 ...
434Node 0, zone Normal 1 0 0 1 101 8 ...
435Node 0, zone HighMem 2 0 0 1 1 0 ...
436
437Memory fragmentation is a problem under some workloads, and buddyinfo is a
438useful tool for helping diagnose these problems. Buddyinfo will give you a
439clue as to how big an area you can safely allocate, or why a previous
440allocation failed.
441
442Each column represents the number of pages of a certain order which are
443available. In this case, there are 0 chunks of 2^0*PAGE_SIZE available in
444ZONE_DMA, 4 chunks of 2^1*PAGE_SIZE in ZONE_DMA, 101 chunks of 2^4*PAGE_SIZE
445available in ZONE_NORMAL, etc...
446
447..............................................................................
448
449meminfo:
450
451Provides information about distribution and utilization of memory. This
452varies by architecture and compile options. The following is from a
45316GB PIII, which has highmem enabled. You may not have all of these fields.
454
455> cat /proc/meminfo
456
457
458MemTotal: 16344972 kB
459MemFree: 13634064 kB
460Buffers: 3656 kB
461Cached: 1195708 kB
462SwapCached: 0 kB
463Active: 891636 kB
464Inactive: 1077224 kB
465HighTotal: 15597528 kB
466HighFree: 13629632 kB
467LowTotal: 747444 kB
468LowFree: 4432 kB
469SwapTotal: 0 kB
470SwapFree: 0 kB
471Dirty: 968 kB
472Writeback: 0 kB
Miklos Szeredib88473f2008-04-30 00:54:39 -0700473AnonPages: 861800 kB
Linus Torvalds1da177e2005-04-16 15:20:36 -0700474Mapped: 280372 kB
Miklos Szeredib88473f2008-04-30 00:54:39 -0700475Slab: 284364 kB
476SReclaimable: 159856 kB
477SUnreclaim: 124508 kB
478PageTables: 24448 kB
479NFS_Unstable: 0 kB
480Bounce: 0 kB
481WritebackTmp: 0 kB
Linus Torvalds1da177e2005-04-16 15:20:36 -0700482CommitLimit: 7669796 kB
483Committed_AS: 100056 kB
Linus Torvalds1da177e2005-04-16 15:20:36 -0700484VmallocTotal: 112216 kB
485VmallocUsed: 428 kB
486VmallocChunk: 111088 kB
487
488 MemTotal: Total usable ram (i.e. physical ram minus a few reserved
489 bits and the kernel binary code)
490 MemFree: The sum of LowFree+HighFree
491 Buffers: Relatively temporary storage for raw disk blocks
492 shouldn't get tremendously large (20MB or so)
493 Cached: in-memory cache for files read from the disk (the
494 pagecache). Doesn't include SwapCached
495 SwapCached: Memory that once was swapped out, is swapped back in but
496 still also is in the swapfile (if memory is needed it
497 doesn't need to be swapped out AGAIN because it is already
498 in the swapfile. This saves I/O)
499 Active: Memory that has been used more recently and usually not
500 reclaimed unless absolutely necessary.
501 Inactive: Memory which has been less recently used. It is more
502 eligible to be reclaimed for other purposes
503 HighTotal:
504 HighFree: Highmem is all memory above ~860MB of physical memory
505 Highmem areas are for use by userspace programs, or
506 for the pagecache. The kernel must use tricks to access
507 this memory, making it slower to access than lowmem.
508 LowTotal:
509 LowFree: Lowmem is memory which can be used for everything that
Matt LaPlante3f6dee92006-10-03 22:45:33 +0200510 highmem can be used for, but it is also available for the
Linus Torvalds1da177e2005-04-16 15:20:36 -0700511 kernel's use for its own data structures. Among many
512 other things, it is where everything from the Slab is
513 allocated. Bad things happen when you're out of lowmem.
514 SwapTotal: total amount of swap space available
515 SwapFree: Memory which has been evicted from RAM, and is temporarily
516 on the disk
517 Dirty: Memory which is waiting to get written back to the disk
518 Writeback: Memory which is actively being written back to the disk
Miklos Szeredib88473f2008-04-30 00:54:39 -0700519 AnonPages: Non-file backed pages mapped into userspace page tables
Linus Torvalds1da177e2005-04-16 15:20:36 -0700520 Mapped: files which have been mmaped, such as libraries
Adrian Bunke82443c2006-01-10 00:20:30 +0100521 Slab: in-kernel data structures cache
Miklos Szeredib88473f2008-04-30 00:54:39 -0700522SReclaimable: Part of Slab, that might be reclaimed, such as caches
523 SUnreclaim: Part of Slab, that cannot be reclaimed on memory pressure
524 PageTables: amount of memory dedicated to the lowest level of page
525 tables.
526NFS_Unstable: NFS pages sent to the server, but not yet committed to stable
527 storage
528 Bounce: Memory used for block device "bounce buffers"
529WritebackTmp: Memory used by FUSE for temporary writeback buffers
Linus Torvalds1da177e2005-04-16 15:20:36 -0700530 CommitLimit: Based on the overcommit ratio ('vm.overcommit_ratio'),
531 this is the total amount of memory currently available to
532 be allocated on the system. This limit is only adhered to
533 if strict overcommit accounting is enabled (mode 2 in
534 'vm.overcommit_memory').
535 The CommitLimit is calculated with the following formula:
536 CommitLimit = ('vm.overcommit_ratio' * Physical RAM) + Swap
537 For example, on a system with 1G of physical RAM and 7G
538 of swap with a `vm.overcommit_ratio` of 30 it would
539 yield a CommitLimit of 7.3G.
540 For more details, see the memory overcommit documentation
541 in vm/overcommit-accounting.
542Committed_AS: The amount of memory presently allocated on the system.
543 The committed memory is a sum of all of the memory which
544 has been allocated by processes, even if it has not been
545 "used" by them as of yet. A process which malloc()'s 1G
546 of memory, but only touches 300M of it will only show up
547 as using 300M of memory even if it has the address space
548 allocated for the entire 1G. This 1G is memory which has
549 been "committed" to by the VM and can be used at any time
550 by the allocating application. With strict overcommit
551 enabled on the system (mode 2 in 'vm.overcommit_memory'),
552 allocations which would exceed the CommitLimit (detailed
553 above) will not be permitted. This is useful if one needs
554 to guarantee that processes will not fail due to lack of
555 memory once that memory has been successfully allocated.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700556VmallocTotal: total size of vmalloc memory area
557 VmallocUsed: amount of vmalloc area which is used
558VmallocChunk: largest contigious block of vmalloc area which is free
559
560
5611.3 IDE devices in /proc/ide
562----------------------------
563
564The subdirectory /proc/ide contains information about all IDE devices of which
565the kernel is aware. There is one subdirectory for each IDE controller, the
566file drivers and a link for each IDE device, pointing to the device directory
567in the controller specific subtree.
568
569The file drivers contains general information about the drivers used for the
570IDE devices:
571
572 > cat /proc/ide/drivers
573 ide-cdrom version 4.53
574 ide-disk version 1.08
575
576More detailed information can be found in the controller specific
577subdirectories. These are named ide0, ide1 and so on. Each of these
Kees Cook18d96772007-07-15 23:40:38 -0700578directories contains the files shown in table 1-5.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700579
580
Kees Cook18d96772007-07-15 23:40:38 -0700581Table 1-5: IDE controller info in /proc/ide/ide?
Linus Torvalds1da177e2005-04-16 15:20:36 -0700582..............................................................................
583 File Content
584 channel IDE channel (0 or 1)
585 config Configuration (only for PCI/IDE bridge)
586 mate Mate name
587 model Type/Chipset of IDE controller
588..............................................................................
589
590Each device connected to a controller has a separate subdirectory in the
Kees Cook18d96772007-07-15 23:40:38 -0700591controllers directory. The files listed in table 1-6 are contained in these
Linus Torvalds1da177e2005-04-16 15:20:36 -0700592directories.
593
594
Kees Cook18d96772007-07-15 23:40:38 -0700595Table 1-6: IDE device information
Linus Torvalds1da177e2005-04-16 15:20:36 -0700596..............................................................................
597 File Content
598 cache The cache
599 capacity Capacity of the medium (in 512Byte blocks)
600 driver driver and version
601 geometry physical and logical geometry
602 identify device identify block
603 media media type
604 model device identifier
605 settings device setup
606 smart_thresholds IDE disk management thresholds
607 smart_values IDE disk management values
608..............................................................................
609
610The most interesting file is settings. This file contains a nice overview of
611the drive parameters:
612
613 # cat /proc/ide/ide0/hda/settings
614 name value min max mode
615 ---- ----- --- --- ----
616 bios_cyl 526 0 65535 rw
617 bios_head 255 0 255 rw
618 bios_sect 63 0 63 rw
619 breada_readahead 4 0 127 rw
620 bswap 0 0 1 r
621 file_readahead 72 0 2097151 rw
622 io_32bit 0 0 3 rw
623 keepsettings 0 0 1 rw
624 max_kb_per_request 122 1 127 rw
625 multcount 0 0 8 rw
626 nice1 1 0 1 rw
627 nowerr 0 0 1 rw
628 pio_mode write-only 0 255 w
629 slow 0 0 1 rw
630 unmaskirq 0 0 1 rw
631 using_dma 0 0 1 rw
632
633
6341.4 Networking info in /proc/net
635--------------------------------
636
637The subdirectory /proc/net follows the usual pattern. Table 1-6 shows the
638additional values you get for IP version 6 if you configure the kernel to
639support this. Table 1-7 lists the files and their meaning.
640
641
642Table 1-6: IPv6 info in /proc/net
643..............................................................................
644 File Content
645 udp6 UDP sockets (IPv6)
646 tcp6 TCP sockets (IPv6)
647 raw6 Raw device statistics (IPv6)
648 igmp6 IP multicast addresses, which this host joined (IPv6)
649 if_inet6 List of IPv6 interface addresses
650 ipv6_route Kernel routing table for IPv6
651 rt6_stats Global IPv6 routing tables statistics
652 sockstat6 Socket statistics (IPv6)
653 snmp6 Snmp data (IPv6)
654..............................................................................
655
656
657Table 1-7: Network info in /proc/net
658..............................................................................
659 File Content
660 arp Kernel ARP table
661 dev network devices with statistics
662 dev_mcast the Layer2 multicast groups a device is listening too
663 (interface index, label, number of references, number of bound
664 addresses).
665 dev_stat network device status
666 ip_fwchains Firewall chain linkage
667 ip_fwnames Firewall chain names
668 ip_masq Directory containing the masquerading tables
669 ip_masquerade Major masquerading table
670 netstat Network statistics
671 raw raw device statistics
672 route Kernel routing table
673 rpc Directory containing rpc info
674 rt_cache Routing cache
675 snmp SNMP data
676 sockstat Socket statistics
677 tcp TCP sockets
678 tr_rif Token ring RIF routing table
679 udp UDP sockets
680 unix UNIX domain sockets
681 wireless Wireless interface data (Wavelan etc)
682 igmp IP multicast addresses, which this host joined
683 psched Global packet scheduler parameters.
684 netlink List of PF_NETLINK sockets
685 ip_mr_vifs List of multicast virtual interfaces
686 ip_mr_cache List of multicast routing cache
687..............................................................................
688
689You can use this information to see which network devices are available in
690your system and how much traffic was routed over those devices:
691
692 > cat /proc/net/dev
693 Inter-|Receive |[...
694 face |bytes packets errs drop fifo frame compressed multicast|[...
695 lo: 908188 5596 0 0 0 0 0 0 [...
696 ppp0:15475140 20721 410 0 0 410 0 0 [...
697 eth0: 614530 7085 0 0 0 0 0 1 [...
698
699 ...] Transmit
700 ...] bytes packets errs drop fifo colls carrier compressed
701 ...] 908188 5596 0 0 0 0 0 0
702 ...] 1375103 17405 0 0 0 0 0 0
703 ...] 1703981 5535 0 0 0 3 0 0
704
705In addition, each Channel Bond interface has it's own directory. For
706example, the bond0 device will have a directory called /proc/net/bond0/.
707It will contain information that is specific to that bond, such as the
708current slaves of the bond, the link status of the slaves, and how
709many times the slaves link has failed.
710
7111.5 SCSI info
712-------------
713
714If you have a SCSI host adapter in your system, you'll find a subdirectory
715named after the driver for this adapter in /proc/scsi. You'll also see a list
716of all recognized SCSI devices in /proc/scsi:
717
718 >cat /proc/scsi/scsi
719 Attached devices:
720 Host: scsi0 Channel: 00 Id: 00 Lun: 00
721 Vendor: IBM Model: DGHS09U Rev: 03E0
722 Type: Direct-Access ANSI SCSI revision: 03
723 Host: scsi0 Channel: 00 Id: 06 Lun: 00
724 Vendor: PIONEER Model: CD-ROM DR-U06S Rev: 1.04
725 Type: CD-ROM ANSI SCSI revision: 02
726
727
728The directory named after the driver has one file for each adapter found in
729the system. These files contain information about the controller, including
730the used IRQ and the IO address range. The amount of information shown is
731dependent on the adapter you use. The example shows the output for an Adaptec
732AHA-2940 SCSI adapter:
733
734 > cat /proc/scsi/aic7xxx/0
735
736 Adaptec AIC7xxx driver version: 5.1.19/3.2.4
737 Compile Options:
738 TCQ Enabled By Default : Disabled
739 AIC7XXX_PROC_STATS : Disabled
740 AIC7XXX_RESET_DELAY : 5
741 Adapter Configuration:
742 SCSI Adapter: Adaptec AHA-294X Ultra SCSI host adapter
743 Ultra Wide Controller
744 PCI MMAPed I/O Base: 0xeb001000
745 Adapter SEEPROM Config: SEEPROM found and used.
746 Adaptec SCSI BIOS: Enabled
747 IRQ: 10
748 SCBs: Active 0, Max Active 2,
749 Allocated 15, HW 16, Page 255
750 Interrupts: 160328
751 BIOS Control Word: 0x18b6
752 Adapter Control Word: 0x005b
753 Extended Translation: Enabled
754 Disconnect Enable Flags: 0xffff
755 Ultra Enable Flags: 0x0001
756 Tag Queue Enable Flags: 0x0000
757 Ordered Queue Tag Flags: 0x0000
758 Default Tag Queue Depth: 8
759 Tagged Queue By Device array for aic7xxx host instance 0:
760 {255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255}
761 Actual queue depth per device for aic7xxx host instance 0:
762 {1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1}
763 Statistics:
764 (scsi0:0:0:0)
765 Device using Wide/Sync transfers at 40.0 MByte/sec, offset 8
766 Transinfo settings: current(12/8/1/0), goal(12/8/1/0), user(12/15/1/0)
767 Total transfers 160151 (74577 reads and 85574 writes)
768 (scsi0:0:6:0)
769 Device using Narrow/Sync transfers at 5.0 MByte/sec, offset 15
770 Transinfo settings: current(50/15/0/0), goal(50/15/0/0), user(50/15/0/0)
771 Total transfers 0 (0 reads and 0 writes)
772
773
7741.6 Parallel port info in /proc/parport
775---------------------------------------
776
777The directory /proc/parport contains information about the parallel ports of
778your system. It has one subdirectory for each port, named after the port
779number (0,1,2,...).
780
781These directories contain the four files shown in Table 1-8.
782
783
784Table 1-8: Files in /proc/parport
785..............................................................................
786 File Content
787 autoprobe Any IEEE-1284 device ID information that has been acquired.
788 devices list of the device drivers using that port. A + will appear by the
789 name of the device currently using the port (it might not appear
790 against any).
791 hardware Parallel port's base address, IRQ line and DMA channel.
792 irq IRQ that parport is using for that port. This is in a separate
793 file to allow you to alter it by writing a new value in (IRQ
794 number or none).
795..............................................................................
796
7971.7 TTY info in /proc/tty
798-------------------------
799
800Information about the available and actually used tty's can be found in the
801directory /proc/tty.You'll find entries for drivers and line disciplines in
802this directory, as shown in Table 1-9.
803
804
805Table 1-9: Files in /proc/tty
806..............................................................................
807 File Content
808 drivers list of drivers and their usage
809 ldiscs registered line disciplines
810 driver/serial usage statistic and status of single tty lines
811..............................................................................
812
813To see which tty's are currently in use, you can simply look into the file
814/proc/tty/drivers:
815
816 > cat /proc/tty/drivers
817 pty_slave /dev/pts 136 0-255 pty:slave
818 pty_master /dev/ptm 128 0-255 pty:master
819 pty_slave /dev/ttyp 3 0-255 pty:slave
820 pty_master /dev/pty 2 0-255 pty:master
821 serial /dev/cua 5 64-67 serial:callout
822 serial /dev/ttyS 4 64-67 serial
823 /dev/tty0 /dev/tty0 4 0 system:vtmaster
824 /dev/ptmx /dev/ptmx 5 2 system
825 /dev/console /dev/console 5 1 system:console
826 /dev/tty /dev/tty 5 0 system:/dev/tty
827 unknown /dev/tty 4 1-63 console
828
829
8301.8 Miscellaneous kernel statistics in /proc/stat
831-------------------------------------------------
832
833Various pieces of information about kernel activity are available in the
834/proc/stat file. All of the numbers reported in this file are aggregates
835since the system first booted. For a quick look, simply cat the file:
836
837 > cat /proc/stat
Leonardo Chiquittob68f2c3a2007-10-20 03:03:38 +0200838 cpu 2255 34 2290 22625563 6290 127 456 0
839 cpu0 1132 34 1441 11311718 3675 127 438 0
840 cpu1 1123 0 849 11313845 2614 0 18 0
Linus Torvalds1da177e2005-04-16 15:20:36 -0700841 intr 114930548 113199788 3 0 5 263 0 4 [... lots more numbers ...]
842 ctxt 1990473
843 btime 1062191376
844 processes 2915
845 procs_running 1
846 procs_blocked 0
847
848The very first "cpu" line aggregates the numbers in all of the other "cpuN"
849lines. These numbers identify the amount of time the CPU has spent performing
850different kinds of work. Time units are in USER_HZ (typically hundredths of a
851second). The meanings of the columns are as follows, from left to right:
852
853- user: normal processes executing in user mode
854- nice: niced processes executing in user mode
855- system: processes executing in kernel mode
856- idle: twiddling thumbs
857- iowait: waiting for I/O to complete
858- irq: servicing interrupts
859- softirq: servicing softirqs
Leonardo Chiquittob68f2c3a2007-10-20 03:03:38 +0200860- steal: involuntary wait
Linus Torvalds1da177e2005-04-16 15:20:36 -0700861
862The "intr" line gives counts of interrupts serviced since boot time, for each
863of the possible system interrupts. The first column is the total of all
864interrupts serviced; each subsequent column is the total for that particular
865interrupt.
866
867The "ctxt" line gives the total number of context switches across all CPUs.
868
869The "btime" line gives the time at which the system booted, in seconds since
870the Unix epoch.
871
872The "processes" line gives the number of processes and threads created, which
873includes (but is not limited to) those created by calls to the fork() and
874clone() system calls.
875
876The "procs_running" line gives the number of processes currently running on
877CPUs.
878
879The "procs_blocked" line gives the number of processes currently blocked,
880waiting for I/O to complete.
881
Alex Tomasc9de5602008-01-29 00:19:52 -05008821.9 Ext4 file system parameters
883------------------------------
884Ext4 file system have one directory per partition under /proc/fs/ext4/
885# ls /proc/fs/ext4/hdc/
886group_prealloc max_to_scan mb_groups mb_history min_to_scan order2_req
887stats stream_req
888
889mb_groups:
890This file gives the details of mutiblock allocator buddy cache of free blocks
891
892mb_history:
893Multiblock allocation history.
894
895stats:
896This file indicate whether the multiblock allocator should start collecting
897statistics. The statistics are shown during unmount
898
899group_prealloc:
900The multiblock allocator normalize the block allocation request to
901group_prealloc filesystem blocks if we don't have strip value set.
902The stripe value can be specified at mount time or during mke2fs.
903
904max_to_scan:
905How long multiblock allocator can look for a best extent (in found extents)
906
907min_to_scan:
908How long multiblock allocator must look for a best extent
909
910order2_req:
911Multiblock allocator use 2^N search using buddies only for requests greater
912than or equal to order2_req. The request size is specfied in file system
913blocks. A value of 2 indicate only if the requests are greater than or equal
914to 4 blocks.
915
916stream_req:
917Files smaller than stream_req are served by the stream allocator, whose
918purpose is to pack requests as close each to other as possible to
919produce smooth I/O traffic. Avalue of 16 indicate that file smaller than 16
920filesystem block size will use group based preallocation.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700921
922------------------------------------------------------------------------------
923Summary
924------------------------------------------------------------------------------
925The /proc file system serves information about the running system. It not only
926allows access to process data but also allows you to request the kernel status
927by reading files in the hierarchy.
928
929The directory structure of /proc reflects the types of information and makes
930it easy, if not obvious, where to look for specific data.
931------------------------------------------------------------------------------
932
933------------------------------------------------------------------------------
934CHAPTER 2: MODIFYING SYSTEM PARAMETERS
935------------------------------------------------------------------------------
936
937------------------------------------------------------------------------------
938In This Chapter
939------------------------------------------------------------------------------
940* Modifying kernel parameters by writing into files found in /proc/sys
941* Exploring the files which modify certain parameters
942* Review of the /proc/sys file tree
943------------------------------------------------------------------------------
944
945
946A very interesting part of /proc is the directory /proc/sys. This is not only
947a source of information, it also allows you to change parameters within the
948kernel. Be very careful when attempting this. You can optimize your system,
949but you can also cause it to crash. Never alter kernel parameters on a
950production system. Set up a development machine and test to make sure that
951everything works the way you want it to. You may have no alternative but to
952reboot the machine once an error has been made.
953
954To change a value, simply echo the new value into the file. An example is
955given below in the section on the file system data. You need to be root to do
956this. You can create your own boot script to perform this every time your
957system boots.
958
959The files in /proc/sys can be used to fine tune and monitor miscellaneous and
960general things in the operation of the Linux kernel. Since some of the files
961can inadvertently disrupt your system, it is advisable to read both
962documentation and source before actually making adjustments. In any case, be
963very careful when writing to any of these files. The entries in /proc may
964change slightly between the 2.1.* and the 2.2 kernel, so if there is any doubt
965review the kernel documentation in the directory /usr/src/linux/Documentation.
966This chapter is heavily based on the documentation included in the pre 2.2
967kernels, and became part of it in version 2.2.1 of the Linux kernel.
968
9692.1 /proc/sys/fs - File system data
970-----------------------------------
971
972This subdirectory contains specific file system, file handle, inode, dentry
973and quota information.
974
975Currently, these files are in /proc/sys/fs:
976
977dentry-state
978------------
979
980Status of the directory cache. Since directory entries are dynamically
981allocated and deallocated, this file indicates the current status. It holds
982six values, in which the last two are not used and are always zero. The others
983are listed in table 2-1.
984
985
986Table 2-1: Status files of the directory cache
987..............................................................................
988 File Content
989 nr_dentry Almost always zero
990 nr_unused Number of unused cache entries
991 age_limit
992 in seconds after the entry may be reclaimed, when memory is short
993 want_pages internally
994..............................................................................
995
996dquot-nr and dquot-max
997----------------------
998
999The file dquot-max shows the maximum number of cached disk quota entries.
1000
1001The file dquot-nr shows the number of allocated disk quota entries and the
1002number of free disk quota entries.
1003
1004If the number of available cached disk quotas is very low and you have a large
1005number of simultaneous system users, you might want to raise the limit.
1006
1007file-nr and file-max
1008--------------------
1009
1010The kernel allocates file handles dynamically, but doesn't free them again at
1011this time.
1012
1013The value in file-max denotes the maximum number of file handles that the
1014Linux kernel will allocate. When you get a lot of error messages about running
1015out of file handles, you might want to raise this limit. The default value is
101610% of RAM in kilobytes. To change it, just write the new number into the
1017file:
1018
1019 # cat /proc/sys/fs/file-max
1020 4096
1021 # echo 8192 > /proc/sys/fs/file-max
1022 # cat /proc/sys/fs/file-max
1023 8192
1024
1025
1026This method of revision is useful for all customizable parameters of the
1027kernel - simply echo the new value to the corresponding file.
1028
1029Historically, the three values in file-nr denoted the number of allocated file
1030handles, the number of allocated but unused file handles, and the maximum
1031number of file handles. Linux 2.6 always reports 0 as the number of free file
1032handles -- this is not an error, it just means that the number of allocated
1033file handles exactly matches the number of used file handles.
1034
1035Attempts to allocate more file descriptors than file-max are reported with
1036printk, look for "VFS: file-max limit <number> reached".
1037
1038inode-state and inode-nr
1039------------------------
1040
1041The file inode-nr contains the first two items from inode-state, so we'll skip
1042to that file...
1043
1044inode-state contains two actual numbers and five dummy values. The numbers
1045are nr_inodes and nr_free_inodes (in order of appearance).
1046
1047nr_inodes
1048~~~~~~~~~
1049
1050Denotes the number of inodes the system has allocated. This number will
1051grow and shrink dynamically.
1052
Eric Dumazet9cfe0152008-02-06 01:37:16 -08001053nr_open
1054-------
1055
1056Denotes the maximum number of file-handles a process can
1057allocate. Default value is 1024*1024 (1048576) which should be
1058enough for most machines. Actual limit depends on RLIMIT_NOFILE
1059resource limit.
1060
Linus Torvalds1da177e2005-04-16 15:20:36 -07001061nr_free_inodes
1062--------------
1063
1064Represents the number of free inodes. Ie. The number of inuse inodes is
1065(nr_inodes - nr_free_inodes).
1066
Linus Torvalds1da177e2005-04-16 15:20:36 -07001067aio-nr and aio-max-nr
1068---------------------
1069
1070aio-nr is the running total of the number of events specified on the
1071io_setup system call for all currently active aio contexts. If aio-nr
1072reaches aio-max-nr then io_setup will fail with EAGAIN. Note that
1073raising aio-max-nr does not result in the pre-allocation or re-sizing
1074of any kernel data structures.
1075
10762.2 /proc/sys/fs/binfmt_misc - Miscellaneous binary formats
1077-----------------------------------------------------------
1078
1079Besides these files, there is the subdirectory /proc/sys/fs/binfmt_misc. This
1080handles the kernel support for miscellaneous binary formats.
1081
1082Binfmt_misc provides the ability to register additional binary formats to the
1083Kernel without compiling an additional module/kernel. Therefore, binfmt_misc
1084needs to know magic numbers at the beginning or the filename extension of the
1085binary.
1086
1087It works by maintaining a linked list of structs that contain a description of
1088a binary format, including a magic with size (or the filename extension),
1089offset and mask, and the interpreter name. On request it invokes the given
1090interpreter with the original program as argument, as binfmt_java and
1091binfmt_em86 and binfmt_mz do. Since binfmt_misc does not define any default
1092binary-formats, you have to register an additional binary-format.
1093
1094There are two general files in binfmt_misc and one file per registered format.
1095The two general files are register and status.
1096
1097Registering a new binary format
1098-------------------------------
1099
1100To register a new binary format you have to issue the command
1101
1102 echo :name:type:offset:magic:mask:interpreter: > /proc/sys/fs/binfmt_misc/register
1103
1104
1105
1106with appropriate name (the name for the /proc-dir entry), offset (defaults to
11070, if omitted), magic, mask (which can be omitted, defaults to all 0xff) and
1108last but not least, the interpreter that is to be invoked (for example and
1109testing /bin/echo). Type can be M for usual magic matching or E for filename
1110extension matching (give extension in place of magic).
1111
1112Check or reset the status of the binary format handler
1113------------------------------------------------------
1114
1115If you do a cat on the file /proc/sys/fs/binfmt_misc/status, you will get the
1116current status (enabled/disabled) of binfmt_misc. Change the status by echoing
11170 (disables) or 1 (enables) or -1 (caution: this clears all previously
1118registered binary formats) to status. For example echo 0 > status to disable
1119binfmt_misc (temporarily).
1120
1121Status of a single handler
1122--------------------------
1123
1124Each registered handler has an entry in /proc/sys/fs/binfmt_misc. These files
1125perform the same function as status, but their scope is limited to the actual
1126binary format. By cating this file, you also receive all related information
1127about the interpreter/magic of the binfmt.
1128
1129Example usage of binfmt_misc (emulate binfmt_java)
1130--------------------------------------------------
1131
1132 cd /proc/sys/fs/binfmt_misc
1133 echo ':Java:M::\xca\xfe\xba\xbe::/usr/local/java/bin/javawrapper:' > register
1134 echo ':HTML:E::html::/usr/local/java/bin/appletviewer:' > register
1135 echo ':Applet:M::<!--applet::/usr/local/java/bin/appletviewer:' > register
1136 echo ':DEXE:M::\x0eDEX::/usr/bin/dosexec:' > register
1137
1138
1139These four lines add support for Java executables and Java applets (like
1140binfmt_java, additionally recognizing the .html extension with no need to put
1141<!--applet> to every applet file). You have to install the JDK and the
1142shell-script /usr/local/java/bin/javawrapper too. It works around the
1143brokenness of the Java filename handling. To add a Java binary, just create a
1144link to the class-file somewhere in the path.
1145
11462.3 /proc/sys/kernel - general kernel parameters
1147------------------------------------------------
1148
1149This directory reflects general kernel behaviors. As I've said before, the
1150contents depend on your configuration. Here you'll find the most important
1151files, along with descriptions of what they mean and how to use them.
1152
1153acct
1154----
1155
1156The file contains three values; highwater, lowwater, and frequency.
1157
1158It exists only when BSD-style process accounting is enabled. These values
1159control its behavior. If the free space on the file system where the log lives
1160goes below lowwater percentage, accounting suspends. If it goes above
1161highwater percentage, accounting resumes. Frequency determines how often you
1162check the amount of free space (value is in seconds). Default settings are: 4,
11632, and 30. That is, suspend accounting if there is less than 2 percent free;
1164resume it if we have a value of 3 or more percent; consider information about
1165the amount of free space valid for 30 seconds
1166
1167ctrl-alt-del
1168------------
1169
1170When the value in this file is 0, ctrl-alt-del is trapped and sent to the init
1171program to handle a graceful restart. However, when the value is greater that
1172zero, Linux's reaction to this key combination will be an immediate reboot,
1173without syncing its dirty buffers.
1174
1175[NOTE]
1176 When a program (like dosemu) has the keyboard in raw mode, the
1177 ctrl-alt-del is intercepted by the program before it ever reaches the
1178 kernel tty layer, and it is up to the program to decide what to do with
1179 it.
1180
1181domainname and hostname
1182-----------------------
1183
1184These files can be controlled to set the NIS domainname and hostname of your
1185box. For the classic darkstar.frop.org a simple:
1186
1187 # echo "darkstar" > /proc/sys/kernel/hostname
1188 # echo "frop.org" > /proc/sys/kernel/domainname
1189
1190
1191would suffice to set your hostname and NIS domainname.
1192
1193osrelease, ostype and version
1194-----------------------------
1195
1196The names make it pretty obvious what these fields contain:
1197
1198 > cat /proc/sys/kernel/osrelease
1199 2.2.12
1200
1201 > cat /proc/sys/kernel/ostype
1202 Linux
1203
1204 > cat /proc/sys/kernel/version
1205 #4 Fri Oct 1 12:41:14 PDT 1999
1206
1207
1208The files osrelease and ostype should be clear enough. Version needs a little
1209more clarification. The #4 means that this is the 4th kernel built from this
1210source base and the date after it indicates the time the kernel was built. The
1211only way to tune these values is to rebuild the kernel.
1212
1213panic
1214-----
1215
1216The value in this file represents the number of seconds the kernel waits
1217before rebooting on a panic. When you use the software watchdog, the
1218recommended setting is 60. If set to 0, the auto reboot after a kernel panic
1219is disabled, which is the default setting.
1220
1221printk
1222------
1223
1224The four values in printk denote
1225* console_loglevel,
1226* default_message_loglevel,
1227* minimum_console_loglevel and
1228* default_console_loglevel
1229respectively.
1230
1231These values influence printk() behavior when printing or logging error
1232messages, which come from inside the kernel. See syslog(2) for more
1233information on the different log levels.
1234
1235console_loglevel
1236----------------
1237
1238Messages with a higher priority than this will be printed to the console.
1239
1240default_message_level
1241---------------------
1242
1243Messages without an explicit priority will be printed with this priority.
1244
1245minimum_console_loglevel
1246------------------------
1247
1248Minimum (highest) value to which the console_loglevel can be set.
1249
1250default_console_loglevel
1251------------------------
1252
1253Default value for console_loglevel.
1254
1255sg-big-buff
1256-----------
1257
1258This file shows the size of the generic SCSI (sg) buffer. At this point, you
1259can't tune it yet, but you can change it at compile time by editing
1260include/scsi/sg.h and changing the value of SG_BIG_BUFF.
1261
1262If you use a scanner with SANE (Scanner Access Now Easy) you might want to set
1263this to a higher value. Refer to the SANE documentation on this issue.
1264
1265modprobe
1266--------
1267
1268The location where the modprobe binary is located. The kernel uses this
1269program to load modules on demand.
1270
1271unknown_nmi_panic
1272-----------------
1273
1274The value in this file affects behavior of handling NMI. When the value is
1275non-zero, unknown NMI is trapped and then panic occurs. At that time, kernel
1276debugging information is displayed on console.
1277
1278NMI switch that most IA32 servers have fires unknown NMI up, for example.
1279If a system hangs up, try pressing the NMI switch.
1280
Don Zickuse33e89a2006-09-26 10:52:27 +02001281nmi_watchdog
1282------------
1283
1284Enables/Disables the NMI watchdog on x86 systems. When the value is non-zero
1285the NMI watchdog is enabled and will continuously test all online cpus to
1286determine whether or not they are still functioning properly.
1287
1288Because the NMI watchdog shares registers with oprofile, by disabling the NMI
1289watchdog, oprofile may have more registers to utilize.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001290
Kees Cook5096add2007-05-08 00:26:04 -07001291maps_protect
1292------------
1293
1294Enables/Disables the protection of the per-process proc entries "maps" and
1295"smaps". When enabled, the contents of these files are visible only to
1296readers that are allowed to ptrace() the given process.
1297
Linus Torvalds1da177e2005-04-16 15:20:36 -07001298
12992.4 /proc/sys/vm - The virtual memory subsystem
1300-----------------------------------------------
1301
1302The files in this directory can be used to tune the operation of the virtual
1303memory (VM) subsystem of the Linux kernel.
1304
1305vfs_cache_pressure
1306------------------
1307
1308Controls the tendency of the kernel to reclaim the memory which is used for
1309caching of directory and inode objects.
1310
1311At the default value of vfs_cache_pressure=100 the kernel will attempt to
1312reclaim dentries and inodes at a "fair" rate with respect to pagecache and
1313swapcache reclaim. Decreasing vfs_cache_pressure causes the kernel to prefer
1314to retain dentry and inode caches. Increasing vfs_cache_pressure beyond 100
1315causes the kernel to prefer to reclaim dentries and inodes.
1316
1317dirty_background_ratio
1318----------------------
1319
1320Contains, as a percentage of total system memory, the number of pages at which
1321the pdflush background writeback daemon will start writing out dirty data.
1322
1323dirty_ratio
1324-----------------
1325
1326Contains, as a percentage of total system memory, the number of pages at which
1327a process which is generating disk writes will itself start writing out dirty
1328data.
1329
1330dirty_writeback_centisecs
1331-------------------------
1332
1333The pdflush writeback daemons will periodically wake up and write `old' data
1334out to disk. This tunable expresses the interval between those wakeups, in
1335100'ths of a second.
1336
1337Setting this to zero disables periodic writeback altogether.
1338
1339dirty_expire_centisecs
1340----------------------
1341
1342This tunable is used to define when dirty data is old enough to be eligible
1343for writeout by the pdflush daemons. It is expressed in 100'ths of a second.
1344Data which has been dirty in-memory for longer than this interval will be
1345written out next time a pdflush daemon wakes up.
1346
Bron Gondwana195cf452008-02-04 22:29:20 -08001347highmem_is_dirtyable
1348--------------------
1349
1350Only present if CONFIG_HIGHMEM is set.
1351
1352This defaults to 0 (false), meaning that the ratios set above are calculated
1353as a percentage of lowmem only. This protects against excessive scanning
1354in page reclaim, swapping and general VM distress.
1355
1356Setting this to 1 can be useful on 32 bit machines where you want to make
1357random changes within an MMAPed file that is larger than your available
1358lowmem without causing large quantities of random IO. Is is safe if the
1359behavior of all programs running on the machine is known and memory will
1360not be otherwise stressed.
1361
Linus Torvalds1da177e2005-04-16 15:20:36 -07001362legacy_va_layout
1363----------------
1364
1365If non-zero, this sysctl disables the new 32-bit mmap mmap layout - the kernel
1366will use the legacy (2.4) layout for all processes.
1367
Yasunori Goto7786fa92008-02-04 22:29:32 -08001368lowmem_reserve_ratio
Linus Torvalds1da177e2005-04-16 15:20:36 -07001369---------------------
1370
1371For some specialised workloads on highmem machines it is dangerous for
1372the kernel to allow process memory to be allocated from the "lowmem"
1373zone. This is because that memory could then be pinned via the mlock()
1374system call, or by unavailability of swapspace.
1375
1376And on large highmem machines this lack of reclaimable lowmem memory
1377can be fatal.
1378
1379So the Linux page allocator has a mechanism which prevents allocations
1380which _could_ use highmem from using too much lowmem. This means that
1381a certain amount of lowmem is defended from the possibility of being
1382captured into pinned user memory.
1383
1384(The same argument applies to the old 16 megabyte ISA DMA region. This
1385mechanism will also defend that region from allocations which could use
1386highmem or lowmem).
1387
Yasunori Goto7786fa92008-02-04 22:29:32 -08001388The `lowmem_reserve_ratio' tunable determines how aggressive the kernel is
1389in defending these lower zones.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001390
1391If you have a machine which uses highmem or ISA DMA and your
1392applications are using mlock(), or if you are running with no swap then
Yasunori Goto7786fa92008-02-04 22:29:32 -08001393you probably should change the lowmem_reserve_ratio setting.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001394
Yasunori Goto7786fa92008-02-04 22:29:32 -08001395The lowmem_reserve_ratio is an array. You can see them by reading this file.
1396-
1397% cat /proc/sys/vm/lowmem_reserve_ratio
1398256 256 32
1399-
1400Note: # of this elements is one fewer than number of zones. Because the highest
1401 zone's value is not necessary for following calculation.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001402
Yasunori Goto7786fa92008-02-04 22:29:32 -08001403But, these values are not used directly. The kernel calculates # of protection
1404pages for each zones from them. These are shown as array of protection pages
1405in /proc/zoneinfo like followings. (This is an example of x86-64 box).
1406Each zone has an array of protection pages like this.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001407
Yasunori Goto7786fa92008-02-04 22:29:32 -08001408-
1409Node 0, zone DMA
1410 pages free 1355
1411 min 3
1412 low 3
1413 high 4
1414 :
1415 :
1416 numa_other 0
1417 protection: (0, 2004, 2004, 2004)
1418 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
1419 pagesets
1420 cpu: 0 pcp: 0
1421 :
1422-
1423These protections are added to score to judge whether this zone should be used
1424for page allocation or should be reclaimed.
1425
1426In this example, if normal pages (index=2) are required to this DMA zone and
1427pages_high is used for watermark, the kernel judges this zone should not be
1428used because pages_free(1355) is smaller than watermark + protection[2]
1429(4 + 2004 = 2008). If this protection value is 0, this zone would be used for
1430normal page requirement. If requirement is DMA zone(index=0), protection[0]
1431(=0) is used.
1432
1433zone[i]'s protection[j] is calculated by following exprssion.
1434
1435(i < j):
1436 zone[i]->protection[j]
1437 = (total sums of present_pages from zone[i+1] to zone[j] on the node)
1438 / lowmem_reserve_ratio[i];
1439(i = j):
1440 (should not be protected. = 0;
1441(i > j):
1442 (not necessary, but looks 0)
1443
1444The default values of lowmem_reserve_ratio[i] are
1445 256 (if zone[i] means DMA or DMA32 zone)
1446 32 (others).
1447As above expression, they are reciprocal number of ratio.
1448256 means 1/256. # of protection pages becomes about "0.39%" of total present
1449pages of higher zones on the node.
1450
1451If you would like to protect more pages, smaller values are effective.
1452The minimum value is 1 (1/1 -> 100%).
Linus Torvalds1da177e2005-04-16 15:20:36 -07001453
1454page-cluster
1455------------
1456
1457page-cluster controls the number of pages which are written to swap in
1458a single attempt. The swap I/O size.
1459
1460It is a logarithmic value - setting it to zero means "1 page", setting
1461it to 1 means "2 pages", setting it to 2 means "4 pages", etc.
1462
1463The default value is three (eight pages at a time). There may be some
1464small benefits in tuning this to a different value if your workload is
1465swap-intensive.
1466
1467overcommit_memory
1468-----------------
1469
Chuck Ebbertaf97c722005-09-09 13:10:15 -07001470Controls overcommit of system memory, possibly allowing processes
1471to allocate (but not use) more memory than is actually available.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001472
Chuck Ebbertaf97c722005-09-09 13:10:15 -07001473
14740 - Heuristic overcommit handling. Obvious overcommits of
1475 address space are refused. Used for a typical system. It
1476 ensures a seriously wild allocation fails while allowing
1477 overcommit to reduce swap usage. root is allowed to
Matt LaPlante53cb4722006-10-03 22:55:17 +02001478 allocate slightly more memory in this mode. This is the
Chuck Ebbertaf97c722005-09-09 13:10:15 -07001479 default.
1480
14811 - Always overcommit. Appropriate for some scientific
1482 applications.
1483
14842 - Don't overcommit. The total address space commit
1485 for the system is not permitted to exceed swap plus a
1486 configurable percentage (default is 50) of physical RAM.
1487 Depending on the percentage you use, in most situations
1488 this means a process will not be killed while attempting
1489 to use already-allocated memory but will receive errors
1490 on memory allocation as appropriate.
1491
1492overcommit_ratio
1493----------------
1494
1495Percentage of physical memory size to include in overcommit calculations
1496(see above.)
1497
1498Memory allocation limit = swapspace + physmem * (overcommit_ratio / 100)
1499
1500 swapspace = total size of all swap areas
1501 physmem = size of physical memory in system
Linus Torvalds1da177e2005-04-16 15:20:36 -07001502
1503nr_hugepages and hugetlb_shm_group
1504----------------------------------
1505
1506nr_hugepages configures number of hugetlb page reserved for the system.
1507
1508hugetlb_shm_group contains group id that is allowed to create SysV shared
1509memory segment using hugetlb page.
1510
Mel Gormaned7ed362007-07-17 04:03:14 -07001511hugepages_treat_as_movable
1512--------------------------
1513
1514This parameter is only useful when kernelcore= is specified at boot time to
1515create ZONE_MOVABLE for pages that may be reclaimed or migrated. Huge pages
1516are not movable so are not normally allocated from ZONE_MOVABLE. A non-zero
1517value written to hugepages_treat_as_movable allows huge pages to be allocated
1518from ZONE_MOVABLE.
1519
1520Once enabled, the ZONE_MOVABLE is treated as an area of memory the huge
1521pages pool can easily grow or shrink within. Assuming that applications are
1522not running that mlock() a lot of memory, it is likely the huge pages pool
1523can grow to the size of ZONE_MOVABLE by repeatedly entering the desired value
1524into nr_hugepages and triggering page reclaim.
1525
Linus Torvalds1da177e2005-04-16 15:20:36 -07001526laptop_mode
1527-----------
1528
1529laptop_mode is a knob that controls "laptop mode". All the things that are
Randy Dunlapa09a20b2008-03-04 13:41:26 -08001530controlled by this knob are discussed in Documentation/laptops/laptop-mode.txt.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001531
1532block_dump
1533----------
1534
1535block_dump enables block I/O debugging when set to a nonzero value. More
Randy Dunlapa09a20b2008-03-04 13:41:26 -08001536information on block I/O debugging is in Documentation/laptops/laptop-mode.txt.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001537
1538swap_token_timeout
1539------------------
1540
1541This file contains valid hold time of swap out protection token. The Linux
1542VM has token based thrashing control mechanism and uses the token to prevent
1543unnecessary page faults in thrashing situation. The unit of the value is
1544second. The value would be useful to tune thrashing behavior.
1545
Andrew Morton9d0243b2006-01-08 01:00:39 -08001546drop_caches
1547-----------
1548
1549Writing to this will cause the kernel to drop clean caches, dentries and
1550inodes from memory, causing that memory to become free.
1551
1552To free pagecache:
1553 echo 1 > /proc/sys/vm/drop_caches
1554To free dentries and inodes:
1555 echo 2 > /proc/sys/vm/drop_caches
1556To free pagecache, dentries and inodes:
1557 echo 3 > /proc/sys/vm/drop_caches
1558
1559As this is a non-destructive operation and dirty objects are not freeable, the
1560user should run `sync' first.
1561
1562
Linus Torvalds1da177e2005-04-16 15:20:36 -070015632.5 /proc/sys/dev - Device specific parameters
1564----------------------------------------------
1565
1566Currently there is only support for CDROM drives, and for those, there is only
1567one read-only file containing information about the CD-ROM drives attached to
1568the system:
1569
1570 >cat /proc/sys/dev/cdrom/info
1571 CD-ROM information, Id: cdrom.c 2.55 1999/04/25
1572
1573 drive name: sr0 hdb
1574 drive speed: 32 40
1575 drive # of slots: 1 0
1576 Can close tray: 1 1
1577 Can open tray: 1 1
1578 Can lock tray: 1 1
1579 Can change speed: 1 1
1580 Can select disk: 0 1
1581 Can read multisession: 1 1
1582 Can read MCN: 1 1
1583 Reports media changed: 1 1
1584 Can play audio: 1 1
1585
1586
1587You see two drives, sr0 and hdb, along with a list of their features.
1588
15892.6 /proc/sys/sunrpc - Remote procedure calls
1590---------------------------------------------
1591
1592This directory contains four files, which enable or disable debugging for the
1593RPC functions NFS, NFS-daemon, RPC and NLM. The default values are 0. They can
1594be set to one to turn debugging on. (The default value is 0 for each)
1595
15962.7 /proc/sys/net - Networking stuff
1597------------------------------------
1598
1599The interface to the networking parts of the kernel is located in
1600/proc/sys/net. Table 2-3 shows all possible subdirectories. You may see only
1601some of them, depending on your kernel's configuration.
1602
1603
1604Table 2-3: Subdirectories in /proc/sys/net
1605..............................................................................
1606 Directory Content Directory Content
1607 core General parameter appletalk Appletalk protocol
1608 unix Unix domain sockets netrom NET/ROM
1609 802 E802 protocol ax25 AX25
1610 ethernet Ethernet protocol rose X.25 PLP layer
1611 ipv4 IP version 4 x25 X.25 protocol
1612 ipx IPX token-ring IBM token ring
1613 bridge Bridging decnet DEC net
1614 ipv6 IP version 6
1615..............................................................................
1616
1617We will concentrate on IP networking here. Since AX15, X.25, and DEC Net are
1618only minor players in the Linux world, we'll skip them in this chapter. You'll
1619find some short info on Appletalk and IPX further on in this chapter. Review
1620the online documentation and the kernel source to get a detailed view of the
1621parameters for those protocols. In this section we'll discuss the
1622subdirectories printed in bold letters in the table above. As default values
1623are suitable for most needs, there is no need to change these values.
1624
1625/proc/sys/net/core - Network core options
1626-----------------------------------------
1627
1628rmem_default
1629------------
1630
1631The default setting of the socket receive buffer in bytes.
1632
1633rmem_max
1634--------
1635
1636The maximum receive socket buffer size in bytes.
1637
1638wmem_default
1639------------
1640
1641The default setting (in bytes) of the socket send buffer.
1642
1643wmem_max
1644--------
1645
1646The maximum send socket buffer size in bytes.
1647
1648message_burst and message_cost
1649------------------------------
1650
1651These parameters are used to limit the warning messages written to the kernel
1652log from the networking code. They enforce a rate limit to make a
1653denial-of-service attack impossible. A higher message_cost factor, results in
1654fewer messages that will be written. Message_burst controls when messages will
1655be dropped. The default settings limit warning messages to one every five
1656seconds.
1657
Stephen Hemmingera2a316f2007-03-08 20:41:08 -08001658warnings
1659--------
1660
1661This controls console messages from the networking stack that can occur because
1662of problems on the network like duplicate address or bad checksums. Normally,
1663this should be enabled, but if the problem persists the messages can be
1664disabled.
1665
1666
Linus Torvalds1da177e2005-04-16 15:20:36 -07001667netdev_max_backlog
1668------------------
1669
1670Maximum number of packets, queued on the INPUT side, when the interface
1671receives packets faster than kernel can process them.
1672
1673optmem_max
1674----------
1675
1676Maximum ancillary buffer size allowed per socket. Ancillary data is a sequence
1677of struct cmsghdr structures with appended data.
1678
1679/proc/sys/net/unix - Parameters for Unix domain sockets
1680-------------------------------------------------------
1681
1682There are only two files in this subdirectory. They control the delays for
1683deleting and destroying socket descriptors.
1684
16852.8 /proc/sys/net/ipv4 - IPV4 settings
1686--------------------------------------
1687
1688IP version 4 is still the most used protocol in Unix networking. It will be
1689replaced by IP version 6 in the next couple of years, but for the moment it's
1690the de facto standard for the internet and is used in most networking
1691environments around the world. Because of the importance of this protocol,
1692we'll have a deeper look into the subtree controlling the behavior of the IPv4
1693subsystem of the Linux kernel.
1694
1695Let's start with the entries in /proc/sys/net/ipv4.
1696
1697ICMP settings
1698-------------
1699
1700icmp_echo_ignore_all and icmp_echo_ignore_broadcasts
1701----------------------------------------------------
1702
1703Turn on (1) or off (0), if the kernel should ignore all ICMP ECHO requests, or
1704just those to broadcast and multicast addresses.
1705
1706Please note that if you accept ICMP echo requests with a broadcast/multi\-cast
1707destination address your network may be used as an exploder for denial of
1708service packet flooding attacks to other hosts.
1709
1710icmp_destunreach_rate, icmp_echoreply_rate, icmp_paramprob_rate and icmp_timeexeed_rate
1711---------------------------------------------------------------------------------------
1712
1713Sets limits for sending ICMP packets to specific targets. A value of zero
1714disables all limiting. Any positive value sets the maximum package rate in
1715hundredth of a second (on Intel systems).
1716
1717IP settings
1718-----------
1719
1720ip_autoconfig
1721-------------
1722
1723This file contains the number one if the host received its IP configuration by
1724RARP, BOOTP, DHCP or a similar mechanism. Otherwise it is zero.
1725
1726ip_default_ttl
1727--------------
1728
1729TTL (Time To Live) for IPv4 interfaces. This is simply the maximum number of
1730hops a packet may travel.
1731
1732ip_dynaddr
1733----------
1734
1735Enable dynamic socket address rewriting on interface address change. This is
1736useful for dialup interface with changing IP addresses.
1737
1738ip_forward
1739----------
1740
1741Enable or disable forwarding of IP packages between interfaces. Changing this
1742value resets all other parameters to their default values. They differ if the
1743kernel is configured as host or router.
1744
1745ip_local_port_range
1746-------------------
1747
1748Range of ports used by TCP and UDP to choose the local port. Contains two
1749numbers, the first number is the lowest port, the second number the highest
1750local port. Default is 1024-4999. Should be changed to 32768-61000 for
1751high-usage systems.
1752
1753ip_no_pmtu_disc
1754---------------
1755
1756Global switch to turn path MTU discovery off. It can also be set on a per
1757socket basis by the applications or on a per route basis.
1758
1759ip_masq_debug
1760-------------
1761
1762Enable/disable debugging of IP masquerading.
1763
1764IP fragmentation settings
1765-------------------------
1766
1767ipfrag_high_trash and ipfrag_low_trash
1768--------------------------------------
1769
1770Maximum memory used to reassemble IP fragments. When ipfrag_high_thresh bytes
1771of memory is allocated for this purpose, the fragment handler will toss
1772packets until ipfrag_low_thresh is reached.
1773
1774ipfrag_time
1775-----------
1776
1777Time in seconds to keep an IP fragment in memory.
1778
1779TCP settings
1780------------
1781
1782tcp_ecn
1783-------
1784
Matt LaPlantefa00e7e2006-11-30 04:55:36 +01001785This file controls the use of the ECN bit in the IPv4 headers. This is a new
Linus Torvalds1da177e2005-04-16 15:20:36 -07001786feature about Explicit Congestion Notification, but some routers and firewalls
Matt LaPlantefa00e7e2006-11-30 04:55:36 +01001787block traffic that has this bit set, so it could be necessary to echo 0 to
1788/proc/sys/net/ipv4/tcp_ecn if you want to talk to these sites. For more info
Linus Torvalds1da177e2005-04-16 15:20:36 -07001789you could read RFC2481.
1790
1791tcp_retrans_collapse
1792--------------------
1793
1794Bug-to-bug compatibility with some broken printers. On retransmit, try to send
1795larger packets to work around bugs in certain TCP stacks. Can be turned off by
1796setting it to zero.
1797
1798tcp_keepalive_probes
1799--------------------
1800
1801Number of keep alive probes TCP sends out, until it decides that the
1802connection is broken.
1803
1804tcp_keepalive_time
1805------------------
1806
1807How often TCP sends out keep alive messages, when keep alive is enabled. The
1808default is 2 hours.
1809
1810tcp_syn_retries
1811---------------
1812
1813Number of times initial SYNs for a TCP connection attempt will be
1814retransmitted. Should not be higher than 255. This is only the timeout for
1815outgoing connections, for incoming connections the number of retransmits is
1816defined by tcp_retries1.
1817
1818tcp_sack
1819--------
1820
1821Enable select acknowledgments after RFC2018.
1822
1823tcp_timestamps
1824--------------
1825
1826Enable timestamps as defined in RFC1323.
1827
1828tcp_stdurg
1829----------
1830
1831Enable the strict RFC793 interpretation of the TCP urgent pointer field. The
1832default is to use the BSD compatible interpretation of the urgent pointer
1833pointing to the first byte after the urgent data. The RFC793 interpretation is
1834to have it point to the last byte of urgent data. Enabling this option may
Matt LaPlante2fe0ae72006-10-03 22:50:39 +02001835lead to interoperability problems. Disabled by default.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001836
1837tcp_syncookies
1838--------------
1839
1840Only valid when the kernel was compiled with CONFIG_SYNCOOKIES. Send out
1841syncookies when the syn backlog queue of a socket overflows. This is to ward
1842off the common 'syn flood attack'. Disabled by default.
1843
1844Note that the concept of a socket backlog is abandoned. This means the peer
1845may not receive reliable error messages from an over loaded server with
1846syncookies enabled.
1847
1848tcp_window_scaling
1849------------------
1850
1851Enable window scaling as defined in RFC1323.
1852
1853tcp_fin_timeout
1854---------------
1855
1856The length of time in seconds it takes to receive a final FIN before the
1857socket is always closed. This is strictly a violation of the TCP
1858specification, but required to prevent denial-of-service attacks.
1859
1860tcp_max_ka_probes
1861-----------------
1862
1863Indicates how many keep alive probes are sent per slow timer run. Should not
1864be set too high to prevent bursts.
1865
1866tcp_max_syn_backlog
1867-------------------
1868
1869Length of the per socket backlog queue. Since Linux 2.2 the backlog specified
1870in listen(2) only specifies the length of the backlog queue of already
1871established sockets. When more connection requests arrive Linux starts to drop
1872packets. When syncookies are enabled the packets are still answered and the
1873maximum queue is effectively ignored.
1874
1875tcp_retries1
1876------------
1877
1878Defines how often an answer to a TCP connection request is retransmitted
1879before giving up.
1880
1881tcp_retries2
1882------------
1883
1884Defines how often a TCP packet is retransmitted before giving up.
1885
1886Interface specific settings
1887---------------------------
1888
1889In the directory /proc/sys/net/ipv4/conf you'll find one subdirectory for each
1890interface the system knows about and one directory calls all. Changes in the
1891all subdirectory affect all interfaces, whereas changes in the other
1892subdirectories affect only one interface. All directories have the same
1893entries:
1894
1895accept_redirects
1896----------------
1897
1898This switch decides if the kernel accepts ICMP redirect messages or not. The
1899default is 'yes' if the kernel is configured for a regular host and 'no' for a
1900router configuration.
1901
1902accept_source_route
1903-------------------
1904
1905Should source routed packages be accepted or declined. The default is
1906dependent on the kernel configuration. It's 'yes' for routers and 'no' for
1907hosts.
1908
1909bootp_relay
1910~~~~~~~~~~~
1911
1912Accept packets with source address 0.b.c.d with destinations not to this host
1913as local ones. It is supposed that a BOOTP relay daemon will catch and forward
1914such packets.
1915
1916The default is 0, since this feature is not implemented yet (kernel version
19172.2.12).
1918
1919forwarding
1920----------
1921
1922Enable or disable IP forwarding on this interface.
1923
1924log_martians
1925------------
1926
1927Log packets with source addresses with no known route to kernel log.
1928
1929mc_forwarding
1930-------------
1931
1932Do multicast routing. The kernel needs to be compiled with CONFIG_MROUTE and a
1933multicast routing daemon is required.
1934
1935proxy_arp
1936---------
1937
1938Does (1) or does not (0) perform proxy ARP.
1939
1940rp_filter
1941---------
1942
1943Integer value determines if a source validation should be made. 1 means yes, 0
1944means no. Disabled by default, but local/broadcast address spoofing is always
1945on.
1946
1947If you set this to 1 on a router that is the only connection for a network to
1948the net, it will prevent spoofing attacks against your internal networks
1949(external addresses can still be spoofed), without the need for additional
1950firewall rules.
1951
1952secure_redirects
1953----------------
1954
1955Accept ICMP redirect messages only for gateways, listed in default gateway
1956list. Enabled by default.
1957
1958shared_media
1959------------
1960
1961If it is not set the kernel does not assume that different subnets on this
1962device can communicate directly. Default setting is 'yes'.
1963
1964send_redirects
1965--------------
1966
1967Determines whether to send ICMP redirects to other hosts.
1968
1969Routing settings
1970----------------
1971
1972The directory /proc/sys/net/ipv4/route contains several file to control
1973routing issues.
1974
1975error_burst and error_cost
1976--------------------------
1977
1978These parameters are used to limit how many ICMP destination unreachable to
1979send from the host in question. ICMP destination unreachable messages are
Matt LaPlante84eb8d02006-10-03 22:53:09 +02001980sent when we cannot reach the next hop while trying to transmit a packet.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001981It will also print some error messages to kernel logs if someone is ignoring
1982our ICMP redirects. The higher the error_cost factor is, the fewer
1983destination unreachable and error messages will be let through. Error_burst
1984controls when destination unreachable messages and error messages will be
1985dropped. The default settings limit warning messages to five every second.
1986
1987flush
1988-----
1989
1990Writing to this file results in a flush of the routing cache.
1991
1992gc_elasticity, gc_interval, gc_min_interval_ms, gc_timeout, gc_thresh
1993---------------------------------------------------------------------
1994
1995Values to control the frequency and behavior of the garbage collection
1996algorithm for the routing cache. gc_min_interval is deprecated and replaced
1997by gc_min_interval_ms.
1998
1999
2000max_size
2001--------
2002
2003Maximum size of the routing cache. Old entries will be purged once the cache
2004reached has this size.
2005
Linus Torvalds1da177e2005-04-16 15:20:36 -07002006redirect_load, redirect_number
2007------------------------------
2008
2009Factors which determine if more ICPM redirects should be sent to a specific
2010host. No redirects will be sent once the load limit or the maximum number of
2011redirects has been reached.
2012
2013redirect_silence
2014----------------
2015
2016Timeout for redirects. After this period redirects will be sent again, even if
2017this has been stopped, because the load or number limit has been reached.
2018
2019Network Neighbor handling
2020-------------------------
2021
2022Settings about how to handle connections with direct neighbors (nodes attached
2023to the same link) can be found in the directory /proc/sys/net/ipv4/neigh.
2024
2025As we saw it in the conf directory, there is a default subdirectory which
2026holds the default values, and one directory for each interface. The contents
2027of the directories are identical, with the single exception that the default
2028settings contain additional options to set garbage collection parameters.
2029
2030In the interface directories you'll find the following entries:
2031
2032base_reachable_time, base_reachable_time_ms
2033-------------------------------------------
2034
2035A base value used for computing the random reachable time value as specified
2036in RFC2461.
2037
2038Expression of base_reachable_time, which is deprecated, is in seconds.
2039Expression of base_reachable_time_ms is in milliseconds.
2040
2041retrans_time, retrans_time_ms
2042-----------------------------
2043
2044The time between retransmitted Neighbor Solicitation messages.
2045Used for address resolution and to determine if a neighbor is
2046unreachable.
2047
2048Expression of retrans_time, which is deprecated, is in 1/100 seconds (for
2049IPv4) or in jiffies (for IPv6).
2050Expression of retrans_time_ms is in milliseconds.
2051
2052unres_qlen
2053----------
2054
2055Maximum queue length for a pending arp request - the number of packets which
2056are accepted from other layers while the ARP address is still resolved.
2057
2058anycast_delay
2059-------------
2060
2061Maximum for random delay of answers to neighbor solicitation messages in
2062jiffies (1/100 sec). Not yet implemented (Linux does not have anycast support
2063yet).
2064
2065ucast_solicit
2066-------------
2067
2068Maximum number of retries for unicast solicitation.
2069
2070mcast_solicit
2071-------------
2072
2073Maximum number of retries for multicast solicitation.
2074
2075delay_first_probe_time
2076----------------------
2077
2078Delay for the first time probe if the neighbor is reachable. (see
2079gc_stale_time)
2080
2081locktime
2082--------
2083
2084An ARP/neighbor entry is only replaced with a new one if the old is at least
2085locktime old. This prevents ARP cache thrashing.
2086
2087proxy_delay
2088-----------
2089
2090Maximum time (real time is random [0..proxytime]) before answering to an ARP
2091request for which we have an proxy ARP entry. In some cases, this is used to
2092prevent network flooding.
2093
2094proxy_qlen
2095----------
2096
2097Maximum queue length of the delayed proxy arp timer. (see proxy_delay).
2098
Matt LaPlante53cb4722006-10-03 22:55:17 +02002099app_solicit
Linus Torvalds1da177e2005-04-16 15:20:36 -07002100----------
2101
2102Determines the number of requests to send to the user level ARP daemon. Use 0
2103to turn off.
2104
2105gc_stale_time
2106-------------
2107
2108Determines how often to check for stale ARP entries. After an ARP entry is
2109stale it will be resolved again (which is useful when an IP address migrates
2110to another machine). When ucast_solicit is greater than 0 it first tries to
2111send an ARP packet directly to the known host When that fails and
2112mcast_solicit is greater than 0, an ARP request is broadcasted.
2113
21142.9 Appletalk
2115-------------
2116
2117The /proc/sys/net/appletalk directory holds the Appletalk configuration data
2118when Appletalk is loaded. The configurable parameters are:
2119
2120aarp-expiry-time
2121----------------
2122
2123The amount of time we keep an ARP entry before expiring it. Used to age out
2124old hosts.
2125
2126aarp-resolve-time
2127-----------------
2128
2129The amount of time we will spend trying to resolve an Appletalk address.
2130
2131aarp-retransmit-limit
2132---------------------
2133
2134The number of times we will retransmit a query before giving up.
2135
2136aarp-tick-time
2137--------------
2138
2139Controls the rate at which expires are checked.
2140
2141The directory /proc/net/appletalk holds the list of active Appletalk sockets
2142on a machine.
2143
2144The fields indicate the DDP type, the local address (in network:node format)
2145the remote address, the size of the transmit pending queue, the size of the
2146received queue (bytes waiting for applications to read) the state and the uid
2147owning the socket.
2148
2149/proc/net/atalk_iface lists all the interfaces configured for appletalk.It
2150shows the name of the interface, its Appletalk address, the network range on
2151that address (or network number for phase 1 networks), and the status of the
2152interface.
2153
2154/proc/net/atalk_route lists each known network route. It lists the target
2155(network) that the route leads to, the router (may be directly connected), the
2156route flags, and the device the route is using.
2157
21582.10 IPX
2159--------
2160
2161The IPX protocol has no tunable values in proc/sys/net.
2162
2163The IPX protocol does, however, provide proc/net/ipx. This lists each IPX
2164socket giving the local and remote addresses in Novell format (that is
2165network:node:port). In accordance with the strange Novell tradition,
2166everything but the port is in hex. Not_Connected is displayed for sockets that
2167are not tied to a specific remote address. The Tx and Rx queue sizes indicate
2168the number of bytes pending for transmission and reception. The state
2169indicates the state the socket is in and the uid is the owning uid of the
2170socket.
2171
2172The /proc/net/ipx_interface file lists all IPX interfaces. For each interface
2173it gives the network number, the node number, and indicates if the network is
2174the primary network. It also indicates which device it is bound to (or
2175Internal for internal networks) and the Frame Type if appropriate. Linux
2176supports 802.3, 802.2, 802.2 SNAP and DIX (Blue Book) ethernet framing for
2177IPX.
2178
2179The /proc/net/ipx_route table holds a list of IPX routes. For each route it
2180gives the destination network, the router node (or Directly) and the network
2181address of the router (or Connected) for internal networks.
2182
21832.11 /proc/sys/fs/mqueue - POSIX message queues filesystem
2184----------------------------------------------------------
2185
2186The "mqueue" filesystem provides the necessary kernel features to enable the
2187creation of a user space library that implements the POSIX message queues
2188API (as noted by the MSG tag in the POSIX 1003.1-2001 version of the System
2189Interfaces specification.)
2190
2191The "mqueue" filesystem contains values for determining/setting the amount of
2192resources used by the file system.
2193
2194/proc/sys/fs/mqueue/queues_max is a read/write file for setting/getting the
2195maximum number of message queues allowed on the system.
2196
2197/proc/sys/fs/mqueue/msg_max is a read/write file for setting/getting the
2198maximum number of messages in a queue value. In fact it is the limiting value
2199for another (user) limit which is set in mq_open invocation. This attribute of
2200a queue must be less or equal then msg_max.
2201
2202/proc/sys/fs/mqueue/msgsize_max is a read/write file for setting/getting the
2203maximum message size value (it is every message queue's attribute set during
2204its creation).
2205
Jan-Frode Myklebustd7ff0db2006-09-29 01:59:45 -070022062.12 /proc/<pid>/oom_adj - Adjust the oom-killer score
2207------------------------------------------------------
2208
2209This file can be used to adjust the score used to select which processes
2210should be killed in an out-of-memory situation. Giving it a high score will
2211increase the likelihood of this process being killed by the oom-killer. Valid
2212values are in the range -16 to +15, plus the special value -17, which disables
2213oom-killing altogether for this process.
2214
22152.13 /proc/<pid>/oom_score - Display current oom-killer score
2216-------------------------------------------------------------
2217
2218------------------------------------------------------------------------------
2219This file can be used to check the current score used by the oom-killer is for
2220any given <pid>. Use it together with /proc/<pid>/oom_adj to tune which
2221process should be killed in an out-of-memory situation.
Linus Torvalds1da177e2005-04-16 15:20:36 -07002222
2223------------------------------------------------------------------------------
2224Summary
2225------------------------------------------------------------------------------
2226Certain aspects of kernel behavior can be modified at runtime, without the
2227need to recompile the kernel, or even to reboot the system. The files in the
2228/proc/sys tree can not only be read, but also modified. You can use the echo
2229command to write value into these files, thereby changing the default settings
2230of the kernel.
2231------------------------------------------------------------------------------
Roland Kletzingf9c99462007-03-05 00:30:54 -08002232
22332.14 /proc/<pid>/io - Display the IO accounting fields
2234-------------------------------------------------------
2235
2236This file contains IO statistics for each running process
2237
2238Example
2239-------
2240
2241test:/tmp # dd if=/dev/zero of=/tmp/test.dat &
2242[1] 3828
2243
2244test:/tmp # cat /proc/3828/io
2245rchar: 323934931
2246wchar: 323929600
2247syscr: 632687
2248syscw: 632675
2249read_bytes: 0
2250write_bytes: 323932160
2251cancelled_write_bytes: 0
2252
2253
2254Description
2255-----------
2256
2257rchar
2258-----
2259
2260I/O counter: chars read
2261The number of bytes which this task has caused to be read from storage. This
2262is simply the sum of bytes which this process passed to read() and pread().
2263It includes things like tty IO and it is unaffected by whether or not actual
2264physical disk IO was required (the read might have been satisfied from
2265pagecache)
2266
2267
2268wchar
2269-----
2270
2271I/O counter: chars written
2272The number of bytes which this task has caused, or shall cause to be written
2273to disk. Similar caveats apply here as with rchar.
2274
2275
2276syscr
2277-----
2278
2279I/O counter: read syscalls
2280Attempt to count the number of read I/O operations, i.e. syscalls like read()
2281and pread().
2282
2283
2284syscw
2285-----
2286
2287I/O counter: write syscalls
2288Attempt to count the number of write I/O operations, i.e. syscalls like
2289write() and pwrite().
2290
2291
2292read_bytes
2293----------
2294
2295I/O counter: bytes read
2296Attempt to count the number of bytes which this process really did cause to
2297be fetched from the storage layer. Done at the submit_bio() level, so it is
2298accurate for block-backed filesystems. <please add status regarding NFS and
2299CIFS at a later time>
2300
2301
2302write_bytes
2303-----------
2304
2305I/O counter: bytes written
2306Attempt to count the number of bytes which this process caused to be sent to
2307the storage layer. This is done at page-dirtying time.
2308
2309
2310cancelled_write_bytes
2311---------------------
2312
2313The big inaccuracy here is truncate. If a process writes 1MB to a file and
2314then deletes the file, it will in fact perform no writeout. But it will have
2315been accounted as having caused 1MB of write.
2316In other words: The number of bytes which this process caused to not happen,
2317by truncating pagecache. A task can cause "negative" IO too. If this task
2318truncates some dirty pagecache, some IO which another task has been accounted
2319for (in it's write_bytes) will not be happening. We _could_ just subtract that
2320from the truncating task's write_bytes, but there is information loss in doing
2321that.
2322
2323
2324Note
2325----
2326
2327At its current implementation state, this is a bit racy on 32-bit machines: if
2328process A reads process B's /proc/pid/io while process B is updating one of
2329those 64-bit counters, process A could see an intermediate result.
2330
2331
2332More information about this can be found within the taskstats documentation in
2333Documentation/accounting.
2334
Kawai, Hidehirobb901102007-07-19 01:48:31 -070023352.15 /proc/<pid>/coredump_filter - Core dump filtering settings
2336---------------------------------------------------------------
2337When a process is dumped, all anonymous memory is written to a core file as
2338long as the size of the core file isn't limited. But sometimes we don't want
2339to dump some memory segments, for example, huge shared memory. Conversely,
2340sometimes we want to save file-backed memory segments into a core file, not
2341only the individual files.
2342
2343/proc/<pid>/coredump_filter allows you to customize which memory segments
2344will be dumped when the <pid> process is dumped. coredump_filter is a bitmask
2345of memory types. If a bit of the bitmask is set, memory segments of the
2346corresponding memory type are dumped, otherwise they are not dumped.
2347
2348The following 4 memory types are supported:
2349 - (bit 0) anonymous private memory
2350 - (bit 1) anonymous shared memory
2351 - (bit 2) file-backed private memory
2352 - (bit 3) file-backed shared memory
2353
2354 Note that MMIO pages such as frame buffer are never dumped and vDSO pages
2355 are always dumped regardless of the bitmask status.
2356
2357Default value of coredump_filter is 0x3; this means all anonymous memory
2358segments are dumped.
2359
2360If you don't want to dump all shared memory segments attached to pid 1234,
2361write 1 to the process's proc file.
2362
2363 $ echo 0x1 > /proc/1234/coredump_filter
2364
2365When a new process is created, the process inherits the bitmask status from its
2366parent. It is useful to set up coredump_filter before the program runs.
2367For example:
2368
2369 $ echo 0x7 > /proc/self/coredump_filter
2370 $ ./some_program
2371
Ram Pai2d4d4862008-03-27 13:06:25 +010023722.16 /proc/<pid>/mountinfo - Information about mounts
2373--------------------------------------------------------
2374
2375This file contains lines of the form:
2376
237736 35 98:0 /mnt1 /mnt2 rw,noatime master:1 - ext3 /dev/root rw,errors=continue
2378(1)(2)(3) (4) (5) (6) (7) (8) (9) (10) (11)
2379
2380(1) mount ID: unique identifier of the mount (may be reused after umount)
2381(2) parent ID: ID of parent (or of self for the top of the mount tree)
2382(3) major:minor: value of st_dev for files on filesystem
2383(4) root: root of the mount within the filesystem
2384(5) mount point: mount point relative to the process's root
2385(6) mount options: per mount options
2386(7) optional fields: zero or more fields of the form "tag[:value]"
2387(8) separator: marks the end of the optional fields
2388(9) filesystem type: name of filesystem of the form "type[.subtype]"
2389(10) mount source: filesystem specific information or "none"
2390(11) super options: per super block options
2391
2392Parsers should ignore all unrecognised optional fields. Currently the
2393possible optional fields are:
2394
2395shared:X mount is shared in peer group X
2396master:X mount is slave to peer group X
Miklos Szeredi97e7e0f2008-03-27 13:06:26 +01002397propagate_from:X mount is slave and receives propagation from peer group X (*)
Ram Pai2d4d4862008-03-27 13:06:25 +01002398unbindable mount is unbindable
2399
Miklos Szeredi97e7e0f2008-03-27 13:06:26 +01002400(*) X is the closest dominant peer group under the process's root. If
2401X is the immediate master of the mount, or if there's no dominant peer
2402group under the same root, then only the "master:X" field is present
2403and not the "propagate_from:X" field.
2404
Ram Pai2d4d4862008-03-27 13:06:25 +01002405For more information on mount propagation see:
2406
2407 Documentation/filesystems/sharedsubtree.txt
2408
Roland Kletzingf9c99462007-03-05 00:30:54 -08002409------------------------------------------------------------------------------