Re: File opened via AFP Xsan re-share causes XSAN restart/lockup

I have started MS Word.
I'll find it with ps command in the terminal:

Spongebob:~ modica$ ps -ef | grep Micro
502 18422 163 0 4:34PM ?? 0:02.57 /Applications/Microsoft Office 2011/Microsoft Word.app/Contents/MacOS/Microsoft Word -psn_0_3306279

It's PID is 18422

So now I can grab it with dtruss:

$ sudo dtruss -p 18422 -f

then this happens when I hit save (it goes fast, so you might want to catch this in a file)

18422/0x27468c: munmap(0x24482000, 0x8CB000) = 0 0
^C18422/0x27468c: pwrite(0x3D, "", 0x1, 0x238) = 1 0
18422/0x27468c: pwrite(0x3D, "264224MO302@20206357&376207f257246]360`214241pP<*21130317353vn253335217354,_377336i20106I241(zi322N337367}f332235336`251213h16362255)353&35262012216Sf222262327361c|313"f302d24226006R26602d203376345Eo274r20021251r246l322022733433434524264300304:0T311255327"320255237p'344247230", 0x18B, 0x239) = 395 0
18422/0x27468c: pwrite(0x3D, "03", 0x2, 0x3C4) = 2 0
18422/0x27468c: pwrite(0x3D, "PK030424", 0x239, 0x0) = 569 0
18422/0x27468c: pwrite(0x3D, "", 0x1, 0x5F6) = 1 0
18422/0x27468c: pwrite(0x3D, "254222301N3030f206357H274C344373232n 204320322]20322nb225a021132706332$J<330336236260303J245QMb307304316237357367357345j327w342223b262336)23027%br33233353320525736532335436Dbt06;357H30123622254252353253345vu310371QjmH"253270244240e1617R&335R217251360201\256l|354221363162240376300206344242,357d37425501325HS25421520227067 352}310?377G[366304h220Qj37i26b&213l26327Qcl2102530257237363u:t2423132344i240333363201374fc5=z275355311361t317222vL316220231F30220246210346227$32317363371362321310<244203225)2323053714177/303203026733337631524135506224cT307Z36136250371t", 0x10A, 0x5F7) = 266 0
18422/0x27468c: pwrite(0x3D, "03", 0x2, 0x701) = 2 0
18422/0x27468c: pwrite(0x3D, "PK030424", 0x231, 0x3C6) = 561 0
18422/0x27468c: pwrite(0x3D, "", 0x1, 0x844) = 1 0

You can also tell dtruss to just capture opens, or writes or whatever to whittle down the traffic.
My sense is that something other than the file (like MS Office support files) are the culprit here. Are any of those shared in any way from the SAN?

Steve

Steve Modica
CTO, Small Tree Communications