Host Intrusion Detection System Administrator's Guide Release 3.1
Configuration
Enabling Multiple Agents
Chapter 2
31
Enabling Multiple Agents
If you have more than about 20 agent systems, you may have to modify a kernel
parameter and a network parameter. The procedures are described below in the sections:
• “Enabling Over 23 Agents (Thread Limits)” on page 31
• “Enabling Over 20 Inbound Requests” on page 32
Enabling Over 23 Agents (Thread Limits)
You need to ensure that the administration system provides enough threads per process
to handle the maximum number of agent systems you will monitor at one time. The
thread value is specified by the tunable kernel parameter max_thread_proc. You can
compute its minimum value from the formula:
max_thread_proc = 2 *
num_agents
+ 18
where
num_agents
is the number of agent systems to be monitored.
By default, max_thread_proc is set to its minimum value, 64, which allows for 23
agents. The maximum value of max_thread_proc is governed by the configurable kernel
parameter nkthread, which you may need to increase if you have a larger number of
agents.
NOTE The max_thread_proc became a dynamic tunable in HP-UX 11i version 1.6. In prior
systems, a change to it will require a reboot.
To change the value of max_thread_proc
NOTE In HP-UX 11i version 2, the modification of kernel tunables and kernel configuration
was moved from SAM to the kcweb system configuration interface. For more
information, see Managing Systems and Workgroups: A Guide for HP-UX System
Administrators for details.
Step 1. Run sam, the HP-UX System Administration Manager (SAM)
Step 2. Select Kernel Configuration
Step 3. Select Configurable Parameters
Step 4. Highlight max_thread_proc
Step 5. Select Actions > Modify Configurable Parameter
Step 6. Enter your new value in the Formula/Value box
Step 7. Choose OK. Your new value shows in the Pending column.
Step 8. Select File > Exit.