john-users - RE: large pot and --show problem

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 28 Dec 2008 02:34:42 +0000
From: Ruben Lara <bermejator@...mail.com>
To: <john-users@...ts.openwall.com>
Subject: RE: large pot and --show problem


Hi all!

> Date: Fri, 26 Dec 2008 05:43:31 +0300
> From: solar@...nwall.com
> You mentioned that your pot file is 400 MB.  How large is the password
> file that is slow to --show?  And just how much time does --show on it
> take to complete?

Password file is about 55 MB, to burte force it take ~3 hours, and --show never end :P, well i get it running about 3 days, and continue...


> That's weird.  If the process consumes very little CPU as you say (below 1%)
> and presumably not all memory it could get, then what does it spend most
> of its time on?  Can you perhaps copy & paste the first few lines of "top"
> output while the process is running - those lines that show user vs.
> system CPU time percentages, as well as memory and swap usage info?
> Also include the line for the "john" process.

Tasks:  53 total,   3 running,  50 sleeping,   0 stopped,   0 zombie
Cpu(s):  4.7%us,  3.7%sy,  0.0%ni,  0.0%id, 91.3%wa,  0.3%hi,  0.0%si,  0.0%st
Mem:    516480k total,   511476k used,     5004k free,      212k buffers
Swap:   996020k total,   382872k used,   613148k free,    13344k cached
 
  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                   
 2579 bermejo   20   0  575m 325m  348 R  0.7 64.5   0:15.28 john     

> Then, can you please run "/sbin/hdparm -t" on any relevant hard drive
> devices (where your files reside, where the swap partition resides) -
> and post the output?  

bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda4 <---( /home/ where passfiles and john reside)
 
/dev/hda4:
 Timing buffered disk reads:   80 MB in  3.06 seconds =  26.13 MB/sec

bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda2 <--- (Swap)
 
/dev/hda2:
 Timing buffered disk reads:   92 MB in  3.02 seconds =  30.47 MB/sec
 
bermejo@...MEJO-VIEJO:~$ sudo hdparm -t /dev/hda3 <--- ( / )
 
/dev/hda3:
 Timing buffered disk reads:   92 MB in  3.06 seconds =  30.07 MB/sec
>If any IDE hard drives are involved, then please
> also do "/sbin/hdparm -d /dev/hda" and the like.  One guess is that you
> might not have DMA on an IDE drive enabled, and indeed reading 400 MB
> without DMA will take ages (well, it may take 2 minutes).

bermejo@...MEJO-VIEJO:~$ sudo hdparm -d /dev/hda
/dev/hda:
 using_dma     =  1 (on)
Look like, it's ok, it's all very strange :/

Thank you for your time
Rubén Lara

_________________________________________________________________
Algo más que mensajes: comprueba el resto de Windows Live™.
http://www.microsoft.com/windows/windowslive/