nodemanager启动后过段时间就挂了，仔细检查了配置是好的

Question

2018-08-26 23:42:16,440 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.application.Application: Application application_1535297717096_0016 transitioned from APPLICATION_RESOURCES_CLEANINGUP to FINISHED

2018-08-26 23:42:16,440 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.loghandler.NonAggregatingLogHandler: Scheduling Log Deletion for application: application_1535297717096_0016, with delay of 10800 seconds

2018-08-26 23:44:09,600 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for appattempt_1535297717096_0017_000001 (auth:SIMPLE)

2018-08-26 23:44:09,603 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.ContainerManagerImpl: Start request for container_1535297717096_0017_01_000001 by user dr.who

2018-08-26 23:44:09,603 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.ContainerManagerImpl: Creating a new application reference for app application_1535297717096_0017

2018-08-26 23:44:09,603 INFO org.apache.hadoop.yarn.server.nodemanager.NMAuditLogger: USER=dr.who       IP=192.168.0.117        OPERATION=Start Container Request        TARGET=ContainerManageImpl      RESULT=SUCCESS  APPID=application_1535297717096_0017    CONTAINERID=container_1535297717096_0017_01_000001

2018-08-26 23:44:09,603 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.application.Application: Application application_1535297717096_0017 transitioned from NEW to INITING

2018-08-26 23:44:09,603 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.application.Application: Adding container_1535297717096_0017_01_000001 to application application_1535297717096_0017

2018-08-26 23:44:09,604 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.application.Application: Application application_1535297717096_0017 transitioned from INITING to RUNNING

2018-08-26 23:44:09,604 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.container.Container: Container container_1535297717096_0017_01_000001 transitioned from NEW to LOCALIZED

2018-08-26 23:44:09,604 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.AuxServices: Got event CONTAINER_INIT for appId application_1535297717096_0017

2018-08-26 23:44:09,624 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.container.Container: Container container_1535297717096_0017_01_000001 transitioned from LOCALIZED to RUNNING

2018-08-26 23:44:09,642 INFO org.apache.hadoop.yarn.server.nodemanager.DefaultContainerExecutor: launchContainer: [bash, /home/hadoop/app/tmp/nm-local-dir/usercache/dr.who/appcache/application_1535297717096_0017/container_1535297717096_0017_01_000001/default_container_executor.sh]

2018-08-26 23:44:10,141 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.monitor.ContainersMonitorImpl: Starting resource-monitoring for container_1535297717096_0017_01_000001

2018-08-26 23:44:10,149 INFO org.apache.hadoop.yarn.server.nodemanager.containermanager.monitor.ContainersMonitorImpl: Memory usage of ProcessTree 112358 for container-id container_1535297717096_0017_01_000001: 7.1 MB of 1 GB physical memory used; 36.4 MB of 2.1 GB virtual memory used

————大神来解答，不胜感激

Answer 1

Michael_PK 2018-08-27 00:51:28

日志的最后显示，内存不够了

• Michael_PK #1

  不对，我看错了！你现在的状态是进程还在吗？等挂了，你查看少，缺少了什么进程，然后到最后进程的日志中找下日志信息贴出来看看

• 提问者 慕粉0909169327 回复 Michael_PK #2

  哎，我后来发现是被恶意攻击了，恶意被添加了好多application_id，然后nodemanager就挂了，好恐怖的，yarn一启动8088端口批量的application_id就进来了。dr.who https://blog.csdn.net/xiaolong_4_2/article/details/81839589

• Michael_PK 回复 提问者 慕粉0909169327 #3

  这个被攻击，我记得上周也有其他学员和我说过这情况，很多application提交到yarn上去