Usually sys would be the kernel. CheckPoint inspect code is in the kernel
so that probably is where the problem lies. If you repush the policy does
it still occur?
Christian Chiaverini
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Cihan
Subasi (Garanti Teknoloji)
Sent: Thursday, July 06, 2006 2:32 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] NGX upgrade and high cpu usage
Seems to me ps -aux only show user processes not the sys processes...
fwNTV[admin]# ps -auxxx
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 7585 6.6 0.1 504 376 p0 Ss 9:27AM 0:00.40 -csh
(csh)
root 7584 1.8 0.2 312 868 ?? S 9:27AM 0:00.14 telnetd
root 295 1.8 0.4 1556 1920 ?? Is 28Jun06 112:54.09
/bin/monitord
root 3 0.0 0.0 0 20 ?? DL 28Jun06 0:00.00
(vmdaemon)
root 4 0.0 0.0 0 20 ?? DL 28Jun06 2:19.54
(update)
root 97 0.0 0.2 1044 772 ?? Is 28Jun06 0:00.11 /bin/pm
root 108 0.0 0.1 204 544 ?? Ss 28Jun06 0:06.06
/usr/sbin/syslogd -t -6
root 129 0.0 0.1 472 328 ?? I 28Jun06 0:00.03
/bin/csh -fb /opt/CPsuite-R60/svn/bin/cprid_wd
root 139 0.0 0.8 5460 3964 ?? I 28Jun06 0:00.30
/opt/CPsuite-R60/svn/bin/cprid
root 239 0.0 0.4 6468 2028 ?? Ss 28Jun06 0:33.33
/bin/ipsrd -N
root 257 0.0 0.6 1308 2828 ?? Ss 28Jun06 0:09.50
/bin/xpand
root 258 0.0 0.2 724 948 ?? Is 28Jun06 0:02.02
/bin/ifm /config/active
root 279 0.0 0.1 232 600 ?? Ss 28Jun06 0:00.07
/usr/sbin/inetd -n
root 283 0.0 0.7 2568 3508 ?? Is 28Jun06 0:04.74
/bin/clishd default server
root 284 0.0 0.3 224 1528 ?? Is 28Jun06 0:00.02
/bin/ipsopmd -s /var/ne3suser/schedule -p /var/n
root 288 0.0 0.7 4160 3804 ?? Ss 28Jun06 33:13.11
/bin/snmpd -f
root 305 0.0 0.2 392 852 ?? Is 28Jun06 0:00.01
/bin/oamd
root 316 0.0 0.1 204 552 ?? Is 28Jun06 0:00.00
/bin/pccardd
root 320 0.0 0.3 484 1492 ?? Is 28Jun06 0:00.31
/usr/sbin/sshd-x -D
root 340 0.0 0.1 160 532 ?? I 28Jun06 0:00.00
/usr/libexec/getty Pc ttyv0
root 341 0.0 0.1 160 532 ?? I 28Jun06 0:00.00
/usr/libexec/getty Pc ttyv1
root 342 0.0 0.1 160 532 ?? I 28Jun06 0:00.00
/usr/libexec/getty Pc ttyv2
root 343 0.0 0.1 496 380 d0 Is+ 28Jun06 0:00.05 -csh
(csh)
root 351 0.0 0.6 1036 2912 ?? Is 28Jun06 1:35.45
/opt/CPsuite-R60/svn/bin/cpwd
root 372 0.0 6.7 30420 34672 ?? Ss 28Jun06 11:48.81 cpd
root 442 0.6 7.9 39784 40504 ?? Ss 28Jun06 111:17.64 fwd
(fw)
root 512 0.0 6.4 23128 33244 ?? S 28Jun06 1:19.47
in.asessiond 0 (fwssd)
root 513 0.0 6.4 23060 33172 ?? S 28Jun06 3:05.41
in.aufpd 0 (fwssd)
root 515 0.0 6.7 24908 34396 ?? S 28Jun06 26:56.33 mdq 0
(fwssd)
root 519 0.0 1.7 1632 8844 ?? S 28Jun06 93:41.98 dtlsd 0
(dtls)
root 3086 0.0 0.4 1108 1988 ?? Ss Sat03AM 0:57.49
/bin/httpd -d /web
root 6312 0.0 0.2 600 1048 ?? S<s Tue06PM 0:25.75
/bin/xntpd
root 6327 0.0 0.1 268 624 ?? Ss Tue06PM 0:01.43
/usr/sbin/cron
nobody 6332 0.0 0.2 1220 1248 ?? I Tue06PM 0:00.24
/bin/httpd -d /web
nobody 6333 0.0 0.2 1220 1264 ?? I Tue06PM 0:00.16
/bin/httpd -d /web
nobody 6334 0.0 0.2 1220 1260 ?? I Tue06PM 0:00.18
/bin/httpd -d /web
nobody 6335 0.0 0.2 1220 1244 ?? I Tue06PM 0:00.17
/bin/httpd -d /web
root 0 0.0 0.0 0 0 ?? DLs - 0:00.00
(swapper)
root 7589 0.0 0.0 436 220 p0 R+ 9:28AM 0:00.08 ps
-auxxx
root 1 0.0 0.0 356 184 ?? Is 28Jun06 0:00.01
/sbin/init --
root 2 0.0 0.0 0 20 ?? DL 28Jun06 0:00.16
(pagedaemon)
fwNTV[admin]# vmstat 1 10
procs memory page disks faults cpu
r b w avm fre flt re pi po fr sr w0 w1 in sy cs us
sy id
0 0 0 5484 109172 2 0 0 0 5 0 0 0 1608 963 16 0
48 51
0 0 0 4728 109172 1 0 0 0 0 0 0 0 7910 479 18 0
75 25
0 0 0 5380 109176 1 0 0 0 1 0 0 0 6680 380 14 0
80 20
1 0 0 5328 109176 1 0 0 0 0 0 0 0 6494 506 18 0
81 19
0 0 0 5380 109176 1 0 0 2 0 0 0 10 7210 572 26 0
86 14
0 0 0 5380 109176 2 0 0 0 0 0 0 0 7025 649 22 1
78 21
0 0 0 5380 109176 1 0 0 0 10 0 0 0 7830 722 22 1
72 27
0 0 0 5380 109176 1 0 0 0 0 0 0 0 7391 419 14 0
74 25
0 0 0 5380 109176 1 0 0 0 0 0 0 0 6825 368 13 0
80 20
0 0 0 5380 109176 1 0 0 0 0 0 0 0 7485 342 13 0
63 37
fwNTV[admin]#
***********************************************************
Cihan SUBASI
Garanti Technology
Internet ve Yazilim Hizmetleri
Tel:(90)(212)4783426 GSM:(90)(533)(2750353) Fax:(90)(212)6576150
http://www.garantitechnology.com mailto:cihans AT garanti.com DOT tr Success is
a
wonderful thing, but never underestimate the value of failure. Failure
teaches many more things than success ever can.
***********************************************************
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
Christian
Chiaverini
Sent: Wednesday, July 05, 2006 3:31 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] NGX upgrade and high cpu usage
Run ps -auxxx and give us the output
Christian Chiaverini
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Cihan
Subasi (Garanti Teknoloji)
Sent: Tuesday, July 04, 2006 10:01 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] NGX upgrade and high cpu usage
we have upgrade ip650 with 512M memory to ipso3.9build041 and NGX r60
hfa02....and since then cpu is very high evenif there is no traffic on
it...Any comment on that issue will ve appreciated? thanks
r b w avm fre flt re pi po fr sr w0 w1 in sy cs us sy
id
1 0 0 5880 124168 2 0 0 0 5 0 0 0 509 974 15 0
50 50
0 0 0 5880 124168 1 0 0 0 0 0 0 0 2644 560 21 0
98 2
1 0 0 5880 124168 1 0 0 0 0 0 0 0 2398 685 26 1
97 3
0 0 0 5880 124168 1 0 0 0 0 0 0 0 2305 663 22 0
97 3
1 0 0 5880 124176 1 0 0 0 2 0 0 0 3278 683 22 1
96 4
3 0 0 5932 124176 10 0 0 0 3 0 0 0 3199 888 62 0
97 3
1 0 0 6100 123372 434 0 0 0 187 0 0 0 1935 1408 69 7
93 0
2 0 0 6108 123176 536 0 0 0 222 0 0 6 2838 3037 225 4
96 0
0 0 0 5932 124180 27 0 0 0 256 0 0 0 2542 1179 96 4
94 2
0 0 0 6584 124180 1 0 0 0 0 0 0 0 2654 579 20 0
97 2
0 0 0 6584 124180 1 0 0 0 0 0 0 0 3698 638 21 0
95 5
0 0 0 6220 124180 1 0 0 0 0 0 0 0 4253 385 14 0
93 7
***********************************************************
Cihan SUBASI
Garanti Technology
Internet ve Yazilim Hizmetleri
Tel:(90)(212)4783426 GSM:(90)(533)(2750353) Fax:(90)(212)6576150
http://www.garantitechnology.com <http://www.garantitechnology.com/>
mailto:cihans AT garanti.com DOT tr
Success is a wonderful thing, but never underestimate the value of failure.
Failure teaches many more things than success ever can.
***********************************************************
This message and attachments are confidential and intended solely for the
individual(s) stated in this message. If you received this message although
you are not the addressee, you are responsible to keep the message
confidential. The sender has no responsibility for the accuracy or
correctness of the information in the message and its attachments.
Our company shall have no liability for any changes or late receiving, loss
of integrity and confidentiality, viruses and any damages caused in anyway
to your computer system.
Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi
zorunlulugu tarafiniz icin de soz konusudur.
Mesaj ve eklerinde yer alan bilgilerin dogrulugu ve guncelligi konusunda
gonderenin ya da sirketimizin herhangi bir sorumlulugu bulunmamaktadir.
Sirketimiz mesajin ve bilgilerinin size degisiklige ugrayarak veya gec
ulasmasindan, butunlugunun ve gizliliginin korunamamasindan, virus
icermesinden ve bilgisayar sisteminize verebilecegi herhangi bir zarardan
sorumlu tutulamaz.
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.9.8/381 - Release Date: 7/3/2006
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
This message and attachments are confidential and intended solely for the
individual(s) stated in this message. If you received this message although
you are not the addressee, you are responsible to keep the message
confidential. The sender has no responsibility for the accuracy or
correctness of the information in the message and its attachments. Our
company shall have no liability for any changes or late receiving, loss of
integrity and confidentiality, viruses and any damages caused in anyway to
your computer system.
Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve
gizlidir. Bu mesajin muhatabi olmamaniza ragmen tarafiniza ulasmis olmasi
halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune uyulmasi
zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan
bilgilerin dogrulugu ve guncelligi konusunda gonderenin ya da sirketimizin
herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz mesajin ve bilgilerinin
size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve
gizliliginin korunamamasindan, virus icermesinden ve bilgisayar sisteminize
verebilecegi herhangi bir zarardan sorumlu tutulamaz.
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.9.9/382 - Release Date: 7/4/2006
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
