Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

slowness when updating the FW XG 125 to version 18.0.5

Hi, I have updated two FW XG 125 to version 18.0.5 due to problems with the pattern update, and access to the FW via WEB is very slow, browsing through the fw to pass or create anything is very slow, you do not have to It is due, I have checked the connection line and it is not the problem, and what's more, the other FW that have version 17.5.14-714 is fluid, it has nothing to do with it.
Do you know if it has any fix before downgrading to the previous version?

Greetings and thanks



This thread was automatically locked due to age.
Parents
  • Hello there,

    Thank you for reaching out.

    18.0 MR5 uses more resources especially for IPS, it would also depend on the charge of the system, you could run top on the Advanced Shell of the XG to see what process is taking the CPU.

    # top

    Regards,

  • top - 07:52:41 up 23:47, 1 user, load average: 1.09, 1.07, 1.09
    Tasks: 397 total, 2 running, 326 sleeping, 0 stopped, 0 zombie
    Cpu(s): 23.3%us, 3.1%sy, 0.0%ni, 73.4%id, 0.2%wa, 0.0%hi, 0.0%si, 0.0%st
    Mem: 4004000k total, 3789544k used, 214456k free, 231456k buffers
    Swap: 2029876k total, 2560k used, 2027316k free, 778236k cached

    PID PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
    6793 20 0 0 0 0 S 2.0 0.0 28:01.47 vfp_mflow_timeo
    15865 20 0 1723m 343m 45m S 1.0 8.8 7:50.83 snort
    20522 20 0 13528 2376 1932 R 1.0 0.1 0:00.61 top
    20960 20 0 21840 17m 4384 R 1.0 0.4 0:00.03 apiopcodeSyncSt
    15867 20 0 1723m 343m 45m S 0.7 8.8 7:59.89 snort
    6481 20 0 67536 35m 9292 S 0.3 0.9 4:12.08 garner
    9257 20 0 52492 3508 2400 S 0.3 0.1 1:16.35 redis-server
    9265 20 0 52492 3244 2392 S 0.3 0.1 1:16.16 redis-server
    10960 20 0 0 0 0 I 0.3 0.0 0:00.21 kworker/u8:2
    10990 20 0 32520 28m 5716 S 0.3 0.7 0:53.30 screenmgr.pl
    11715 20 0 237m 10m 5340 S 0.3 0.3 0:23.03 httpd
    15864 20 0 1723m 343m 45m S 0.3 8.8 7:46.91 snort
    15866 20 0 1723m 343m 45m S 0.3 8.8 8:06.35 snort
    18333 20 0 31420 18m 4592 S 0.3 0.5 0:02.31 crexport
    1 20 0 23312 2192 2172 S 0.0 0.1 0:01.37 init
    2 20 0 0 0 0 S 0.0 0.0 0:00.01 kthreadd
    3 20 0 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0
    4 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H
    6 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
    7 20 0 0 0 0 S 0.0 0.0 0:01.11 ksoftirqd/0
    8 20 0 0 0 0 I 0.0 0.0 0:50.98 rcu_sched
    9 20 0 0 0 0 I 0.0 0.0 0:00.00 rcu_bh
    10 RT 0 0 0 0 S 0.0 0.0 0:00.08 migration/0
    11 RT 0 0 0 0 S 0.0 0.0 0:00.17 watchdog/0
    12 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0
    13 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1
    14 RT 0 0 0 0 S 0.0 0.0 0:00.19 watchdog/1
    15 RT 0 0 0 0 S 0.0 0.0 0:00.09 migration/1
    16 20 0 0 0 0 S 0.0 0.0 0:01.68 ksoftirqd/1
    18 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/1:0H
    19 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/2
    20 RT 0 0 0 0 S 0.0 0.0 0:00.20 watchdog/2
    21 RT 0 0 0 0 S 0.0 0.0 0:00.08 migration/2
    22 20 0 0 0 0 S 0.0 0.0 0:01.07 ksoftirqd/2
    23 20 0 0 0 0 I 0.0 0.0 0:00.00 kworker/2:0
    24 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/2:0H
    25 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/3
    26 RT 0 0 0 0 S 0.0 0.0 0:00.20 watchdog/3
    27 RT 0 0 0 0 S 0.0 0.0 0:00.08 migration/3
    28 20 0 0 0 0 S 0.0 0.0 0:01.09 ksoftirqd/3
    30 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/3:0H
    31 20 0 0 0 0 S 0.0 0.0 0:00.00 kdevtmpfs
    32 20 0 0 0 0 S 0.0 0.0 0:00.10 khungtaskd
    33 20 0 0 0 0 S 0.0 0.0 0:00.00 oom_reaper
    34 0 -20 0 0 0 I 0.0 0.0 0:00.00 writeback
    35 20 0 0 0 0 S 0.0 0.0 0:00.01 kcompactd0
    36 0 -20 0 0 0 I 0.0 0.0 0:00.00 crypto
    37 0 -20 0 0 0 I 0.0 0.0 0:00.00 kblockd
    38 0 -20 0 0 0 I 0.0 0.0 0:00.00 ata_sff
    39 0 -20 0 0 0 I 0.0 0.0 0:00.00 md
    41 20 0 0 0 0 I 0.0 0.0 0:05.82 kworker/0:1
    47 20 0 0 0 0 S 0.0 0.0 0:02.66 kswapd0
    62 20 0 0 0 0 I 0.0 0.0 0:00.00 kworker/1:1
    63 20 0 0 0 0 I 0.0 0.0 0:00.02 kworker/3:1
    65 20 0 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_0
    66 0 -20 0 0 0 I 0.0 0.0 0:00.00 scsi_tmf_0

  • Hello there,

    Yes, it seems it is ISP (snort) taking the higher process, however, it is around 1% so this shouldn't affect. I would recommend you to get a case open to investigate this further, as you’ll need atop running in the background to capture the CPU usage throughout they day

    Regards,

Reply Children