Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 29 subscribers
  • Views 2548 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High CPU usage and unable to connect to the internet

Administrator User484

The subject is a little bit vague, but there were a few times that any devices couldn't connect to the internet recently for a few minutes.

When I logged into the admin interface, the CPU usage was 100%.

I wonder what I could check to understand the situation ?



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi, Thanks for reaching out to Sophos Community.

    How often does it happen? 

    When the issue exhibits, Take the SSH Access, Navigate to Option 5 > Option 3 Advanced shell.

    • Run the command --> top (It will list the process monitor)
    • After running the command, hit Shift+P to sort by higher CPU utilization.

    Check which process is taking the most amount of CPU and accordingly we can dig further in. 

  • 0 in reply to FormerMember

    I just got some new info. It's a process called "awarrenhttp".

    So I followed this post, and got some logs from "/log/awarrenhttp.log".

    awarrenhttp.log

    The system info is as follow,

    console> system diagnostics show version-info

    Serial Number:            C1501D72YKH3777
    Device-Id:            8c35ebf3107b279a976a09931ee4032cfa7b
    Appliance Model:        XG115w
    Firmware Version:        SFOS 18.5.1 MR-1-Build318
    Firmware Build:            318
    Firmware Loader version:
    HW version:            XN02
    Config DB version:        18.506
    Signature DB version:        18.506
    Report DB version:                18.506
    Webcat Signature version:    Not Available
    Web Proxy version:        compiled
    SMTP Proxy version:        1.0
    POP/IMAP Proxy version:        1.0.0.3.4
    Logging Daemon version:        0.0.0.17
    AP Firmware:            11.0.015
    ATP:                1.0.0372
    Avira AV:            1.0.417395
    Authentication Clients:        1.0.0019
    Geoip ip2country DB:        2.0.006
    IPS and Application signatures: 18.18.50
    Sophos Connect Clients:        2.1.001
    odt:        -
    RED Firmware:            3.0.006
    Sophos AV:            1.0.17081
    SSLVPN Clients:            1.0.009
    Hot Fix version:        N.A

    I wonder what is the issue ?

Reply
  • 0 in reply to FormerMember

    I just got some new info. It's a process called "awarrenhttp".

    So I followed this post, and got some logs from "/log/awarrenhttp.log".

    awarrenhttp.log

    The system info is as follow,

    console> system diagnostics show version-info

    Serial Number:            C1501D72YKH3777
    Device-Id:            8c35ebf3107b279a976a09931ee4032cfa7b
    Appliance Model:        XG115w
    Firmware Version:        SFOS 18.5.1 MR-1-Build318
    Firmware Build:            318
    Firmware Loader version:
    HW version:            XN02
    Config DB version:        18.506
    Signature DB version:        18.506
    Report DB version:                18.506
    Webcat Signature version:    Not Available
    Web Proxy version:        compiled
    SMTP Proxy version:        1.0
    POP/IMAP Proxy version:        1.0.0.3.4
    Logging Daemon version:        0.0.0.17
    AP Firmware:            11.0.015
    ATP:                1.0.0372
    Avira AV:            1.0.417395
    Authentication Clients:        1.0.0019
    Geoip ip2country DB:        2.0.006
    IPS and Application signatures: 18.18.50
    Sophos Connect Clients:        2.1.001
    odt:        -
    RED Firmware:            3.0.006
    Sophos AV:            1.0.17081
    SSLVPN Clients:            1.0.009
    Hot Fix version:        N.A

    I wonder what is the issue ?

Children
No Data