pfilter-reporte is chewing up 100% of cpu for long periods of time resulting in system loads hovering between 1-4. Even as root in console this process won't go away.
William, are you using any of the p2p monitoring/helpers? I have a feeling, but I can't prove it that they go a little wild every so often. My ASG runs with some sort of load (above normal) for a couple of days, then 90-100% cpu and talks to nothing and nothing is logged.
Makes it very hard to report problems in this forum and ask for help.
How does your IPS Portscan configuration look like?
The portscandetection works like that:
For every source ip that traverses the network in keeps track of which ports have been tried to open. If a certain source ip tries to connect to many different destination ports and between two port attemps is less time than 300ms than a counter is incremented. If the counter reaches a certain threshold, than the assumption is that this ip is currently doing a portscan.
The system triggers alert/drop if somebody tries to open more than 4 different ports per second for at least 6 seconds, than the ip is marked as portscanner.
now Skype is a pretty agressive application, which easily tries to establish that many connections per second.
Do you have "limited logging" enabled? If not, please do so, as it will lower the amount of log lines generated.
al ips functions are off. I have zero packet filter logging. I have portscan detection off, anti flood off, anti ddos off..etc. anything that uses ips functions is off.
Our ASG220 was originally completely bridged and had no problems. Yesterday I moved it to a NAT style arrangement and pfilter-reporter chews 20-50% CPU.
This is pretty sad as it kills the performance of the unit.
Good luck William. Certainly made a difference here. Mine had been gradually up2dated, maybe something broke during that period. Its peaked at around 17% since reinstall.
Before I attempt to reload my ASG, what are the implications I'm going to be faced with? I know a full backup is in order. Did you reload and restore settings with a backup or did you manually reenter them?
Thank you!
EDIT: How does one reload the ASG? I just realized there is no CDROM on the unit. Or am I going to need to RMA this for a working 7.006 box?
If you have an ASG appliance, contact your reseller. They can provide you with a special CD (you can't use the ISO image that's available on the download.astaro.com site) that you can use to reload it. You will need an USB CDROM Drive... just plug the drive into a USB port, put the CD in, and power it all up... it will automatically reload the whole system, with a message on the LCD when it's done, or if you are running a 120 / 110, it will just do the shutdown beeps when it is done. It will take 15 to 40 minutes depending on the appliance.
