Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 16 replies
  • Subscribers 2 subscribers
  • Views 4111 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.101] Asg320 - 100% Cpu

James Bourne
Hi all,

I've got an ASG320 in production that periodically hits 100% for extended periods during the day (well that's what Executive Report claims).

Whenever I SSH into it I can't find the evil process (but I would suspect either HTTP proxy or mysql).

I've only got 250 users behind the unit on an 8Mbps link and it strikes me as odd that the unit could get pegged so easily.

Any suggestions? I tried all the usual turn off caching, single virus scan etc. to no avail. Turn off accounting?

Cheers,

James


This thread was automatically locked due to age.
  • 0 in reply to BrucekConvergent
    The following is active: Firewall, IPS, HTTP Proxy, A/V for HTTP, Anti-Spyware.

    There's 1GB of RAM in the 320.

    See the memory and bandwidth graphs below. I'm not quite sure how to read the br0 graph but I presume it's cumulative across all bridge interfaces.

    I think this is just the syslogging and reporting going berserk. I'll put in a ticket?
  • 0 in reply to James Bourne
    You can try starting a case with support, see what they think...  You might just need a faster piece of hardware altogether, especially with all those features enabled.  There's a possibility that something else could be awry, of course.  Have you tried disabling accounting (under the Network Menu)?  It may be that there's simply not enough CPU horsepower to handle all those features -- let support take a crack at it.  You may need to move to a faster piece of hardware.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I'll try turning off accounting over the w/e and see what comes up. Then I'll check with support. Thanks Bruce [:)]
  • 0 in reply to James Bourne
    While throwing more hardware at the problem almost never hurts, in this case it's quite clear that there is a process on the machine sucking down CPU. CPU utilization should not spike like that.

    Hopefully support will be able to track it down.
  • 0 in reply to drees
    I also have a ASG 320 and am having the same problem.  The process is the ulogd that is pegging the system.  It seems to have started with the use of the SSL VPN.  Before I had no problems and the cpu avg. 6%.  Now with one remote user on during the day the cpu is at 100% and when the remote user quits for the day the cpu returns to the 6%.  I thought that 7.101 was supposed to fix that bug.
  • 0 in reply to rlott
    I have to say I haven't seen that problem either... since you've got a 320, I'd try starting a case with Astaro Support.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Cookie Information Banner