Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 4084 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Proc spiked and network connections lost

screamingpotato
I'd like to find out what happened, where should I be looking to collect the information? Looked at a bunch of logs but they're either irrelevant or I don't understand what's in them. 

Systems were running fine this morning, then multiple users began reporting no communication with our site-to-site VPN. After a brief check I see there is no external connectivity, no internet, etc to our network. Astaro Security Gateway 220 display read 100% usage on all network interfaces. I was able to login to the control panel and the dashboard showed 100% proc usage, which lasted approximately 7 minutes and then died down. During that time the web interface wouldn't respond if I clicked on anything inside it, all I could do was close out and login again which would bring up the dashboard. Memory usage remained around 60% which seems to be normal.


This thread was automatically locked due to age.
Parents
  • 0
    Happening again today, several times. Proc is at 100% usage and our VPN connections drop, internet is inaccessible. Below is a copy/paste of what I see running and CPU time doesn't add up to 100% so where are the extra resources going? Posting the process list below V because it's too long to include with this text.

    edit: hard to see below, but snort appears to be 16-20 % usage whenever this happens.
Reply
  • 0
    Happening again today, several times. Proc is at 100% usage and our VPN connections drop, internet is inaccessible. Below is a copy/paste of what I see running and CPU time doesn't add up to 100% so where are the extra resources going? Posting the process list below V because it's too long to include with this text.

    edit: hard to see below, but snort appears to be 16-20 % usage whenever this happens.
Children
No Data