Regarding high cpu utilization

[karia]

hi
I am maintaining a 6 firewall,out of which one is giving a problem with high CPU utilization in peak hours & after few minute ,it's cpu utilization is coming down itself.
firewall configuration detail-- nokia ip 260 with ipso 4.1 & having NGX R60 HFA_04 & Hotfix 604.



pl suggest regarding cpu utilization.
what is swap memory.
pl kindly help

[Danielpb]

Hi,

Not really much to go on here.... but the first port of call will be to determined the resource hogging the CPU...this can be done at the command line or voyager.

Command line is : ps -aux

[karia]

hi
1) my question what is the reason cpu of the going up suddenly & immediately after few coming down?
2) what is swap memory?
3)some r suggesting in these forum,if u increase the firwall-log & master -capacity optimization --increase the 25000 connection to 50000 connection?
pl clarify

[inetd]

1) my question what is the reason cpu of the going up suddenly & immediately after few coming down?

has mentioned before run ps -aux to determine this, since you know what time its happening that shouldn't be to hard to figure out.

2) what is swap memory?
swap memory - Google Search

3)some r suggesting in these forum,if u increase the firwall-log & master -capacity optimization --increase the 25000 connection to 50000 connection?
pl clarify

More than likely it is traffic causing the cpu to spike. Basically you need to find out what traffic is causing this.


Write a script to run fw tab -t connections -s and email/page you if it reaches a certain value.

[mcnallym]

Do a ps -auxww

and it lists not just the process but also memory util and cpu util as well. Do a | more outherwise will scroll off the bottom of the page.

High CPU is typically traffic related where doing SMARTDefense checking, or a burst of traffic.

Use SMARTView Monitor to see the top talker at the time and identify which machine causing the burst.

Is it at a regular time or random bursts.

Swap Memory is the same as Swap Memory on any other platform, it is swapping memory contents out to disk space and having to read back in later, is used when running out of physical RAM in the box.

The IP260 is the entry level Nokia, and quite weak in the CPU area. What sort of network size/traffic are you protecting with it.

[karia]

hi
thanks friends for valuable suggestion.i am monotoring the specific firewall & i will get back to u friends.

[karia]

hi,
It is going up randomly once in a 2 week & if i use these command fw tab -t connections -f -u -o filename ---so it will use more space ?

how to know the which application causing high cpu ?

i checked the smAartviewtracker ,there is nothing special.

if i upgrade my firewall through smartupdate for hotfix,how should i know when it was upgraded.

pl help


regards
karia

[donshoutarp]

Various settings in Smart Defence have been known to cause high CPU. If you are using Smart Defence, I'd try turning some of them off to see if it is the problem.