Description
This article describes the basic steps for checking CPU and Memory usage for troubleshooting.
Scope
FortiProxy v7.0, v7.2., v7.4., and v7.6.
Solution
Below are listed the basic information commands concerning the CPU and Memory status of FortiProxy, which show possible high CPU or Memory usage on the device:
- To check the license status on the device and to check all the basic info:
get sys status
- This is the command to check both the CPU and Memory that processes use on FortiProxy:
diagnose sys top
- This command also lists the overall memory and CPU utilization:
get sys perf status
- Lists the interface statistics along with drops, errors, MTU, Receive, and Transmit bytes:
fnsysctl ifconfig
- This command checks the updates and versions on the FortiProxy:
get sys fortiguard-service status
- To display detailed information for all installed CPU(s):
diagnose hardware sysinfo cpu
- To display system memory information:
diagnose hardware sysinfo memory
- To check CPU Kernel Percentages:
diagnose sys profile report
Additionally, the following commands will provide further information on memory usage:
diagnose hard sys memory
diagnose sys top-mem 20
diagnose hard sysinfo memory
diagnose hard sysinfo slab
diagnose hard sysinfo shm
Additional information about processes that might use the most CPU/Memory resources and their function:
- ipsengine: The IPS engine that scans traffic for intrusions.
- scanunitd: Antivirus scanner.
- httpsd: Secure HTTP.
- iked: Internet Key Exchange (IKE) in use with IPsec VPN tunnels.
- newcli: Active whenever accessing the CLI.
- sshd: There are active secure socket connections.
- cmdbsrv: The command database server application.
