Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Johan_Lysen
New Contributor

CPU is near 100% 2 - 4 hours after reboot, FGT200B, v5.2.13,build762 (GA)

Hi

 

CPU issue since Sunday on a FGT200B A-P Cluster.

No config changes before the issue hit us.

CPU is near 100% at allt time.

No visible processes (diag sys top-summary) uses the CPU, it´s the system itself that´s high!

 

After reboot, the we get the issue after 2-4 hours. Before that everything looks gr8.

We have removed all UTM and logging, no change. 

 

Our users is not impacted, and CLI and GUI is responsive.

The CPU issue is visible in GUI, CLI and SNMP. 

 

Waiting for the support to figure this out.

1:st line just sent us to next level...

 

/Johan

 

 

 

get sys perf status

CPU states: 7% user 90% system 0% nice 3% idle

[size="2"]CPU0 states: 7% user 90% system 0% nice 3% idle[/size]

 

[size="1"] diag sys top-summary [/size]

[size="2"]CPU [||||||||||||||||||||||||||||||||||||||||] 100.0%[/size] [size="2"]Mem [||||||||||| ] 29.0% 301M/1005M[/size] [size="2"]Processes: 20 (running=2 sleeping=75)

PID RSS ^CPU% MEM% FDS TIME+ NAME
[/size] * 37 25M 0.0 2.6 13 02:23.80 cmdbsvr [size="2"]42 10M 0.0 1.1 87 00:01.53 zebos_launcher [x12][/size] 54 8M 0.0 0.8 12 00:00.00 uploadd 55 22M 0.0 2.3 22 00:16.49 miglogd 56 8M 0.0 0.8 8 00:00.10 kmiglogd [size="2"]57 52M 0.0 5.2 19 01:07.80 httpsd [x4][/size] 59 8M 0.0 0.8 8 00:00.00 getty [size="2"]60 17M 0.0 1.8 22 00:06.99 ipsmonitor [x2][/size] 63 8M 0.0 0.8 11 00:00.10 merged_daemons 64 9M 0.0 0.9 12 00:00.10 fnbamd 65 7M 0.0 0.8 11 00:00.00 fclicense 67 9M 0.0 0.9 18 00:00.39 forticron 68 10M 0.0 1.0 15 00:00.60 forticldd 69 8M 0.0 0.9 39 00:00.00 authd 70 8M 0.0 0.9 16 00:00.79 fcnacd 71 8M 0.0 0.8 9 00:00.30 httpclid 72 8M 0.0 0.8 10 00:00.00 sqldb 73 25M 0.0 2.5 34 01:13.28 sslvpnd 74 8M 0.0 0.8 11 00:00.00 info_sslvpnd 75 608K 0.0 0.1 4 00:00.00 smbcd

 

 

 

 

Johan Lysen Consulting AB Johan Lysen, Johan@Lysen.nu Byvagen 87, 832 46 FROSON Mobile: +46 70 6009221

Johan Lysen Consulting AB Johan Lysen, Johan@Lysen.nu Byvagen 87, 832 46 FROSON Mobile: +46 70 6009221
3 REPLIES 3
ede_pfau
Esteemed Contributor III

hi,

 

I know that it would mean downtime but nonetheless: I would reboot, format the boot device from the boot menu, restore the firmware and config. You will need a TFTP server for this, and a console connection.

The usual disclaimer applies: the FGT will be wiped out completely here!


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Johan_Lysen

FYI:

Support hasn´t called back or responded in ticket in 24h, makes me wounder a little about what we pay for...

Tried to call again today. Firstline got me to Secondline .Secondline checking all the obvious stuff again and promised thirdline would contact me...

 

 

Johan Lysen Consulting AB Johan Lysen, Johan@Lysen.nu Byvagen 87, 832 46 FROSON Mobile: +46 70 6009221

Johan Lysen Consulting AB Johan Lysen, Johan@Lysen.nu Byvagen 87, 832 46 FROSON Mobile: +46 70 6009221
abisgroup
New Contributor

Do you have FC running on your network?

Labels
Top Kudoed Authors