IPS load

[micahawitt]

So if im not using IPS, why is the helper using the resources?

Connected brecon_60F # diag sys top Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 339F httpsd 240 S 1.4 7.5 httpsd 247 S 1.4 6.0 ipsengine 235 S < 0.9 1.8 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 pyfcgid 215 S 0.0 1.9 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 ipsengine 236 S < 0.0 1.8 ipsengine 238 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 339F httpsd 247 S 0.5 6.0 httpsd 240 S 0.1 7.5 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 pyfcgid 215 S 0.0 1.9 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 ipsengine 236 S < 0.0 1.8 ipsengine 238 S < 0.0 1.8 ipsengine 235 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 337F httpsd 240 S 3.9 7.5 httpsd 247 S 1.7 6.0 httpsd 709 S 0.7 1.2 pyfcgid 215 S 0.3 1.9 httpsd 710 S 0.3 1.2 fgfmd 194 S 0.1 1.2 miglogd 214 S 0.1 1.0 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 337F dnsproxy 192 S 0.3 1.0 httpsd 240 S 0.1 7.5 httpsd 247 S 0.1 6.0 zebos_launcher 135 S 0.1 0.4 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 pyfcgid 215 S 0.0 1.9 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 ipsengine 236 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 338F httpsd 247 S 0.7 6.0 httpsd 240 S 0.3 7.5 pyfcgid 215 S 0.1 1.9 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 ipsengine 236 S < 0.0 1.8 ipsengine 238 S < 0.0 1.8 ipsengine 235 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 338F urlfilter 245 S < 0.3 0.5 httpsd 240 S 0.1 7.5 httpsd 247 S 0.1 6.0 fgfmd 194 S 0.1 1.2 dnsproxy 192 S 0.1 1.0 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 pyfcgid 215 S 0.0 1.9 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 Run Time: 0 days, 4 hours and 39 minutes 0U, 0N, 0S, 100I, 0WA, 0HI, 0SI, 0ST; 1819T, 337F httpsd 247 S 0.3 6.0 httpsd 715 S 0.3 1.2 httpsd 240 S 0.1 7.5 ipshelper 206 S < 0.0 14.0 scanunitd 470 S < 0.0 2.3 cmdbsvr 128 S 0.0 2.2 scanunitd 464 S < 0.0 2.1 scanunitd 466 S < 0.0 2.1 pyfcgid 215 S 0.0 1.9 scanunitd 175 S < 0.0 1.9 pyfcgid 156 S 0.0 1.8 pyfcgid 216 S 0.0 1.8 scanunitd 463 S < 0.0 1.8 scanunitd 467 S < 0.0 1.8 scanunitd 468 S < 0.0 1.8 scanunitd 469 S < 0.0 1.8 scanunitd 471 S < 0.0 1.8 ipsengine 237 S < 0.0 1.8 ipsengine 236 S < 0.0 1.8 ipsengine 238 S < 0.0 1.8

I would like to use them, just trying to get to that sweet spot on the 60F.  I feel like with the hardware in it, should be able to handle a bot more here.

[brycemd]

There are a few firmware versions where ipengine does have a memory leak and can cause to go into conserve mode, so if you are on the early versions of 6.0 or 6.2 it could be that.

Also, keep in mind that ipsengine is not only used for IPS. If you using flow mode inspection it is also used for AV, app control, DLP, web filtering... pretty much everything.

[micahawitt]

ahh, good to know, thank you, fwiw, im running 6.2.2