Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
knut
New Contributor

what is cmdbsvr?

After upgrading a 200B to 4.0 MR3 patch 2 I can see a strange increase in cpu and memory usage in cmdbsvr: Run Time: 2 days, 21 hours and 29 minutes 16U, 17S, 67I; 1009T, 398F, 194KF cmdbsvr 29 S 20.8 17.3 proxyworker 54 S 4.8 5.7 ipsengine 60 S < 3.6 16.2 scanunitd 26922 S < 0.6 1.6 In a 310B with 4.0 MR2 patch 8 it is way down the list in top: Run Time: 45 days, 11 hours and 6 minutes 11U, 15S, 72I; 1008T, 348F, 213KF ipsengine 95 R < 8.5 19.5 proxyworker 50 R 4.9 6.4 scanunitd 9570 S < 1.5 1.5 urlfilter 60 S 1.3 4.3 scanunitd 9569 S < 0.7 1.5 miglogd 39 S 0.1 1.4 ssl 57 S 0.1 0.3 ipsengine 94 S < 0.0 11.8 httpsd 12391 S 0.0 2.1 httpsd 12393 S 0.0 2.0 cmdbsvr 26 S 0.0 1.8
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
14 REPLIES 14
abelio
SuperUser
SuperUser

Hi, cmdbsrv is an important daemon, process and parse conf file; don' t try to kill it re-check all your config in order to avoid firewall objects with spaces in its names, or non-standard characters. regards

regards




/ Abel

regards / Abel
knut
New Contributor

I have checked through everything now, and it looks like i have no spaces, no non english letters and only _, - and . in the config with english letters and numbers. The longest name is 23 letters.
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
abelio

Hi what about your CPU usage graphs? do you see something abnormal there?

regards




/ Abel

regards / Abel
knut
New Contributor

Yes, it spikes every few seconds, and that is usually cmdbsvr. As you can se on the top i attached it is quite often over 20%. Sometimes it is at 99,9% as well.
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
Secure_IT_BE_Nick
New Contributor III

I have the exact same problem, after upgrading to MR3 on a 100A. Have a ticket open with support, but FN is again very slow with answering...

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
knut
New Contributor

My issue is maybe related to my 3 FortiAP. I tried to disable them for some time, and the cmdbsvr did not use any CPU when the FortiAP did not run. When I activated the FortiAP again the cmdbsvr started to consume quite a lot of CPU again.
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
Secure_IT_BE_Nick

Knut Same thing here, with only 1 AP. Still NO answer from Fortinet. As a partner and FCNSP i' m really dissapointed...

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
knut
New Contributor

I also got a ticket open, but they want me to change settings I do not believe will help me with the cmdbsvr problems: http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD33078&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=22030476&stateId=0%200%2022032413 I have no CPU problems with my load, but I do not understand why cmdbsvr should use that much cpu and memory when I use fortiAP. The fortiAP is way more unstable after the upgrade to 4.3.2 from the special branch 4.2.7 made for fortiAP I used before.
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
1 FGT320B, 1 FGT200B, 1 FGT110C, 1 FGT60C, 3 FGT50B, 3FAP220A. 4.0MR3P7 and 4.0MR2P11
Secure_IT_BE_Nick

with my load, but I do not understand why cmdbsvr should use that much cpu and memory when I use fortiAP. The fortiAP is way more unstable after the upgrade to 4.3.2 from the special branch 4.2.7 made for fortiAP I used before.
Been there, done that didn' t help... FortiAP is complete gone out of the network. And again still no Answer, ticket created on 2 oktober...

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors