#diagnose sys top
The command can be run with additional parameters:
#diagnose sys top 2 99
where '2' is the interval in seconds between each refresh and '99' is the number of lines being displayedA low number (1 / 2) for the refresh interval is useful for isolating the processes causing CPU spikes, but may not allow a large list of applications to be displayed.
SolutionA short selection of processes and responsabilities:The following applications / daemons can be further diagnosed.(this list is available in FortiOS 6.2; older firmware may have less options, or different names).This list is available by typing in the command line: '# diagnose debug application ?'.http HTTP proxy.smtp SMTP proxy.ftpd FTP proxy.pop3 POP3 proxy.imap IMAP proxy.nntp NNTP proxy.proxy Proxy.radvd Router adv daemon.miglogd Log daemon.kmiglogd Kernel Log daemon.forticldd FortiCloud daemon.alertmail Alert mail daemon.ppp PPP daemon.l2tp L2TP daemon.pptp PPTP daemon.pptpc PPTP client.authd Auth daemon.foauthd FortiguardOverride auth daemon.fcnacd FortiClient NAC daemon.fcld Fclicense daemon.fssod FSSO daemon.dhcps DHCP server.dhcp6s DHCPv6 server.update Update daemon.vpd VPN policy daemon.fnbamd Fortigate non-blocking auth daemon.eap_proxy EAP proxy daemon.ipsmonitor ips monitoripsengine ips sensorurlfilter Urlfilter daemon.wf_monitor WF monitor, parent of urlfilter daemon.ddnscd DDNS client daemon.dhcprelay DHCP relay daemon.dhcp6r DHCPv6 relay.snmpd SNMP daemon.chassis Chassis daemon.scanunit Scanunit daemon.emailfilter Emailfilter module.wpad Port access entity daemon.wpad-crash-hexdump Dump wpad crash in hexedecimal format.wpa-show-keys Dump keys in wpad or wpas log.wpa-timestamp Dump timestamp in wpad or wpas log.wifi WiFi setting.dnsproxy DNS proxy module.sflowd sFlow protocol module.hatalk HA protocol module.hasync HA synchronization module.harelay HA relay module. Relays the slave daemons' local-out tcp connection to the public networkhamonitord HA monitor module.quarantine Quarantine daemon.dhcpc DHCP client module.zebos-launcher ZebOS launcher daemon.zebos ZebOSmodemd MODEM daemon.radiusd RADIUS daemon.sshd Sshd daemon.sslvpn SSL VPN proxy daemonguacd Guacamole proxy daemoninfo-sslvpn SSL-VPN info daemon for Fortinet top bar.sessionsync Session sync daemon.ipldbd Ipldbd daemon.crl-update CRL update daemon.alarmd Alarmd daemon.forticron Forticron daemon.uploadd Upload daemon.smbcd SMB client daemon.samld SAML SSO daemon.acd Aggregate Controlleralicloud-sdn AliCloud SDN controlleralicloud-ha AliCloud HA controllersip SIP ALG.sccp SCCP ALG.ike IKE daemon.ocvpn Overlay Controller VPN.fgfmd FortiGate/FortiManager communication daemon.wccpd WCCP daemon.waocs WAN acceleration object cache storage.wabcs WAN acceleration byte cache storage.garpd VIP gratuitous ARP daemon.scep SCEPipsufd IPS URL filter resolver daemon.cw_acd Capwap AC daemon.cw_acd_helper Capwap AC helper daemon.cw_acd_wpad CAPWAP AC and WPA daemon (wpad).cw_acd_wlev CAPWAP AC daemon wireless event notification.cu_acd caputp AC daemonfortilinkd fortilink daemonflcfgd fortilink configuration daemonrsyslogd Rsyslogd daemon.reportd report daemondlp DLPvrrpd VRRP daemon.fgd_alert FortiGuard alert message.ntpd NTPd daemon.fsd Forti-start daemon.dlpfingerprint DLP fingerprint daemon.httpsd HTTPS daemon.stp Spanning Tree Protocol daemon.spareblock Set debug spare block count.lted USB LTE daemon.lldprx Link Layer Discovery Protocol (LLDP) Receiverlldptx Link Layer Discovery Protocol (LLDP) Transmittersrc-vis Source Visibility daemon.wiredap Wired AP (802.1X port-based auth) daemon.dhcp6c DHCPv6 client.server-probe Server probe daemon.link-monitor Link monitor daemon.pppoed PPPoE client Daemon.ovrd Override daemon.extenderd Extender Wan daemon.awsd Amazon Web Services (AWS) daemon.netxd NetX REST API daemon.gcpd Google Cloud Platform daemon.azd Microsoft Azure daemon.ocid Oracle Cloud Infrastructure (OCI) daemonopenstackd OpenStack SDN connector daemon.kubed Kubernetes daemon.vmwd VMware vSphere daemoninit System init process.mrd Mobile router daemon.dssccd PCI DSS Compliance Check daemon.radius-das RADIUS DAS daemon.csfd Security Fabric daemon.fsvrd FortiService daemon.virtual-wan-link Virtual-Wan-Link daemon.ftm-push FTM-Push daemon.cmp CMPv2.sdncd SDN Connector daemon.ptpd Precision Time Protocol daemon.autod Automation daemon.bfdd BFD daemon.fsso_ldap FSSO LDAP daemon.Some applications can be seen in the list of top processes and cannot be debugged or investigated in-depth, due to the fact that the information may not serve in troubleshooting.Related Articles
Technical Tip: How to list processes in FortiOS
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.