Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    3100 High CPU Utilization after 22.05 upgrade?

    Scheduled Pinned Locked Moved
    Official Netgate® Hardware
    3
    10
    723
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wc2l
      last edited by

      I updated my 3100 to 22.05. For the most part, it seems to be running well. I did happen to notice that soon after the rebooting, it goes to 99% CPU, but network traffic is not affected.
      When I go to Diagnostics / System Activity and look at things, I don't think it adds up to 99%. Is it cosmetic?

      last pid: 57493; load averages: 3.31, 3.27, 2.19 up 0+00:17:11 08:50:46
      143 threads: 8 running, 113 sleeping, 22 waiting
      CPU: 50.2% user, 0.4% nice, 31.8% system, 1.3% interrupt, 16.4% idle
      Mem: 197M Active, 15M Inact, 180M Wired, 84M Buf, 1586M Free

      PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
      94455 root 83 0 10M 6576K RUN 1 4:01 35.89% /usr/local/sbin/lighttpd_pfb -f /var/unbound/pfb_dnsbl_lighty.conf
      10 root 155 ki31 0B 16K RUN 1 2:50 6.88% [idle{idle: cpu1}]
      10 root 155 ki31 0B 16K RUN 0 2:47 2.78% [idle{idle: cpu0}]
      386 root 52 0 121M 38M accept 1 0:14 2.59% php-fpm: pool nginx (php-fpm)
      94388 root 52 0 49M 31M piperd 0 0:21 2.39% /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog
      96613 root 52 0 49M 31M piperd 1 0:21 2.20% /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog
      385 root 32 0 121M 37M accept 0 0:13 0.88% php-fpm: pool nginx (php-fpm)
      88656 root 27 0 121M 37M RUN 0 0:11 0.68% php-fpm: pool nginx (php-fpm)
      11 root -92 - 0B 176K WAIT 0 0:18 0.59% [intr{mpic0: mvneta1}]
      3446 root 33 0 121M 36M piperd 0 0:02 0.49% php-fpm: pool nginx (php-fpm)
      11 root -92 - 0B 176K WAIT 0 0:07 0.39% [intr{mpic0: mvneta2}]
      64108 unbound 20 0 120M 104M kqread 0 0:11 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound}
      64108 unbound 20 0 120M 104M kqread 0 0:02 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound}
      71438 root 20 0 21M 7708K kqread 0 0:02 0.00% nginx: worker process (nginx)
      95052 root 20 0 49M 31M piperd 1 0:02 0.00% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc dnsbl
      8 root -16 - 0B 8192B pftm 1 0:01 0.00% [pf purge]
      11 root -60 - 0B 176K WAIT 0 0:01 0.00% [intr{swi4: clock (0)}]
      0 root -16 - 0B 144K swapin 0 0:01 0.00% [kernel{swapper}]
      95186 root 20 0 50M 32M piperd 0 0:01 0.00% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc index
      48732 root 20 0 4960K 2516K select 0 0:01 0.00% /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf
      16 root -16 - 0B 24K psleep 1 0:00 0.00% [pagedaemon{dom0}]
      10895 root 52 20 5044K 2264K wait 1 0:00 0.00% /bin/sh /var/db/rrd/updaterrd.sh
      26399 root 20 0 5760K 2640K bpf 0 0:00 0.00% /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid
      41489 root 20 0 5204K 2276K nanslp 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 67.248.235.52 -p /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.pid -u /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 67.248.224.1{dpinger}
      70603 root 20 0 11M 5572K select 1 0:00 0.00% /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid{ntpd}
      26 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0: mmc/sd card]
      11 root -80 - 0B 176K WAIT 1 0:00 0.00% [intr{gic0,s25:-dhci_fdt0}]
      82971 dhcpd 20 0 13M 8768K select 0 0:00 0.00% /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid mvneta1 mvneta1.3
      6 root -16 - 0B 8192B e6000s 0 0:00 0.00% [e6000sw tick kproc]
      0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{softirq_1}]
      0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{softirq_0}]
      15 root -16 - 0B 8192B mx25jq 0 0:00 0.00% [task: mx25l flash]
      9 root -16 - 0B 8192B - 1 0:00 0.00% [rand_harvestq]
      53847 root 72 0 5240K 2772K RUN 1 0:00 0.00% /sbin/pfctl -vvsr
      5 root -16 - 0B 16K - 1 0:00 0.00% [cam{doneq0}]
      13 root -8 - 0B 24K - 1 0:00 0.00% [geom{g_up}]
      18 root 20 - 0B 24K sdflus 0 0:00 0.00% [bufdaemon{/ worker}]
      41489 root 20 0 5204K 2276K sbwait 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 67.248.235.52 -p /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.pid -u /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 67.248.224.1{dpinger}
      20 root 16 - 0B 8192B syncer 0 0:00 0.00% [syncer]
      384 root 20 0 91M 22M kqread 0 0:00 0.00% php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
      1 root 20 0 3260K 764K wait 1 0:00 0.00% [init]
      11 root -52 - 0B 176K WAIT 1 0:00 0.00% [intr{swi6: Giant taskq}]
      22142 _dhcp 20 0 4972K 2328K select 1 0:00 0.00% dhclient: mvneta2 (dhclient)
      13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_event}]
      11 root -72 - 0B 176K WAIT 0 0:00 0.00% [intr{swi1: netisr 0}]
      14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}]
      14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}]
      11 root -52 - 0B 176K WAIT 0 0:00 0.00% [intr{swi6: task queue}]
      71227 root 20 0 20M 6776K kqread 0 0:00 0.00% nginx: worker process (nginx)
      0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{thread taskq}]
      69728 root 25 0 4848K 2272K nanslp 1 0:00 0.00% /usr/sbin/cron -s
      96343 root 20 0 4264K 1980K pipewr 0 0:00 0.00% /usr/bin/tail_pfb -n0 -F /var/log/filter.log
      41489 root 20 0 5204K 2276K nanslp 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 67.248.235.52 -p /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.pid -u /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 67.248.224.1{dpinger}
      4261 root 52 0 5044K 2568K wait 0 0:00 0.00% login [pam] (login)
      94059 root 20 0 4264K 1980K pipewr 0 0:00 0.00% /usr/bin/tail_pfb -n0 -F /var/log/filter.log
      424 root 41 20 4936K 2452K kqread 1 0:00 0.00% /usr/local/sbin/check_reload_status
      53859 root 72 0 4864K 2572K RUN 1 0:00 0.00% /sbin/pfctl -vvsr
      85380 root 24 0 4992K 2572K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid
      7395 root 52 0 5372K 2700K wait 1 0:00 0.00% -sh (sh)
      56342 root 36 0 6044K 2840K CPU0 0 0:00 0.00% /usr/bin/top -baHS 999
      5 root -16 - 0B 16K - 1 0:00 0.00% [cam{scanner}]
      18 root 20 - 0B 24K - 0 0:00 0.00% [bufdaemon{bufspacedaemon-0}]
      18 root -16 - 0B 24K psleep 0 0:00 0.00% [bufdaemon{bufdaemon}]
      13 root -8 - 0B 24K - 1 0:00 0.00% [geom{g_down}]
      21981 root -52 r0 4288K 4312K nanslp 1 0:00 0.00% /usr/sbin/watchdogd -t 128
      19 root -16 - 0B 8192B vlruwt 0 0:00 0.00% [vnlru]
      8455 root 52 0 4908K 2568K ttyin 0 0:00 0.00% /bin/sh /etc/rc.initial
      16 root -16 - 0B 24K umarcl 1 0:00 0.00% [pagedaemon{uma}]
      706 root 20 0 3660K 1100K select 0 0:00 0.00% /sbin/devd -q -f /etc/pfSense-devd.conf
      85990 root 23 0 5200K 2368K piperd 1 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker}
      41489 root 20 0 5204K 2276K accept 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 67.248.235.52 -p /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.pid -u /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 67.248.224.1{dpinger}
      85966 root 22 0 11M 4028K piperd 1 0:00 0.00% /usr/local/libexec/sshg-parser
      86411 root 28 0 4920K 2544K piperd 1 0:00 0.00% /bin/sh /usr/local/libexec/sshg-fw-pf
      85792 root 22 0 4200K 1912K piperd 1 0:00 0.00% /bin/cat
      95927 root 52 20 4156K 1896K nanslp 0 0:00 0.00% sleep 60
      11 root -88 - 0B 176K WAIT 0 0:00 0.00% [intr{gic0,s26: ahci0}]
      71174 root 32 0 20M 6296K pause 0 0:00 0.00% nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx)
      41489 root 52 0 5204K 2276K uwait 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 67.248.235.52 -p /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.pid -u /var/run/dpinger_WAN_DHCP~67.248.235.52~67.248.224.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 67.248.224.1{dpinger}
      14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}]
      11 root -76 - 0B 176K WAIT 0 0:00 0.00% [intr{swi0: uart uart}]
      17524 root 26 0 12M 6544K select 0 0:00 0.00% sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups (sshd)
      11 root -72 - 0B 176K WAIT 1 0:00 0.00% [intr{swi1: netisr 1}]
      16512 root 4 0 4900K 2224K select 0 0:00 0.00% dhclient: mvneta2 [priv] (dhclient)
      50177 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 300 /var/run/ipsec_keepalive.pid /usr/local/bin/ipsec_keepalive.php
      49992 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ping_hosts.sh (minicron)
      11 root -80 - 0B 176K WAIT 0 0:00 0.00% [intr{gic0,s2: twsi0}]
      50387 root 28 0 4292K 1940K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ipsec_keepalive.php (minicron)
      50557 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts
      51214 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data
      85990 root 20 0 5200K 2368K nanslp 0 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker}
      49766 root 52 0 4272K 1936K wait 1 0:00 0.00% /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh
      425 root 52 20 4896K 2300K kqread 0 0:00 0.00% check_reload_status: Monitoring daemon of check_reload_status (check_reload_status)
      86313 root 24 0 4992K 2572K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid
      51035 root 52 0 4292K 1940K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron)
      51455 root 52 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron)
      22 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod1]
      24 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod3]
      23 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod2]
      25 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod4]
      27 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot0: mmc/sd]
      28 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot1: mmc/sd]
      7 root -16 - 0B 8192B waitin 0 0:00 0.00% [sctp_iterator]
      0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{inm_free taskq}]
      0 root -8 - 0B 144K - 1 0:00 0.00% [kernel{CAM taskq}]
      0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta0: tx_taskq(0}]
      16 root -16 - 0B 24K launds 1 0:00 0.00% [pagedaemon{laundry: dom0}]
      0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{firmware taskq}]
      0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_0}]
      2 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto]
      14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}]
      0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_io_tqg_0}]
      0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{if_io_tqg_1}]
      0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta2: tx_taskq(0}]
      12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue0}]
      3 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 0]
      0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_1}]
      0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta1: tx_taskq(0}]
      0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{kqueue_ctx taskq}]
      0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{in6m_free taskq}]
      0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{aiod_kick taskq}]
      12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue1}]
      4 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 1]
      21 root -16 - 0B 8192B aldslp 0 0:00 0.00% [ALQ Daemon]
      17 root -16 - 0B 8192B psleep 0 0:00 0.00% [vmdaemon]
      14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus1}]
      14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}]
      14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus0}]
      14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus1}]
      14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus1}]
      14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus0}]
      0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_config_tqg_0}]
      11 root -56 - 0B 176K WAIT -1 0:00 0.00% [intr{swi5: fast taskq}]
      11 root -60 - 0B 176K WAIT -1 0:00 0.00% [intr{swi4: clock (1)}]
      11 root -64 - 0B 176K WAIT -1 0:00 0.00% [intr{swi3: vm}]
      11 root -72 - 0B 176K WAIT -1 0:00 0.00% [intr{swi1: pf send}]
      11 root -72 - 0B 176K WAIT -1 0:00 0.00% [intr{swi1: pfsync}]
      11 root -80 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s1: spi0}]
      11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s17: xhci0}]
      11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s18: ehci0}]
      11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{mpic0: mvneta0}]
      11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s20: cesa1}]
      11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s19: cesa0}]
      57718 root 27 0 444K 328K CPU1 1 0:00 0.00% sh -c /sbin/route -n4 get default 2>/dev/null | /usr/bin/awk '/gateway:/{print $2}' (php-fpm)

      M 1 Reply Last reply Reply Quote 0
      • M
        mcury @wc2l
        last edited by

        @wc2l check this: https://redmine.pfsense.org/issues/13154

        W 1 Reply Last reply Reply Quote 0
        • W
          wc2l @mcury
          last edited by

          @mcury Thanks, I will poke around. Not sure how to deal with this. Not a lot of choices that I like.

          M 1 Reply Last reply Reply Quote 0
          • M
            mcury @wc2l
            last edited by

            @wc2l You just need to change a file and restart pfblocker service

            Detailed action can be found here:
            https://forum.netgate.com/topic/173083/22-05-and-pfblocker/8

            W 2 Replies Last reply Reply Quote 0
            • W
              wc2l @mcury
              last edited by

              @mcury Now my stupid question.. How do I edit the file?

              S 1 Reply Last reply Reply Quote 0
              • W
                wc2l @mcury
                last edited by

                @mcury Actually, I think I have it. It may not be the way that most would do it. I have not spent that much time in the OS (I know it is Linux based). The system looks like it is being good at the moment!!

                W M 2 Replies Last reply Reply Quote 0
                • W
                  wc2l @wc2l
                  last edited by

                  The CPU just shot up again..

                  1 Reply Last reply Reply Quote 0
                  • M
                    mcury @wc2l
                    last edited by

                    @wc2l You can use vi, assuming that you know how to use vi
                    ssh to the firewall and type:

                    cp /usr/local/pkg/pfblockerng/pfblockerng.inc /usr/local/pkg/pfblockerng/pfblockerng.inc.bck
vi /usr/local/pkg/pfblockerng/pfblockerng.inc

                    then change the file accordingly
                    once its finished, restart the service

                    Not sure if its possible, but you can try using WinSCP, I'm also on Linux so I can't test WinSCP

                    1 Reply Last reply Reply Quote 0
                    • S
                      SteveITS Rebel Alliance @wc2l
                      last edited by

                      @wc2l said in 3100 High CPU Utilization after 22.05 upgrade?:

                      @mcury How do I edit the file?

                      https://docs.netgate.com/pfsense/en/latest/diagnostics/edit-file.html
                      :)

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote 👍 helpful posts!

                      W 1 Reply Last reply Reply Quote 0
                      • W
                        wc2l @SteveITS
                        last edited by

                        Thank you all!!
                        Properly editing the file fixed the issue. I had a small typo.
                        The CPU usage may be lower than it has been for a while and now the temp is also down a tad. Going to monitor this for a bit. I know I had an issue with the WiFi. Going to see if that is cleared up as well.

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post