topic Re: PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11 in General Topics

PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11

ericgearhart — Wed, 12 Mar 2014 14:02:01 GMT

Yesterday we upgraded to PANOS 6.0.1, and we're seeing something new.

Here is the dataplane of our PA4020 when it was running PANOS 5.0.11, from two days ago:

Here's the same time frame, a day later, but with our PA4020 running 6.0.1:

Re: PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11

HULK — Wed, 12 Mar 2014 14:26:04 GMT

Hello ericgearhart,

Could you please verify all processed all jobs during that time ( show job processed) and also make sure if dynamic-updates were scheduled during that time.

Verify dp-monitor logs as per below mentioned discussion

CPU stats

As you have the time frame, when the CPU was spiking, you can actually use the ACC to see why it's doing so as what kind of traffic is causing CPU to spike up.

Helpful commands for DP CPU troubleshooting:

CLI> show running resource-monitor

CLI> show session info

CLI> show session meter

CLI> Debug data-plane pool statistics

CLI>> show counter global filter delta yes >>>>>>>> Run this command 10 times with a 5 sec interval.

Hope this helps.

Thanks

Re: PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11

ericgearhart — Wed, 12 Mar 2014 14:28:10 GMT

I'll collect the data you're asking for and I haven't opened a case yet, I thought I'd just throw it out there to the forum and see if anyone else has experienced this.

Isn't it a bit weird that this is new, from 5.0.11 to 6.0 though? The same traffic patterns (huge backups) run at night, as they always have.

Re: PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11

HULK — Wed, 12 Mar 2014 14:39:13 GMT

We need to verify the ACC report/packer rate/packet buffer utilization during that before make a conclusion. In 6.0, there are many new feature has been implemented ( compare to previous platform release 5.0.x).

Thanks