topic Re: Schedule a management restart in General Topics

Schedule a management restart

diennea — Mon, 15 Sep 2014 09:47:28 GMT

Hi,

regarding GUI slowness I've a question:

a lot of people suggest to restart management server.

How can I schedule a night restart of it?

Thanks

regards

Re: Schedule a management restart

pulukas — Mon, 15 Sep 2014 09:59:57 GMT

Sorry but there is no user available mechanism to do this on the Palo Alto.

You could look into scripting solutions as an option.

But if you need to restart the management service frequently, you should probably open a case and get to the root cause. This should only need to be done occasionally and not be a routine affair.

Re: Schedule a management restart

hshah — Mon, 15 Sep 2014 11:55:52 GMT

Hi Diennea,

There is no way to restart management server frequenty. You might be able to do it through CRON function of linux through scripting.

However, its not a good idea. Can you please provide output for follwoing things.

1. PAN-OS version

2. Show system resources.

Regards,

Hardik Shah

Re: Schedule a management restart

diennea — Mon, 15 Sep 2014 13:13:43 GMT

Hi,

our PAN OS versione is 6.0.4

Here the output (but I restared managerment server yesterday):

top - 15:09:59 up 27 days, 20:31, 1 user, load average: 0.18, 0.30, 0.57

Tasks: 100 total, 1 running, 99 sleeping, 0 stopped, 0 zombie

Cpu(s): 3.3%us, 5.6%sy, 10.7%ni, 70.5%id, 9.7%wa, 0.0%hi, 0.2%si, 0.0%st

Mem: 938136k total, 878980k used, 59156k free, 44280k buffers

Swap: 2008084k total, 1240780k used, 767304k free, 135576k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND

2977 20 0 68244 1360 1104 S 2 0.1 15:58.35 pan_dhcpd

8149 20 0 4464 1012 784 R 2 0.1 0:00.04 top

20857 20 0 1139m 116m 1864 S 2 12.7 47:13.25 logrcvr

1 20 0 1832 544 516 S 0 0.1 0:37.43 init

2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd

3 RT 0 0 0 0 S 0 0.0 0:09.15 migration/0

4 20 0 0 0 0 S 0 0.0 3:35.21 ksoftirqd/0

5 RT 0 0 0 0 S 0 0.0 0:10.29 migration/1

6 20 0 0 0 0 S 0 0.0 3:21.78 ksoftirqd/1

7 20 0 0 0 0 S 0 0.0 6:59.72 events/0

8 20 0 0 0 0 S 0 0.0 11:02.93 events/1

9 20 0 0 0 0 S 0 0.0 0:00.05 khelper

12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr

111 20 0 0 0 0 S 0 0.0 0:04.40 sync_supers

113 20 0 0 0 0 S 0 0.0 0:07.02 bdi-default

114 20 0 0 0 0 S 0 0.0 2:51.33 kblockd/0

115 20 0 0 0 0 S 0 0.0 2:44.42 kblockd/1

124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0

125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1

126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux

131 20 0 0 0 0 S 0 0.0 0:00.00 khubd

134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod

155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0

156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1

172 20 0 0 0 0 S 0 0.0 68:02.37 kswapd0

173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0

174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1

175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod

765 20 0 0 0 0 S 0 0.0 4:29.31 octeon-ethernet

793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0

798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd

826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer

866 20 0 0 0 0 S 0 0.0 1:57.10 kjournald

919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd

1888 20 0 0 0 0 S 0 0.0 0:09.18 kjournald

1889 20 0 0 0 0 S 0 0.0 0:00.01 kjournald

1944 20 0 0 0 0 S 0 0.0 4:29.14 flush-8:0

2088 20 0 2004 592 544 S 0 0.1 0:08.12 syslogd

2091 20 0 1888 328 324 S 0 0.0 0:00.03 klogd

2100 20 0 1868 324 228 S 0 0.0 7:54.23 irqbalance

2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap

2126 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd

2191 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd

2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd

2211 1 -19 0 0 0 S 0 0.0 3:35.35 nfsd

2212 1 -19 0 0 0 S 0 0.0 3:43.64 nfsd

2213 1 -19 0 0 0 S 0 0.0 3:35.33 nfsd

2214 1 -19 0 0 0 S 0 0.0 3:37.45 nfsd

2215 1 -19 0 0 0 S 0 0.0 3:39.36 nfsd

2216 1 -19 0 0 0 S 0 0.0 3:29.24 nfsd

2217 1 -19 0 0 0 S 0 0.0 3:39.09 nfsd

2218 1 -19 0 0 0 S 0 0.0 3:37.14 nfsd

2221 20 0 2480 604 512 S 0 0.1 0:07.39 rpc.mountd

2225 nobody 20 0 107m 5228 2664 S 0 0.6 2:18.35 appweb3

2231 nobody 20 0 154m 8604 3160 S 0 0.9 2:35.13 appweb3

2290 0 -20 85888 8404 2028 S 0 0.9 168:22.72 masterd_apps

2293 20 0 1884 428 424 S 0 0.0 0:00.01 agetty

2302 15 -5 41216 2260 1188 S 0 0.2 304:41.02 sysd

2317 20 0 100m 1112 1024 S 0 0.1 9:02.95 dagger

2318 30 10 42968 3728 1672 S 0 0.4 105:34.18 python

2325 20 0 139m 1908 1176 S 0 0.2 18:49.81 sysdagent

2344 20 0 7208 568 564 S 0 0.1 0:00.09 tscat

2346 20 0 67660 996 864 S 0 0.1 11:20.87 brdagent

2347 20 0 36052 988 840 S 0 0.1 13:44.24 ehmon

2352 20 0 91092 1172 928 S 0 0.1 10:47.23 chasd

2616 20 0 95784 1668 1196 S 0 0.2 10:49.90 cryptod

2660 20 0 6844 876 792 S 0 0.1 0:00.25 sshd

2661 20 0 6780 628 624 S 0 0.1 0:00.04 sshd

2665 20 0 0 0 0 S 0 0.0 2:24.26 kjournald

Usually I have this situation (see PA-500 CLI and web interface unbearably slow )

ORDER BY CPU

top - 13:04:59 up 10 days, 18:26, 1 user, load average: 1.24, 1.58, 3.50
Tasks: 104 total,   3 running, 101 sleeping,   0 stopped,   0 zombie
Cpu(s): 3.7%us, 5.8%sy, 11.2%ni, 68.2%id, 10.9%wa, 0.0%hi, 0.2%si, 0.0%st
Mem:    938136k total,   897268k used,    40868k free,    34108k buffers
Swap: 2008084k total, 1521284k used,   486800k free,   111064k cached

PID USER      PR NI VIRT RES SHR S %CPU %MEM    TIME+ COMMAND
22839       30 10 4012 1384 1088 R   60 0.1   1:33.20 genindex.sh
7235       20   0 4464 1016 784 R    4 0.1   0:00.05 top
2972       20   0 102m 1448 1072 S    2 0.2   6:26.11 keymgr
20881       20   0 49912 2100 1388 S    2 0.2   8:28.13 snmpd
    1       20   0 1832 544 516 S    0 0.1   0:15.38 init
    2       20   0     0    0    0 S    0 0.0   0:00.01 kthreadd
    3       RT   0     0    0    0 S    0 0.0   0:03.61 migration/0
    4       20   0     0    0    0 S    0 0.0   1:25.80 ksoftirqd/0
    5       RT   0     0    0    0 S    0 0.0   0:03.97 migration/1
    6       20   0     0    0    0 S    0 0.0   1:21.47 ksoftirqd/1
    7       20   0     0    0    0 S    0 0.0   2:43.78 events/0
    8       20   0     0    0    0 S    0 0.0   4:18.32 events/1
    9       20   0     0    0    0 S    0 0.0   0:00.05 khelper
   12       20   0     0    0    0 S    0 0.0   0:00.00 async/mgr
111       20   0     0    0    0 S    0 0.0   0:01.70 sync_supers
113       20   0     0    0    0 S    0 0.0   0:02.73 bdi-default
114       20   0     0    0    0 S    0 0.0   1:19.88 kblockd/0
115       20   0     0    0    0 S    0 0.0   1:16.84 kblockd/1
124       20   0     0    0    0 S    0 0.0   0:00.00 ata/0
125       20   0     0    0    0 S    0 0.0   0:00.00 ata/1
126       20   0     0    0    0 S    0 0.0   0:00.00 ata_aux
131       20   0     0    0    0 S    0 0.0   0:00.00 khubd
134       20   0     0    0    0 S    0 0.0   0:00.00 kseriod
155       20   0     0    0    0 S    0 0.0   0:00.00 rpciod/0
156       20   0     0    0    0 S    0 0.0   0:00.00 rpciod/1
172       20   0     0    0    0 R    0 0.0 27:54.79 kswapd0
173       20   0     0    0    0 S    0 0.0   0:00.00 aio/0
174       20   0     0    0    0 S    0 0.0   0:00.00 aio/1
175        1 -19     0    0    0 S    0 0.0   0:00.00 nfsiod
765       20   0     0    0    0 S    0 0.0   1:44.30 octeon-ethernet
793       20   0     0    0    0 S    0 0.0   0:00.00 scsi_eh_0
798       20   0     0    0    0 S    0 0.0   0:01.18 mtdblockd
826       20   0     0    0    0 S    0 0.0   0:00.00 usbhid_resumer
866       20   0     0    0    0 S    0 0.0   0:43.94 kjournald
919       16 -4 1992 392 388 S    0 0.0   0:01.03 udevd
1172       20   0 21316 2468 2036 S    0 0.3   0:00.14 sshd

Tomorrow I will upgrade RAM to 2GB on PA500

I hope it will solve some problems....

Re: Schedule a management restart

hshah — Mon, 15 Sep 2014 13:44:55 GMT

Hi Diennea,

Output appears to be partial, I don't mgmtsrvr utilization.

I think you have free memory on MP, are you experiencing issue now.

Regards,

Hardik Shah

Re: Schedule a management restart

HULK — Mon, 15 Sep 2014 14:18:43 GMT

Hello diennea,

From the above mentioned output, it seems the firewall is always having a large queue for I/O to complete.

%wa - percent of time CPU has been waiting for I/O to complete. (Too high may be indicative of heavy swap usage particularly.

Also noticed, the "log receiver" process is taking a large volume of memory from the MP (management-plane). You may apply CLI command > show system resource follow (press SHIFT + M), to get the output based on memory utilization.

If you have enabled logging for every policy on this firewall, i would suggest you to enable on required policy and bypass non-urgent traffic i.e DNS, ping etc.

Hope this help.

Thanks

Re: Schedule a management restart

diennea — Mon, 15 Sep 2014 15:02:13 GMT

Hi,

here the output for show system resource follow

top - 16:58:02 up 27 days, 22:19, 1 user, load average: 0.13, 0.25, 0.63

Tasks: 97 total, 1 running, 96 sleeping, 0 stopped, 0 zombie

Cpu(s): 5.3%us, 2.0%sy, 0.0%ni, 91.4%id, 0.3%wa, 0.3%hi, 0.7%si, 0.0%st

Mem: 938136k total, 906024k used, 32112k free, 21768k buffers

Swap: 2008084k total, 1180812k used, 827272k free, 127528k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND

19972 root 20 0 544m 132m 4284 S 0 14.5 54:52.32 mgmtsrvr

20857 root 20 0 1140m 116m 1736 S 1 12.8 47:49.32 logrcvr

2934 root 20 0 185m 71m 64m S 0 7.8 166:39.18 useridd

2945 root 20 0 256m 62m 7600 S 0 6.8 248:51.73 devsrvr

29182 nobody 20 0 219m 35m 4300 S 0 3.9 13:07.20 appweb3

14964 mauro.bi 20 0 106m 26m 12m S 0 2.9 0:03.14 cli

2290 root 0 -20 85888 8416 2024 S 1 0.9 168:49.79 masterd_apps

2231 nobody 20 0 154m 6344 1708 S 0 0.7 2:41.34 appweb3

31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.76 ntpd

2981 root 20 0 108m 4436 3704 S 0 0.5 10:17.84 authd

2318 root 30 10 42968 3756 1672 S 0 0.4 105:51.41 python

2978 root 20 0 82772 3544 1288 S 0 0.4 13:18.59 dnsproxyd

2225 nobody 20 0 107m 3280 1536 S 0 0.3 2:21.36 appweb3

2973 root 20 0 217m 2940 1944 S 0 0.3 94:25.06 varrcvr

20881 root 20 0 51260 2776 1376 S 0 0.3 90:28.72 snmpd

2317 root 20 0 100m 2768 1692 S 0 0.3 9:04.47 dagger

14945 root 20 0 21316 2468 2036 S 0 0.3 0:00.15 sshd

2302 root 15 -5 41216 2232 1180 S 11 0.2 305:33.28 sysd

2325 root 20 0 139m 2032 1240 S 0 0.2 18:52.88 sysdagent

2980 root 20 0 147m 1912 1128 S 0 0.2 16:18.18 routed

2969 root 20 0 85144 1836 1268 S 0 0.2 14:56.74 ikemgr

14953 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic

14981 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic

14968 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic

14986 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic

14954 root 20 0 12124 1664 1508 S 0 0.2 0:00.02 wmic

2616 root 20 0 95784 1656 1192 S 0 0.2 10:51.59 cryptod

14963 mauro.bi 20 0 21452 1512 1056 S 1 0.2 0:00.03 sshd

2972 root 20 0 102m 1420 1044 S 0 0.2 19:01.11 keymgr

2971 root 20 0 103m 1416 1076 S 0 0.2 11:38.45 rasmgr

2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.63 satd

2977 root 20 0 68244 1336 1096 S 0 0.1 16:01.00 pan_dhcpd

2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.34 sslmgr

2974 root 17 -3 66664 1272 972 S 0 0.1 11:58.16 ha_agent

2352 root 20 0 91092 1184 936 S 0 0.1 10:49.51 chasd

14988 mauro.bi 20 0 4528 1156 904 R 2 0.1 0:00.09 top

2979 root 20 0 80264 1136 988 S 0 0.1 10:22.90 pppoed

7454 root 20 0 9032 1044 908 S 0 0.1 0:08.83 syslog-ng

2346 root 20 0 67660 996 864 S 0 0.1 11:22.77 brdagent

2347 root 20 0 36052 988 840 S 0 0.1 13:46.47 ehmon

2660 root 20 0 6844 876 792 S 0 0.1 0:00.25 sshd

2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd

31283 root 20 0 2896 628 568 S 0 0.1 0:00.29 crond

2221 root 20 0 2480 604 512 S 0 0.1 0:07.41 rpc.mountd

2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd

2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat

1 root 20 0 1832 544 516 S 0 0.1 0:37.52 init

2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd

2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd

2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap

2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty

919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd

2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd

2100 root 20 0 1868 324 228 S 0 0.0 7:55.50 irqbalance

7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng

2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd

3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0

4 root 20 0 0 0 0 S 0 0.0 3:35.96 ksoftirqd/0

5 root RT 0 0 0 0 S 0 0.0 0:10.32 migration/1

6 root 20 0 0 0 0 S 0 0.0 3:22.51 ksoftirqd/1

7 root 20 0 0 0 0 S 1 0.0 7:00.96 events/0

8 root 20 0 0 0 0 S 0 0.0 11:04.68 events/1

9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper

12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr

111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers

113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default

114 root 20 0 0 0 0 S 0 0.0 2:51.66 kblockd/0

115 root 20 0 0 0 0 S 0 0.0 2:44.75 kblockd/1

124 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/0

125 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/1

126 root 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux

I reduced logging on my device (removing DNS, DHCP, ActiveDirectory and other unuseful logs) but I need to log all web traffic

Also I reduced maximum log size on disk as you can see on this picture but management interface is still very slow

Re: Schedule a management restart

diennea — Mon, 15 Sep 2014 15:03:42 GMT

Hi,

here processes order by memory

top - 17:02:46 up 27 days, 22:24, 1 user, load average: 2.61, 1.78, 1.14

Tasks: 101 total, 2 running, 99 sleeping, 0 stopped, 0 zombie

Cpu(s): 1.0%us, 12.4%sy, 28.6%ni, 28.6%id, 28.8%wa, 0.0%hi, 0.7%si, 0.0%st

Mem: 938136k total, 905796k used, 32340k free, 24248k buffers

Swap: 2008084k total, 1173304k used, 834780k free, 107180k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND

19972 root 20 0 548m 135m 4692 S 0 14.8 55:02.86 mgmtsrvr

20857 root 20 0 1139m 116m 1792 S 1 12.7 47:51.03 logrcvr

2934 root 20 0 185m 71m 63m S 0 7.8 166:40.49 useridd

2945 root 20 0 256m 62m 7692 S 0 6.8 248:51.91 devsrvr

29182 nobody 20 0 254m 45m 5788 S 0 4.9 13:37.85 appweb3

14964 mauro.bi 20 0 106m 18m 4760 S 0 2.0 0:03.14 cli

2290 root 0 -20 85888 8388 2004 S 0 0.9 168:51.20 masterd_apps

2231 nobody 20 0 154m 7828 3060 S 0 0.8 2:42.88 appweb3

15108 root 20 0 37276 6136 3420 S 0 0.7 0:00.50 masterd_batch

31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.80 ntpd

2318 root 30 10 42968 3752 1672 S 0 0.4 105:52.14 python

2981 root 20 0 108m 3368 2632 S 0 0.4 10:18.13 authd

2978 root 20 0 82772 3352 1108 S 0 0.4 13:18.68 dnsproxyd

2225 nobody 20 0 107m 3272 1536 S 0 0.3 2:21.50 appweb3

2973 root 20 0 217m 2828 1840 S 0 0.3 94:25.18 varrcvr

2317 root 20 0 100m 2772 1684 S 0 0.3 9:04.55 dagger

20881 root 20 0 51260 2772 1376 S 0 0.3 90:29.73 snmpd

2302 root 15 -5 41216 2228 1180 S 0 0.2 305:35.93 sysd

2969 root 20 0 85144 2204 1616 S 0 0.2 14:56.86 ikemgr

14945 root 20 0 21316 2164 1732 S 0 0.2 0:00.15 sshd

2325 root 20 0 139m 2048 1240 S 0 0.2 18:53.06 sysdagent

2980 root 20 0 147m 1904 1128 S 0 0.2 16:18.30 routed

23809 root 20 0 12124 1748 1592 S 0 0.2 0:00.03 wmic

24364 root 20 0 12124 1672 1508 S 1 0.2 0:00.02 wmic

23503 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic

23661 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic

24360 root 20 0 12124 1668 1508 S 1 0.2 0:00.02 wmic

2616 root 20 0 95784 1612 1148 S 0 0.2 10:51.66 cryptod

2972 root 20 0 102m 1432 1056 S 0 0.2 19:01.49 keymgr

14963 mauro.bi 20 0 21452 1432 976 S 0 0.2 0:00.42 sshd

2971 root 20 0 103m 1412 1076 S 0 0.2 11:38.54 rasmgr

2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.74 satd

15113 root 30 10 3892 1336 1088 R 51 0.1 0:39.54 genindex.sh

2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.47 sslmgr

2977 root 20 0 68244 1288 1048 S 0 0.1 16:01.13 pan_dhcpd

2974 root 17 -3 66664 1244 944 S 0 0.1 11:58.24 ha_agent

2352 root 20 0 91092 1184 936 S 0 0.1 10:50.33 chasd

14988 mauro.bi 20 0 4528 1152 884 R 1 0.1 0:02.97 top

2979 root 20 0 80264 1136 988 S 0 0.1 10:22.98 pppoed

15104 root 20 0 3716 1108 980 S 0 0.1 0:00.02 genindex_batch.

7454 root 20 0 9032 1024 888 S 0 0.1 0:08.83 syslog-ng

2346 root 20 0 67660 996 864 S 0 0.1 11:22.86 brdagent

2347 root 20 0 36052 988 840 S 0 0.1 13:46.57 ehmon

2660 root 20 0 6844 868 784 S 0 0.1 0:00.25 sshd

2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd

31283 root 20 0 2896 628 568 S 0 0.1 0:00.30 crond

2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd

2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat

2221 root 20 0 2480 560 468 S 0 0.1 0:07.41 rpc.mountd

1 root 20 0 1832 544 516 S 0 0.1 0:37.53 init

2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd

2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd

15102 root 20 0 2960 492 396 S 0 0.1 0:00.01 crond

2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap

2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty

919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd

2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd

2100 root 20 0 1868 324 228 S 0 0.0 7:55.55 irqbalance

7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng

2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd

3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0

4 root 20 0 0 0 0 S 0 0.0 3:35.99 ksoftirqd/0

5 root RT 0 0 0 0 S 0 0.0 0:10.33 migration/1

6 root 20 0 0 0 0 S 0 0.0 3:22.55 ksoftirqd/1

7 root 20 0 0 0 0 S 0 0.0 7:01.03 events/0

8 root 20 0 0 0 0 S 0 0.0 11:04.76 events/1

9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper

12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr

111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers

113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default

114 root 20 0 0 0 0 S 0 0.0 2:51.71 kblockd/0

Re: Schedule a management restart

HULK — Mon, 15 Sep 2014 17:15:38 GMT

Hello Diennea,

mgmt-server process looks good to me. The log receiver process took more than 1 Gig memory from the management plane (MP)

20857 root 20 0 1139m 116m 1792 S 1 12.7 47:51.03 logrcvr

You may apply below mentioned commands multiple times from the CLI ( with 2 second interval) and update here.

> debug log-receiver statistics

> show counter global filter delta yes | match log

Thanks

Re: Schedule a management restart

diennea — Tue, 16 Sep 2014 05:54:12 GMT

Hi,

few minutes ago I install 2GB of RAM on my PA500

Here the show system resources output:

top - 07:41:40 up 23 min, 1 user, load average: 2.93, 3.15, 2.74

Tasks: 104 total, 2 running, 102 sleeping, 0 stopped, 0 zombie

Cpu(s): 27.9%us, 8.7%sy, 10.3%ni, 14.0%id, 38.0%wa, 0.2%hi, 0.8%si, 0.0%st

Mem: 1970840k total, 1687588k used, 283252k free, 37320k buffers

Swap: 2008084k total, 0k used, 2008084k free, 729900k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND

8197 30 10 4016 1404 1104 R 37 0.1 1:26.54 genindex.sh

2716 20 0 511m 304m 14m S 15 15.8 9:49.35 mgmtsrvr

22042 admin 20 0 2972 672 568 S 5 0.0 0:00.05 less

22048 20 0 4464 1016 784 R 4 0.1 0:00.05 top

22059 20 0 12124 1664 1508 S 4 0.1 0:00.02 wmic

2258 0 -20 83912 19m 6208 S 2 1.0 0:18.71 masterd_apps

2698 20 0 181m 86m 69m S 2 4.5 0:10.27 useridd

2747 20 0 49884 5556 3164 S 2 0.3 0:03.17 snmpd

1 20 0 1832 616 536 S 0 0.0 0:01.45 init

2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd

3 RT 0 0 0 0 S 0 0.0 0:00.02 migration/0

4 20 0 0 0 0 S 0 0.0 0:00.06 ksoftirqd/0

5 RT 0 0 0 0 S 0 0.0 0:00.02 migration/1

6 20 0 0 0 0 S 0 0.0 0:00.05 ksoftirqd/1

7 20 0 0 0 0 S 0 0.0 0:00.46 events/0

8 20 0 0 0 0 S 0 0.0 0:00.46 events/1

9 20 0 0 0 0 S 0 0.0 0:00.05 khelper

12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr

111 20 0 0 0 0 S 0 0.0 0:00.01 sync_supers

113 20 0 0 0 0 S 0 0.0 0:00.01 bdi-default

114 20 0 0 0 0 S 0 0.0 0:01.20 kblockd/0

115 20 0 0 0 0 S 0 0.0 0:01.07 kblockd/1

124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0

125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1

126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux

131 20 0 0 0 0 S 0 0.0 0:00.00 khubd

134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod

155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0

156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1

172 20 0 0 0 0 S 0 0.0 0:04.31 kswapd0

173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0

174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1

175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod

765 20 0 0 0 0 S 0 0.0 0:00.29 octeon-ethernet

793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0

798 20 0 0 0 0 S 0 0.0 0:00.43 mtdblockd

826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer

866 20 0 0 0 0 S 0 0.0 0:00.25 kjournald

919 16 -4 1992 608 396 S 0 0.0 0:00.95 udevd

1886 20 0 0 0 0 S 0 0.0 0:00.11 kjournald

1887 20 0 0 0 0 S 0 0.0 0:00.01 kjournald

2008 20 0 0 0 0 S 0 0.0 0:00.22 flush-8:0

2088 20 0 2004 680 580 S 0 0.0 0:00.09 syslogd

2091 20 0 1888 404 324 S 0 0.0 0:00.03 klogd

2100 20 0 1868 360 232 S 0 0.0 0:00.28 irqbalance

2108 rpc 20 0 2076 600 496 S 0 0.0 0:00.01 portmap

2126 20 0 2108 768 664 S 0 0.0 0:00.06 rpc.statd

2191 20 0 3276 708 584 S 0 0.0 0:00.01 xinetd

2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd

2211 1 -19 0 0 0 S 0 0.0 0:00.92 nfsd

2212 1 -19 0 0 0 S 0 0.0 0:00.86 nfsd

2213 1 -19 0 0 0 S 0 0.0 0:01.15 nfsd

2214 1 -19 0 0 0 S 0 0.0 0:00.85 nfsd

2215 1 -19 0 0 0 S 0 0.0 0:00.77 nfsd

2216 1 -19 0 0 0 S 0 0.0 0:01.13 nfsd

2217 1 -19 0 0 0 S 0 0.0 0:00.95 nfsd

2218 1 -19 0 0 0 S 0 0.0 0:00.64 nfsd

2221 20 0 2352 748 596 S 0 0.0 0:00.02 rpc.mountd

2261 20 0 1884 524 452 S 0 0.0 0:00.01 agetty

2270 15 -5 41208 10m 4540 S 0 0.5 0:22.28 sysd

2285 20 0 97.8m 17m 7900 S 0 0.9 0:02.59 dagger

2286 30 10 41800 7372 3680 S 0 0.4 0:04.41 python

2292 20 0 136m 12m 6512 S 0 0.6 0:02.17 sysdagent

2313 20 0 7208 2604 1592 S 0 0.1 0:00.09 tscat

2315 20 0 67660 9232 4408 S 0 0.5 0:00.64 brdagent

2316 20 0 36052 9144 4388 S 0 0.5 0:00.67 ehmon

2317 20 0 91324 11m 6236 S 0 0.6 0:01.12 chasd

2586 20 0 93164 12m 6900 S 0 0.7 0:01.34 cryptod

2618 20 0 6844 1612 1332 S 0 0.1 0:00.05 sshd

I execute commands you request but in this moment traffic is low because my company is not open yet

If you wish I will execute this commands later

admin@Firewall1> debug log-receiver statistics

Logging statistics

------------------------------ -----------

Log incoming rate: 3/sec

Log written rate: 3/sec

Corrupted packets: 0

Corrupted URL packets: 0

Logs discarded (queue full): 0

Traffic logs written: 5320

URL logs written: 1567

Wildfire logs written: 0

Anti-virus logs written: 0

Spyware logs written: 0

Attack logs written: 0

Vulnerability logs written: 38

Fileext logs written: 22

URL cache age out count: 1251

URL cache full count: 0

URL cache key exist count: 0

Traffic alarms dropped due to sysd write failures: 0

Traffic alarms dropped due to global rate limiting: 0

Traffic alarms dropped due to each source rate limiting: 0

Traffic alarms generated count: 5

Log Forward count: 0

Log Forward discarded (queue full) count: 0

Log Forward discarded (send error) count: 0

Summary Statistics:

Num current drop entries in trsum:0

Num cumulative drop entries in trsum:0

Num current drop entries in thsum:0

Num cumulative drop entries in thsum:0

External Forwarding stats:

Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)

syslog 0 0 0 0 0

snmp 0 0 0 0 0

email 0 0 0 0 0

raw 0 0 0 0 0

admin@Firewall1> show counter global filter delta yes | match log

log_url_cnt 55 1 info log system Number of url logs

log_uid_req_cnt 487 13 info log system Number of uid request logs

log_traffic_cnt 106 2 info log system Number of traffic logs

admin@Firewall1> debug log-receiver statistics

Logging statistics

------------------------------ -----------

Log incoming rate: 9/sec

Log written rate: 9/sec

Corrupted packets: 0

Corrupted URL packets: 0

Logs discarded (queue full): 0

Traffic logs written: 5370

URL logs written: 1587

Wildfire logs written: 0

Anti-virus logs written: 0

Spyware logs written: 0

Attack logs written: 0

Vulnerability logs written: 38

Fileext logs written: 22

URL cache age out count: 1265

URL cache full count: 0

URL cache key exist count: 0

Traffic alarms dropped due to sysd write failures: 0

Traffic alarms dropped due to global rate limiting: 0

Traffic alarms dropped due to each source rate limiting: 0

Traffic alarms generated count: 5

Log Forward count: 0

Log Forward discarded (queue full) count: 0

Log Forward discarded (send error) count: 0

Summary Statistics:

Num current drop entries in trsum:0

Num cumulative drop entries in trsum:0

Num current drop entries in thsum:0

Num cumulative drop entries in thsum:0

External Forwarding stats:

Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)

syslog 0 0 0 0 0

snmp 0 0 0 0 0

email 0 0 0 0 0

raw 0 0 0 0 0

admin@Firewall1> show counter global filter delta yes | match log

log_uid_req_cnt 8 13 info log system Number of uid request logs

log_traffic_cnt 1 1 info log system Number of traffic logs

admin@Firewall1> debug log-receiver statistics

Logging statistics

------------------------------ -----------

Log incoming rate: 2/sec

Log written rate: 2/sec

Corrupted packets: 0

Corrupted URL packets: 0

Logs discarded (queue full): 0

Traffic logs written: 5406

URL logs written: 1593

Wildfire logs written: 0

Anti-virus logs written: 0

Spyware logs written: 0

Attack logs written: 0

Vulnerability logs written: 38

Fileext logs written: 22

URL cache age out count: 1271

URL cache full count: 0

URL cache key exist count: 0

Traffic alarms dropped due to sysd write failures: 0

Traffic alarms dropped due to global rate limiting: 0

Traffic alarms dropped due to each source rate limiting: 0

Traffic alarms generated count: 5

Log Forward count: 0

Log Forward discarded (queue full) count: 0

Log Forward discarded (send error) count: 0

Summary Statistics:

Num current drop entries in trsum:0

Num cumulative drop entries in trsum:0

Num current drop entries in thsum:0

Num cumulative drop entries in thsum:0

External Forwarding stats:

Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)

syslog 0 0 0 0 0

snmp 0 0 0 0 0

email 0 0 0 0 0

raw 0 0 0 0 0

admin@Firewall1> show counter global filter delta yes | match log

log_url_cnt 6 0 info log system Number of url logs

log_uid_req_cnt 105 12 info log system Number of uid request logs

log_traffic_cnt 15 1 info log system Number of traffic logs

Re: Schedule a management restart

HULK — Tue, 16 Sep 2014 05:56:58 GMT

How is the response from GUI now...?

Thanks

Re: Schedule a management restart

diennea — Tue, 16 Sep 2014 06:09:18 GMT

Now is good but after a reboot it is always good.

I need to wait some hours (better one day) to monitor the GUI

Re: Schedule a management restart

diennea — Wed, 24 Sep 2014 07:04:40 GMT

After RAM upgrade GUI goes very well.

GUI usage is fast and commit take less than 2 minutes

Re: Schedule a management restart

HULK — Wed, 24 Sep 2014 07:07:30 GMT

This is really a Good News !!!