In management plane there's some mysterious process.

[JTR]

Hi guys,

I've found out that our customers PA keeps high management cpu usage, and it seems that this process use most of the resource.

what's the 'appweb3' process and why the user is 'nobody'? Is there somebody who can explain this??

Thank you very much ahead.

[HULK]

Hello,

Appweb3 is the process to take care web-GUI functionality of PAN firewall.

Please find below details to get an idea for each parameter.

• %us - user: users’ processes that are not niced. User initiated programs can include running queries and reports, etc.
• %sy - system: running the kernel and its processes.
• %ni – nice: nice level programs which control priorities in the kernel's scheduler.
• %id - percent idle. For instance, above shows the CPU 98.9% idle.
• %wa - percent of time CPU has been waiting for I/O to complete.  (Too high may be indicative of heavy swap usage particularly on 500/2000/4000 platforms. This can cause other MP issues such as dynamic routing protocols flapping due to inability to process keepalives/hellos, HA split-brain due to missed HBs, and even process and dataplane restarts due to missed HBs to masterd. Should also check logging rates ).
• %hi - hardware IRQ: servicing hardware interrupts.
• %si - software Interrupts: software interrupts.
• %st – steal: involuntary wait by virtual cpu while hypervisor is servicing another

Hope this helps.

Thanks

[harshanatarajan]

Appweb3 is the internal webserver.   This is responsible for the WEB-GUI.

[HULK · Accepted solution]

Hello,

If you have already logged into the GUI , please log out from GUI and see the difference on CLI. If you have not logged out from GUI properly and just close the browser, the firewall might allocate resources and shows user as "nobody".

FYI. appweb

Thanks

[JTR]

Really Thanks HULK, It was very useful. :smileygrin:

Have a nice day.