Pan_task always at 100 % is it due to MP or DP?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

Pan_task always at 100 % is it due to MP or DP?

Cyber Elite
Cyber Elite

we have PA 220 running 9.0.4

 

show system resources  shows

 

show system resources

top - 09:53:13 up 2 days, 12:46, 1 user, load average: 2.11, 2.28, 2.35
Tasks: 139 total, 5 running, 134 sleeping, 0 stopped, 0 zombie
%Cpu(s): 59.4 us, 10.4 sy, 1.4 ni, 28.7 id, 0.1 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem : 4119652 total, 373012 free, 2303588 used, 1443052 buff/cache
KiB Swap: 1972 total, 1972 free, 0 used. 1334224 avail Mem

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
3257 20 0 71324 35528 8048 R 100.0 0.9 3640:17 pan_task
3258 20 0 46488 10556 7976 R 94.4 0.3 3640:29 pan_task
13562 20 0 15988 3236 1292 R 11.1 0.1 0:00.02 sh

 

 

what can be the reason that pan task is always at 100%?

IS pan task point to DP or MP?

MP

Help the community: Like helpful comments and mark solutions.
7 REPLIES 7

Cyber Elite
Cyber Elite

Also i see

 

less mp-log pan_task_1.log
thread id is : 1
pan_objev_mem_use ev per q 128 q_num 256 mem sz 1315224
pan_objev_mem_use ev per q 128 q_num 256 mem sz 1315224
Multicast fib shared memory usage: 14824536
pan_pbf_mem_use allocate for pbf extended memory is 0
pan_pbf_mem_use allocate memory size is 465904
pan_vsys_zone_id_list memory is 72.
Neighbor Discovery shared memory usage: 3298536
pan_dos_mem_use dos_class_max_buckets:51200, class_tbl_sz:22732800 bytes
pan_dos_mem_use dos_class_max_free_list:25600, class_free_list_sz:2764800 bytes
pan_dos_mem_use dos_block_max_buckets:1024, block_tbl_sz:180224 bytes
pan_dos_mem_use dos_max_vsys:2, dos_max_rules:100, prof_rt_tbl_sz:8400 bytes
pan_dos_mem_use DoS memory total allocated is:25686312 bytes
pan_sifnet_mem_use sifnet_max_buckets:4096, sifnet_tbl_sz:1572864 bytes
pan_sifnet_mem_use sifnet memory total allocated is:1572880 bytes
IPSec transport mode shared memory usage: 64008
pan_tunnel_app_init set tunnel_data 0x800000010005b000 for net_data 0x80000000afd6d000
now initing ciphers
now setting evps
ssl ready : 0
In pan_cfg_ucache_app_init
GTPprt support= -1

MP

Help the community: Like helpful comments and mark solutions.

Anyone can answer this please?

MP

Help the community: Like helpful comments and mark solutions.

Anyone can answer this please?

MP

Help the community: Like helpful comments and mark solutions.

L0 Member

I see that too and I am running on 9.0.6 on PAN-850s

Lets see if someone answers this

MP

Help the community: Like helpful comments and mark solutions.

The CPU output from the TOP command can not be used to determine dataplane load.  The pan_task processes are always at 100% CPU utilization as they are the individual software processes which perform packet processing on the dataplane..

This is design behavior of TOP Command in IRIX Mode where It is possible for the % CPU column to display values that total greater than 100%
Solaris mode divides the % CPU for each process by the number of CPUs in the system so that the total will be 100%.
To Toggle IRIX Mode off press Shift+I:

 

refer for more info

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLZZCA4

@MP18 - would you kindly mark this last response as the right answer so this shows it's resolved ?

 

 Thank you


Please mark helpful responses, so others know as well
  • 8659 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!