Pan_task always at 100 % is it due to MP or DP?

[MP18]

we have PA 220 running 9.0.4

show system resources  shows

show system resources

top - 09:53:13 up 2 days, 12:46, 1 user, load average: 2.11, 2.28, 2.35
Tasks: 139 total, 5 running, 134 sleeping, 0 stopped, 0 zombie
%Cpu(s): 59.4 us, 10.4 sy, 1.4 ni, 28.7 id, 0.1 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem : 4119652 total, 373012 free, 2303588 used, 1443052 buff/cache
KiB Swap: 1972 total, 1972 free, 0 used. 1334224 avail Mem

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
3257 20 0 71324 35528 8048 R 100.0 0.9 3640:17 pan_task
3258 20 0 46488 10556 7976 R 94.4 0.3 3640:29 pan_task
13562 20 0 15988 3236 1292 R 11.1 0.1 0:00.02 sh

what can be the reason that pan task is always at 100%?

IS pan task point to DP or MP?

[MP18]

Also i see

less mp-log pan_task_1.log
thread id is : 1
pan_objev_mem_use ev per q 128 q_num 256 mem sz 1315224
pan_objev_mem_use ev per q 128 q_num 256 mem sz 1315224
Multicast fib shared memory usage: 14824536
pan_pbf_mem_use allocate for pbf extended memory is 0
pan_pbf_mem_use allocate memory size is 465904
pan_vsys_zone_id_list memory is 72.
Neighbor Discovery shared memory usage: 3298536
pan_dos_mem_use dos_class_max_buckets:51200, class_tbl_sz:22732800 bytes
pan_dos_mem_use dos_class_max_free_list:25600, class_free_list_sz:2764800 bytes
pan_dos_mem_use dos_block_max_buckets:1024, block_tbl_sz:180224 bytes
pan_dos_mem_use dos_max_vsys:2, dos_max_rules:100, prof_rt_tbl_sz:8400 bytes
pan_dos_mem_use DoS memory total allocated is:25686312 bytes
pan_sifnet_mem_use sifnet_max_buckets:4096, sifnet_tbl_sz:1572864 bytes
pan_sifnet_mem_use sifnet memory total allocated is:1572880 bytes
IPSec transport mode shared memory usage: 64008
pan_tunnel_app_init set tunnel_data 0x800000010005b000 for net_data 0x80000000afd6d000
now initing ciphers
now setting evps
ssl ready : 0
In pan_cfg_ucache_app_init
GTPprt support= -1

[MP18]

Anyone can answer this please?

[MP18]

Anyone can answer this please?

[Sharadwi05]

I see that too and I am running on 9.0.6 on PAN-850s

[MP18]

Lets see if someone answers this

[anandhum]

The CPU output from the TOP command can not be used to determine dataplane load.  The pan_task processes are always at 100% CPU utilization as they are the individual software processes which perform packet processing on the dataplane..

This is design behavior of TOP Command in IRIX Mode where It is possible for the % CPU column to display values that total greater than 100%
Solaris mode divides the % CPU for each process by the number of CPUs in the system so that the total will be 100%.
To Toggle IRIX Mode off press Shift+I:

refer for more info

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLZZCA4

[Kobiher]

@MP18 - would you kindly mark this last response as the right answer so this shows it's resolved ?

 Thank you

[Narongrit_Uthairatjarene]

I want to know what kind of traffic the high pan_task uses to process.