PANOS 6.0.1 Dataplane CPU spikes that were not present in 5.0.11

[ericgearhart]

Yesterday we upgraded to PANOS 6.0.1, and we're seeing something new.

Here is the dataplane of our PA4020 when it was running PANOS 5.0.11, from two days ago:

Here's the same time frame, a day later, but with our PA4020 running 6.0.1:

[HULK]

Hello ericgearhart,

Could you please verify all processed all jobs during that time ( show job processed) and also make sure if dynamic-updates were scheduled during that time.

Verify dp-monitor logs as per below mentioned discussion

CPU stats

As you have the time frame, when the CPU was spiking, you can actually use the ACC to see why it's doing so as what kind of traffic is causing CPU to spike up.

Helpful commands for DP CPU troubleshooting:

CLI> show running resource-monitor

CLI> show session info

CLI> show session meter

CLI> Debug data-plane pool statistics

CLI>> show counter global filter delta yes  >>>>>>>> Run this command 10 times with a 5 sec interval.

Hope this helps.

Thanks

[ericgearhart]

I'll collect the data you're asking for and I haven't opened a case yet, I thought I'd just throw it out there to the forum and see if anyone else has experienced this.

Isn't it a bit weird that this is new, from 5.0.11 to 6.0 though? The same traffic patterns (huge backups) run at night, as they always have.

[HULK]

We need to verify the ACC report/packer rate/packet buffer utilization during that before make a conclusion. In 6.0, there are many new feature has been implemented ( compare to previous platform release 5.0.x).

Thanks