- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-15-2014 02:47 AM
Hi,
regarding GUI slowness I've a question:
a lot of people suggest to restart management server.
How can I schedule a night restart of it?
Thanks
regards
09-15-2014 02:59 AM
Sorry but there is no user available mechanism to do this on the Palo Alto.
You could look into scripting solutions as an option.
But if you need to restart the management service frequently, you should probably open a case and get to the root cause. This should only need to be done occasionally and not be a routine affair.
09-15-2014 04:55 AM
Hi Diennea,
There is no way to restart management server frequenty. You might be able to do it through CRON function of linux through scripting.
However, its not a good idea. Can you please provide output for follwoing things.
1. PAN-OS version
2. Show system resources.
Regards,
Hardik Shah
09-15-2014 06:13 AM
Hi,
our PAN OS versione is 6.0.4
Here the output (but I restared managerment server yesterday):
top - 15:09:59 up 27 days, 20:31, 1 user, load average: 0.18, 0.30, 0.57
Tasks: 100 total, 1 running, 99 sleeping, 0 stopped, 0 zombie
Cpu(s): 3.3%us, 5.6%sy, 10.7%ni, 70.5%id, 9.7%wa, 0.0%hi, 0.2%si, 0.0%st
Mem: 938136k total, 878980k used, 59156k free, 44280k buffers
Swap: 2008084k total, 1240780k used, 767304k free, 135576k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2977 20 0 68244 1360 1104 S 2 0.1 15:58.35 pan_dhcpd
8149 20 0 4464 1012 784 R 2 0.1 0:00.04 top
20857 20 0 1139m 116m 1864 S 2 12.7 47:13.25 logrcvr
1 20 0 1832 544 516 S 0 0.1 0:37.43 init
2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:09.15 migration/0
4 20 0 0 0 0 S 0 0.0 3:35.21 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:10.29 migration/1
6 20 0 0 0 0 S 0 0.0 3:21.78 ksoftirqd/1
7 20 0 0 0 0 S 0 0.0 6:59.72 events/0
8 20 0 0 0 0 S 0 0.0 11:02.93 events/1
9 20 0 0 0 0 S 0 0.0 0:00.05 khelper
12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
111 20 0 0 0 0 S 0 0.0 0:04.40 sync_supers
113 20 0 0 0 0 S 0 0.0 0:07.02 bdi-default
114 20 0 0 0 0 S 0 0.0 2:51.33 kblockd/0
115 20 0 0 0 0 S 0 0.0 2:44.42 kblockd/1
124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
131 20 0 0 0 0 S 0 0.0 0:00.00 khubd
134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod
155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
172 20 0 0 0 0 S 0 0.0 68:02.37 kswapd0
173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
765 20 0 0 0 0 S 0 0.0 4:29.31 octeon-ethernet
793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd
826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer
866 20 0 0 0 0 S 0 0.0 1:57.10 kjournald
919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd
1888 20 0 0 0 0 S 0 0.0 0:09.18 kjournald
1889 20 0 0 0 0 S 0 0.0 0:00.01 kjournald
1944 20 0 0 0 0 S 0 0.0 4:29.14 flush-8:0
2088 20 0 2004 592 544 S 0 0.1 0:08.12 syslogd
2091 20 0 1888 328 324 S 0 0.0 0:00.03 klogd
2100 20 0 1868 324 228 S 0 0.0 7:54.23 irqbalance
2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap
2126 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd
2191 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd
2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd
2211 1 -19 0 0 0 S 0 0.0 3:35.35 nfsd
2212 1 -19 0 0 0 S 0 0.0 3:43.64 nfsd
2213 1 -19 0 0 0 S 0 0.0 3:35.33 nfsd
2214 1 -19 0 0 0 S 0 0.0 3:37.45 nfsd
2215 1 -19 0 0 0 S 0 0.0 3:39.36 nfsd
2216 1 -19 0 0 0 S 0 0.0 3:29.24 nfsd
2217 1 -19 0 0 0 S 0 0.0 3:39.09 nfsd
2218 1 -19 0 0 0 S 0 0.0 3:37.14 nfsd
2221 20 0 2480 604 512 S 0 0.1 0:07.39 rpc.mountd
2225 nobody 20 0 107m 5228 2664 S 0 0.6 2:18.35 appweb3
2231 nobody 20 0 154m 8604 3160 S 0 0.9 2:35.13 appweb3
2290 0 -20 85888 8404 2028 S 0 0.9 168:22.72 masterd_apps
2293 20 0 1884 428 424 S 0 0.0 0:00.01 agetty
2302 15 -5 41216 2260 1188 S 0 0.2 304:41.02 sysd
2317 20 0 100m 1112 1024 S 0 0.1 9:02.95 dagger
2318 30 10 42968 3728 1672 S 0 0.4 105:34.18 python
2325 20 0 139m 1908 1176 S 0 0.2 18:49.81 sysdagent
2344 20 0 7208 568 564 S 0 0.1 0:00.09 tscat
2346 20 0 67660 996 864 S 0 0.1 11:20.87 brdagent
2347 20 0 36052 988 840 S 0 0.1 13:44.24 ehmon
2352 20 0 91092 1172 928 S 0 0.1 10:47.23 chasd
2616 20 0 95784 1668 1196 S 0 0.2 10:49.90 cryptod
2660 20 0 6844 876 792 S 0 0.1 0:00.25 sshd
2661 20 0 6780 628 624 S 0 0.1 0:00.04 sshd
2665 20 0 0 0 0 S 0 0.0 2:24.26 kjournald
Usually I have this situation (see PA-500 CLI and web interface unbearably slow )
ORDER BY CPU
top - 13:04:59 up 10 days, 18:26, 1 user, load average: 1.24, 1.58, 3.50
Tasks: 104 total, 3 running, 101 sleeping, 0 stopped, 0 zombie
Cpu(s): 3.7%us, 5.8%sy, 11.2%ni, 68.2%id, 10.9%wa, 0.0%hi, 0.2%si, 0.0%st
Mem: 938136k total, 897268k used, 40868k free, 34108k buffers
Swap: 2008084k total, 1521284k used, 486800k free, 111064k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
22839 30 10 4012 1384 1088 R 60 0.1 1:33.20 genindex.sh
7235 20 0 4464 1016 784 R 4 0.1 0:00.05 top
2972 20 0 102m 1448 1072 S 2 0.2 6:26.11 keymgr
20881 20 0 49912 2100 1388 S 2 0.2 8:28.13 snmpd
1 20 0 1832 544 516 S 0 0.1 0:15.38 init
2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:03.61 migration/0
4 20 0 0 0 0 S 0 0.0 1:25.80 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:03.97 migration/1
6 20 0 0 0 0 S 0 0.0 1:21.47 ksoftirqd/1
7 20 0 0 0 0 S 0 0.0 2:43.78 events/0
8 20 0 0 0 0 S 0 0.0 4:18.32 events/1
9 20 0 0 0 0 S 0 0.0 0:00.05 khelper
12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
111 20 0 0 0 0 S 0 0.0 0:01.70 sync_supers
113 20 0 0 0 0 S 0 0.0 0:02.73 bdi-default
114 20 0 0 0 0 S 0 0.0 1:19.88 kblockd/0
115 20 0 0 0 0 S 0 0.0 1:16.84 kblockd/1
124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
131 20 0 0 0 0 S 0 0.0 0:00.00 khubd
134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod
155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
172 20 0 0 0 0 R 0 0.0 27:54.79 kswapd0
173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
765 20 0 0 0 0 S 0 0.0 1:44.30 octeon-ethernet
793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd
826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer
866 20 0 0 0 0 S 0 0.0 0:43.94 kjournald
919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd
1172 20 0 21316 2468 2036 S 0 0.3 0:00.14 sshd
Tomorrow I will upgrade RAM to 2GB on PA500
I hope it will solve some problems....
09-15-2014 06:44 AM
Hi Diennea,
Output appears to be partial, I don't mgmtsrvr utilization.
I think you have free memory on MP, are you experiencing issue now.
Regards,
Hardik Shah
09-15-2014 07:18 AM
Hello diennea,
From the above mentioned output, it seems the firewall is always having a large queue for I/O to complete.
%wa - percent of time CPU has been waiting for I/O to complete. (Too high may be indicative of heavy swap usage particularly.
Also noticed, the "log receiver" process is taking a large volume of memory from the MP (management-plane). You may apply CLI command > show system resource follow (press SHIFT + M), to get the output based on memory utilization.
If you have enabled logging for every policy on this firewall, i would suggest you to enable on required policy and bypass non-urgent traffic i.e DNS, ping etc.
Hope this help.
Thanks
09-15-2014 08:02 AM
Hi,
here the output for show system resource follow
top - 16:58:02 up 27 days, 22:19, 1 user, load average: 0.13, 0.25, 0.63
Tasks: 97 total, 1 running, 96 sleeping, 0 stopped, 0 zombie
Cpu(s): 5.3%us, 2.0%sy, 0.0%ni, 91.4%id, 0.3%wa, 0.3%hi, 0.7%si, 0.0%st
Mem: 938136k total, 906024k used, 32112k free, 21768k buffers
Swap: 2008084k total, 1180812k used, 827272k free, 127528k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
19972 root 20 0 544m 132m 4284 S 0 14.5 54:52.32 mgmtsrvr
20857 root 20 0 1140m 116m 1736 S 1 12.8 47:49.32 logrcvr
2934 root 20 0 185m 71m 64m S 0 7.8 166:39.18 useridd
2945 root 20 0 256m 62m 7600 S 0 6.8 248:51.73 devsrvr
29182 nobody 20 0 219m 35m 4300 S 0 3.9 13:07.20 appweb3
14964 mauro.bi 20 0 106m 26m 12m S 0 2.9 0:03.14 cli
2290 root 0 -20 85888 8416 2024 S 1 0.9 168:49.79 masterd_apps
2231 nobody 20 0 154m 6344 1708 S 0 0.7 2:41.34 appweb3
31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.76 ntpd
2981 root 20 0 108m 4436 3704 S 0 0.5 10:17.84 authd
2318 root 30 10 42968 3756 1672 S 0 0.4 105:51.41 python
2978 root 20 0 82772 3544 1288 S 0 0.4 13:18.59 dnsproxyd
2225 nobody 20 0 107m 3280 1536 S 0 0.3 2:21.36 appweb3
2973 root 20 0 217m 2940 1944 S 0 0.3 94:25.06 varrcvr
20881 root 20 0 51260 2776 1376 S 0 0.3 90:28.72 snmpd
2317 root 20 0 100m 2768 1692 S 0 0.3 9:04.47 dagger
14945 root 20 0 21316 2468 2036 S 0 0.3 0:00.15 sshd
2302 root 15 -5 41216 2232 1180 S 11 0.2 305:33.28 sysd
2325 root 20 0 139m 2032 1240 S 0 0.2 18:52.88 sysdagent
2980 root 20 0 147m 1912 1128 S 0 0.2 16:18.18 routed
2969 root 20 0 85144 1836 1268 S 0 0.2 14:56.74 ikemgr
14953 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic
14981 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic
14968 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic
14986 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic
14954 root 20 0 12124 1664 1508 S 0 0.2 0:00.02 wmic
2616 root 20 0 95784 1656 1192 S 0 0.2 10:51.59 cryptod
14963 mauro.bi 20 0 21452 1512 1056 S 1 0.2 0:00.03 sshd
2972 root 20 0 102m 1420 1044 S 0 0.2 19:01.11 keymgr
2971 root 20 0 103m 1416 1076 S 0 0.2 11:38.45 rasmgr
2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.63 satd
2977 root 20 0 68244 1336 1096 S 0 0.1 16:01.00 pan_dhcpd
2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.34 sslmgr
2974 root 17 -3 66664 1272 972 S 0 0.1 11:58.16 ha_agent
2352 root 20 0 91092 1184 936 S 0 0.1 10:49.51 chasd
14988 mauro.bi 20 0 4528 1156 904 R 2 0.1 0:00.09 top
2979 root 20 0 80264 1136 988 S 0 0.1 10:22.90 pppoed
7454 root 20 0 9032 1044 908 S 0 0.1 0:08.83 syslog-ng
2346 root 20 0 67660 996 864 S 0 0.1 11:22.77 brdagent
2347 root 20 0 36052 988 840 S 0 0.1 13:46.47 ehmon
2660 root 20 0 6844 876 792 S 0 0.1 0:00.25 sshd
2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd
31283 root 20 0 2896 628 568 S 0 0.1 0:00.29 crond
2221 root 20 0 2480 604 512 S 0 0.1 0:07.41 rpc.mountd
2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd
2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat
1 root 20 0 1832 544 516 S 0 0.1 0:37.52 init
2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd
2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd
2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap
2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty
919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd
2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd
2100 root 20 0 1868 324 228 S 0 0.0 7:55.50 irqbalance
7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng
2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd
3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0
4 root 20 0 0 0 0 S 0 0.0 3:35.96 ksoftirqd/0
5 root RT 0 0 0 0 S 0 0.0 0:10.32 migration/1
6 root 20 0 0 0 0 S 0 0.0 3:22.51 ksoftirqd/1
7 root 20 0 0 0 0 S 1 0.0 7:00.96 events/0
8 root 20 0 0 0 0 S 0 0.0 11:04.68 events/1
9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper
12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers
113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default
114 root 20 0 0 0 0 S 0 0.0 2:51.66 kblockd/0
115 root 20 0 0 0 0 S 0 0.0 2:44.75 kblockd/1
124 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
125 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
126 root 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
I reduced logging on my device (removing DNS, DHCP, ActiveDirectory and other unuseful logs) but I need to log all web traffic
Also I reduced maximum log size on disk as you can see on this picture but management interface is still very slow
09-15-2014 08:03 AM
Hi,
here processes order by memory
top - 17:02:46 up 27 days, 22:24, 1 user, load average: 2.61, 1.78, 1.14
Tasks: 101 total, 2 running, 99 sleeping, 0 stopped, 0 zombie
Cpu(s): 1.0%us, 12.4%sy, 28.6%ni, 28.6%id, 28.8%wa, 0.0%hi, 0.7%si, 0.0%st
Mem: 938136k total, 905796k used, 32340k free, 24248k buffers
Swap: 2008084k total, 1173304k used, 834780k free, 107180k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
19972 root 20 0 548m 135m 4692 S 0 14.8 55:02.86 mgmtsrvr
20857 root 20 0 1139m 116m 1792 S 1 12.7 47:51.03 logrcvr
2934 root 20 0 185m 71m 63m S 0 7.8 166:40.49 useridd
2945 root 20 0 256m 62m 7692 S 0 6.8 248:51.91 devsrvr
29182 nobody 20 0 254m 45m 5788 S 0 4.9 13:37.85 appweb3
14964 mauro.bi 20 0 106m 18m 4760 S 0 2.0 0:03.14 cli
2290 root 0 -20 85888 8388 2004 S 0 0.9 168:51.20 masterd_apps
2231 nobody 20 0 154m 7828 3060 S 0 0.8 2:42.88 appweb3
15108 root 20 0 37276 6136 3420 S 0 0.7 0:00.50 masterd_batch
31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.80 ntpd
2318 root 30 10 42968 3752 1672 S 0 0.4 105:52.14 python
2981 root 20 0 108m 3368 2632 S 0 0.4 10:18.13 authd
2978 root 20 0 82772 3352 1108 S 0 0.4 13:18.68 dnsproxyd
2225 nobody 20 0 107m 3272 1536 S 0 0.3 2:21.50 appweb3
2973 root 20 0 217m 2828 1840 S 0 0.3 94:25.18 varrcvr
2317 root 20 0 100m 2772 1684 S 0 0.3 9:04.55 dagger
20881 root 20 0 51260 2772 1376 S 0 0.3 90:29.73 snmpd
2302 root 15 -5 41216 2228 1180 S 0 0.2 305:35.93 sysd
2969 root 20 0 85144 2204 1616 S 0 0.2 14:56.86 ikemgr
14945 root 20 0 21316 2164 1732 S 0 0.2 0:00.15 sshd
2325 root 20 0 139m 2048 1240 S 0 0.2 18:53.06 sysdagent
2980 root 20 0 147m 1904 1128 S 0 0.2 16:18.30 routed
23809 root 20 0 12124 1748 1592 S 0 0.2 0:00.03 wmic
24364 root 20 0 12124 1672 1508 S 1 0.2 0:00.02 wmic
23503 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic
23661 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic
24360 root 20 0 12124 1668 1508 S 1 0.2 0:00.02 wmic
2616 root 20 0 95784 1612 1148 S 0 0.2 10:51.66 cryptod
2972 root 20 0 102m 1432 1056 S 0 0.2 19:01.49 keymgr
14963 mauro.bi 20 0 21452 1432 976 S 0 0.2 0:00.42 sshd
2971 root 20 0 103m 1412 1076 S 0 0.2 11:38.54 rasmgr
2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.74 satd
15113 root 30 10 3892 1336 1088 R 51 0.1 0:39.54 genindex.sh
2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.47 sslmgr
2977 root 20 0 68244 1288 1048 S 0 0.1 16:01.13 pan_dhcpd
2974 root 17 -3 66664 1244 944 S 0 0.1 11:58.24 ha_agent
2352 root 20 0 91092 1184 936 S 0 0.1 10:50.33 chasd
14988 mauro.bi 20 0 4528 1152 884 R 1 0.1 0:02.97 top
2979 root 20 0 80264 1136 988 S 0 0.1 10:22.98 pppoed
15104 root 20 0 3716 1108 980 S 0 0.1 0:00.02 genindex_batch.
7454 root 20 0 9032 1024 888 S 0 0.1 0:08.83 syslog-ng
2346 root 20 0 67660 996 864 S 0 0.1 11:22.86 brdagent
2347 root 20 0 36052 988 840 S 0 0.1 13:46.57 ehmon
2660 root 20 0 6844 868 784 S 0 0.1 0:00.25 sshd
2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd
31283 root 20 0 2896 628 568 S 0 0.1 0:00.30 crond
2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd
2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat
2221 root 20 0 2480 560 468 S 0 0.1 0:07.41 rpc.mountd
1 root 20 0 1832 544 516 S 0 0.1 0:37.53 init
2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd
2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd
15102 root 20 0 2960 492 396 S 0 0.1 0:00.01 crond
2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap
2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty
919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd
2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd
2100 root 20 0 1868 324 228 S 0 0.0 7:55.55 irqbalance
7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng
2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd
3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0
4 root 20 0 0 0 0 S 0 0.0 3:35.99 ksoftirqd/0
5 root RT 0 0 0 0 S 0 0.0 0:10.33 migration/1
6 root 20 0 0 0 0 S 0 0.0 3:22.55 ksoftirqd/1
7 root 20 0 0 0 0 S 0 0.0 7:01.03 events/0
8 root 20 0 0 0 0 S 0 0.0 11:04.76 events/1
9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper
12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers
113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default
114 root 20 0 0 0 0 S 0 0.0 2:51.71 kblockd/0
09-15-2014 10:15 AM
Hello Diennea,
mgmt-server process looks good to me. The log receiver process took more than 1 Gig memory from the management plane (MP)
20857 root 20 0 1139m 116m 1792 S 1 12.7 47:51.03 logrcvr
You may apply below mentioned commands multiple times from the CLI ( with 2 second interval) and update here.
> debug log-receiver statistics
> show counter global filter delta yes | match log
Thanks
09-15-2014 10:54 PM
Hi,
few minutes ago I install 2GB of RAM on my PA500
Here the show system resources output:
top - 07:41:40 up 23 min, 1 user, load average: 2.93, 3.15, 2.74
Tasks: 104 total, 2 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 27.9%us, 8.7%sy, 10.3%ni, 14.0%id, 38.0%wa, 0.2%hi, 0.8%si, 0.0%st
Mem: 1970840k total, 1687588k used, 283252k free, 37320k buffers
Swap: 2008084k total, 0k used, 2008084k free, 729900k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
8197 30 10 4016 1404 1104 R 37 0.1 1:26.54 genindex.sh
2716 20 0 511m 304m 14m S 15 15.8 9:49.35 mgmtsrvr
22042 admin 20 0 2972 672 568 S 5 0.0 0:00.05 less
22048 20 0 4464 1016 784 R 4 0.1 0:00.05 top
22059 20 0 12124 1664 1508 S 4 0.1 0:00.02 wmic
2258 0 -20 83912 19m 6208 S 2 1.0 0:18.71 masterd_apps
2698 20 0 181m 86m 69m S 2 4.5 0:10.27 useridd
2747 20 0 49884 5556 3164 S 2 0.3 0:03.17 snmpd
1 20 0 1832 616 536 S 0 0.0 0:01.45 init
2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:00.02 migration/0
4 20 0 0 0 0 S 0 0.0 0:00.06 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:00.02 migration/1
6 20 0 0 0 0 S 0 0.0 0:00.05 ksoftirqd/1
7 20 0 0 0 0 S 0 0.0 0:00.46 events/0
8 20 0 0 0 0 S 0 0.0 0:00.46 events/1
9 20 0 0 0 0 S 0 0.0 0:00.05 khelper
12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
111 20 0 0 0 0 S 0 0.0 0:00.01 sync_supers
113 20 0 0 0 0 S 0 0.0 0:00.01 bdi-default
114 20 0 0 0 0 S 0 0.0 0:01.20 kblockd/0
115 20 0 0 0 0 S 0 0.0 0:01.07 kblockd/1
124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
131 20 0 0 0 0 S 0 0.0 0:00.00 khubd
134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod
155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
172 20 0 0 0 0 S 0 0.0 0:04.31 kswapd0
173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
765 20 0 0 0 0 S 0 0.0 0:00.29 octeon-ethernet
793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
798 20 0 0 0 0 S 0 0.0 0:00.43 mtdblockd
826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer
866 20 0 0 0 0 S 0 0.0 0:00.25 kjournald
919 16 -4 1992 608 396 S 0 0.0 0:00.95 udevd
1886 20 0 0 0 0 S 0 0.0 0:00.11 kjournald
1887 20 0 0 0 0 S 0 0.0 0:00.01 kjournald
2008 20 0 0 0 0 S 0 0.0 0:00.22 flush-8:0
2088 20 0 2004 680 580 S 0 0.0 0:00.09 syslogd
2091 20 0 1888 404 324 S 0 0.0 0:00.03 klogd
2100 20 0 1868 360 232 S 0 0.0 0:00.28 irqbalance
2108 rpc 20 0 2076 600 496 S 0 0.0 0:00.01 portmap
2126 20 0 2108 768 664 S 0 0.0 0:00.06 rpc.statd
2191 20 0 3276 708 584 S 0 0.0 0:00.01 xinetd
2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd
2211 1 -19 0 0 0 S 0 0.0 0:00.92 nfsd
2212 1 -19 0 0 0 S 0 0.0 0:00.86 nfsd
2213 1 -19 0 0 0 S 0 0.0 0:01.15 nfsd
2214 1 -19 0 0 0 S 0 0.0 0:00.85 nfsd
2215 1 -19 0 0 0 S 0 0.0 0:00.77 nfsd
2216 1 -19 0 0 0 S 0 0.0 0:01.13 nfsd
2217 1 -19 0 0 0 S 0 0.0 0:00.95 nfsd
2218 1 -19 0 0 0 S 0 0.0 0:00.64 nfsd
2221 20 0 2352 748 596 S 0 0.0 0:00.02 rpc.mountd
2261 20 0 1884 524 452 S 0 0.0 0:00.01 agetty
2270 15 -5 41208 10m 4540 S 0 0.5 0:22.28 sysd
2285 20 0 97.8m 17m 7900 S 0 0.9 0:02.59 dagger
2286 30 10 41800 7372 3680 S 0 0.4 0:04.41 python
2292 20 0 136m 12m 6512 S 0 0.6 0:02.17 sysdagent
2313 20 0 7208 2604 1592 S 0 0.1 0:00.09 tscat
2315 20 0 67660 9232 4408 S 0 0.5 0:00.64 brdagent
2316 20 0 36052 9144 4388 S 0 0.5 0:00.67 ehmon
2317 20 0 91324 11m 6236 S 0 0.6 0:01.12 chasd
2586 20 0 93164 12m 6900 S 0 0.7 0:01.34 cryptod
2618 20 0 6844 1612 1332 S 0 0.1 0:00.05 sshd
I execute commands you request but in this moment traffic is low because my company is not open yet
If you wish I will execute this commands later
admin@Firewall1> debug log-receiver statistics
Logging statistics
------------------------------ -----------
Log incoming rate: 3/sec
Log written rate: 3/sec
Corrupted packets: 0
Corrupted URL packets: 0
Logs discarded (queue full): 0
Traffic logs written: 5320
URL logs written: 1567
Wildfire logs written: 0
Anti-virus logs written: 0
Spyware logs written: 0
Attack logs written: 0
Vulnerability logs written: 38
Fileext logs written: 22
URL cache age out count: 1251
URL cache full count: 0
URL cache key exist count: 0
Traffic alarms dropped due to sysd write failures: 0
Traffic alarms dropped due to global rate limiting: 0
Traffic alarms dropped due to each source rate limiting: 0
Traffic alarms generated count: 5
Log Forward count: 0
Log Forward discarded (queue full) count: 0
Log Forward discarded (send error) count: 0
Summary Statistics:
Num current drop entries in trsum:0
Num cumulative drop entries in trsum:0
Num current drop entries in thsum:0
Num cumulative drop entries in thsum:0
External Forwarding stats:
Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)
syslog 0 0 0 0 0
snmp 0 0 0 0 0
email 0 0 0 0 0
raw 0 0 0 0 0
admin@Firewall1> show counter global filter delta yes | match log
log_url_cnt 55 1 info log system Number of url logs
log_uid_req_cnt 487 13 info log system Number of uid request logs
log_traffic_cnt 106 2 info log system Number of traffic logs
admin@Firewall1> debug log-receiver statistics
Logging statistics
------------------------------ -----------
Log incoming rate: 9/sec
Log written rate: 9/sec
Corrupted packets: 0
Corrupted URL packets: 0
Logs discarded (queue full): 0
Traffic logs written: 5370
URL logs written: 1587
Wildfire logs written: 0
Anti-virus logs written: 0
Spyware logs written: 0
Attack logs written: 0
Vulnerability logs written: 38
Fileext logs written: 22
URL cache age out count: 1265
URL cache full count: 0
URL cache key exist count: 0
Traffic alarms dropped due to sysd write failures: 0
Traffic alarms dropped due to global rate limiting: 0
Traffic alarms dropped due to each source rate limiting: 0
Traffic alarms generated count: 5
Log Forward count: 0
Log Forward discarded (queue full) count: 0
Log Forward discarded (send error) count: 0
Summary Statistics:
Num current drop entries in trsum:0
Num cumulative drop entries in trsum:0
Num current drop entries in thsum:0
Num cumulative drop entries in thsum:0
External Forwarding stats:
Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)
syslog 0 0 0 0 0
snmp 0 0 0 0 0
email 0 0 0 0 0
raw 0 0 0 0 0
admin@Firewall1> show counter global filter delta yes | match log
log_uid_req_cnt 8 13 info log system Number of uid request logs
log_traffic_cnt 1 1 info log system Number of traffic logs
admin@Firewall1> debug log-receiver statistics
Logging statistics
------------------------------ -----------
Log incoming rate: 2/sec
Log written rate: 2/sec
Corrupted packets: 0
Corrupted URL packets: 0
Logs discarded (queue full): 0
Traffic logs written: 5406
URL logs written: 1593
Wildfire logs written: 0
Anti-virus logs written: 0
Spyware logs written: 0
Attack logs written: 0
Vulnerability logs written: 38
Fileext logs written: 22
URL cache age out count: 1271
URL cache full count: 0
URL cache key exist count: 0
Traffic alarms dropped due to sysd write failures: 0
Traffic alarms dropped due to global rate limiting: 0
Traffic alarms dropped due to each source rate limiting: 0
Traffic alarms generated count: 5
Log Forward count: 0
Log Forward discarded (queue full) count: 0
Log Forward discarded (send error) count: 0
Summary Statistics:
Num current drop entries in trsum:0
Num cumulative drop entries in trsum:0
Num current drop entries in thsum:0
Num cumulative drop entries in thsum:0
External Forwarding stats:
Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min)
syslog 0 0 0 0 0
snmp 0 0 0 0 0
email 0 0 0 0 0
raw 0 0 0 0 0
admin@Firewall1> show counter global filter delta yes | match log
log_url_cnt 6 0 info log system Number of url logs
log_uid_req_cnt 105 12 info log system Number of uid request logs
log_traffic_cnt 15 1 info log system Number of traffic logs
09-15-2014 10:56 PM
How is the response from GUI now...?
Thanks
09-15-2014 11:09 PM
Now is good but after a reboot it is always good.
I need to wait some hours (better one day) to monitor the GUI
09-24-2014 12:04 AM
After RAM upgrade GUI goes very well.
GUI usage is fast and commit take less than 2 minutes
09-24-2014 12:07 AM
This is really a Good News !!!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!