Last few days we have been experiencing high dp-cpu on all NPC simultaneously, specifically with flow_ctrl. The flow_ctrl process typically shows 3-10% CPU, but all of a sudden all NPC "DP slot x, dp 0 and 1" simultaneously jump to 30..50...80...100% and maintain that for 30-60 minutes, during which the firewall is basically down. Overall load is very low for PA-7050 (<10%). Clearing all sessions will restore all the core #2 CPU to normal, clearing only ICMP, TCP, UDP or ESP individually doesn't help, no other protocols are active. "show running resource-monitor ingress-backlogs" and clearing those sessions doesn't restore CPU to normal either. Full layer-3 directly connected interfaces to network (no L2/ARP/etc. to consider). PanOS is 9.1.13h3, upgraded to 9.1.14 same issue. Any suggestions?
... View more
