https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4085565#M1070201 <P>There are no&nbsp;<SPAN>active packet capture or debugging</SPAN></P> Thu, 14 May 2020 06:08:39 GMT ANFA 2020-05-14T06:08:39Z https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4083153#M1070078 <P>I've got a firepower going. The policy has pure access rules.<BR />Now I have a very high CPU load with active traffic.<BR />See pictures</P><P>What I do not understand is why SNORT has so much CPU.<BR />I have pure Access Rulles and no inspection rules</P><P>&nbsp;</P><P>When I look at the Connection Events and click on Snort ID Filter I see all the traffic<BR />Why does he show up at Snort Modul?</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 11 May 2020 10:28:25 GMT https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4083153#M1070078 ANFA 2020-05-11T10:28:25Z https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4083293#M1070088 <P>Could you check if there is any active packet capture or debugging?</P><P>Best regards.</P> Mon, 11 May 2020 14:02:43 GMT https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4083293#M1070088 B. BELHADJ 2020-05-11T14:02:43Z https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4085565#M1070201 <P>There are no&nbsp;<SPAN>active packet capture or debugging</SPAN></P> Thu, 14 May 2020 06:08:39 GMT https://community.cisco.com/t5/network-security/high-cpu-firepower-4120/m-p/4085565#M1070201 ANFA 2020-05-14T06:08:39Z