topic Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD in Network Security https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/5087128#M1111999 <P>You might just need to force a logrotate.&nbsp; Mant times this will cleanup some stale / old log data that have not been overwritten.</P> <P>expert</P> <P>logrotate -v /ngfw/etc/logrotate-5min.d/pm.logrotate</P> Thu, 02 May 2024 07:03:08 GMT Marius Gunnerud 2024-05-02T07:03:08Z High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732329#M1095624 <P>anyone experienced this weird error. i dont find any reason for the disk to be full since it is still running at 45%.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="HeraldSison_1-1670230810662.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/169880i9186C7C614CBF4B0/image-size/medium?v=v2&amp;px=400" role="button" title="HeraldSison_1-1670230810662.png" alt="HeraldSison_1-1670230810662.png" /></span></P><P>tried clearing some log files on these directories but still the error still present</P><UL><LI>/var/sf/detection_engines/&lt;some GUID&gt;/backup/</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/instance-1/backup/</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/instance-2/backup/</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/instance-3/backup/</LI></UL><P>and also tried from these forum.</P><P><A href="https://www.lammle.com/post/fn-70466-ftd-high-unmanaged-disk-utilization-on-firepower-appliances-due-to-untracked-files/?unapproved=223398&amp;moderation-hash=5b9456c268d5ce0ddbf2b6f63d3e882e#comment-223398" target="_blank" rel="noopener">https://www.lammle.com/post/fn-70466-ftd-high-unmanaged-disk-utilization-on-firepower-appliances-due-to-untracked-files/?unapproved=223398&amp;moderation-hash=5b9456c268d5ce0ddbf2b6f63d3e882e#comment-223398</A></P><P>despite all of those actions the error still present.</P> Mon, 05 Dec 2022 20:05:07 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732329#M1095624 Herald Sison 2022-12-05T20:05:07Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732371#M1095625 <P>&nbsp;</P> <P>&nbsp;- FYI :&nbsp;<A href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo74833" target="_blank">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo74833</A></P> <P>&nbsp;M.</P> Mon, 05 Dec 2022 09:29:38 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732371#M1095625 Mark Elsen 2022-12-05T09:29:38Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732393#M1095626 <P>hi sir done performing the said work around as mentioned in my post above but still cant see any improvements</P> Mon, 05 Dec 2022 09:40:44 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732393#M1095626 Herald Sison 2022-12-05T09:40:44Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732520#M1095630 <P>Check for unused deleted files as follows (from expert mode cli (e.g., root user) on the device reporting the problem):</P> <LI-CODE lang="markup">lsof | grep deleted</LI-CODE> <P>If such files are found, a restart of syslog-ng will delete them properly. This is known not to work correctly in the background on FTD 7.0.4 (among other versions).</P> <LI-CODE lang="markup">pidof syslog-ng kill &lt;pid returned from previous command&gt;</LI-CODE> <P>&nbsp;</P> Mon, 05 Dec 2022 12:24:56 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732520#M1095630 Marvin Rhoads 2022-12-05T12:24:56Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732563#M1095635 <P>Hi Sir, is restarting the syslog-ng will affect the traffic of the FTD like the whole network connection of the office? If yes, i will try it this weekend.</P> Mon, 05 Dec 2022 13:31:21 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732563#M1095635 Herald Sison 2022-12-05T13:31:21Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732702#M1095644 <P>Restarting the syslog-ng service does not affect traffic flow. You may see a warning message raised in FMC for the event but that's all. When you kill the service, it will automatically restart as it's configured to do so in the system's rc.d settings.</P> Mon, 05 Dec 2022 16:34:50 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732702#M1095644 Marvin Rhoads 2022-12-05T16:34:50Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732742#M1095651 <P>Hi Sir,</P><P>Ive a ton of entries here when i ran the command&nbsp;</P><PRE>lsof | grep deleted</PRE><P>I only see 1 PID (2019) in pidof syslog-ng</P><PRE>pidof syslog-ng kill &lt;pid returned from previous command&gt;</PRE><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="HeraldSison_0-1670261217073.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/169918i80D2F0573A6B1464/image-size/medium?v=v2&amp;px=400" role="button" title="HeraldSison_0-1670261217073.png" alt="HeraldSison_0-1670261217073.png" /></span></P><P>Is the 2019 the correct PID to kill?</P><P>&nbsp;</P><P>Init 1 root txt REG 0,1 43848 15787 /sbin/init.sysvinit (deleted)<BR />udevd 171 root txt REG 0,1 338264 15766 /sbin/udevd (deleted)<BR />rngd 377 root txt REG 0,1 61992 8916 /usr/sbin/rngd (deleted)<BR />rngd 377 388 rngd root txt REG 0,1 61992 8916 /usr/sbin/rngd (deleted)<BR />rngd 377 389 rngd root txt REG 0,1 61992 8916 /usr/sbin/rngd (deleted)<BR />rngd 377 391 rngd root txt REG 0,1 61992 8916 /usr/sbin/rngd (deleted)<BR />rngd 377 392 rngd root txt REG 0,1 61992 8916 /usr/sbin/rngd (deleted)<BR />syslog-ng 2019 root 20w REG 252,2 383162 394416 /ngfw/var/log/process_stdout.log.1 (deleted)<BR />syslog-ng 2019 root 22w REG 252,2 9442845219 394420 /ngfw/var/log/process_stderr.log.1 (deleted)<BR />syslog-ng 2019 2048 syslog-ng root 20w REG 252,2 383162 394416 /ngfw/var/log/process_stdout.log.1 (deleted)<BR />syslog-ng 2019 2048 syslog-ng root 22w REG 252,2 9442845219 394420 /ngfw/var/log/process_stderr.log.1 (deleted)<BR />mariadbd 4473 mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 1153 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 1153 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 1153 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 1153 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 1153 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 1153 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 1341 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 1341 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 1341 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 1341 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 1341 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 1341 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 1342 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 1342 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 1342 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 1342 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 1342 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 1342 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 3995 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 3995 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 3995 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 3995 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 3995 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 3995 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4806 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4806 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4806 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4806 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4806 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4806 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4809 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4809 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4809 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4809 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4809 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4809 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4811 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4811 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4811 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4811 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4811 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4811 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4812 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4812 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4812 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4812 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4812 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4812 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4821 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4821 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4821 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4821 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4821 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4821 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4824 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4824 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4824 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4824 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4824 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4824 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4833 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4833 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4833 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4833 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4833 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4833 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4860 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4860 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4860 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4860 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4860 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4860 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4871 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4871 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4871 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4871 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4871 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4871 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4877 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4877 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4877 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4877 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4877 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4877 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4879 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4879 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4879 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4879 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4879 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4879 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4881 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4881 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4881 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4881 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4881 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4881 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 4978 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 4978 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 4978 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 4978 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 4978 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 4978 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 5050 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 5050 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 5050 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 5050 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 5050 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 5050 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 5052 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 5052 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 5052 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 5052 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 5052 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 5052 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 5056 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 5056 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 5056 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 5056 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 5056 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 5056 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 5074 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 5074 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 5074 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 5074 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 5074 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 5074 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 6054 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 6054 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 6054 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 6054 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 6054 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 6054 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 6745 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 6745 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 6745 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 6745 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 6745 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 6745 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 11128 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 11128 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 11128 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 11128 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 11128 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 11128 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 15828 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 15828 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 15828 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 15828 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 15828 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 15828 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 18229 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 18229 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 18229 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 18229 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 18229 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 18229 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 18230 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 18230 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 18230 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 18230 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 18230 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 18230 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 21789 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 21789 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 21789 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 21789 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 21789 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 21789 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 26866 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 26866 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 26866 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 26866 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 26866 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 26866 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 31532 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 31532 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 31532 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 31532 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 31532 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 31532 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />mariadbd 4473 31630 mariadbd mysql 6u REG 252,1 4546 16598 /var/volatile/tmp/#16598 (deleted)<BR />mariadbd 4473 31630 mariadbd mysql 7u REG 252,1 0 16637 /var/volatile/tmp/#16637 (deleted)<BR />mariadbd 4473 31630 mariadbd mysql 8u REG 252,1 0 16638 /var/volatile/tmp/#16638 (deleted)<BR />mariadbd 4473 31630 mariadbd mysql 11u REG 252,1 0 16639 /var/volatile/tmp/#16639 (deleted)<BR />mariadbd 4473 31630 mariadbd mysql 474u REG 252,2 2772 1049520 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYD<BR />mariadbd 4473 31630 mariadbd mysql 475u REG 252,2 1024 1049542 /ngfw/Volume/lib/mysql/sfsnort/rna_vdb_remap_deleted_ids.MYI<BR />snort3 6250 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6294 gmain root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6294 gmain root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6294 gmain root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6294 gmain root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6294 gmain root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6294 gmain root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6294 gmain root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6294 gmain root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6294 gmain root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6294 gmain root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6296 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6296 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6296 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6296 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6296 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6296 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6296 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6296 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6296 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6296 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6462 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6462 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6462 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6462 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6462 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6462 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6462 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6462 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6462 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6462 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6569 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6569 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6569 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6569 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6569 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6569 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6569 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6569 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6569 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6569 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6571 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6571 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6571 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6571 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6571 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6571 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6571 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6571 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6571 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6571 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6572 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6572 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6572 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6572 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6572 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6572 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6572 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6572 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6572 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6572 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6573 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6573 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6573 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6573 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6573 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6573 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6573 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6573 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6573 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6573 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6574 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6574 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6574 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6574 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6574 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6574 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6574 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6574 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6574 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6574 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6575 zmqio-0 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6575 zmqio-0 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6575 zmqio-0 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6575 zmqio-0 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6575 zmqio-0 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6575 zmqio-0 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6575 zmqio-0 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6575 zmqio-0 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6575 zmqio-0 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6575 zmqio-0 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6576 zmqio-1 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6576 zmqio-1 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6576 zmqio-1 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6576 zmqio-1 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6576 zmqio-1 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6576 zmqio-1 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6576 zmqio-1 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6576 zmqio-1 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6576 zmqio-1 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6576 zmqio-1 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6577 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6577 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6577 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6577 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6577 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6577 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6577 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6577 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6577 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6577 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6578 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6578 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6578 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6578 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6578 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6578 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6578 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6578 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6578 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6578 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6579 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6579 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6579 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6579 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6579 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6579 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6579 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6579 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6579 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6579 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6580 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6580 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6580 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6580 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6580 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6580 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6580 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6580 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6580 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6580 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6581 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6581 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6581 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6581 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6581 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6581 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6581 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6581 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6581 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6581 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6582 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6582 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6582 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6582 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6582 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6582 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6582 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6582 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6582 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6582 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6583 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6583 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6583 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6583 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6583 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6583 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6583 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6583 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6583 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6583 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6584 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6584 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6584 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6584 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6584 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6584 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6584 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6584 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6584 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6584 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6585 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6585 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6585 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6585 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6585 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6585 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6585 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6585 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6585 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6585 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6586 snort3 root 38wW REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3 6250 6586 snort3 root 71w REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6586 snort3 root 73w REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />snort3 6250 6586 snort3 root 75w REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />snort3 6250 6586 snort3 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3 6250 6586 snort3 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3 6250 6586 snort3 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3 6250 6586 snort3 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3 6250 6586 snort3 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3 6250 6586 snort3 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />sftunnel 6419 root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6423 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6423 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6423 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6423 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6423 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6423 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6423 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6423 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6424 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6424 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6424 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6424 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6424 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6424 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6424 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6424 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6425 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6425 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6425 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6425 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6425 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6425 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6425 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6425 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6426 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6426 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6426 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6426 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6426 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6426 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6426 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6426 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6428 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6428 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6428 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6428 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6428 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6428 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6428 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6428 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6434 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6434 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6434 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6434 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6434 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6434 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6434 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6434 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6435 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6435 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6435 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 6435 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6435 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 6435 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 6435 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 6435 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7738 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7738 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7738 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7738 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7738 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7738 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7738 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7738 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7741 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7741 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7741 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7741 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7741 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7741 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7741 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7741 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 20r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7742 sftunnel root 23r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7742 sftunnel root 33r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7742 sftunnel root 50w REG 252,2 23 1318685 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 52r REG 252,2 29044 1322041 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1670219700 (deleted)<BR />sftunnel 6419 7742 sftunnel root 54w REG 252,2 23 1318686 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 55r REG 252,2 28832 1322044 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7742 sftunnel root 59w REG 252,2 23 1318676 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 61w REG 252,2 23 1318687 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 62r REG 252,2 28832 1322061 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1670220000 (deleted)<BR />sftunnel 6419 7742 sftunnel root 64w REG 252,2 23 1318688 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 65w REG 252,2 23 1318677 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 68w REG 252,2 23 1318689 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 69w REG 252,2 23 1318678 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 72w REG 252,2 23 1318690 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.09be8f92-6f9b-11eb-842e-3c9184692240 (deleted)<BR />sftunnel 6419 7742 sftunnel root 73w REG 252,2 23 1318679 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 75w REG 252,2 23 1318681 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />sftunnel 6419 7742 sftunnel root 77w REG 252,2 23 1318680 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.bookmark.caa5f32e-09d4-11ed-99bf-fb87dd8b410e (deleted)<BR />nscd 9552 nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9553 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9554 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9555 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9556 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9557 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />nscd 9552 9558 nscd nobody 7u REG 0,16 217032 98510473 /run/nscd/dboJSlpn (deleted)<BR />snort3_cr 15091 root 11w REG 252,2 98638 1322532 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.1669971402 (deleted)<BR />snort3_cr 15091 root 38w REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3_cr 15091 root 55w REG 252,2 13015338 1322534 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/backup/unified_events-2.log.1669971828 (deleted)<BR />snort3_cr 15091 root 63w REG 252,2 11883295 1322535 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/backup/unified_events-2.log.1669971869 (deleted)<BR />snort3_cr 15091 root 68w REG 252,2 5816893 1322537 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/backup/unified_events-2.log.1669972503 (deleted)<BR />snort3_cr 15091 root 69w REG 252,2 98525 1322536 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.1669972028 (deleted)<BR />snort3_cr 15091 root 70w REG 252,2 98388 1322533 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.1669971681 (deleted)<BR />snort3_cr 15091 root 71w REG 252,2 61268 1322227 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 root 73w REG 252,2 61268 1322233 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 root 75w REG 252,2 61056 1322234 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3_cr 15091 root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3_cr 15091 root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3_cr 15091 root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3_cr 15091 root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3_cr 15091 root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 11w REG 252,2 98638 1322532 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-certs-unified.log.1669971402 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 38w REG 252,2 0 1187648 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/snort.pid.lck (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 55w REG 252,2 13015338 1322534 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/backup/unified_events-2.log.1669971828 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 63w REG 252,2 11883295 1322535 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/backup/unified_events-2.log.1669971869 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 68w REG 252,2 5816893 1322537 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/backup/unified_events-2.log.1669972503 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 69w REG 252,2 98525 1322536 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-certs-unified.log.1669972028 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 70w REG 252,2 98388 1322533 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-certs-unified.log.1669971681 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 71w REG 252,2 61268 1322227 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-2/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 73w REG 252,2 61268 1322233 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-1/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 75w REG 252,2 61056 1322234 /ngfw/var/sf/detection_engines/4a787c76-5ce8-11ea-89dc-853f5966b69c/instance-3/ssl-stats-unified.log.1669959900 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 81r REG 252,2 32 1187742 /ngfw/var/sf/user_enforcement/user_ip_map.1669176809 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 82r REG 252,2 29 1187740 /ngfw/var/sf/user_enforcement/abp.1669176181 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 84r REG 252,2 32 1187738 /ngfw/var/sf/user_enforcement/user_ip_map.1669179622 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 86r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 87r REG 252,2 32 1187743 /ngfw/var/sf/user_enforcement/user_ip_map.1669180292 (deleted)<BR />snort3_cr 15091 15092 snort3_cr root 89r REG 252,2 29 1187550 /ngfw/var/sf/user_enforcement/abp.1669178657</P> Mon, 05 Dec 2022 19:52:12 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732742#M1095651 Herald Sison 2022-12-05T19:52:12Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732801#M1095659 <P>Hi Sir, Finally i already restarted the syslog-ng service and voila! The Error is gone.</P><P>1 more question is there a possibility that this error will pop out again? And i will do the same process again until Cisco finally releases a new version with fixes in it?</P> Mon, 05 Dec 2022 20:03:06 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732801#M1095659 Herald Sison 2022-12-05T20:03:06Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732932#M1095663 <P>I saw it recurring on my one customer's deployment with 7.0.4. It seemed to come back after 3-4 days. I expect the frequency would vary according to how many log messages are being generated.</P> <P>About 10 days ago I upgraded them to 7.2.1 and have not seen it recur since.</P> Tue, 06 Dec 2022 04:04:37 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4732932#M1095663 Marvin Rhoads 2022-12-06T04:04:37Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4733497#M1095682 <P>I was also thinking about upgrading to 7.2.1 but i will monitor this one for now and we'll also wait for Cisco to put 7.2.1 as recommended update from software central.</P> Tue, 06 Dec 2022 17:56:14 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4733497#M1095682 Herald Sison 2022-12-06T17:56:14Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746135#M1096310 <P>Hi All</P> <P>I have a customer who upgraded from 7.0.4 to 7.2.1 due to "High Unmanaged Disk Usage on /ngfw" bugs (yes - it is several bugs since version 6.4) and here the problem is unfortunately still present. Hope Cisco finds a more permanent solution soon, because I have quite a few customers with this bug, and frankly, they're getting a little tired of all these cosmetic bugs and alarms in FMC.&nbsp;</P> Wed, 28 Dec 2022 14:30:39 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746135#M1096310 ppejjorgensen 2022-12-28T14:30:39Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746468#M1096336 <P>Hi,</P> <P>I had some customers with this issue lately, but there is a workarround and it's described here&nbsp;<A href="https://bst.cisco.com/bugsearch/bug/CSCwb34240" target="_self">https://bst.cisco.com/bugsearch/bug/CSCwb34240</A>&nbsp;</P> <P>/Chess</P> <P>&nbsp;</P> Thu, 29 Dec 2022 08:24:57 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746468#M1096336 Chess Norris 2022-12-29T08:24:57Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746583#M1096343 <P>There are at least five "high unmanaged disk space" bugs.</P> <P>I've been collecting a list:</P> <P><A href="https://bst.cisco.com/bugsearch/bug/CSCvt77813" target="_blank" rel="noopener">https://bst.cisco.com/bugsearch/bug/CSCvt77813</A><BR /><A href="https://bst.cisco.com/bugsearch/bug/CSCvo74833" target="_blank" rel="noopener">https://bst.cisco.com/bugsearch/bug/CSCvo74833</A><BR /><A href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb34240" target="_blank" rel="noopener">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb34240</A><BR /><A href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc30487" target="_blank" rel="noopener">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc30487</A><BR /><A href="https://bst.cisco.com/bugsearch/bug/CSCvy26511" target="_blank" rel="noopener">https://bst.cisco.com/bugsearch/bug/CSCvy26511</A></P> Thu, 29 Dec 2022 13:18:41 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4746583#M1096343 Marvin Rhoads 2022-12-29T13:18:41Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4747023#M1096376 <P>I agree with <a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/256705">@Chess Norris</a> that this is most likely caused by <A href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb34240" target="_self">CSCwb34240</A> (at least on 7.0.4). I observed the behavior, right after I manually killed syslog-ng process, and noticed that behavior is indeed tied to log rotation (v7.0.4). As soon as I kill syslog-ng, file disappears, but soon file is recreated with the same name, and continues to grow.</P> <P>Since then, I've implemented this workaround on 20+ devices, and issue never reappeared. I'm speaking from the experience of this issue and v7.0.x only.</P> <P>Kind regards,</P> <P>Milos</P> Fri, 30 Dec 2022 18:44:32 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4747023#M1096376 Milos_Jovanovic 2022-12-30T18:44:32Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4748201#M1096407 <P>This fix seems to solve the problem permanently. I used it with a customer on 28 Dec. 22 and so far I haven't seen any errors related to "High unmanaged disk usage". Thank you Chess Norris.</P> Tue, 03 Jan 2023 09:40:50 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4748201#M1096407 ppejjorgensen 2023-01-03T09:40:50Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4753749#M1096700 <P>Marvin,</P><P>I am having the same issue with my FTD 1140 running 7.0.4. When I run pidof syslog-ng I get three PIDS</P><P>8058 8057 and 6464. Which would be the correct PID to kill?</P> Thu, 12 Jan 2023 15:46:55 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4753749#M1096700 ethutchinson 2023-01-12T15:46:55Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4753769#M1096701 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/293368">@ethutchinson</a> generally speaking the last listed one does the trick. So in your case at hand, "kill 6464".</P> Thu, 12 Jan 2023 15:59:15 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4753769#M1096701 Marvin Rhoads 2023-01-12T15:59:15Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4758879#M1097012 <P>Marvin,</P><P>Thanks for the assist. Killing the syslog-ng pid (third one in list) worked.</P> Fri, 20 Jan 2023 18:05:23 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4758879#M1097012 ethutchinson 2023-01-20T18:05:23Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4763633#M1097255 <P>What about if you are getting this error in FMC, but the firewalls don't show any signs of what I would consider excessive disk use, nor do I find any deleted files when I run the command everyone refers to "lsof | grep deleted".&nbsp; I don't see anything that would merit an alert about disk space or disk usage in the output below.</P> <P>&nbsp;admin@firepower:/$ df<BR />Filesystem 1K-blocks Used Available Use% Mounted on<BR />rootfs 7862912 589412 7273500 8% /<BR />devtmpfs 7966776 649188 7317588 9% /dev<BR />tmpfs 8056044 496 8055548 1% /run<BR />tmpfs 8056044 4548 8051496 1% /var/volatile<BR />/dev/sda1 945144 272712 623588 31% /opt/cisco/config<BR />/dev/sda2 944120 49568 845760 6% /opt/cisco/platform/logs<BR />/dev/sda3 11403544 28764 10788848 1% /var/data/cores<BR />/dev/sda4 83948496 26830936 57117560 32% /opt/cisco/csp<BR />/dev/sdb1 7676252 2199012 5477240 29% /mnt/boot<BR />cgroup_root 8056044 0 8056044 0% /dev/cgroups<BR />tmpfs 8056044 0 8056044 0% /sys/fs/cgroup<BR />tmpfs 8056044 0 8056044 0% /sys/fs/cgroup/pm<BR />none 363520 12 363508 1% /dev/shm/snort<BR />tmpfs 1024 0 1024 0% /var/data/cores/sysdebug/tftpd_logs<BR /><A href="mailto:admin@firepower:/$" target="_blank">admin@firepower:/$&nbsp;</A></P> <P>&nbsp;</P> Thu, 26 Jan 2023 22:15:50 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4763633#M1097255 derek.small 2023-01-26T22:15:50Z Re: High unmanaged disk usage on /ngfw/var on 7.0.4 FTD https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4764556#M1097290 <P>Hi Sir,</P><P>Try checking the log files from these directories below and if you find something that is defined below then you can delete it then run the "lsof | grep deleted" command again.</P><P>&nbsp;</P><UL><LI>/var/sf/detection_engines/&lt;uuid&gt;/instance-*/fileperfstats.log.*</LI><LI>/var/sf/detection_engines/&lt;uuid&gt;/instance-*/ssl-certs-unified.log.*</LI><LI>/var/sf/detection_engines/&lt;uuid&gt;/instance-*/ssl-nse-debug.log.*</LI><LI>/var/sf/detection_engines/&lt;uuid&gt;/instance-*/ssl-stats-unified.log.*</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/backup/</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/instance-1/backup/</LI><LI>/var/sf/detection_engines/&lt;some GUID&gt;/instance-2/backup/</LI></UL><P>after deleting you need to run the restart diskmanager "<STRONG>pmtool restartbyid diskmanager"</STRONG></P><P>then run the "lsof | grep deleted" command</P> Sun, 29 Jan 2023 03:31:32 GMT https://community.cisco.com/t5/network-security/high-unmanaged-disk-usage-on-ngfw-var-on-7-0-4-ftd/m-p/4764556#M1097290 Herald Sison 2023-01-29T03:31:32Z