Ironport C360 Cpu Utilization is 99 %

[shahamit123]

                   Hi All,

In a Ironport C360 Email Security Appliance , i am getting 99% cpu usage, pl suggest how to resolve it.

Email Security Appliance:	94.0%
Anti-Spam:	2.0%
Anti-Virus:	0.0%
Reporting:	1.0%
Quarantine:	0.0%
Total CPU Utilization:	99.0%

Regards

Amit Shah

[Andreas Mueller]

Hello Amit,

that is a quiet generic question for what may be a complex problem, or just normal behavior. Is that CPU usage showing up all the time, or just temporary? Also check out

GUI: Monitor->System Capacity->System Load

Is the percentage over 60% there as well all the time?

Regards,

Andreas

[shahamit123]

Hi Andreas,

I monitored it since last 1 month and cpu usage vary  from 97%  to 100 %.

And as per ur answer, i checked system load and it above the 94 %.

Snap shot of system load i copied below.

[Andreas Mueller]

Hello Amit,

this is obviously an internal process consuming all the CPU power, as Jamie already pointed out restarting the appliance may fix the problem, however before doing that you could open a support request  have customer support look into that, to make sure not to whipe out any traces. You might also check the following things:

GUI: Monitor->System Capacity->Incoming Mail   Is the traffic or the number of concurrent connections always high? In this case there might be a capacity problem

CLI: status detail       Are there a lot of messages in the quarantine (several 10.000)? Lots of active recipients?  May indicate a problem with the internal database or  reporting.

A  stuck database or workque process would go away after a reboot, a capacity problem, however, won't.

Andreas

[shahamit123]

Hi Andreas,

Still i am not getting the solution, so finally i raise a ticket with cisco tech support.

Once i get the resolution, i will share with you.

Thanx for your reply. herewith i attached snap shot of incoming mails.

Regards

Amit

[jamesbm21]

Dear Andreas

The high CPU can be seen within VMware the Gui is so slow it won't really even load... please sell the below picture

I can SSH into the appliance however not sure to work out which process is using all the CPU

[Udupi Krishna.]

"status detail" command would provide some high level stats on CPU utilisation. Status logs (with proper awk based filter) can be used to fetch load based stats however only TAC can access the backend freebsd shell to gather per process CPU utilisation.

Feel free to contact TAC and have them review it for you.

[itadmin]

Amit,

I have had this same issue before and restarting the appliance took care of the issue.  I am pretty sure there is a way to see which process is eating all of the CPU but I cannot find my notes on that.

Jamie