High CPU Firepower 4120

[ANFA]

I've got a firepower going. The policy has pure access rules.
Now I have a very high CPU load with active traffic.
See pictures

What I do not understand is why SNORT has so much CPU.
I have pure Access Rulles and no inspection rules

When I look at the Connection Events and click on Snort ID Filter I see all the traffic
Why does he show up at Snort Modul?

[B. BELHADJ]

Could you check if there is any active packet capture or debugging?

Best regards.

[ANFA]

There are no active packet capture or debugging