The secondary CPU should remain mostly idle until the primary CPU is saturated. The behaviour you describe is common on systems experiencing less than ~70% load.
Preliminary analysis based on the extremely limitted data available, I would say that this is most likely caused by a high level of fragmented UDP traffic. The packets in these logs ( as well as from earlier messages ) are only trigger packets. In ...
Since alarm filtering is performed per alarm, not per packet, the run time overhead should be negligible. Factors affecting performance impact are the rate of alarms (with this filter) and the complexity of the filter.When designing filters consider...
The filters accept IP Range Sets (comma-separated lists of IP Ranges).An IP Range may consist of any of the following:Sample Description 10.10.1.1 -> A unique IP Address 10.20. -> Partial dotted quad (abbreviation for network 10...