FTD error on FMC "Resource utilization is high"

-

 

First check the FTD Memory


> show memory 

Free memory:        8373597176 bytes (81%)

Used memory:        1992966480 bytes (19%)

-------------     ------------------

Total memory:      10366563656 bytes (100%)


Login as expert and check TOP. just to see what utilizing the memory


> expert 

FW01:~$ sudo su


We trust you have received the usual lecture from the local System

Administrator. It usually boils down to these three things:


    #1) Respect the privacy of others.

    #2) Think before you type.

    #3) With great power comes great responsibility.


Password: 

> expert 

FW01:~$ sudo su


We trust you have received the usual lecture from the local System

Administrator. It usually boils down to these three things:


    #1) Respect the privacy of others.

    #2) Think before you type.

    #3) With great power comes great responsibility.


Password: 

FW01:/ngfw/Volume/home/g.mama# top

top - 13:20:04 up 338 days,  3:20,  1 user,  load average: 2.67, 2.40, 2.36

Tasks: 182 total,   1 running, 180 sleeping,   0 stopped,   1 zombie

%Cpu(s): 23.3 us,  3.4 sy,  0.0 ni, 73.1 id,  0.2 wa,  0.0 hi,  0.0 si,  0.0 st

KiB Mem : 16425592 total,  5356832 free, 10707284 used,   361476 buff/cache

KiB Swap:  5635592 total,  4666968 free,   968624 used.  5422316 avail Mem 


  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND                                              

 5472 root       0 -20 2793456 629356 155572 S 200.7  3.8 975182:26 lina                                                 

 5317 root      25   5  466860   4964   4220 S  10.0  0.0  46608:21 loggerd                                              

12658 root       1 -19 4107944 1.256g  71312 S   2.0  8.0 137:22.74 snort                                                

12657 root       1 -19 4108140 1.182g  78980 S   1.7  7.5 151:23.87 snort                                                

12660 root       1 -19 4107948 1.284g  70964 S   1.7  8.2 135:13.20 snort                                                

12661 root       1 -19 4108004 1.206g  71088 S   1.7  7.7 135:29.58 snort                                                

 7892 root      20   0  511200   6924   5784 S   1.3  0.0 739:05.22 sftunnel                                             

12659 root       1 -19 4108204 1.214g  71400 S   1.3  7.7 127:36.37 snort                                                

   68 root      39  19       0      0      0 S   1.0  0.0  12137:58 kipmi0                                               

 5671 root      20   0 2987900  63960   2988 S   0.7  0.4   3565:28 SFDataCorrelato                                      

 4613 root      20   0  397896  14356   5492 S   0.3  0.1 368:39.81 fail2ban-server                                      

 5309 root      20   0    5460   3696   1620 S   0.3  0.0 127:57.83 pm                                                   

 5343 root      20   0 1591144   3924   3924 S   0.3  0.0   1939:49 adi                                                  

 5663 root      20   0   51816   6356   6204 S   0.3  0.0  20:50.41 fpcollect                                            

 6137 root      20   0 4995724 160944   9260 S   0.3  1.0 730:42.17 java                                                 

10902 root      10 -10   15644   2344   1848 R   0.3  0.0   0:00.03 top                                                  

    1 root      20   0    4196   1564   1464 S   0.0  0.0   1:27.52 init                                                 

    2 root      20   0       0      0      0 S   0.0  0.0   0:00.24 kthreadd                                             

    3 root      20   0       0      0      0 S   0.0  0.0   0:06.44 ksoftirqd/0                                          

    5 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 kworker/0:0H                                         

    7 root      20   0       0      0      0 S   0.0  0.0 118:55.88 rcu_sched                                            

    8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 rcu_bh                                               

    9 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 migration/0                                          

   10 root      rt   0       0      0      0 S   0.0  0.0   0:02.26 migration/1                                          

   11 root      20   0       0      0      0 S   0.0  0.0  10:49.85 ksoftirqd/1                                          

   13 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 kworker/1:0H                                         

   14 root      rt   0       0      0      0 S   0.0  0.0   0:02.77 migration/2                                          

   15 root      20   0       0      0      0 S   0.0  0.0   2:00.90 ksoftirqd/2                                          

 

FW01:/ngfw/Volume/home/g.mama# df -HT

Filesystem     Type      Size  Used Avail Use% Mounted on

rootfs         rootfs    8.4G  6.6M  8.4G   1% /

devtmpfs       devtmpfs  8.4G   49M  8.3G   1% /dev

tmpfs          tmpfs     8.5G  512k  8.5G   1% /run

/dev/sdc1      vfat      8.3G  143M  8.1G   2% /mnt/disk0

/dev/md0p2     ext4      4.1G  1.1G  2.9G  27% /bin

/dev/md0p4     ext4      114G  8.9G   99G   9% /home

tmpfs          tmpfs     8.5G     0  8.5G   0% /dev/cgroups


FW01:/ngfw/Volume/home/g.mama# df -TH

Filesystem     Type      Size  Used Avail Use% Mounted on

rootfs         rootfs    8.4G  6.6M  8.4G   1% /

devtmpfs       devtmpfs  8.4G   49M  8.3G   1% /dev

tmpfs          tmpfs     8.5G  512k  8.5G   1% /run

/dev/sdc1      vfat      8.3G  143M  8.1G   2% /mnt/disk0

/dev/md0p2     ext4      4.1G  1.1G  2.9G  27% /bin

/dev/md0p4     ext4      114G  8.9G   99G   9% /home

tmpfs          tmpfs     8.5G     0  8.5G   0% /dev/cgroups


From the command everything seems to be ok.

Case assigned under bug id: 

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx52942





Comments

Post a Comment

Popular posts from this blog

Converting lightweigh to standalone AP and vice versa

-
Connect with console cable to the cisco AP Default credentials Username : cisco Password: Cisco You can find the AP image type by running the command show version When the AP image ends with k9w8 means the AP is lightweight When the AP image ends with k9w7 means the AP is Standalone AP7cad.74ff.975e> sho version Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JK2, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2020 by Cisco Systems, Inc. Compiled Wed 01-Apr-20 04:25 by prod_rel_team ROM: Bootstrap program is C3700 boot loader BOOTLDR: C3700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB, RELEASE SOFTWARE (fc1) AP7cad.74ff.975e uptime is 5 minutes System returned to ROM by power-on System image file is "flash:/ap3g2- k9w8 -mx.153-3.JK2/ap3g2-k9w8-xx.153-3.JK2" Last reload reason: Reason Not Known To convert the AP from lightweight to standalone please follow the below pro...
Read more

Upgrade WLC / Supplementary image

-
  Today I had to upgrade an AIROS cisco 2504 WLC. After checking if the APs are supported by the new recommended version I noticed that I had to install the supplementary image also. The reason was that 1602i APs wasn’t supported by the main image in 8.5.171.0 version. Due to image size cisco created separate file for some AP images called Supplementary AP Bundle image. Procedure:   Step 1:   Check the current WLC image (Cisco Controller) >show boot Primary Boot Image............................... 8.3.150.0 (default) (active) Backup Boot Image................................ 8.0.152.0 Step 2: Upload the new image ( AIR-CT2500-K9-8-5-171-0.aes ) I did the below procedure via HTTPS. Verify (Cisco Controller) >show boot Primary Boot Image............................... 8.5.171.0 (default) Backup Boot Image................................ 8.3.150.0 (active) Step 3: Check Supported APs of the new version (Cisco Controller) >show ap bundle primary Pr...
Read more

ISE Direct Upgrade URT

-
Run Upgrade Readiness Tool (URT) to validate config DB upgrade from 2.7,3.0,3.1 to 3.2. This is a signed bundle for image integrity (ise-urtbundle-3.2.0.542a-1.0.0.SPA.x86_64.tar.gz) In this case i am running ise 3.1 patch 7 and will upgrade to 3.2 As we are running an HA the URT need to run on secondary admin node. Got the below error once i tried to run it on Primary Checking ISE persona ======================================================   - Failed (URT can only be run on Secondary Admin Node or Standalone % Application install or upgrade cancelled. ise03/admin# ====================================================== *Note When you need to run it on secondary note, you have to generate on secondary the key (crypto host_key add host 10.10.10.10) and then you can run the URT. Below is URT logging ise04/adMIN# application install ise-urtbundle-3.2.0.542a-1.0.0.SPA.x86_64.tar.gz  ""SFTP-SRV01"" Save the current ADE-OS running configuration? (yes/no) [yes] ? yes Gen...
Read more