Hello, been fighting high cpu on a juniper isg2000 firewall running 6.3.0r17b.0.
firewall(M)-> get performance cpu all detail
Average System Utilization: 76% (flow 85 task 85)
Last 60 seconds:
59: 63(67 73)* 58: 65(67 75)* 57: 67(71 77)* 56: 60(63 70)*
55: 62(66 72)* 54: 71(81 81)** 53: 66(72 76)* 52: 70(80 79)*
51: 75(85 85)** 50: 87(97 95)*** 49: 88(98 96)*** 48: 68(78 78)*
47: 68(73 78)* 46: 62(70 72)* 45: 65(71 75)* 44: 69(79 77)*
43: 70(78 80)* 42: 77(87 85)** 41: 73(83 83)** 40: 71(80 81)**
39: 85(95 93)** 38: 78(84 88)** 37: 72(79 82)** 36: 61(65 71)*
35: 73(81 83)** 34: 78(84 88)** 33: 77(87 87)** 32: 77(87 84)**
31: 88(98 96)*** 30: 88(98 96)*** 29: 83(93 92)** 28: 74(84 84)**
Had jtac and basically they said turn off logging on policies. Did that but still the same. Waiting for another call with them.
But, i was wondering if anyone had issues with cpu and what the cause was.
the memory and sessions are all in the green all the time.
things we did:
- get tech
- fprofile commands (all of them)
- turned off syslog
Im thinking of turning off snmp on the mgt interface as well.
any info would be great.
also, I do see a ton of these in the events:
firewall(M)-> get alarm event
Total event entries = 32520
Date Time Module Level Type Description
2016-05-03 21:35:28 system alert 00008 IP spoofing! From 4500:39:3d99:0:100::
to ff02::1, proto 58 (zone MGT, int
mgt). Occurred 1 times.
2016-05-03 21:33:23 system alert 00008 IP spoofing! From 4500:37:2b06:0:100::
to ff02::1, proto 58 (zone MGT, int
mgt). Occurred 1 times.
2016-05-03 21:31:18 system alert 00008 IP spoofing! From 4500:39:18bb:0:100::
to ff02::1, proto 58 (zone MGT, int