Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
739 Views 4 Replies Latest reply: Mar 15, 2013 5:23 AM by ozone RSS
ozone Newcomer 3 posts since
Mar 13, 2013
Currently Being Moderated

Mar 13, 2013 10:27 AM

High CPU load and full disk

Hi All

 

I was reading a lot since the last weeks and did finda lot of useful hints here. First of all thanks for that!

 

Now I run into my first problem for which I do notfind any solution.

 

Since two days we experience the problems with high CPUload and also  full disks.

We have a cluster of two 5500 appliances running onVersion 7.3.0.2.0 (14242). SSL scanning is  (at present) not enabled.

 

On one of the machine’s the CPU load increases fromthe normal load (about 15 to 20%) within two hours up to 100%. The CPU loadstays that high and the disk starts to fill up within the next 8 hour also to100% in the directory /dev/mapper/vg00-opt.

After a reboot the problem is solved for maybe 30 minutes, then it starts again. Sometimes on the same node as before, sometimeson the other one.  When I check the loadof the 24cores with top (-1) then I see all cores are working at nearly 100%.  So it should not be single scan process. Inever did happen on both nodes at the same time.

 

I did already sent a feedback file yesterdayto our support company and they forwarded it to McAffe (I have been told), butunfortunately no feedback until now.

 

Maybe one of guys does have any idea what thiscould be?


Any help is really appreciated!!

 

Cheers!

ozone

 

community.JPG

cpu.JPG

  • cscoup8 Newcomer 34 posts since
    Nov 13, 2012
    Currently Being Moderated
    1. Mar 13, 2013 8:34 PM (in response to ozone)
    Re: High CPU load and full disk

    How many threads do you have configured for AV scanning?  The value might be too high.  Check your advanced settings.

     

    See this topic: https://community.mcafee.com/message/243797

     

    Message was edited by: cscoup8 on 3/13/13 8:34:09 PM CDT
  • cscoup8 Newcomer 34 posts since
    Nov 13, 2012
    Currently Being Moderated
    3. Mar 14, 2013 7:06 PM (in response to ozone)
    Re: High CPU load and full disk

    I'm not sure how much liberty you have for testing but I'd be curious to know if this problem persists if you were to temporarily change the anti-malware ruleset so that it does not scan in embedded objects.  Could it be that a user or process is downloading a type of archive that has multiple layers of compression and expands to an extremely large size?

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points