Occasional CPU Max Out, Network Down

sbz · 02-09-2010, 07:41 AM

Hi. Recently I've come across a new issue with my untangle box.

Occasionally, (on an at-least-daily basis) my untangle box will max out CPU temporarily. Generally by the box CPU load will run at 0.25-1.25. But when it freaks out, I see the load go up to 30-44.0.

Using TOP, I see that seemingly the culprit process is 'java' (using btw 80-99% CPU).

Any advice to try to fix this from happening? Whats java doing?

Thanks!

mrunkel · 02-09-2010, 08:49 AM

Without additional info, I would make sure you're running Attack Blocker. If you are running attack blocker, check the logs.

Most likely you have some app that is flooding your network with packets.

Java runs the uvm, which controls all the filtering on the box.

Mathiau · 02-09-2010, 08:58 AM

i had this happen to me the other day, i had normal bandwidth usage, but my usage was hitting 24-25 (normal around .04 max about .19 usually), i rebooted and it went away, i wrote it off as a driver issue with my realtek NIC's since it has been mentioned before that software nics can cause cpu usage to spike.

sbz · 02-10-2010, 07:46 AM

Thanks for the input.

I checked the Attack Blocker logs, all seems normal except for some spikes in a few IP's reputation about 1 week ago.

Unfortunately restarting the machine during operating hours isn't an option unless it really goes down. I'll keep monitoring this, restart it the next time I can conveniently do so and update this thread if I come across anything.

Cheers!

Mathiau · 02-10-2010, 08:49 AM

Sounds good.

Lucky for me rebooting my box takes about 1 min at most so if i need to go down, down it goes!

should be even faster on the new system i am building for it.

dwasserman · 02-10-2010, 09:14 AM

By chance was at midnight when those peak usage occurred?

sbz · 04-26-2010, 06:50 AM

I'm going to resurrect this thread for the purpose of seeing how many other people are experiencing this. It's not occurring at midnight, its happening randomly throughout the day. I can confirm that its not always at peak traffic times, quite commonly there won't be even much happening in terms of traffic. Just the past few days it seems to have gotten worse, the java process will spike up and cause an outage of a few minutes.

What can I do to troubleshoot where this is coming from?

Thanks all

SMR · 04-26-2010, 07:42 AM

Provide additional info such as hardware. Most specifically the NICs.

dwasserman · 04-26-2010, 08:23 AM

And what version of UT run. Must be 7.2 because have a serius issues whit clamav updates, fall in a loop that can earn all broadband the previus versions.

sbz · 04-26-2010, 10:31 AM

Server configuration:
Dell T110
X3430 Xeon processor
2GB memory
Broadcom 5709 Dual Port 1Gbe NIC
16x DVD-ROM, SATA, internal
PERC S100 (Embedded SATA Software RAID)
2 - 160GB SATA HDD

And yes, I've upgraded to 7.2

Also note that this installation is being run in a virtual machine using VMWare. However, this machine is not doing anything
else, its a dedicated box.

02-09-2010, 07:41 AM	#1 (permalink)
sbz Untangler Join Date: Dec 2009 URLs submitted: 3 Posts: 45	Occasional CPU Max Out, Network Down Hi. Recently I've come across a new issue with my untangle box. Occasionally, (on an at-least-daily basis) my untangle box will max out CPU temporarily. Generally by the box CPU load will run at 0.25-1.25. But when it freaks out, I see the load go up to 30-44.0. Using TOP, I see that seemingly the culprit process is 'java' (using btw 80-99% CPU). Any advice to try to fix this from happening? Whats java doing? Thanks!

02-09-2010, 08:49 AM	#2 (permalink)
mrunkel Join Date: Jul 2008 Posts: 1,468	Without additional info, I would make sure you're running Attack Blocker. If you are running attack blocker, check the logs. Most likely you have some app that is flooding your network with packets. Java runs the uvm, which controls all the filtering on the box. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one.

04-26-2010, 07:42 AM	#8 (permalink)
SMR Master Untangler Join Date: Feb 2010 Location: Iowa, United States Posts: 192	Provide additional info such as hardware. Most specifically the NICs. __________________ Sam Reeves Disclaimer: I know nothing.. There, that should satisfy any doubt you had! "on the outside, I was an honest man, straight as an arrow. I had to come to prison to be a crook." - Shawshank Redemption (1994 film - Andy Dufresne)

02-09-2010, 08:58 AM	#3 (permalink)
Mathiau Master Untangler Join Date: Feb 2008 Location: Costa Frickn' Rica Posts: 824	i had this happen to me the other day, i had normal bandwidth usage, but my usage was hitting 24-25 (normal around .04 max about .19 usually), i rebooted and it went away, i wrote it off as a driver issue with my realtek NIC's since it has been mentioned before that software nics can cause cpu usage to spike.

02-10-2010, 07:46 AM	#4 (permalink)
sbz Untangler Join Date: Dec 2009 URLs submitted: 3 Posts: 45	Thanks for the input. I checked the Attack Blocker logs, all seems normal except for some spikes in a few IP's reputation about 1 week ago. Unfortunately restarting the machine during operating hours isn't an option unless it really goes down. I'll keep monitoring this, restart it the next time I can conveniently do so and update this thread if I come across anything. Cheers!

02-10-2010, 08:49 AM	#5 (permalink)
Mathiau Master Untangler Join Date: Feb 2008 Location: Costa Frickn' Rica Posts: 824	Sounds good. Lucky for me rebooting my box takes about 1 min at most so if i need to go down, down it goes! should be even faster on the new system i am building for it.

02-10-2010, 09:14 AM	#6 (permalink)
dwasserman Join Date: Jun 2008 Location: Argentina URLs submitted: 29 Posts: 2,165	By chance was at midnight when those peak usage occurred?

04-26-2010, 06:50 AM	#7 (permalink)
sbz Untangler Join Date: Dec 2009 URLs submitted: 3 Posts: 45	I'm going to resurrect this thread for the purpose of seeing how many other people are experiencing this. It's not occurring at midnight, its happening randomly throughout the day. I can confirm that its not always at peak traffic times, quite commonly there won't be even much happening in terms of traffic. Just the past few days it seems to have gotten worse, the java process will spike up and cause an outage of a few minutes. What can I do to troubleshoot where this is coming from? Thanks all

04-26-2010, 08:23 AM	#9 (permalink)
dwasserman Join Date: Jun 2008 Location: Argentina URLs submitted: 29 Posts: 2,165	And what version of UT run. Must be 7.2 because have a serius issues whit clamav updates, fall in a loop that can earn all broadband the previus versions.

04-26-2010, 10:31 AM	#10 (permalink)
sbz Untangler Join Date: Dec 2009 URLs submitted: 3 Posts: 45	Server configuration: Dell T110 X3430 Xeon processor 2GB memory Broadcom 5709 Dual Port 1Gbe NIC 16x DVD-ROM, SATA, internal PERC S100 (Embedded SATA Software RAID) 2 - 160GB SATA HDD And yes, I've upgraded to 7.2 Also note that this installation is being run in a virtual machine using VMWare. However, this machine is not doing anything else, its a dedicated box.