OPNsense Forum

Archive => 19.7 Legacy Series => Topic started by: LouieLouie on November 23, 2019, 12:31:45 am

Title: [Solved] 19.7.5.5 > 19.7.7, high Suricata and python 2.7 cpu utilization
Post by: LouieLouie on November 23, 2019, 12:31:45 am

Post 19.7.5.5 > 19.7.7 upgrade:

Noticed 100% cpu utilization (i5-5250u, 4 core), logged into command line, top listed suricata at 98%.  Disabled suricata in the gui, cpu utilization went down below 10% (normal-ish).  Then, cpu utilization spiked back up 100%, this time it's python 2.7 using over 90% on all 4 cores.

Any suggestions on what to do?

Title: Re: [Solved] 19.7.5.5 > 19.7.7, high Suricata and python 2.7 cpu utilization
Post by: LouieLouie on November 23, 2019, 09:56:26 pm

It wasn't suricata, and I don't know why python2.7 kept eating all four cores cpu %.  I decided to remove plugins I wasn't using but had installed.  I removed: tinc vpn, wireguard, nut, and maltrail.  I apologize, I didn't remove them 1 at a time... I just removed them all, rebooted.  Suricata is running fine, I'm not getting any cpu issues at all.  I will reinstall some if not all of those packages in the future.  I'll post it if I can prove something is misbehaving.

Title: Re: [Solved] 19.7.5.5 > 19.7.7, high Suricata and python 2.7 cpu utilization
Post by: mimugmail on November 23, 2019, 10:26:24 pm

Maltrail, downloading all trails again.

Title: Re: [Solved] 19.7.5.5 > 19.7.7, high Suricata and python 2.7 cpu utilization
Post by: LouieLouie on November 24, 2019, 12:14:17 am

Understood that maltrail caused it.  That's an extraordinary amount of cpu utilization for an add-on service... despite it's value, the system resource utilization is too high to consider re-installation.