OPNsense Forum
Archive => 15.7 Legacy Series => Topic started by: fgrutz on July 16, 2015, 04:30:22 pm
-
Hi, I´m having an a strange issue, after say 2 days of usage the Firewall starts do report constant CPU usage of 25%, before it was almost constant at 0%~1%, this with more traffic than now.
Occasionally I´ve seen reported usage of 75% with absolutely no traffic.
On both cases a reboot returns the usage to 0% for a few days.
This is on a quad-core i5 2Ghz
Any Ideas?
Thanks in advance.
Fábio Grützmacher
TOP
last pid: 96727; load averages: 0.68, 0.70, 0.65 up 2+16:35:54 10:56:21
49 processes: 2 running, 47 sleeping
CPU: 20.0% user, 0.0% nice, 5.0% system, 0.1% interrupt, 74.9% idle
Mem: 17M Active, 139M Inact, 306M Wired, 346M Buf, 3402M Free
Swap: 8192M Total, 8192M Free
PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND
40575 root 1 22 0 126M 25248K accept 2 0:07 0.49% php-cgi
37349 root 1 20 0 16636K 2228K bpf 0 0:51 0.00% filterlog
60251 root 1 20 0 54840K 7952K kqread 0 0:43 0.00% lighttpd
6167 root 1 20 0 14496K 2160K select 1 0:22 0.00% syslogd
54224 root 1 20 0 12292K 1996K select 3 0:09 0.00% apinger
695 root 1 52 0 16972K 2496K wait 2 0:07 0.00% sh
39670 root 1 52 0 16972K 2484K wait 3 0:07 0.00% sh
75840 root 1 52 0 130M 31352K accept 1 0:05 0.00% php-cgi
48092 root 1 20 0 28132K 18020K select 1 0:04 0.00% ntpd
65991 squid 1 20 0 23924K 4076K select 0 0:04 0.00% pinger
91703 squid 1 20 0 23924K 4116K select 2 0:04 0.00% pinger
18629 root 1 20 0 23280K 4976K select 0 0:03 0.00% miniupnpd
73286 root 1 20 0 14368K 2032K select 1 0:03 0.00% radvd
85303 nobody 1 20 0 19588K 4024K select 0 0:02 0.00% dnsmasq
18735 root 1 20 0 14344K 1808K select 1 0:02 0.00% rtsold
175 root 1 20 0 112M 25284K accept 0 0:01 0.00% python2.7
87031 dhcpd 1 20 0 24684K 13356K select 3 0:01 0.00% dhcpd
52281 root 12 20 0 61072K 5072K uwait 2 0:01 0.00% filterdns
54499 root 1 20 0 28184K 2808K piperd 2 0:00 0.00% rrdtool
21345 root 1 20 0 16500K 2116K nanslp 2 0:00 0.00% cron
69659 root 17 20 0 196M 11068K uwait 1 0:00 0.00% charon
200 root 1 20 0 13160K 4564K select 3 0:00 0.00% devd
65501 root 1 22 0 118M 18192K wait 2 0:00 0.00% php-cgi
70134 root 1 37 0 12240K 1732K nanslp 2 0:00 0.00% minicron
61268 katan 1 20 0 53184K 5936K select 2 0:00 0.00% sshd
79125 root 1 20 0 12240K 2228K kqread 1 0:00 0.00% dhcpleases
60425 root 1 52 0 118M 18060K wait 1 0:00 0.00% php-cgi
96727 root 1 72 0 118M 20612K CPU2 2 0:00 0.00% php
54264 root 1 22 0 53184K 5816K select 2 0:00 0.00% sshd
67160 katan 1 20 0 17312K 3356K pause 0 0:00 0.00% csh
59032 katan 1 20 0 21824K 2988K CPU0 0 0:00 0.00% top
29172 root 2 20 0 14584K 2160K nanslp 0 0:00 0.00% sshlockout_pf
70602 root 1 20 0 12240K 1732K nanslp 0 0:00 0.00% minicron
6690 root 1 20 0 29980K 4800K select 3 0:00 0.00% sshd
49470 root 1 20 0 18616K 1976K select 2 0:00 0.00% inetd
79438 root 1 20 0 14396K 1856K ttyin 2 0:00 0.00% getty
79661 root 1 45 0 14396K 1856K ttyin 1 0:00 0.00% getty
69640 root 1 20 0 25308K 2868K select 1 0:00 0.00% starter
79966 root 1 46 0 14396K 1856K ttyin 1 0:00 0.00% getty
79622 root 1 45 0 14396K 1856K ttyin 3 0:00 0.00% getty
80310 root 1 46 0 14396K 1856K ttyin 3 0:00 0.00% getty
79891 root 1 45 0 14396K 1856K ttyin 0 0:00 0.00% getty
80185 root 1 46 0 14396K 1856K ttyin 2 0:00 0.00% getty
80199 root 1 46 0 14396K 1856K ttyin 0 0:00 0.00% getty
7037 root 1 52 0 8140K 1800K nanslp 0 0:00 0.00% sleep
71112 root 1 20 0 12240K 1732K nanslp 0 0:00 0.00% minicron
69520 root 1 52 0 12240K 1720K wait 2 0:00 0.00% minicron
SYSTEM ACTIVITY from GUI.
last pid: 18171; load averages: 0.83, 0.74, 0.67 up 2+16:37:41 10:58:08
152 processes: 6 running, 126 sleeping, 20 waiting
Mem: 14M Active, 143M Inact, 306M Wired, 347M Buf, 3400M Free
Swap: 8192M Total, 8192M Free
PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
11 root 155 ki31 0K 64K CPU3 3 64.2H 95.56% [idle{idle: cpu3}]
11 root 155 ki31 0K 64K RUN 2 64.2H 87.26% [idle{idle: cpu2}]
11 root 155 ki31 0K 64K CPU0 0 64.1H 78.17% [idle{idle: cpu0}]
11 root 155 ki31 0K 64K RUN 1 64.0H 77.69% [idle{idle: cpu1}]
40575 root 23 0 126M 28624K piperd 2 0:08 1.46% /usr/local/bin/php-cgi
75840 root 47 0 130M 33344K accept 1 0:07 1.37% /usr/local/bin/php-cgi
12 root -92 - 0K 320K WAIT 3 10:31 0.00% [intr{irq267: re0}]
12 root -60 - 0K 320K WAIT 0 3:18 0.00% [intr{swi4: clock}]
15 root -16 - 0K 16K - 0 1:42 0.00% [rand_harvestq]
37349 root 20 0 16636K 2228K bpf 0 0:51 0.00% /usr/local/sbin/filterlog -i pflog0 -p /
60251 root 20 0 54840K 8384K kqread 0 0:43 0.00% /usr/local/sbin/lighttpd -f /var/etc/lig
5 root -16 - 0K 16K pftm 2 0:41 0.00% [pf purge]
0 root -16 0 0K 160K swapin 3 0:29 0.00% [kernel{swapper}]
6167 root 20 0 14496K 2160K select 3 0:22 0.00% /usr/local/sbin/syslogd -s -c -c -l /var
22 root 16 - 0K 16K syncer 0 0:16 0.00% [syncer]
54224 root 20 0 12292K 1996K select 3 0:09 0.00% /usr/local/sbin/apinger -c /var/etc/apin
695 root 52 0 16972K 2496K wait 2 0:07 0.00% /bin/sh /var/db/rrd/updaterrd.sh
39670 root 52 0 16972K 2484K wait 3 0:07 0.00% /bin/sh /usr/local/etc/rc.initial
-
The system load averages look rather busy, but the momentary top snapshot wasn't as busy. It would be good to see which processes are keeping the CPU busy, but maybe there is also a lot of kernel and/or encryption going on. Is there a VPN and/or heavy network traffic?
-
There´s no VPN in use and the Traffic is about 2mbits both ways right now.
Yesterday it was 40mbits DOWN and 1mbit UP with about 1% usage and load averages at 0.
Checking now it´s still reporting 25%.
How should I track which process is the culprit?
new TOP
last pid: 21049; load averages: 0.72, 0.75, 0.69 up 2+22:36:57 16:57:24
49 processes: 2 running, 47 sleeping
CPU: 22.1% user, 0.0% nice, 3.0% system, 0.2% interrupt, 74.6% idle
Mem: 8724K Active, 152M Inact, 306M Wired, 362M Buf, 3396M Free
Swap: 8192M Total, 8192M Free
PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND
40575 root 1 52 0 130M 33548K accept 2 0:25 0.29% php-cgi
37349 root 1 20 0 16636K 2228K bpf 2 1:02 0.00% filterlog
39670 root 1 52 0 16972K 2484K wait 2 0:54 0.00% sh
60251 root 1 20 0 54840K 8460K kqread 0 0:44 0.00% lighttpd
6167 root 1 20 0 14496K 2160K select 0 0:27 0.00% syslogd
54224 root 1 20 0 12292K 1996K select 0 0:11 0.00% apinger
695 root 1 52 0 16972K 2496K wait 2 0:08 0.00% sh
75840 root 1 20 0 130M 33344K accept 1 0:07 0.00% php-cgi
65991 squid 1 20 0 23924K 4172K select 1 0:05 0.00% pinger
48092 root 1 20 0 28132K 18020K select 2 0:05 0.00% ntpd
91703 squid 1 20 0 23924K 4212K select 0 0:04 0.00% pinger
85303 nobody 1 20 0 19588K 4036K select 3 0:03 0.00% dnsmasq
18629 root 1 20 0 23280K 4976K select 3 0:03 0.00% miniupnpd
73286 root 1 20 0 14368K 2032K select 2 0:03 0.00% radvd
18735 root 1 20 0 14344K 1808K select 0 0:02 0.00% rtsold
87031 dhcpd 1 20 0 24684K 13356K select 2 0:02 0.00% dhcpd
175 root 1 20 0 112M 25284K accept 1 0:01 0.00% python2.7
52281 root 12 20 0 61072K 5208K uwait 3 0:01 0.00% filterdns
54499 root 1 20 0 28184K 2808K piperd 0 0:00 0.00% rrdtool
21345 root 1 22 0 16500K 2116K nanslp 0 0:00 0.00% cron
69659 root 17 20 0 196M 11068K uwait 1 0:00 0.00% charon
200 root 1 20 0 13160K 4564K select 0 0:00 0.00% devd
70134 root 1 21 0 12240K 1732K nanslp 0 0:00 0.00% minicron
65501 root 1 22 0 118M 18192K wait 2 0:00 0.00% php-cgi
35878 katan 1 20 0 21824K 2988K CPU1 1 0:00 0.00% top
79125 root 1 20 0 12240K 2296K kqread 1 0:00 0.00% dhcpleases
60425 root 1 52 0 118M 18060K wait 1 0:00 0.00% php-cgi
11944 root 1 20 0 53184K 5816K select 3 0:00 0.00% sshd
28137 katan 1 20 0 17312K 3532K pause 3 0:00 0.00% csh
29172 root 2 20 0 14584K 2160K nanslp 1 0:00 0.00% sshlockout_pf
26246 katan 1 20 0 53184K 5848K select 3 0:00 0.00% sshd
70602 root 1 20 0 12240K 1732K nanslp 3 0:00 0.00% minicron
6690 root 1 20 0 29980K 4800K select 0 0:00 0.00% sshd
49470 root 1 20 0 18616K 1976K select 3 0:00 0.00% inetd
79438 root 1 20 0 14396K 1856K ttyin 2 0:00 0.00% getty
79661 root 1 45 0 14396K 1856K ttyin 1 0:00 0.00% getty
69640 root 1 20 0 25308K 2868K select 1 0:00 0.00% starter
79966 root 1 46 0 14396K 1856K ttyin 1 0:00 0.00% getty
79622 root 1 45 0 14396K 1856K ttyin 3 0:00 0.00% getty
80310 root 1 46 0 14396K 1856K ttyin 3 0:00 0.00% getty
79891 root 1 45 0 14396K 1856K ttyin 0 0:00 0.00% getty
80185 root 1 46 0 14396K 1856K ttyin 2 0:00 0.00% getty
80199 root 1 46 0 14396K 1856K ttyin 0 0:00 0.00% getty
96677 root 1 52 0 8140K 1800K nanslp 1 0:00 0.00% sleep
71112 root 1 20 0 12240K 1732K nanslp 0 0:00 0.00% minicron
69520 root 1 52 0 12240K 1720K wait 2 0:00 0.00% minicron
70136 root 1 52 0 12240K 1720K wait 1 0:00 0.00% minicron
System Activity from GUI
last pid: 3966; load averages: 0.73, 0.74, 0.69 up 2+22:37:35 16:58:02
154 processes: 6 running, 128 sleeping, 20 waiting
Mem: 20M Active, 154M Inact, 306M Wired, 362M Buf, 3383M Free
Swap: 8192M Total, 8192M Free
PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
11 root 155 ki31 0K 64K RUN 3 69.2H 89.79% [idle{idle: cpu3}]
11 root 155 ki31 0K 64K CPU0 0 68.9H 87.50% [idle{idle: cpu0}]
11 root 155 ki31 0K 64K CPU2 2 69.3H 81.30% [idle{idle: cpu2}]
11 root 155 ki31 0K 64K RUN 1 68.7H 81.15% [idle{idle: cpu1}]
40575 root 43 0 134M 35444K piperd 0 0:26 1.27% /usr/local/bin/php-cgi
12 root -92 - 0K 320K WAIT 1 13:41 0.00% [intr{irq267: re0}]
12 root -60 - 0K 320K WAIT 0 3:31 0.00% [intr{swi4: clock}]
15 root -16 - 0K 16K - 1 2:08 0.00% [rand_harvestq]
37349 root 20 0 16636K 2228K bpf 2 1:02 0.00% /usr/local/sbin/filterlog -i pflog0 -p /
39670 root 52 0 16972K 2484K wait 1 0:54 0.00% /bin/sh /usr/local/etc/rc.initial
60251 root 20 0 54840K 8460K kqread 0 0:44 0.00% /usr/local/sbin/lighttpd -f /var/etc/lig
5 root -16 - 0K 16K pftm 2 0:44 0.00% [pf purge]
0 root -16 0 0K 160K swapin 0 0:29 0.00% [kernel{swapper}]
22 root 16 - 0K 16K syncer 0 0:27 0.00% [syncer]
6167 root 20 0 14496K 2160K select 1 0:27 0.00% /usr/local/sbin/syslogd -s -c -c -l /var
12 root -88 - 0K 320K WAIT 2 0:17 0.00% [intr{irq268: ahci0}]
54224 root 20 0 12292K 1996K select 1 0:11 0.00% /usr/local/sbin/apinger -c /var/etc/apin
695 root 52 0 16972K 2496K wait 2 0:08 0.00% /bin/sh /var/db/rrd/updaterrd.sh
katan@Firewall:~ % vmstat -i
interrupt total rate
irq16: ehci0 256291 1
irq23: ehci1 384610 1
cpu0:timer 288446823 1126
irq264: hdac0 7 0
irq265: xhci0 59 0
irq266: hdac1 88 0
irq267: re0 165798400 647
irq268: ahci0 1430523 5
cpu2:timer 7331166 28
cpu3:timer 7393937 28
cpu1:timer 25312384 98
Total 496354288 1938
-
Do a "top -SH" to find out which process is the culprit.
-
Here it is.
Am I right to believe that php-cgi is the culprit?
root@Firewall:~ # top -SH
last pid: 44601; load averages: 0.87, 0.78, 0.70 up 3+02:24:25 20:44:52
153 processes: 6 running, 127 sleeping, 20 waiting
CPU: 22.7% user, 0.0% nice, 5.1% system, 0.4% interrupt, 71.9% idle
Mem: 14M Active, 147M Inact, 306M Wired, 380M Buf, 3396M Free
Swap: 8192M Total, 8192M Free
PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
11 root 155 ki31 0K 64K RUN 2 72.5H 94.48% idle{idle: cpu2}
11 root 155 ki31 0K 64K RUN 0 72.0H 86.28% idle{idle: cpu0}
11 root 155 ki31 0K 64K CPU3 3 72.4H 85.99% idle{idle: cpu3}
11 root 155 ki31 0K 64K CPU1 1 71.6H 76.76% idle{idle: cpu1}
61255 root 52 0 126M 29144K accept 2 0:15 3.66% php-cgi
12 root -92 - 0K 320K WAIT 1 14:19 0.29% intr{irq267: re0}
12 root -60 - 0K 320K WAIT 0 3:39 0.00% intr{swi4: clock}
15 root -16 - 0K 16K - 3 2:13 0.00% rand_harvestq
39670 root 52 0 16972K 2484K wait 3 1:24 0.00% sh
37349 root 20 0 16636K 2228K bpf 0 1:06 0.00% filterlog
5 root -16 - 0K 16K pftm 0 0:45 0.00% pf purge
60251 root 20 0 54840K 8464K kqread 2 0:45 0.00% lighttpd
22 root 16 - 0K 16K syncer 3 0:35 0.00% syncer
0 root -16 0 0K 160K swapin 1 0:29 0.00% kernel{swapper}
6167 root 20 0 14496K 2160K select 3 0:29 0.00% syslogd
12 root -88 - 0K 320K WAIT 2 0:25 0.00% intr{irq268: ahci0}
54224 root 20 0 12292K 1996K select 2 0:12 0.00% apinger
75840 root 20 0 130M 33344K accept 1 0:09 0.00% php-cgi
695 root 52 0 16972K 2496K wait 3 0:09 0.00% sh
21 root 20 - 0K 32K sdflus 3 0:05 0.00% bufdaemon{/ worker}
65991 squid 20 0 23924K 4232K select 3 0:05 0.00% pinger
48092 root 20 0 28132K 18020K select 1 0:05 0.00% ntpd{ntpd}
91703 squid 20 0 23924K 4272K select 2 0:05 0.00% pinger
85303 nobody 20 0 19588K 4036K select 0 0:04 0.00% dnsmasq
18629 root 20 0 23280K 4976K select 2 0:04 0.00% miniupnpd
73286 root 20 0 14368K 2032K select 3 0:03 0.00% radvd
8 root -16 - 0K 16K psleep 1 0:02 0.00% pagedaemon
17 root -16 - 0K 16K tzpoll 0 0:02 0.00% acpi_thermal
18735 root 20 0 14344K 1808K select 0 0:02 0.00% rtsold
21 root -16 - 0K 32K psleep 0 0:02 0.00% bufdaemon{bufdaemon}
23 root -16 - 0K 16K vlruwt 0 0:02 0.00% vnlru
18 root -16 - 0K 16K coolin 3 0:02 0.00% acpi_cooling1
-
New TOP -SH from this morning.
now the reported usage is 50% with even less traffic than yesterday.
root@Firewall:~ # top -SH
last pid: 33428; load averages: 1.30, 1.31, 1.27 up 3+14:56:45 09:17:12
155 processes: 7 running, 128 sleeping, 20 waiting
CPU: 40.8% user, 0.0% nice, 11.8% system, 0.0% interrupt, 47.4% idle
Mem: 27M Active, 146M Inact, 309M Wired, 397M Buf, 3381M Free
Swap: 8192M Total, 8192M Free
PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
11 root 155 ki31 0K 64K CPU2 2 80.9H 85.25% idle{idle: cpu2}
11 root 155 ki31 0K 64K RUN 1 80.2H 84.96% idle{idle: cpu1}
11 root 155 ki31 0K 64K RUN 0 80.4H 80.86% idle{idle: cpu0}
11 root 155 ki31 0K 64K RUN 3 80.8H 79.30% idle{idle: cpu3}
12 root -92 - 0K 320K WAIT 2 17:36 0.10% intr{irq267: re0}
77006 root 52 0 134M 35636K accept 0 0:24 0.10% php-cgi
12 root -60 - 0K 320K WAIT 2 4:06 0.00% intr{swi4: clock}
39670 root 52 0 16972K 2484K wait 2 3:06 0.00% sh
15 root -16 - 0K 16K - 2 2:40 0.00% rand_harvestq
67418 root 52 0 16972K 2484K wait 2 1:33 0.00% sh
37349 root 20 0 16636K 2228K bpf 0 1:21 0.00% filterlog
22 root 16 - 0K 16K syncer 3 1:05 0.00% syncer
12 root -88 - 0K 320K WAIT 0 0:55 0.00% intr{irq268: ahci0}
5 root -16 - 0K 16K pftm 3 0:52 0.00% pf purge
60251 root 20 0 54840K 8464K kqread 2 0:47 0.00% lighttpd
6167 root 20 0 14496K 2160K select 1 0:35 0.00% syslogd
0 root -16 0 0K 160K swapin 0 0:30 0.00% kernel{swapper}
75840 root 24 0 130M 33356K accept 0 0:19 0.00% php-cgi
54224 root 20 0 12292K 1996K select 3 0:14 0.00% apinger
695 root 52 0 16972K 2496K wait 2 0:10 0.00% sh
21 root 20 - 0K 32K sdflus 0 0:08 0.00% bufdaemon{/ worker}
65991 squid 20 0 23924K 4436K select 0 0:07 0.00% pinger
91703 squid 20 0 23924K 4476K select 3 0:06 0.00% pinger
48092 root 20 0 28132K 18020K select 1 0:06 0.00% ntpd{ntpd}
73286 root 20 0 14368K 2032K select 3 0:04 0.00% radvd
18629 root 20 0 23280K 4976K select 0 0:04 0.00% miniupnpd
8 root -16 - 0K 16K psleep 2 0:03 0.00% pagedaemon
18735 root 20 0 14344K 1808K select 2 0:02 0.00% rtsold
17 root -16 - 0K 16K tzpoll 3 0:02 0.00% acpi_thermal
16 root -68 - 0K 192K - 0 0:02 0.00% usb{usbus2}
21 root -16 - 0K 32K psleep 3 0:02 0.00% bufdaemon{bufdaemon}
23 root -16 - 0K 16K vlruwt 0 0:02 0.00% vnlru
18 root -16 - 0K 16K coolin 0 0:02 0.00% acpi_cooling1
16 root -68 - 0K 192K - 1 0:02 0.00% usb{usbus2}
16 root -68 - 0K 192K - 3 0:02 0.00% usb{usbus1}
12 root -72 - 0K 320K WAIT 3 0:02 0.00% intr{swi1: pfsync}
16 root -68 - 0K 192K - 1 0:02 0.00% usb{usbus1}
12 root -72 - 0K 320K WAIT 1 0:02 0.00% intr{swi1: netisr 0}
12 root -88 - 0K 320K WAIT 1 0:01 0.00% intr{irq23: ehci1}
16 root -68 - 0K 192K - 2 0:01 0.00% usb{usbus0}
12 root -88 - 0K 320K WAIT 0 0:01 0.00% intr{irq16: ehci0}
20 root -16 ki-1 0K 16K pollid 0 0:01 0.00% idlepoll
54499 root 20 0 28184K 2808K piperd 2 0:01 0.00% rrdtool
21345 root 20 0 16500K 2116K nanslp 3 0:00 0.00% cron
175 root 20 0 112M 25284K accept 1 0:00 0.00% python2.7{python2.7}
52281 root 20 0 61072K 5252K uwait 3 0:00 0.00% filterdns{dvr.home}
will reboot now and post another TOP after a few hours.
-
Hello,
There is one thing that you have to keep in mind and most users overlook that fact of active v/s passive ethernet chips/cards. If you have realtek or other passive card then your CPU will get even busier with the traffic forwarding. There is also one thing to note here and that is realtime process usage. When you access the GUI then of coruse php-cgi will show higher load. The best bet would be to check your RRD graph average over time.
I didn't see process hungry Suricata or any other service so i assume that you only use the IP/DNS Masquerading with firewall component.
-
Hello
Yes I´m using a realtek onboard NIC and using only Firewall, DHCP and DNS Forwarder.
I´m aware that the load will fluctuate according to traffic, but it´s almost constant, I’ve checked the RRD graphs, it was almost constant for hours.
As I have said before, once I had a load of 75% constant with no traffic at all.
Since the reboot yesterday, the firewall stopped working, WAN cannot connect to the Gateway, no matter how many times I reboot same result and there was no change in configuration. The LAN works normally.
The log is full of messages like this
“kernel: arpresolve: can't allocate llinfo for 192.168.25.1 on re0_vlan400”
One detail, it´s a system with a single NIC, so I´m using VLANs for WAN and LAN.
I´m really thinking about reinstalling the system.
-
I hate to dig up an old topic, but I must know, did you solve this issue?
I have a E8400 that is running at 51%- 54% constantly!
I am not using the RealTek NIC like you are, I am using Intel Pro 1 gig cards, but I too see this issue. I was hoping that you resolved it and that you could shed some light on the why it was occurring?
-
Looking at that old thread it looks like the WAN is being flooded with ARP traffic (high interrupts but no IP traffic to be found). It sounds stupid, but in that case you can verify by unplugging WAN and see the CPU load go back down...
-
Thanks for the idea franco. Unfortunately I had to rebuild my OS last night, but fortunately, the issue has showed yet. I will keep an eye on the usage and let you know how this test works if I experience the issues again.