Archive > 19.7 Legacy Series

Maltrail consuming a lot of CPU after 19.7.3

<< < (3/4) > >>

juliocbc:
Maltrail server stats:

mimugmail:

--- Quote from: juliocbc on February 20, 2020, 06:02:52 pm ---Tests with APU2e4 (quadcore / 4GB RAM) -  OPNsense 19.7.8-amd64

Running with:

-100Mb + 60 Mb WANs
-4 VLANs
-1 Site to Site OpenVPN
-Plugins: Ngnix, Let's encrypt, Proxy (with Cloudfence's Webfilter), haproxy, FTPProxy;
-ARP Table: 51 entries;

Maltrail only with sensor running (We use a dedicated Maltrail Server here) with custom configuration:

--- Code: ---PROCESS_COUNT 1
#USE_MULTIPROCESSING true
DISABLE_CPU_AFFINITY false
--- End code ---

CPU stats (every 3mins) - Load average (1 core): 94%
Memory: 15%

--- End quote ---

Currently maltrail.conf uses fixed $CPU_CORES, shall I make this configurable?

juliocbc:
Hi Michael!

I've edited jinja2 template to make some tests.

jds:
This remedy to be fixed for awhile, but now I am back up to high CPU with maltrail.

8212   uwait   37.50%   python3 /usr/local/share/maltrail/sensor.py (python3.7){python3.7}
   49973   CPU3   36.38%   python3 /usr/local/share/maltrail/sensor.py (python3.7){python3.7}
   61436   CPU2   35.60%   /usr/local/sbin/openvpn --config /var/etc/openvpn/client2.conf
   34952   select   34.77%   python3 /usr/local/share/maltrail/sensor.py (python3.7){python3.7}
   23576   select   33.50%   python3 /usr/local/share/maltrail/sensor.py (python3.7){python3.7}
   74367   select   23.78%   /usr/local/bin/suricata -D --netmap --pidfile /var/run/suricata.pid -c /usr/local/etc/suricata/suricata.yaml{W#01-em3}

System is 4core APU, total memory use is only about 20%.

Forgot to mention that I am running 20.1.8

mimugmail:
Usually this only happens when downloading new feeds after restart ... how long did you wait?

Navigation

[0] Message Index

[#] Next page

[*] Previous page