[Solved] 19.7.5.5 > 19.7.7, high Suricata and python 2.7 cpu utilization

[LouieLouie]

Post 19.7.5.5 > 19.7.7 upgrade:

Noticed 100% cpu utilization (i5-5250u, 4 core), logged into command line, top listed suricata at 98%.  Disabled suricata in the gui, cpu utilization went down below 10% (normal-ish).  Then, cpu utilization spiked back up 100%, this time it's python 2.7 using over 90% on all 4 cores.

Any suggestions on what to do?

[LouieLouie]

It wasn't suricata, and I don't know why python2.7 kept eating all four cores cpu %.  I decided to remove plugins I wasn't using but had installed.  I removed: tinc vpn, wireguard, nut, and maltrail.  I apologize, I didn't remove them 1 at a time... I just removed them all, rebooted.  Suricata is running fine, I'm not getting any cpu issues at all.  I will reinstall some if not all of those packages in the future.  I'll post it if I can prove something is misbehaving.

[mimugmail]

Maltrail, downloading all trails again.

[LouieLouie]

Understood that maltrail caused it.  That's an extraordinary amount of cpu utilization for an add-on service... despite it's value, the system resource utilization is too high to consider re-installation.