SNMP always report the Enforcer CPU usage is 100%, but console command line show the CPU usage only 1~3%.

book

Article ID: 156672

calendar_today

Updated On:

Products

Network Access Control

Issue/Introduction

Enabled the SNMP on Enforcer to monitor the appliance status, and after months, received "High CPU Usage: 100%" alert persistently.
Then, you login the appliance via command line, and use command "show status" to check the CPU usage, the result is different, CPU usage is normal.

Check the log: debug_trapd.log:
[04/13/2012 10:06:46] [INFO] [SepConn.cpp, 184] Push .1.3.6.1.4.1.393.588.4, Connected to Symantec Endpoint Protection Manager to Share Queue.
[04/13/2012 10:06:50] [INFO] [CpuInfo.cpp, 194] Push CPU usage 100% to shared queue.
[04/13/2012 10:06:51] [INFO] [MemInfo.cpp, 159] Push Memory usage 0% to shared queue.
[04/13/2012 10:06:52] [INFO] [Throughput.cpp, 196] Push Throughput .1.3.6.1.4.1.393.588.3, lo rec/trans:139454/139454 byte eth0 rec/trans:962902821/2712520271 byte eth1 rec/trans:0/0 byte eth2 rec/trans:0/0 byte eth3 rec/trans:0/0 byte to Share Queue.
[04/13/2012 10:07:05] [INFO] [TrapSend.cpp, 409] Get queue list success.
[04/13/2012 10:07:05] [INFO] [TrapSend.cpp, 326] Function DumpToStatus start.
[04/13/2012 10:07:05] [INFO] [TrapSend.cpp, 371] Push CPU usage 100% status list.
[04/13/2012 10:07:05] [INFO] [TrapSend.cpp, 371] Push Memory usage 0% status list.
[04/13/2012 10:07:05] [INFO] [TrapSend.cpp, 371] Push lo rec/trans:139454/139454 byte eth0 rec/trans:962902821/2712520271 byte eth1 rec/trans:0/0 byte eth2 rec/trans:0/0 byte eth3 rec/trans:0/0 byte status list.
...

Cause

If the SNMP message is different with the command "show status", and the log "debug_trapd.log" indicate that the CPU usage arrive 100% for each time(by default, the trapd will check the status per 15 second).
It may caused by the defect on version 12.1 RU1 and pervious version.
The root cause is, the 'idle' of CPU is beyond the limit of 32-bit integer.

Resolution

This is defect, and had been fixed in version 12.1 RU2.

Upgrade to version 12.1 RU2 or later.