One CPU core is always showing max utilization on Security Analytics

Products

• Security Analytics

Issue/Introduction

One Security Analytics appliance CPU core is always showing max utilization or a high percentage.

Resolution

There will always be at least one CPU which is completely consumed.  The process which captures packets from the network is always running and never sleeping.  If this "captured" process ever slept, it could possibly miss a packet during the startup.  It is important that we capture every packet.  Therefore the process does not sleep.