Support Center > Search Results > SecureKnowledge Details
"confd" process consumes the CPU at almost 100% on Check Point appliance with installed LOM card
Symptoms
  • Output of "top" command shows that confd process consumes the CPU at almost 100%.

    Example:
    top - 08:43:46 up 14 days, 10:25,  7 users,  load average: 2.05, 1.99, 1.92
    Tasks: 951 total,   3 running, 945 sleeping,   0 stopped,   3 zombie
    Cpu(s):  1.7%us,  3.3%sy,  0.0%ni, 94.9%id,  0.0%wa,  0.0%hi,  0.1%si,  0.0%st
    Mem:  16178560k total,  6889916k used,  9288644k free,   325544k buffers
    Swap: 18892344k total,        0k used, 18892344k free,  2892672k cached
     
      PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
    31809 admin     25   0 42076  22m 9112 R   98  0.1   6146:18 confd
    13161 admin     15   0  1656  724  604 R   35  0.0   2188:41 syslogd
    
  • /var/log/messages file repeatedly shows:

    HostName xpand[<PID_of_CONFD>]: error accepting client connection: Too many open files
    HostName last message repeated XXXXX times
    
  • Output of lsof | grep -E "COMMAND|<PID_of_CONFD>|modules|" command shows that confd process has multiple opened files named /proc/modules.

    Example:
    [Expert@HostName:0]# lsof | grep -E "COMMAND|13788|modules"
    COMMAND     PID        USER   FD      TYPE             DEVICE     SIZE       NODE NAME
    confd     13788       admin  987r      REG                0,3         0 4026531862 /proc/modules
    confd     13788       admin  988r      REG                0,3         0 4026531862 /proc/modules
    confd     13788       admin  989r      REG                0,3         0 4026531862 /proc/modules
    confd     13788       admin  990r      REG                0,3         0 4026531862 /proc/modules
    confd     13788       admin  991r      REG                0,3         0 4026531862 /proc/modules
    confd     13788       admin  992r      REG                0,3         0 4026531862 /proc/modules
    ... ...
    
  • Issue occurs only on Check Point appliance running R77.30 Gaia OS with installed LOM card and R77.30 Jumbo Hotfix from Take_143 to Take_207.

Cause

In rare cases, the confd process might trigger high CPU load on Check Point appliance (that has LOM card installed), if more than 512 "show asset lom-info" / "show asset all" commands were invoked.


Solution
Note: To view this solution you need to Sign In .