> Source: [sk107534](https://support.checkpoint.com/results/sk/sk107534)

# sk107534 - After installing a hotfix , gtar and gzip processes consume high CPU

| Property | Value |
|----------|-------|
| Solution ID | sk107534 |
| Date Created | 2015-09-14 |
| Last Modified | 2016-08-01 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * After installing a hotfix, gtar and gzip processes consume high CPU.  

* The `ps aux` command shows:

  ```
  
  [Expert]# ps aux | grep gtar
  admin   9501  0.0  0.1   2416  1028 ?   S  09:59  0:00 sh -c gtar -tzf /opt/CPsuite-<version>/<name of the fix>_bcp.tgz | grep libanti_malware_statistics_tables.so
  admin   9502  2.5  0.0   2412   792 ?   S  09:59  0:00 gtar -tzf /opt/CPsuite-<version>/<name of the hotfix>bcp.tgz
  ```

  <br />

  <br />

* The `pstree` command shows:

  ```
  
  [Expert]# pstree
  	init-+-acpid
  	     |-3*[agetty]
  	     |-auditd---{auditd}
  	     |-console_agetty---agetty
  	     |-cprid_wd---cprid
  	     |-cpwd-+-DAService_scrip-+-DAService---sh-+-grep
  	     |      |                 |                `-gtar---gzip
  	     |      |                 `-sleep
  	     |      |-avi_del_tmp_fil---sleep
  	     |      |-ci_http_server
  	     |      |-cpd---4*[{cpd}]
  	    |      |-fw---3*[{fw}]
  	    |      `-mpdaemon
  
  ```

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
