> Source: [sk110361](https://support.checkpoint.com/results/sk/sk110361) # sk110361 - "snmpd" daemon occasionally consumes CPU at very high level on machine with several hundred interfaces | Property | Value | |----------|-------| | Solution ID | sk110361 | | Date Created | 2016-03-02 | | Last Modified | 2019-03-04 | | Technical Level | Advanced | | Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server | | Versions | R82.10, R82, R81.20, R82.10, R82, R81.20, R82.10, R82.20, R81.20, R82, R82.20 | | OS | Gaia | ## Symptoms - * "*snmpd*" daemon occasionally (every \~5 seconds) consumes CPU at very high level (spikes). *Example output from "top" command*: ``` PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ P COMMAND 3072 admin 17 0 25788 10m 6572 S 90 0.1 17:17.01 1 snmpd ``` * On Cluster, as a result of high CPU load, the CUL mechanism is triggered. *Example from /var/log/messages file* : `FW-1: [cul_load_freeze][CUL - Cluster] Setting CUL FREEZE_ON, high kernel CPU usage (85%) on local Member 1, threshold = 80%` * Output of "strace" utility attached to SNMPD daemon shows during the issue (during spike in CPU load) that SNMPD daemon is querying various interface information on the machine. *Example* : `ioctl(13, SIOCGIFCONF, {31264, {{"lo", {AF_INET, inet_addr("127.0.0.1")}}, {"eth1-05", {AF_INET, inet_addr("172.30.56.43")}}, {"eth1-06", {AF_INET, inet_addr("172.30.62.43")}}, {"eth1-07", {AF_INET, inet_addr("172.30.76.51")}}, {"eth1-08", {AF_INET, inet_addr("172.30.26.14")}}, {"Sync", {AF_INET, inet_addr("172.30.84.17")}}, {"Mgmt", {AF_INET, inet_addr("172.30.93.58")}}, {"bond1.797", {AF_INET, inet_addr("172.30.122.66")}}` ## Cause "snmpd" daemon loads the interface table every \~5 seconds. On a machine with several hundred interfaces (e.g., 900 VLAN interfaces) this operation might consume the CPU at high level. ## Solution This solution requires authentication. Please log in to view the full solution. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content