> Source: [sk115634](https://support.checkpoint.com/results/sk/sk115634) # sk115634 - "confd" process consumes the CPU at almost 100% on Check Point appliance with installed LOM card | Property | Value | |----------|-------| | Solution ID | sk115634 | | Date Created | 2017-01-23 | | Last Modified | 2017-04-09 | | Technical Level | Advanced | | Products | Security Gateway, Spark Firewall (Locally Managed), Hardware | | Versions | R82.10, R82, R81.20, R82.00.X, R81.10.X, Not Version-Specific | | OS | Gaia | | Platform | Smart-1, 15000, 3000, 5000, 20, 400 | ## Symptoms - * Output of "`top`" command shows that *confd* process consumes the CPU at almost 100%. *Example* : ``` top - 08:43:46 up 14 days, 10:25, 7 users, load average: 2.05, 1.99, 1.92 Tasks: 951 total, 3 running, 945 sleeping, 0 stopped, 3 zombie Cpu(s): 1.7%us, 3.3%sy, 0.0%ni, 94.9%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st Mem: 16178560k total, 6889916k used, 9288644k free, 325544k buffers Swap: 18892344k total, 0k used, 18892344k free, 2892672k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 31809 admin 25 0 42076 22m 9112 R 98 0.1 6146:18 confd 13161 admin 15 0 1656 724 604 R 35 0.0 2188:41 syslogd ``` * */var/log/messages* file repeatedly shows: ``` HostName xpand[]: error accepting client connection: Too many open files HostName last message repeated XXXXX times ``` * Output of `lsof | grep -E "COMMAND||modules|"` command shows that *confd* process has multiple opened files named */proc/modules*. *Example* : ``` [Expert@HostName:0]# lsof | grep -E "COMMAND|13788|modules" COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME confd 13788 admin 987r REG 0,3 0 4026531862 /proc/modules confd 13788 admin 988r REG 0,3 0 4026531862 /proc/modules confd 13788 admin 989r REG 0,3 0 4026531862 /proc/modules confd 13788 admin 990r REG 0,3 0 4026531862 /proc/modules confd 13788 admin 991r REG 0,3 0 4026531862 /proc/modules confd 13788 admin 992r REG 0,3 0 4026531862 /proc/modules ... ... ``` * Issue occurs only on Check Point appliance running R77.30 Gaia OS with installed LOM card ***and*** [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) from Take_143 to Take_207. ## Cause In rare cases, the *confd* process might trigger high CPU load on Check Point appliance (that has LOM card installed), if more than 512 "`show asset lom-info`" / "`show asset all`" commands were invoked. ## Solution This solution requires authentication. Please log in to view the full solution. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content