[8.285][NOTABUG][CLOSED] High cpu usage

[kbr]

No, snort != webproxy. Snort is the thing behind IPS. Some of the smaller boxes start getting in trouble (ie swapping) if you run IPS and a lot of other services. Since this is not the case with your box, we can forget about this idea.

Just take a look at the logs around the time when you experienced the increase of the load and see if there are any error messges logged. You'll easily recognize them when you see them.

[da_merlin]

Is the confd process still using 100% cpu process?
If yes, can you run a strace and post a few lines?

strace -p 7173

[da_merlin]

Problem was a looping confd process, triggered by a signal handling race condition.

Cheers
Ulrich