Huge Spike in CPU? - fqdnd service DEAD?

Hi ccanv,

Thank you for reaching out to the Community! 

Could you please provide the output of the following commands from the Advanced Shell? 

• ls -al /var/cores
• df -kh
• top
• service -S | grep -i "dead"

The output of the following command from the console. 

• system firewall-acceleration show

Sophos XG Firewall: How to SSH to the firewall using PuTTY utility.

• From the main menu, type 4 to access the Device console or type 5, then 3 to access the Advanced shell.

Thanks,

Here you go;

• ls -al /var/cores

• df -kh

• top

• service -S | grep -i "dead" [I already restarted dead services but that does not explain why they go dead in the first place]

• system firewall-acceleration show after running CLI returns .. - [/bin/sh: system: not found]

Here you go;

• ls -al /var/cores

• df -kh

• top

• service -S | grep -i "dead" [I already restarted dead services but that does not explain why they go dead in the first place]

• system firewall-acceleration show after running CLI returns .. - [/bin/sh: system: not found]

Hello ccanv,

Thank you for the screenshots.

It seems your appliance is failing for the number of Coredumps it has, so you need to open a case with Support to get this investigated. (https://support.sophos.com/support/s/?language=en_US) 

When opening the case, provide the csc.log, applog.log, syslog.log msync.log and networkd.log as well as the output of the /var/cores commands, and share with us the Case ID.

The last command needs to be run on the console, not in the advanced shell, you can mode from the advanced shell to the console by typing 

# cish

console> system firewall-acceleration show

Regards,

I submitted a support request, any idea why the system does this?

Hello Ccanv,

I am not certain it varies so an RCA is need it, but usually, the cases I have seen and remember were due to corrupted databases due to failing HDD.

Regards,