Second time just today that all Cores got stuck at 100%, profiler shows Networking service using most.
v6.43.8
Its an edge router
Anybody saw similar problem?
Some were already documented here: https://mum.mikrotik.com/presentations/EU17/presentation_4058_1490948376.pdf
unfortunately this router is not implementing any of the functions shown in the presentation 
At least it’s fun! The discovery adventure 
Is it repeatable of just once off? Reproducible?
I think there were some discussion in forum too.
Ps: post the current config if you’re not afraid of the criticism (and some context on setup i guess)
Found it, it was packet sniffer.
Almost a year ago it happened in one of my routers.
Yesterday it happened to 4 routers, one at a time, I only noticed it was the packet sniffer when it was affecting the last two…
Someone changed the default memory limit and file limit to 1000000000, changed the file name of each router following a pattern, and filtered for ports 21 and 2121.
All these routers are secured from outside access, so this was a internal job…
I’ve no idea why ports 21 and 2121, maybe the sole reason was to make the CPU go 100%
ftp transmits user / pass in clear, so it’s credentials harvesting effort
Logs / audit of router access?