Community discussions

MikroTik App
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

CCR1009 CPU load 100%

Tue Jan 18, 2022 5:21 pm

Hi,
In approximately two hours after reboot of router CPU load rises to 100%.
Note, that CPU load rises quite a slowly:
just after reboot 3-4%
in a first hour after reboot from 4 to 20%,
in the next hour, from 20 to 100%.
Situation ends up with “kernel failure in previous boot“. Tools -> profile points to the firewall.
One month ago we had first time of this issue. From yesterday router could survive max 2-2,5 hrs without reboot.
Could you please help us to find out what’s wrong?

hardware: CCR1009-7G-1C-1S+
ROS: 6.48.6

Thanks.
You do not have the required permissions to view the files attached to this post.
 
User avatar
jprietove
Trainer
Trainer
Posts: 195
Joined: Fri Jun 03, 2016 3:00 pm
Location: Cádiz, Spain
Contact:

Re: CCR1009 CPU load 100%

Tue Jan 18, 2022 5:28 pm

It could be useful if you provide an export of your configuration:
/export hide-sensitive file=configexport
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Tue Jan 18, 2022 5:51 pm

It could be useful if you provide an export of your configuration:
/export hide-sensitive file=configexport

Unfortunately cannot provide cfg because of corporate router, sorry.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 11846
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: CCR1009 CPU load 100%

Tue Jan 18, 2022 6:38 pm

Try upgrading to 6.49 stable firmware......... see if same issue persists.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!
 
biomesh
Member
Member
Posts: 446
Joined: Fri Feb 10, 2012 8:25 pm

Re: CCR1009 CPU load 100%

Tue Jan 18, 2022 8:21 pm

If you can't post the export you should deal with mikrotik support only. Since this is a user forum we can only help if we have actual examples/exports to look at.
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Wed Jan 19, 2022 10:28 am

Config wasn't changed for months. One day problem just suddenly raised.
 
biomesh
Member
Member
Posts: 446
Joined: Fri Feb 10, 2012 8:25 pm

Re: CCR1009 CPU load 100%

Wed Jan 19, 2022 3:16 pm

An insecure router can remain that way until it is compromised.

If load has not changed going to or through the server, outside of a hardware failure(which this does not seem too be the case) then you should really start to closely look at the config.
 
MtHoodlum
newbie
Posts: 49
Joined: Fri Sep 07, 2012 2:09 am
Location: USA
Contact:

Re: CCR1009 CPU load 100%

Wed Jan 19, 2022 5:29 pm

I agree with the other posts insofar as that is very difficult to remotely troubleshoot this type of problem in a forum absent the config. You can look in "/tool profile" to see what process category is causing the CPU spike. RouterOS does not list out the individual processes but only the categories.
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Thu Jan 20, 2022 11:06 am

I agree with the other posts insofar as that is very difficult to remotely troubleshoot this type of problem in a forum absent the config. You can look in "/tool profile" to see what process category is causing the CPU spike. RouterOS does not list out the individual processes but only the categories.

/Tool -> Profile pointing to firewall.
For me it's quite a difficult to understand why load are rising slowly. In any case kernel failure should not happen.
We are going to do an experiment, will transfer same config to old CCR1036, if behavior still will be same - definitely problems in config.
Also, it is possible problems occurred in flash/NAND.
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Thu Jan 20, 2022 11:20 am

Try upgrading to 6.49 stable firmware......... see if same issue persists.

We have installed latest LTS, same behavior.
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Fri Jan 21, 2022 10:41 am

Information: CCR1036 - same behavior, seems to be problems in config.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 11846
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: CCR1009 CPU load 100%

Fri Jan 21, 2022 1:30 pm

Information: CCR1036 - same behavior, seems to be problems in config.
Well if you wont post here, suggest you hire an MT consultant and with a contract etc,
that legally protects the config etc........

If you are serious about fixing your issues.
Good luck.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!
 
angriukas
Member Candidate
Member Candidate
Topic Author
Posts: 103
Joined: Fri Nov 22, 2013 9:20 am
Contact:

Re: CCR1009 CPU load 100%

Tue Jan 25, 2022 12:15 pm

Situation update:
It appeared that router was affected by attack to UDP port 53. Attack rate 200-800packets per second. Two firewall rules, mentioned below, initially was in filter table. After moving those rules to raw table - problem gone. output of "/ip firewall raw print"

1 chain=prerouting action=drop in-interface=ether1-gw dst-port=53 log=no protocol=udp
2 chain=prerouting action=drop in-interface=ether1-gw dst-port=53 log=no protocol=tcp

Who is online

Users browsing this forum: Ahrefs [Bot], betatik, Google [Bot] and 26 guests