Curl_cli high CPU usage

[Oscar_David_Gom]

Hi,

I'm having an strange behaviour, curl_cli process is consuming 100% CPU constantly, top shows it like this

top - 14:35:32 up 20 days, 14:48, 2 users, load average: 0.92, 0.67, 0.62
Tasks: 168 total, 4 running, 164 sleeping, 0 stopped, 0 zombie
%Cpu0 : 0.0 us, 0.0 sy, 0.0 ni, 96.0 id, 0.0 wa, 0.0 hi, 4.0 si, 0.0 st
%Cpu1 : 30.7 us, 69.3 sy, 0.0 ni, 0.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
%Cpu2 : 0.0 us, 0.0 sy, 0.0 ni,100.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
%Cpu3 : 0.0 us, 2.0 sy, 0.0 ni, 97.0 id, 0.0 wa, 0.0 hi, 0.0 si, 1.0 st
KiB Mem : 30780676 total, 24126080 free, 3764484 used, 2890112 buff/cache
KiB Swap: 8385924 total, 8385924 free, 0 used. 26338372 avail Mem

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ P COMMAND
30708 admin 20 0 138948 128936 5176 R 100.0 0.4 0:03.65 1 curl_cli
28199 admin 20 0 0 0 0 R 1.0 0.0 226:26.87 3 fw_worker_0
28200 admin 20 0 0 0 0 S 1.0 0.0 286:55.34 2 fw_worker_1
30119 admin 20 0 616720 127864 40252 S 1.0 0.4 101:25.30 2 fw_full
30151 admin 20 0 0 0 0 S 1.0 0.0 135:49.53 0 cphwd_q_in+

This firewall was created in Oracle Cloud (OCI), R80.20, no hotfix due to a problem with the cluster after installing a hotfix.

Every 2 or 3 seconds the process goes as high as 100% and one core is highly used  (not always the same)

I would like to know the main reason of this behaviour,

What does curl_cli do on Check Point? is it about checking connectivity with Check Point Cloud?  is it about CPUSE checking for updates? 

 Thanks

edit: Updates are setted like this:

6 hours for cpuse,

2 hours for AppC&URL.

[Boaz_Orshav]

Hi

  I am the team leader, owner of CPUSE.

  Can you please share the result of "da_cli da_status"?

  curl is use din several places, CPUSE is one of them. 

  The above will show which Deployment Agent build is used.

Thanks

[Oscar_David_Gom]

Hi, 

This is the output

[Expert@FW-Ora1:0]# da_cli da_status
{
   "Action ID" : "0",
   "DABuildNumber" : "1959",
   "DAService State" : "ready",
   "New DA Availability" : "up to date"
}

Thanks.