Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Hugo_vd_Kooij
Advisor

Performance/spike detective: kiss_hash_find_hashent ?

I was looking into an issue and I was wondering what I was looking at:

# Overhead Command Shared Object Symbol
# ........ ....... ..................... ............................................
#
72.56% fw_full libkiss_apps.so [.] kiss_hash_find_hashent

Not all spikes show this but a significant number of them so I am curious what the function is doing.

So far I had no luck with Secure Knowledge.

 

 

<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>
0 Kudos
1 Reply
Timothy_Hall
Legend Legend
Legend

Kiss stands for kernel infrastructure, which is a kind of generic module that performs a lot of functions.  The most prominent component of kiss that can consume CPU would probably be the pattern matcher which usually means the IPS blade or possibly custom site/application matching that is using the undesirable "*" character.  See Custom Sites and RegExp Wildcard Efficiency.  The function name would suggest it is performing some kind of optimized hash table lookup.

Note that live Pattern Matcher CPU resource utilization can be baselined in cpview on the Advanced...CPU-Profiler...PM-Stats screen. The hcp test category "Custom Applications RegEx" will also flag any Custom Applications/Sites that utilize the undesirable wildcard character "*" that can significantly increase PM overhead.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events