From the HyperFlow SK:
When an elephant connection triggers HyperFlow, the output of the "top" and "ps" commands can show that HyperFlow user space processes consume the CPU at 100%.
This occurs because HyperFlow constantly polls its queues to handle incoming jobs. After the elephant connection closes, the output of these commands shows that the user space "us" consumption returns to usual levels because Hyperflow goes down and stops processing jobs.
To see the actual load on the CPU, use one of these:
- CPView (CPU > Overview > Host)
- SNMP (the OID tree 1.3.6.1.4.1.2620.1.6.7.5)
- SmartConsole (right-click the Security Gateway object > click Monitor > from the left, open System Counters and click System).
This does not trigger inspection bypass because of a high CPU load.
