pfSense 2100 CPU running up to 100%

My CPU runs between 35% and 100% a lot and shows NaN%. I only have 2 Pi’s a Mikrotik switch and 1 computer hooked to it. One Pi has Zabbix on it, the other is a local only web server and a Samba share. I do have other computers, but they are not running. I would not think that would be loading pfSense that much. I do have pfBlocker running. Traffic graph shows 3k average on the WAN port. I just update to 25.1.1 release hoping that would help.

I had pfSense running on a computer before, and it never showed the CPU running as hard as the 2100 is. I realized it had more CPU pow and RAM.

Any ideas?

I did find some commands to run in terminal, I just do quite understand the output.

top -aSH

last pid: 81353; load averages: 0.28, 0.48, up 68+19:32:34 15:29:35
261 threads: 3 running, 239 sleeping, 19 waiting
CPU: 0.4% user, 0.0% nice, 0.6% system, 0.0% interrupt, 99.0% idle
Mem: 257M Active, 774M Inact, 389M Wired, 1887M Free
ARC: 152M Total, 53M MFU, 91M MRU, 659K Anon, 1058K Header, 6618K Other
119M Compressed, 310M Uncompressed, 2.60:1 Ratio

PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
11 root 187 ki31 0B 32K CPU1 1 1591.3 99.20% [idle{idle:
11 root 187 ki31 0B 32K RUN 0 1561.6 98.40% [idle{idle:
2 root -60 - 0B 32K WAIT 0 18.3H 1.09% [clock{clock
62924 root 20 0 14M 4384K CPU0 0 0:00 0.29% top -aSH
906 root 20 0 13M 3276K kqread 1 0:04 0.19% /usr/sbin/sy
18542 root 20 0 13M 3704K bpf 0 128:53 0.16% /usr/local/s
71705 root 20 0 13M 2796K kqread 0 0:01 0.11% /usr/bin/tai
7 root -16 - 0B 16K pftm 1 145:57 0.09% [pf purge]
72466 root 20 0 13M 2628K select 1 0:01 0.08% tail_pfb: sy
71788 root 20 0 67M 47M piperd 1 0:01 0.04% /usr/local/b
17222 root 20 0 13M 2688K kqread 1 28:29 0.03% tail -F -n 0
55815 root 20 0 870M 629M select 0 85:53 0.03% /usr/sbin/bs
19812 root 20 0 13M 2624K select 0 24:55 0.03% tail: system
12 root -64 - 0B 272K WAIT 0 70:33 0.03% [intr{gic0,s
12 root -60 - 0B 272K WAIT 1 115:41 0.02% [intr{swi1:
12 root -64 - 0B 272K WAIT 1 18:16 0.02% [intr{gic0,s

systat -vmstat 1

2 users    Load  0.13  0.39  0.43                  Jan 17 15:30:46

Mem usage: 43%Phy 10%Kmem VN PAGER SWAP PAGER
Mem: REAL VIRTUAL in out in out
Tot Share Tot Share Free count
Act 949M 51464K 1026G 72776K 1884M pages
All 961M 62948K 1026G 216M ioflt Interrupts
Proc: cow 70 total
r p d s w Csw Trp Sys Int Sof Flt zfod 23 gic0,p14:-
82 195 8 287 69 14 1 ozfod gic0,s2: i
%ozfod gic0,s11:
0.4%Sys 0.0%Intr 0.4%User 0.0%Nice 99.3%Idle daefr gic0,s26:-
| | | | | | | | | | | prcfr 13 gic0,s42:
totfr 6 gic0,s45:
dtbuf react cpu0:ast
Namei Name-cache Dir-cache 135497 maxvn pdwak cpu1:ast
Calls hits % hits % 2891 numvn 103 pdpgs 8 cpu0:preem
29 29 100 1890 frevn intrn 20 cpu1:preem
389M wire cpu0:rende
Disks flash mmcsd mmcsd mmcsd 260M act cpu1:rende
KB/t 0.00 0.00 0.00 0.00 774M inact cpu0:hardc
tps 0 0 0 0 0 laund cpu1:hardc
MB/s 0.00 0.00 0.00 0.00 1884M free
%busy 0 0 0 0 0 buf

netstat -m
1758/11622/13380 mbufs in use (current/cache/total)
922/3142/4064/211924 mbuf clusters in use (current/cache/total/max)
922/1872 mbuf+clusters out of packet secondary zone in use (current/cache)
0/762/762/105962 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/31396 9k jumbo clusters in use (current/cache/total/max)
0/0/0/17660 16k jumbo clusters in use (current/cache/total/max)
2283K/12237K/14521K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for mbufs delayed (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters delayed (4k/9k/16k)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0 sendfile syscalls
0 sendfile syscalls completed without I/O request
0 requests for I/O initiated by sendfile
0 pages read by sendfile as part of a request
0 pages were valid at time of a sendfile request
0 pages were valid and substituted to bogus page
0 pages were requested for read ahead by applications
0 pages were read ahead by sendfile
0 times sendfile encountered an already busy page
0 requests for sfbufs denied
0 requests for sfbufs delayed

systat -iostat 1

                /0   /1   /2   /3   /4   /5   /6   /7   /8   /9   /10
 Load Average   ||| 

      /0%  /10  /20  /30  /40  /50  /60  /70  /80  /90  /100

cpu user|
nice|
system|X
interrupt|
idle|XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

      /0%  /10  /20  /30  /40  /50  /60  /70  /80  /90  /100

flash MB/s
tps|
mmcsd MB/s
tps|
mmcsd MB/s
tps|
mmcsd MB/s
tps|

Your output says it’s mostly idle. Just an FYI the viewing the pfsense main page does have a heavy cpu cost on slower hardware.

Okay, I can watch the graph hit 100% every about every 30 seconds.

I’ll see if I can figure out what NaN% means, It shows that and the percentage of CPU usage.