Host Intrusion Prevention for Linux experiences high CPU usage with the HIPUS process

Technical Articles ID: KB87724
Last Modified: 9/18/2020

Environment

McAfee Host Intrusion Prevention (Host IPS) 8.0 for Linux

Problem

Host Intrusion Prevention for Linux can experience high CPU usage with the HIPUS process on applications that have high I/O.

Cause

This condition can occur because of application processes that have high I/O operations. The high I/O causes the Host IPS 8.0 for Linux HIPUS process to use system resources when processing all Host IPS rules against each I/O request.

Host IPS 8.0 for Linux Patch 8 and earlier versions process all exceptions in user memory space, leading to more CPU resources being used.

Solution

This issue is resolved in Host IPS 8.0 for Linux Patch 9 and later versions. All exceptions are handled at the kernel level, so excluded processes with high I/O do not cause the HIPUS process to consume excessive system resources.

To resolve the high I/O issue, create a Host IPS Process Exclusion for the application that has high I/O operations.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: https://www.mcafee.com/enterprise/en-us/downloads/my-products.html.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download Enterprise product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Affected Products

Host Intrusion Prevention 8.0
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Host Intrusion Prevention for Linux experiences high CPU usage with the HIPUS process

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Host Intrusion Prevention for Linux experiences high CPU usage with the HIPUS process

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title