- This topic is empty.
October 26, 2010 at 11:10 am #30080
Did anyone notice that CerberusGUI.exe sometimes causes high CPU load?
I did notice this when I restarted the system although this does not happen all the time. A few minutes after starting Windows I see something causing one core to be completely loaded with work. When I dig into it I can see that CerberusGUI.exe is the application to blame. It makes no difference if I stop the FTP server or not. It only helps to shut down and exit CerberusGUI.exe completely. When I launch CerberusGUI.exe afterwards, it again starts to keep one core busy after a while.
I am running Cerberus FTP in application mode, because I do not see the taskbar notification when somebody logs in running in service mode. I am using the x64 version running on Windows 7.
Anything I can do to stop this?
FranzOctober 26, 2010 at 5:46 pm #35970
I haven’t seen this but I did have one other user report a similar issue. I’ll try to reproduce. If there is anything in the log that might give a clue as to the problem I would be grateful.October 26, 2010 at 6:30 pm #35971 Thank you for the quick reply! I can not see anything in the logfile except this:
ERROR [server] – Unable to add to Windows Firewall Exception list: Der Vorgang wurde erfolgreich beendet.
The second part is in german meaning “The task completed successfully.” Kind of weired in my opinion. When I turn off the option: “Add to windows firewall exception list” and add rules for myself this error is gone.
Maybe it has to do something with WAN IP detection. I assume this because I cannot see the line WAN IP detected as XXX.XXX.XXX.XXX.
Now I’ve let Windows Firewall configure the rules for private and public networks and it allows all TCP and UDP traffic for CerberusGUI.exe. The problem seems to be gone now. Which open ports does CerberusFTP need when configuring the firewall manually (i.e.WAN IP detection) ?
FranzOctober 27, 2010 at 8:07 pm #35972
WAN IP detection is just an outgoing HTTP connection from a random port. There is no incoming connection.
Whatever ports you need open for your interfaces (usually 21, 990, and 22) are normally the only ports you need to have open for incoming connections.October 28, 2010 at 5:51 am #35973
Since I switched off WAN IP detection the problem is gone. What for do I need WAN IP detection anyway? Passive FTP connections work well without it.
FranzOctober 28, 2010 at 7:45 pm #35974
It really depends on your router/firewall. When the passive command is sent the client receives back the IP address of the FTP server to connect back to for a data connection. The server normally only knows its local IP address and sending that to a remote client usually results in the client being unable to connect back to the server. The server normally sends the external IP address in the passive command. The server determines its external IP address by querying one of several public sites that report the IP address of the machine initiating the connection. It’s a common method of determining a machine’s external IP address.
Some routers do stateful packet inspection (SPI) and actually require the passive command to have the local address passed back to the client. The router will modify the passive command response with the actual external address while the packet is in transit. You don’t need the WAN IP address in these cases.
However, what is probably happening is that your public IP address hasn’t changed since you last allowed Cerberus to check. If WAN IP auto-detection is enabled then Cerberus checks for your external IP address periodically and saves the public address for use in the passive command response. If the address later changes and Cerberus isn’t checking anymore then passive transfers could suddenly start failing.October 29, 2010 at 7:32 am #35976
Well, I am wondering why the client needs to get the IP address when it initially has connected successfully to the FTP server. So this seems kind of redundant to me. The only thing th client needs to know is the port number it shall use for the passive connection. Maybe there are scenarios where you connect to a FTP server which delegates the passive FTP session to another server? But to be honest: I do not know the FTP protocol in detail.
You are right that my IP does not change very often. So it is possible that Cerberus FTP remembers the last known IP address and it works this way.
In the meantime I keep the WAN IP detection turned off. Maybe you can look though the WAN IP detection code and identify loops which can cause high CPU load due to firewall settings.
Thank you very much in advance!
FranzNovember 14, 2010 at 5:29 pm #35975
Problem fixed in latest release. Some of the history on this post was lost after we had to restore the forum from a recent backup.
- You must be logged in to reply to this topic.