Process Memory Depletion - Distributord

Process Memory Depletion - Distributord

3665
Created On 09/18/24 17:21 PM - Last Modified 07/11/25 15:55 PM


Symptom


  • Alert regarding process memory depletion for "distributord"


Environment


  • PAN-OS


Cause


A memory depletion in the "distributord" process was found.

Resolution


  1. Gather the following data required to diagnose the cause of distributord memory depletion:
    1. Collect Tech Support File from the UI: Device > Support > Generate Tech Support File.

    2. Run the following CLI commands to gather trace and core files:

      show clock
      debug software trace distributord
      debug software core distributord

      Download the core files from the UI: Device > Support > Download Core Files. For the trace dump, copy the CLI output, paste it into a notepad file, and save it.

    3. Export the Device State from the UI: Device > Setup > Operations > Export Device State.
    4. Gather data from Strata Cloud Manager, such as the memory depletion start date and any configuration or software changes made during that time.
    5. Open a support case with the above data.
  2. Use the following mitigation steps as a temporary fix:
    1. Restart the distributord process to reduce the memory usage by using the command:
      debug software restart process distributord
      Note:
    • This action is recommended during a maintenance window.​​​​​​ 
    •  Restarting distributord temporarily mitigates memory growth, but the issue may reoccur.


Additional Information


PAN-224354: Fixed an issue where a memory leak related to the distributord process occurred when connections flapped for IP address-to-username mapping redistribution. (Fixed in 10.2.8, 10.1.12, 11.0.4, or 11.1.0 or later release).
If the firewall or Panorama is affected by software issue PAN-224354, upgrade to a release with the fix or a later version.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HE7lCAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language