[c-nsp] 3550 high cpu & process switched traffic

[Clinton Work]

I have seen this issue many times with the 3550s.  Your ACLs are probably 
too large / complicated and they are over-running the 3550 hardware TCAM.

Other possible causes:
- Too many routes
- Too many ARP entries. Note, ARP entry uses one IP CEF routing entry.


Please see:

Understand and Configure the Switching Database Manager on Catalyst 3550 
Series Switches:
http://www.cisco.com/warp/public/473/145.html


Check the output from these commands:
show controller cpu
show access-lists hardware counters

Try removing and re-applying your ACLs and see if the following message is 
logged:
show logging | inc FM-3-UNLOADING


You can look at the "show tcam inacl | outacl" commands, but they are 
useless for troubleshooting TCAM utilization issues. In my opinion,  the 
show tcam commands should show you total requested TCAM size in addition to 
the TCAM space currently used. Reporting TCAM utilization only for the ACLs 
that fit into the TCAM isn't very useful!


3550#show tcam inacl 1 stat
Ingress ACL TCAM#1: Number of active labels: 5
Ingress ACL TCAM#1: Number of masks   allocated:   46, available:  370
Ingress ACL TCAM#1: Number of entries allocated:   74, available: 3254



Tassos Chatzithomaoglou wrote:
> 3550#sh proc cpu | exc 0.00
> CPU utilization for five seconds: 93%/91%; one minute: 93%; five minutes: 93%
>   PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
>    20     4544896 123670508         36  0.57%  0.63%  0.62%   0 Vegas LED Proces
>    27    30048240  14764148       2035  0.40%  0.48%  0.45%   0 Vegas Statistics
>    33     4701728  12413685        378  0.08%  0.06%  0.07%   0 L3MD_STAT
>    35      919348  69239506         13  0.08%  0.07%  0.08%   0 VegasPM
>    36    11606324   9735382       1192  0.08%  0.14%  0.15%   0 VUR_MGR bg proce
>    39    30030680 110922911        270  0.40%  0.40%  0.40%   0 IP Input
>    90      813456   7361206        110  0.08%  0.04%  0.04%   0 CEF process
>    99    13504708  28875655        467  0.24%  0.10%  0.15%   0 OSPF Router
> 
> Of course, there isn't any debug running in the background...
> 
> omar parihuana wrote on 18/8/2006 20:42:
>> Hi,
>>
>> There is something wrong.. I have a 3550 with near 100SVI and my CPU
>> process not reach 20%
>>