[cisco-nas] AS5400 CPU usage!

[Aaron Leonard]

"show process cpu", shown below, indicates that this
CPU usage is almost all interrupt, not process context.
Very likely driven by infested Microsoft computers.

See my response to the thread "RE: [cisco-nas] Terrible traffic"
for some pointers.

Aaron

---

> show process cpu | exclude 0.00

> to isolate the processes that are taking up all the CPU.

> Could be that many of the clients are infected with MSBlaster or others
> and are sending many more packets per second.

> > -----Original Message-----
> > From: cisco-nas-bounces at puck.nether.net [mailto:cisco-nas-bounces at puck.nether.net]On
> > Behalf Of Balgansuren
> > Sent: Monday, August 25, 2003 12:57 AM
> > To: cisco-nas at puck.nether.net
> > Subject: [cisco-nas] AS5400 CPU usage!
> >
> >
> > Hello,
> >
> > Last 2 weeks time our AS5400 CPU always 95%-100%.
> >
> > We didn't find any problem with IOS and configuration.
> >
> > Is there any issue with high load on AS5400?
> >
> > 1.IOS information "sh ver":
> > ----------------------------
> >
> > Cisco Internetwork Operating System Software
> > IOS (tm) 5400 Software (C5400-IS-M), Version 12.1(5)T12,  RELEASE
> > SOFTWARE (fc1)
> > TAC Support: http://www.cisco.com/tac
> > Copyright (c) 1986-2002 by cisco Systems, Inc.
> > Compiled Mon 04-Feb-02 02:36 by ccai
> > Image text-base: 0x60008968, data-base: 0x60D80000
> >
> > ROM: System Bootstrap, Version 12.1(2r)XD1, RELEASE SOFTWARE (fc1)
> > BOOTFLASH: 5400 Software (C5400-BOOT-M), Version 12.1(1)XD1, EARLY
> > DEPLOYMENT RE
> > LEASE SOFTWARE (fc2)
> >
> > as5400 uptime is 1 day, 5 hours, 54 minutes
> > System returned to ROM by reload at 10:49:35 MN Sun Aug 24 2003
> > System restarted at 10:50:05 MN Sun Aug 24 2003
> > System image file is "flash:c5400-is-mz.121-5.T12.bin"
> >
> > cisco AS5400 (R7K) processor (revision O) with 262144K/65536K bytes of
> > memory.
> > Processor board ID JAE050502E9
> > R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3
> > Cache
> > Last reset from IOS reload
> > Channelized E1, Version 1.0.
> > Bridging software.
> > X.25 software, Version 3.0.0.
> > Primary Rate ISDN software, Version 1.1.
> > Manufacture Cookie Info:
> >  EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x31,
> >  Board Hardware Version 3.27, Item Number 800-5171-01,
> >  Board Revision B0, Serial Number JAE050502E9,
> >  PLD/ISP Version 1.0,  Manufacture Date 1-Feb-2001.
> > Processor 0x14, MAC Address 0x03E339BC2E
> > Backplane HW Revision 1.0, Flash Type 5V
> > 2 FastEthernet/IEEE 802.3 interface(s)
> > 2 Serial network interface(s)
> > 216 terminal line(s)
> > 8 Channelized E1/PRI port(s)
> > 512K bytes of non-volatile configuration memory.
> > 32768K bytes of processor board System flash (Read/Write)
> > 16384K bytes of processor board Boot flash (Read/Write)
> >
> > Configuration register is 0x2102
> >
> > as5400#
> >
> >
> > 2.IOS information "sh spe modem csr  summary":
> > --------------------------------------------------------
> > as5400#sh spe modem csr  summary
> >   Avg Hold        Inc  calls               Out  calls      Failed    No
> >    Succ
> >   Time        Succ    Fail   Avail    Succ    Fail   Avail Dial
> > Answer  Pct
> >   00:17:27    5493     632     100       0       0       0      0
> > 160   90%
> > as5400#
> >
> > 3.IOS information "sh process cpu":
> > ------------------------------------------
> > CPU utilization for five seconds: 100%/98%; one minute: 99%; five
> > minutes: 99%
> >  PID  Runtime(ms)  Invoked  uSecs    5Sec   1Min   5Min TTY Process
> >    1       55000     20232   2718   0.00%  0.00%  0.00%   0 Load Meter
> >    2     2280496     21659 105290   0.00%  0.12%  0.11%   0 PPP auth
> >    3     1212272     37268  32528   0.00%  0.02%  0.00%   0 Check
> > heaps
> >    4           0         1      0   0.00%  0.00%  0.00%   0 Chunk
> > Manager
> >    5       24432      1378  17730   0.00%  0.00%  0.00%   0 Pool
> > Manager
> >    6           0         2      0   0.00%  0.00%  0.00%   0 Timers
> >    7        8084     16512    489   0.00%  0.00%  0.00%   0
> > ALARM_TRIGGER_SC
> >    8      882228      5020 175742   0.00%  0.12%  0.07%   0 Serial
> > Backgroun
> >    9           0         1      0   0.00%  0.00%  0.00%   0 RM PROCESS
> >   10           0         1      0   0.00%  0.00%  0.00%   0 RM PROCESS
> >   11           0         1      0   0.00%  0.00%  0.00%   0 RM PROCESS
> >   12           0         1      0   0.00%  0.00%  0.00%   0 RM PROCESS
> >   13           0         2      0   0.00%  0.00%  0.00%   0 CAS
> > Process
> >   14     1218524     67668  18007   0.00%  0.02%  0.02%   0 ARP Input
> >   15       11312      5304   2132   0.00%  0.00%  0.00%   0 HC Counter
> > Timer
> >   16        4032      4308    935   0.00%  0.00%  0.00%   0 DDR Timers
> >   17           0         2      0   0.00%  0.00%  0.00%   0 Dialer
> > event
> >   18           0         2      0   0.00%  0.00%  0.00%   0 Entity MIB
> > API
> >   19           0         1      0   0.00%  0.00%  0.00%   0 SERIAL
> > A'detect
> >   20           0         1      0   0.00%  0.00%  0.00%   0 Critical
> > Bkgnd
> >   21     1846452     76395  24169   0.22%  0.09%  0.07%   0 Net
> > Background
> >   22       49624     21937   2262   0.00%  0.00%  0.00%   0 Logger
> >
> >
> > Thank you,
> > Balgaa