[nsp] IP CEF on AS5350

Security security at cytanet.com.cy
Sun Jun 15 00:13:55 EDT 2003


Here is the output you requested. I enable IP CEF and proc cpu jumb from
10% without CEF to 82% with only 73 users connected to the AS5350 out of
212  users that the AS can handle. 

Thanks

#sh proc cpu | exclude 0.00
CPU utilization for five seconds: 82%/79%; one minute: 51%; five minutes:
33%
 PID  Runtime(ms)  Invoked  uSecs    5Sec   1Min   5Min TTY Process 
  49    24219776  37354277    648   2.36%  2.38%  2.77%   0 IP Input       
 
  88      819028     40491  20227   0.16%  0.15%  0.16%   0 Compute load
avg 


Alignment data for:
5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Compiled Thu 21-Feb-02 12:51 by uma

Total Corrections 46369468, Recorded 47, Reads 46369468, Writes 0

 Initial         Initial
 Address  Count  Access Type   Traceback
407EFCA2  56082  32bit read    0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCBE  56082  32bit read    0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCAA  59955  32bit read    0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCAA  45828  32bit read    0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCBE  55978  32bit read    0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F7E  23451  32bit read    0x6048AAD8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F82  23451  32bit read    0x6048AAEC 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E   3977  32bit read    0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E  60131  32bit read    0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E  45922  32bit read    0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E  21905  32bit read    0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8A  19424  32bit read    0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F86  18712  32bit read    0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E  20747  32bit read    0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407CE1EE  23992  32bit read    0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407CE1F2  23992  32bit read    0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
41C226C3     38  16bit read    0x6048A9D8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
40896E22     14  32bit read    0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E     14  32bit read    0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2A     11  32bit read    0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2A      9  32bit read    0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2E      6  32bit read    0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E32      6  32bit read    0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E      8  32bit read    0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E      8  32bit read    0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E      8  32bit read    0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E      8  32bit read    0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3A      8  32bit read    0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E36      8  32bit read    0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E      7  32bit read    0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
408302FE      3  32bit read    0x6048AAD8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40830302      3  32bit read    0x6048AAEC 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
4081EEFE      3  32bit read    0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x601770A4 0x602F9038 0x602F92D0
407BD482      2  32bit read    0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      2  32bit read    0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48A      2  32bit read    0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48A      2  32bit read    0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48E      1  32bit read    0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD492      1  32bit read    0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      1  32bit read    0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      1  32bit read    0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      1  32bit read    0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      1  32bit read    0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49A      1  32bit read    0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD496      1  32bit read    0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E      1  32bit read    0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
4081976E      1  32bit read    0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
                               0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4

No spurious memory references have been recorded.



Cisco Internetwork Operating System Software 
IOS (tm) 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT
RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Thu 21-Feb-02 12:51 by uma
Image text-base: 0x60008968, data-base: 0x60E80000

ROM: System Bootstrap, Version 12.2(1r)1, RELEASE SOFTWARE (fc1)
BOOTFLASH: 5350 Software (C5350-BOOT-M), Experimental Version
12.1(20000922:142008) [nag-flo_t_0110 101]

lyk-3 uptime is 2 days, 8 hours, 55 minutes
System returned to ROM by reload at 14:07:42 eet Thu Jun 12 2003
System restarted at 14:09:08 eet Thu Jun 12 2003
System image file is "flash:c5350-is-mz.121-5.XM8.bin"

cisco AS5350 (R7K) processor (revision O) with 131072K/65536K bytes of
memory.
Processor board ID JAE064705YE
R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3 Cache
Last reset from IOS reload
Channelized E1, Version 1.0.
Bridging software.
X.25 software, Version 3.0.0.
Primary Rate ISDN software, Version 1.1.
Manufacture Cookie Info:
 EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x32,
 Board Hardware Version 3.33, Item Number 800-5171-02,
 Board Revision B0, Serial Number JAE064705YE,
 PLD/ISP Version 1.0,  Manufacture Date 25-Nov-2002.
Processor 0x14, MAC Address 0x0B4682593C
Backplane HW Revision 1.0, Flash Type 5V
2 FastEthernet/IEEE 802.3 interface(s)
250 Serial network interface(s)
216 terminal line(s)
8 Channelized E1/PRI port(s)
512K bytes of non-volatile configuration memory.
32768K bytes of processor board System flash (Read/Write)
8192K bytes of processor board Boot flash (Read/Write)

Configuration register is 0x2102



>> We are running a few AS5350 access-servers for our dial-up PSTN/ISDN
>> customers. Enabling IP CEF on the AS5350 (it is enabled by default),
>> saturates the CPU (99% proc cpu) when there are about 100 connectionw
>> on the AS5350. Disabling IP CEF everythning is back to normal. The
>> IOS that the Access servers are ryunning is is-mz.21-5.XM8   
>> 
>> CAn you please advice?
>
>Which process is eating up the CPU? Can u post a "show proc cpu |
>exclude 0.00" as well as an "show ver" and "show align" when the problem
>happens? 
>



>It could be CSCds63384, not sure until I see "show ver" and "show
>align"..
>
>You might also want to upgrade to a more recent IOS release, I'd
>recommend 12.2(2)XB11, but make sure you do some lab-tests before you
>upgrade as the PPP and AAA code is much differnt in 12.2T/12.2XB
>compared to previous versions...
>
>	oli
>
>
>
_____________________________
CYTANET WebMail
http://webmail.cytanet.com.cy


More information about the cisco-nsp mailing list