[nsp] IP CEF on AS5350
Security
security at cytanet.com.cy
Sun Jun 15 00:13:55 EDT 2003
Here is the output you requested. I enable IP CEF and proc cpu jumb from
10% without CEF to 82% with only 73 users connected to the AS5350 out of
212 users that the AS can handle.
Thanks
#sh proc cpu | exclude 0.00
CPU utilization for five seconds: 82%/79%; one minute: 51%; five minutes:
33%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
49 24219776 37354277 648 2.36% 2.38% 2.77% 0 IP Input
88 819028 40491 20227 0.16% 0.15% 0.16% 0 Compute load
avg
Alignment data for:
5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Compiled Thu 21-Feb-02 12:51 by uma
Total Corrections 46369468, Recorded 47, Reads 46369468, Writes 0
Initial Initial
Address Count Access Type Traceback
407EFCA2 56082 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCBE 56082 32bit read 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCAA 59955 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCAA 45828 32bit read 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407EFCBE 55978 32bit read 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F7E 23451 32bit read 0x6048AAD8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F82 23451 32bit read 0x6048AAEC 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E 3977 32bit read 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E 60131 32bit read 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E 45922 32bit read 0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E 21905 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8A 19424 32bit read 0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F86 18712 32bit read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407B6F8E 20747 32bit read 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407CE1EE 23992 32bit read 0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
407CE1F2 23992 32bit read 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
41C226C3 38 16bit read 0x6048A9D8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x6017A564 0x60171EAC 0x601D29A8
40896E22 14 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 14 32bit read 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2A 11 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2A 9 32bit read 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E2E 6 32bit read 0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E32 6 32bit read 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 8 32bit read 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 8 32bit read 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 8 32bit read 0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 8 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3A 8 32bit read 0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E36 8 32bit read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40896E3E 7 32bit read 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
408302FE 3 32bit read 0x6048AAD8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
40830302 3 32bit read 0x6048AAEC 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
4081EEFE 3 32bit read 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x601770A4 0x602F9038 0x602F92D0
407BD482 2 32bit read 0x6048A9C8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 2 32bit read 0x6048A9F8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48A 2 32bit read 0x6048AAC8 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48A 2 32bit read 0x6048AB1C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD48E 1 32bit read 0x6048AB38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD492 1 32bit read 0x6048AB4C 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 1 32bit read 0x6048AC38 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 1 32bit read 0x6048AD00 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 1 32bit read 0x6048AD48 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 1 32bit read 0x6048ADA0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49A 1 32bit read 0x6048AE80 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD496 1 32bit read 0x6048AF08 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
407BD49E 1 32bit read 0x6048B0C0 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
4081976E 1 32bit read 0x6048AB84 0x6048B49C 0x6043CC98 0x6037254C
0x6034E330 0x60178E6C 0x602AABDC 0x6025C5C4
No spurious memory references have been recorded.
Cisco Internetwork Operating System Software
IOS (tm) 5350 Software (C5350-IS-M), Version 12.1(5)XM8, EARLY DEPLOYMENT
RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Thu 21-Feb-02 12:51 by uma
Image text-base: 0x60008968, data-base: 0x60E80000
ROM: System Bootstrap, Version 12.2(1r)1, RELEASE SOFTWARE (fc1)
BOOTFLASH: 5350 Software (C5350-BOOT-M), Experimental Version
12.1(20000922:142008) [nag-flo_t_0110 101]
lyk-3 uptime is 2 days, 8 hours, 55 minutes
System returned to ROM by reload at 14:07:42 eet Thu Jun 12 2003
System restarted at 14:09:08 eet Thu Jun 12 2003
System image file is "flash:c5350-is-mz.121-5.XM8.bin"
cisco AS5350 (R7K) processor (revision O) with 131072K/65536K bytes of
memory.
Processor board ID JAE064705YE
R7000 CPU at 250Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3 Cache
Last reset from IOS reload
Channelized E1, Version 1.0.
Bridging software.
X.25 software, Version 3.0.0.
Primary Rate ISDN software, Version 1.1.
Manufacture Cookie Info:
EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x32,
Board Hardware Version 3.33, Item Number 800-5171-02,
Board Revision B0, Serial Number JAE064705YE,
PLD/ISP Version 1.0, Manufacture Date 25-Nov-2002.
Processor 0x14, MAC Address 0x0B4682593C
Backplane HW Revision 1.0, Flash Type 5V
2 FastEthernet/IEEE 802.3 interface(s)
250 Serial network interface(s)
216 terminal line(s)
8 Channelized E1/PRI port(s)
512K bytes of non-volatile configuration memory.
32768K bytes of processor board System flash (Read/Write)
8192K bytes of processor board Boot flash (Read/Write)
Configuration register is 0x2102
>> We are running a few AS5350 access-servers for our dial-up PSTN/ISDN
>> customers. Enabling IP CEF on the AS5350 (it is enabled by default),
>> saturates the CPU (99% proc cpu) when there are about 100 connectionw
>> on the AS5350. Disabling IP CEF everythning is back to normal. The
>> IOS that the Access servers are ryunning is is-mz.21-5.XM8
>>
>> CAn you please advice?
>
>Which process is eating up the CPU? Can u post a "show proc cpu |
>exclude 0.00" as well as an "show ver" and "show align" when the problem
>happens?
>
>It could be CSCds63384, not sure until I see "show ver" and "show
>align"..
>
>You might also want to upgrade to a more recent IOS release, I'd
>recommend 12.2(2)XB11, but make sure you do some lab-tests before you
>upgrade as the PPP and AAA code is much differnt in 12.2T/12.2XB
>compared to previous versions...
>
> oli
>
>
>
_____________________________
CYTANET WebMail
http://webmail.cytanet.com.cy
More information about the cisco-nsp
mailing list