[nsp] High CPU on 2600

[David Sinn]

A close inspection of a 'show proc cpu' might be of use here:

CPU utilization for five seconds: 4%/1%; one minute: 1%; five minutes: 1%
 PID  Runtime(ms)  Invoked  uSecs    5Sec   1Min   5Min TTY Process 

The important part is to look at two numbers reported for the five second load.  If the left number (4% in the above example) is vastly higher the the number to the right (your interrupt CPU load) then your box is running a process that is eating a lot of CPU.  You should then look further into the results of the above command's output to see what process it it so that you can further track down what is happening.

If it is the second number (the first 1% above) is relativly close to the number on the right, then your CPU is being used at interrupt level, and thus is being used to forward packets.  There is little to do if this is the case, short of upgrading the box to a faster platform or turning off features you don't need.

David

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net on behalf of Joel Perez
Sent: Thu 10/23/2003 7:20 AM
To: cisco-nsp at puck.nether.net
Subject: [nsp] High CPU on 2600
 
Hey guys,
 
I have a small problem. I have a 2600 in a remote office doing NAT'ing
serving about 20-25 people. Everything works fine except that the cpu on
the 2600 is thru the roof.
They aren't generating much traffic, probably about 1.5 megs. The 2600
is only using the FastEth for the internal and external interaces. Can
the NAT'ing be making my CPU that high?
Here is the config I have now:
 
 
ip subnet-zero
ip cef
!
interface FastEthernet0/0
 description ---------------"Gateway to Internet"---------------
 ip address 1.2.3.4 255.255.255.0
 ip nat outside
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
 no fair-queue
!
interface FastEthernet0/1
 description ---------------"Gateway To Etrade"---------------
 ip address 5.6.7.8 255.255.255.0
 ip nat inside
 duplex auto
 speed auto
!
ip nat pool Traders 1.2.3.4 1.2.3.4 prefix-length 24
ip nat inside source list 1 pool Traders overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.3.1
!
!
access-list 1 permit 10.64.14.0 0.0.0.255
 
Regards,
 
----------------------------------------------
Joel Perez <jperez at ntera.net>  | IP Engineer
http://www.ntera.net/                 | Ntera
305.914.3412
 
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/