[nsp] 3550 CPU OVERLOAD 80%

[Goldberg Alain (IT)]

Maybe you are doing Layer-3 routing on this 3550,
 and maybe you are hit by the welchia worm?
This might affect the whole swicth behavior.

Regards,

_________________________________________
Alain Goldberg - Network manager - CCDA/CCNA
Tower              Semiconductors           LTD.
Tel : 972-4-6506003   Fax : 972-4-6547788
"I love a well designed chaos" - Sixtus dixit
-----Original Message-----
From: Stephen J. Wilcox [mailto:steve at telecomplete.co.uk] 
Sent: Saturday, September 27, 2003 11:35
To: Jim Devane
Cc: cisco-nsp at puck.nether.net
Subject: Re: [nsp] 3550 CPU OVERLOAD 80%

Those percentages arent all that high, were they the highest then? (I
usually do sh proc cpu | e 0.00 do get a quick list of all proceses with
interesting cpu)

The switches tend to overload when they're doing things other than
forwarding traffic, in particular see if you can spot any unusual bursts
of link local packets on any interface, very often you will find this is
as a result of arp or spanning tree (watch the multicast/broadcast
counters, they shouldnt be going up all that quickly normally)

Steve

On Fri, 26 Sep 2003, Jim Devane wrote:

> Hello All,
> 
> 
> I started mysteriously receiving these CPU Overload messages a few 
> days ago. There is no pattern to them and they clear themselves ( the 
> switch will fall back to 20% CPU or even 10%) but I am getting spikes 
> of 85% or so.
> 
> I captured a sh proc cpu when an alarm came in and I was able to see 
> what the CPU was doing but I don't uynderstand what some of these 
> processes are. I am in need of a steer toward info or an outright 
> explanation of these few things and if they are anything to worry
about.
> In general I am not too worried since the switch does not stay at a 
> high CPU cycle level, but I would like to learn about what is causing 
> it to get so high.
> 
> The sh proc cpu offenders were:
>  SNMP Engine 4 - 7 % I have a good idea about this but not sure if 4-7

> is too high or not.
> 
> IP SNMP 3 - 5 % Not sure of the difference of SNMP Engine and IP SNMP
> 
> Pool Manager 2 - 3 % Not really sure about this one.
> 
> VUR_MGR bg proc 3 - 4 % No idea
> 
> And of course IP Input was about 9 - 11 % not sure if that seems high 
> or not. I think the IP Input is probably OK.
> 
> Anyway, if there are any steers towards resources, CCO links, or 
> ideas/suggestions/ explanations I would appreciate it.
> 
> 
> Thanks,
> Jim
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/