[nsp] High CPU question (update)

[Bryan]

I've turned off route-cache flow and added CEF to all interfaces instead
with marginal improvement.  If I remove Cache switching all together the
cpu goes up about 15% from previous so i dont think there are that many
unique source/dest pairs.





Bryan


On Fri, 30 Apr 2004, David Flynn wrote:

> Date: Fri, 30 Apr 2004 16:10:52 +0000
> From: David Flynn <davidf at woaf.net>
> To: Bryan <bryan at tec-works.com>
> Cc: Gert Doering <gert at greenie.muc.de>,
>      James Edwards <hackerwacker at cybermesa.com>, cisco-nsp at puck.nether.net
> Subject: Re: [nsp] High CPU question (update)
>
> Right, off the top of my head 40Mbit/sec at 128byte frames is nearly
> 40kpps, and at 64byte frames it will be 80kpps.
>
> From a quck glimpse at your config you have netflow turned on.  Netflow
> attempts to speed things up by caching details obtained from the first
> packet so that they don't need to be calculated again later.  If the
> packets do not form long lived flows, eg worst case, every packet is
> unique of destip/srcip/destport/srcport, then each packet has to have
> the full hog of netflow stuff done to it.  This *will* kill the 7200
> platform at the sorts of pps values you are talking about.
>
> Try turning it off, see if that helps.
>
> ttfn,
>
> ..david
>