[c-nsp] IP INPUT process growing 9Mb/day

[Mattias Eliasson]

Hi


Cpu is below 8% (mostly BGP scanner and check heaps)

router#sh processes memory 121

Process ID: 121
Process Name: IP Input
Total Memory Held: 64722448 bytes

Processor memory Holding = 64722448 bytes
pc = 0x40B53E14, size =  64611768, count = 212505   <---  offending PC
pc = 0x41001268, size =     65592, count =    1
pc = 0x409E6C54, size =     20400, count =   17
pc = 0x41CEEEB8, size =     12056, count =    1
pc = 0x40B46F2C, size =      6832, count =   40
pc = 0x4016EB8C, size =      4824, count =   32
pc = 0x41CF4BD0, size =       640, count =    1
pc = 0x410411E0, size =       192, count =    1
pc = 0x41CF21CC, size =       144, count =    1

I/O memory Holding = 0 bytes


router#sh version
Cisco Internetwork Operating System Software
IOS (tm) s3223_rp Software (s3223_rp-ADVIPSERVICESK9_WAN-M), Version 
12.2(18)SXF7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by cisco Systems, Inc.
Compiled Thu 23-Nov-06 03:17 by kellythw
Image text-base: 0x40101040, data-base: 0x42D30000

ROM: System Bootstrap, Version 12.2(17r)SX3, RELEASE SOFTWARE (fc1)
BOOTLDR: s3223_rp Software (s3223_rp-ADVIPSERVICESK9_WAN-M), Version 
12.2(18)SXF7, RELEASE SOFTWARE (fc1)

crtr-7801-mlm uptime is 1 week, 1 day, 12 hours, 18 minutes
Time since crtr-7801-mlm switched to active is 1 week, 1 day, 12 hours, 
17 minutes
System returned to ROM by  power cycle (SP by power on)
System restarted at 21:16:12 CET Wed Feb 14 2007
System image file is 
"sup-bootdisk:s3223-advipservicesk9_wan-mz.122-18.SXF7.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be 
found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export at cisco.com.

cisco WS-C6503-E (R7000) processor (revision 1.3) with 458752K/65536K 
bytes of memory.
Processor board ID FOX10410ADP
R7000 CPU at 300Mhz, Implementation 0x27, Rev 3.3, 256KB L2, 1024KB L3 
Cache
Last reset from power-on
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
Bridging software.
TN3270 Emulation software.
21 Virtual Ethernet/IEEE 802.3 interfaces
57 Gigabit Ethernet/IEEE 802.3 interfaces
1915K bytes of non-volatile configuration memory.

65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102


THANKS
Mattias Eliasson
Teknikmejeriet AB

2007-02-23 kl. 09.04 skrev Oliver Boehmer (oboehmer):

> Mattias Eliasson <> wrote on Friday, February 23, 2007 8:48 AM:
>
>> Hi all
>>
>> I wrote a few day ago about a memory fragg issue but got no response.
>>
>> I now have some more info about the problem.
>>
>> It turns out it is not a Fragg but the IP INPUT process growing by
>> 9Mb/day.
>>
>> This will offcourse reach reboot time again soon so any help will be
>> very appreciated.
>>
>> HW Config is 6503-E Sup32 8xGE and a 6148-GE-TX
>>
>> IOS is 12.2(18)SXF7 (which I know several other ISPs run without
>> issues).
>>
>> Config is:
>> 2x full feeds
>> OSPF and iBGP about 150 prefixes
>> 2 GRE-multipoint tunnels
>>
>> What am I missing?
>> Any tips appreciated!
>
> issue "show proc mem <pid>" (where <pid> is the process id of the IP
> Input process) a couple of hours apart and check which PC(s) show an
> increasing number. Please post the result along with a "show version".
> IP Input handles packets to the CPU. Does "show proc cpu" show high
> utilization in the input process?
>
> 	oli