[c-nsp] IP INPUT process growing 9Mb/day

[Oliver Boehmer (oboehmer)]

Hmm, not sure what's happening.. do you regular issue commands via
scripts there?  

	oli

Mattias Eliasson <mailto:mattias at teknikmejeriet.se> wrote on Friday,
February 23, 2007 9:40 AM:

> Hi
> 
> 
> Cpu is below 8% (mostly BGP scanner and check heaps)
> 
> router#sh processes memory 121
> 
> Process ID: 121
> Process Name: IP Input
> Total Memory Held: 64722448 bytes
> 
> Processor memory Holding = 64722448 bytes
> pc = 0x40B53E14, size =  64611768, count = 212505   <---  offending PC
> pc = 0x41001268, size =     65592, count =    1
> pc = 0x409E6C54, size =     20400, count =   17
> pc = 0x41CEEEB8, size =     12056, count =    1
> pc = 0x40B46F2C, size =      6832, count =   40
> pc = 0x4016EB8C, size =      4824, count =   32
> pc = 0x41CF4BD0, size =       640, count =    1
> pc = 0x410411E0, size =       192, count =    1
> pc = 0x41CF21CC, size =       144, count =    1
> 
> I/O memory Holding = 0 bytes
> 
> 
> router#sh version
> Cisco Internetwork Operating System Software
> IOS (tm) s3223_rp Software (s3223_rp-ADVIPSERVICESK9_WAN-M), Version
> 12.2(18)SXF7, RELEASE SOFTWARE (fc1)
> Technical Support: http://www.cisco.com/techsupport
> Copyright (c) 1986-2006 by cisco Systems, Inc.
> Compiled Thu 23-Nov-06 03:17 by kellythw
> Image text-base: 0x40101040, data-base: 0x42D30000
> 
> ROM: System Bootstrap, Version 12.2(17r)SX3, RELEASE SOFTWARE (fc1)
> BOOTLDR: s3223_rp Software (s3223_rp-ADVIPSERVICESK9_WAN-M), Version
> 12.2(18)SXF7, RELEASE SOFTWARE (fc1)
> 
> crtr-7801-mlm uptime is 1 week, 1 day, 12 hours, 18 minutes
> Time since crtr-7801-mlm switched to active is 1 week, 1 day, 12
> hours, 17 minutes
> System returned to ROM by  power cycle (SP by power on)
> System restarted at 21:16:12 CET Wed Feb 14 2007
> System image file is
> "sup-bootdisk:s3223-advipservicesk9_wan-mz.122-18.SXF7.bin"
> 
> 
> This product contains cryptographic features and is subject to United
> States and local country laws governing import, export, transfer and
> use. Delivery of Cisco cryptographic products does not imply
> third-party authority to import, export, distribute or use encryption.
> Importers, exporters, distributors and users are responsible for
> compliance with U.S. and local country laws. By using this product you
> agree to comply with applicable laws and regulations. If you are
> unable 
> to comply with U.S. and local laws, return this product immediately.
> 
> A summary of U.S. laws governing Cisco cryptographic products may be
> found at:
> http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
> 
> If you require further assistance please contact us by sending email
> to 
> export at cisco.com.
> 
> cisco WS-C6503-E (R7000) processor (revision 1.3) with 458752K/65536K
> bytes of memory.
> Processor board ID FOX10410ADP
> R7000 CPU at 300Mhz, Implementation 0x27, Rev 3.3, 256KB L2, 1024KB L3
> Cache
> Last reset from power-on
> SuperLAT software (copyright 1990 by Meridian Technology Corp).
> X.25 software, Version 3.0.0.
> Bridging software.
> TN3270 Emulation software.
> 21 Virtual Ethernet/IEEE 802.3 interfaces
> 57 Gigabit Ethernet/IEEE 802.3 interfaces
> 1915K bytes of non-volatile configuration memory.
> 
> 65536K bytes of Flash internal SIMM (Sector size 512K).
> Configuration register is 0x2102
> 
> 
> THANKS
> Mattias Eliasson
> Teknikmejeriet AB
> 
> 2007-02-23 kl. 09.04 skrev Oliver Boehmer (oboehmer):
> 
>> Mattias Eliasson <> wrote on Friday, February 23, 2007 8:48 AM:
>> 
>>> Hi all
>>> 
>>> I wrote a few day ago about a memory fragg issue but got no
>>> response. 
>>> 
>>> I now have some more info about the problem.
>>> 
>>> It turns out it is not a Fragg but the IP INPUT process growing by
>>> 9Mb/day. 
>>> 
>>> This will offcourse reach reboot time again soon so any help will
>>> be very appreciated. 
>>> 
>>> HW Config is 6503-E Sup32 8xGE and a 6148-GE-TX
>>> 
>>> IOS is 12.2(18)SXF7 (which I know several other ISPs run without
>>> issues). 
>>> 
>>> Config is:
>>> 2x full feeds
>>> OSPF and iBGP about 150 prefixes
>>> 2 GRE-multipoint tunnels
>>> 
>>> What am I missing?
>>> Any tips appreciated!
>> 
>> issue "show proc mem <pid>" (where <pid> is the process id of the IP
>> Input process) a couple of hours apart and check which PC(s) show an
>> increasing number. Please post the result along with a "show
>> version". IP Input handles packets to the CPU. Does "show proc cpu"
>> show high utilization in the input process?
>> 
>> 	oli