[c-nsp] Catalyst 6509 - High CPU - Process ios-base
David Prall
dcp at dcptech.com
Wed Jan 16 19:18:07 EST 2008
Your running Modular Code (IOS-BASE)
The one tunnel per source address is in order to make it so that the
tunnel's are hardware processed. It isn't a bug, but rather a limitation of
the hardware. Unless a VPNSM or VPN-SPA is installed, where the tunnels are
then offloaded to the the crypto hardware.
David
--
http://dcp.dcptech.com
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
> Patrick J Greene
> Sent: Wednesday, January 16, 2008 5:14 PM
> To: Jon Lewis; Cisco Nsp
> Subject: Re: [c-nsp] Catalyst 6509 - High CPU - Process ios-base
>
> Nope...none.
>
> Well I opened a case with TAC and apparently it is a bug. We
> have about 30 tunnel interfaces all using the same source
> interface. TAC says to create a separate loopback interface
> as the source for each Tunnel to work around the bug.
>
> Thanks for the help.
> Patrick
>
> -----Original Message-----
> From: Jon Lewis [mailto:jlewis at lewis.org]
> Sent: Wednesday, January 16, 2008 3:26 PM
> To: Patrick J Greene
> Cc: Cisco Nsp
> Subject: Re: [c-nsp] Catalyst 6509 - High CPU - Process ios-base
>
> You wouldn't have close to a full BGP table on that
> router...would you?
>
> On Wed, 16 Jan 2008, Patrick J Greene wrote:
>
> > The CPU just started spiking on my Cat6509 running
> 12.2(18)SXF9 IP Services. The process ios-base is running at
> 99%. What could this be. I can't find anything on Google or on CCO.
> >
> >
> > Cat6509e-r1#sh proc cpu
> > CPU utilization for five seconds: 100%; one minute: 99%;
> five minutes: 99%
> > PID 5Sec 1Min 5Min Process
> > 1 0.1% 0.4% 0.4% kernel
> > 3 0.0% 0.0% 0.0% qdelogger
> > 4 0.0% 0.0% 0.0% devc-pty
> > 5 0.0% 0.0% 0.0% devc-mistral.proc
> > 6 0.0% 0.0% 0.0% pipe
> > 7 0.0% 0.0% 0.0% dumper.proc
> > 4104 0.0% 0.0% 0.0% bflash_driver.proc
> > 12297 0.0% 0.0% 0.0% pcmcia_driver.proc
> > 12298 0.0% 0.0% 0.0% mqueue
> > 12299 0.0% 0.0% 0.0% flashfs_hes.proc
> > 12300 0.0% 0.0% 0.0% dfs_bootdisk.proc
> > 12301 0.0% 0.0% 0.0% ldcache.proc
> > 12302 0.0% 0.0% 0.0% watchdog.proc
> > 12303 0.0% 0.0% 0.0% syslogd.proc
> > 12304 0.0% 0.0% 0.0% name_svr.proc
> > 12305 0.0% 0.0% 0.0% wdsysmon.proc
> > 12306 0.0% 0.0% 0.0% sysmgr.proc
> > 16386 0.0% 0.0% 0.0% chkptd.proc
> > 16403 0.0% 0.0% 0.0% sysmgr.proc
> > 16404 0.0% 0.0% 0.0% syslog_dev.proc
> > 16405 0.0% 0.0% 0.0% itrace_exec.proc
> > 16406 0.0% 0.0% 0.0% packet.proc
> > 16407 0.0% 0.0% 0.0% installer.proc
> > 16408 98.2% 97.2% 97.0% ios-base
> > 16409 0.0% 0.0% 0.0% fh_fd_oir.proc
> > 16410 0.0% 0.0% 0.0% fh_fd_cli.proc
> > 16411 0.0% 0.0% 0.0% fh_metric_dir.proc
> > 16412 0.0% 0.0% 0.0% fh_fd_snmp.proc
> > 16413 0.0% 0.0% 0.0% fh_fd_none.proc
> > 16414 0.0% 0.0% 0.0% fh_fd_intf.proc
> > 16415 0.0% 0.0% 0.0% fh_fd_gold.proc
> > 16416 0.0% 0.0% 0.0% fh_fd_rf.proc
> > 16417 0.0% 0.0% 0.0% fh_fd_counter.proc
> > 16418 0.0% 0.0% 0.0% fh_fd_timer.proc
> > 16419 0.0% 0.0% 0.0% fh_fd_ioswd.proc
> > 16420 0.0% 0.0% 0.0% fh_server.proc
> > 16421 0.0% 0.0% 0.0% fh_policy_dir.proc
> > 16422 0.0% 0.0% 0.0% ipfs_daemon.proc
> > 16423 0.2% 0.1% 0.1% raw_ip.proc
> > 16424 0.0% 0.0% 0.0% inetd.proc
> > 16425 0.7% 0.8% 0.8% tcp.proc
> > 16426 0.2% 0.1% 0.1% udp.proc
> > PID 5Sec 1Min 5Min Process
> > 16427 0.0% 0.0% 0.0% iprouting.iosproc
> > 16428 0.4% 0.4% 0.3% cdp2.iosproc
> >
> >
> >
> > Here's my hardware (serial numbers removed)
> >
> > waflnapcore-r1#sh module
> > Mod Ports Card Type Model
> Serial No.
> > --- ----- --------------------------------------
> ------------------ -----------
> > 1 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX
> > 5 2 Supervisor Engine 720 (Active) WS-SUP720-3B
> > 6 2 Supervisor Engine 720 (Hot) WS-SUP720-3B
> > 9 8 8 port 1000mb GBIC Enhanced QoS WS-X6408A-GBIC
> >
> > Mod MAC addresses Hw Fw
> Sw Status
> > --- ---------------------------------- ------ ------------
> ------------ -------
> > 1 001b.2ad3.3798 to 001b.2ad3.37c7 2.6 12.2(14r)S5
> 12.2(18)SXF9 Ok
> > 5 0017.9444.c15c to 0017.9444.c15f 5.4 8.4(2)
> 12.2(18)SXF9 Ok
> > 6 001a.2f3b.f8e0 to 001a.2f3b.f8e3 5.4 8.4(2)
> 12.2(18)SXF9 Ok
> > 9 0012.dafe.720a to 0012.dafe.7211 2.3 5.4(2)
> 8.5(0.46)RFW Ok
> >
> > Mod Sub-Module Model Serial
> Hw Status
> > ---- --------------------------- ------------------
> ----------- ------- -------
> > 1 Centralized Forwarding Card WS-F6700-CFC
> XXXXXXXXXXX 3.1 Ok
> > 5 Policy Feature Card 3 WS-F6K-PFC3B
> XXXXXXXXXXX 2.3 Ok
> > 5 MSFC3 Daughterboard WS-SUP720
> xxxxxxxxxxx 3.0 Ok
> > 6 Policy Feature Card 3 WS-F6K-PFC3B
> XXXXXXXXXXX 2.3 Ok
> > 6 MSFC3 Daughterboard WS-SUP720
> XXXXXXXXXXX 3.0 Ok
> >
> >
> > Thanks for your help in advance.
> > Patrick
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
> ----------------------------------------------------------------------
> Jon Lewis | I route
> Senior Network Engineer | therefore you are
> Atlantic Net |
> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list