[c-nsp] High CPU Usage

Ian MacKinnon Ian.Mackinnon at lumison.net
Tue Jul 14 11:03:45 EDT 2009


I haven't used a 2600 for a while, but I seem to remember they don't have a lot of grunt.

Your sh proc cpu shows 61% interrupt, there is a good guide for tracking down causes on the Cisco site somewhere <fx: googles) http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note09186a00800a70f2.shtml


Check your interfaces for promiscuous mode, as that means every packet generates an interrupt.

Don't know if your IPSEC will be generating an interrupt when a packet hits the outgoing interface in order to do the encapsulation.

Ian



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Jeremy Parr
Sent: 14 July 2009 15:43
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] High CPU Usage

I have a 2600 doing some GRE tunnel aggregation with IPSEC and a
AIM-VPN. The CPU is consistently at 95%+, but none of the running
processes are using nearly that much CPU. Is there some other place I
should be looking?

#sh processes cpu sorted
CPU utilization for five seconds: 99%/61%; one minute: 99%; five minutes: 98%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
  70   163085876  24727077       6595 15.31% 16.49% 14.22%   0 IP Input
 146    42276796   9771758       4326  8.24%  8.66%  7.46%   0 Crypto Support
 169    38417520   7286822       5272  5.22%  4.94%  5.12%   0 Crypto PAS Proc
   6    21018268   2714504       7742  4.05%  4.99%  4.24%   0 Pool Manager
  54       65680      2206      29773  2.20%  0.71%  1.20%  66 SSH Process
 190     5281352   6682003        790  0.48%  0.47%  0.45%   0 IP-EIGRP: HELLO
 121     1163120   7759419        149  0.24%  0.16%  0.13%   0 RBSCP Background
  95      709328   1161174        610  0.16%  0.07%  0.06%   0 CEF process
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

--

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the sender. Any
offers or quotation of service are subject to formal specification.
Errors and omissions excepted.  Please note that any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of Lumison.
Finally, the recipient should check this email and any attachments for the
presence of viruses.  Lumison accept no liability for any
damage caused by any virus transmitted by this email.


More information about the cisco-nsp mailing list