[c-nsp] SNMP process 45%

[Lee]

On 2/13/10, Bill Blackford <BBlackford at nwresd.k12.or.us> wrote:
> What is being polled is something to look at. I had an SNMP poller getting
> the route table and at a couple of full feeds, that seemed to be enough to
> add a high CPU load. (C7600/RSP720)
>
> I can second the ACL to limit who can poll.

In addition to limiting who can poll you can also limit what they can poll. eg

snmp-server view noload internet included
snmp-server view noload internet.6.3.16 excluded
snmp-server view noload atEntry excluded
snmp-server view noload ipRouteEntry excluded
snmp-server view noload ipNetToMediaEntry excluded
snmp-server community public view noload RO 2

Regards,
Lee


> ________________________________________
> From: cisco-nsp-bounces at puck.nether.net [cisco-nsp-bounces at puck.nether.net]
> On Behalf Of bjs [illcritikz at gmail.com]
> Sent: Saturday, February 13, 2010 3:20 AM
> To: mohamed attia
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] SNMP process 45%
>
> Is it that you don't understand why your cpu is at 100% when SNMP is only
> chewing 45% and the other processes don't make up the difference?
>
> Just to clear it up in case that is your question...
>
> Your "sh proc cpu sort" looks like:
>
> *CPU utilization for five seconds: 99%/49%; one minute: 99%; five minutes:
> 99%*
>
> So the 5 second interval "99%/49%" is saying you are using 99% of the CPU of
> which 49% is at interrupt(ie your normal cef switched traffic), you have a
> remaining 50% being used by processes as seen in the list:
>
> PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
>  231     4428660   3798727       1165 46.12% 45.46% 44.28%   0 SNMP ENGINE
>  73   198346604 837505469        236  0.55%  0.52%  0.56%   0 IP Input
>  245   278646264 832638396        334  0.47%  0.40%  0.40%   0 BGP Router
>
> So i'm sure if you added up all your processes there you would find it
> equals that 50%
>
> Now given your 1 and 5 minute CPU utilization is at 99% and more
> specifically your "SNMP ENGINE" process is at ~45% for 5 min avg your real
> problem here(as other people have mentioned) is SNMP, you need to check out
> what devices are polling your router and sort it out.
>
> Once you resolve the snmp issue you can expect the cpu to drop to around
> 50-55%
>
> bjs
>
> On Sat, Feb 13, 2010 at 3:17 PM, mohamed attia
> <m_attia100100 at hotmail.com>wrote:
>
>>
>>
>>
>>  Hi,
>>
>>
>>
>> can any one help me as i noticed that our cisco VXR 7200 have process 100%
>> and after checking i detect that SNMP ENGINE only reach to 45%.
>>
>>
>>
>>
>> CPU utilization for five seconds: 99%/49%; one minute: 99%; five minutes:
>> 99%
>>  PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
>>  231     4428660   3798727       1165 46.12% 45.46% 44.28%   0 SNMP ENGINE
>>  73   198346604 837505469        236  0.55%  0.52%  0.56%   0 IP Input
>>  245   278646264 832638396        334  0.47%  0.40%  0.40%   0 BGP Router
>>
>>
>>
>>
>>
>>
>> Best Regards,
>> -----------------------------------
>> Eng. : Mohamed Attia
>> Tel: +2 010 2039799
>>
>>
>>
>>
>>
>> _________________________________________________________________
>> Hotmail: Powerful Free email with security by Microsoft.
>> http://clk.atdmt.com/GBL/go/201469230/direct/01/
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>