<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:10pt">I have a problem with one 2402 in my network.<br><br>For a few days, it will work fine, with less than 5% CPU utilization<br><div><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">Then, slowly, every 30 minutes, the CPU utilization will increase for a minute or two, then drop back to 5%</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">Eventually, we end up with 100% CPU spikes that cripple the router</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family:
arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">I've replaced it and still see the same behavior.</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">When I reboot the router, it behaves for a short time (sometimes 3-5 days, sometimes 3-5 hours), and the behavior resumes.</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family:
arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">We're running OSPF with two neighbors and I see this sequence of log messages on the target router sometimes before the cpu spikes, but there's not a 100% correlation between this and the spikes<br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">Jun 20 08:29:25 ncy-sd-base1 OSPF: nbr state changed, rid 192.168.254.32, nbr addr 10.250.243.241, nbr rid 192.168.254.24, state full, triggered by ExchangeDone <br>Jun 20 08:29:25 ncy-sd-base1 OSPF: nbr state changed, rid 192.168.254.32, nbr addr 10.250.198.233, nbr rid 192.168.254.25, state full, triggered by ExchangeDone <br>Jun 20 08:29:24 ncy-sd-base1 OSPF: nbr state
changed, rid 192.168.254.32, nbr addr 10.250.243.241, nbr rid 192.168.254.24, state full, triggered by SeqNumberMismatch: INIT bit set for database packet at FULL state <br>Jun 20 08:29:24 ncy-sd-base1 OSPF: nbr state changed, rid 192.168.254.32, nbr addr 10.250.198.233, nbr rid 192.168.254.25, state full, triggered by SeqNumberMismatch: INIT bit set for database packet at FULL state <br>Jun 20 08:26:31 ncy-sd-base1 OSPF: nbr state changed, rid 192.168.254.32, nbr addr 10.250.243.241, nbr rid 192.168.254.24, state initializing, triggered by 1-WayReceived <br>Jun 20 08:26:31 ncy-sd-base1 OSPF: nbr state changed, rid 192.168.254.32, nbr addr 10.250.198.233, nbr rid 192.168.254.25, state initializing, triggered by 1-WayReceived <br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px;
font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">On the adjacent neighbor, I see these messages</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">Jun 20 08:29:23 lsm-sd-base1 OSPF: interface state changed, rid 192.168.254.24, intf addr 10.250.243.241, state backup designated router <br>Jun 20 08:29:21 lsm-sd-base1 OSPF: interface state changed, rid 192.168.254.24, intf addr 10.250.243.241, state designated router <br>Jun 20 08:26:44 lsm-sd-base1 OSPF: interface state changed, rid 192.168.254.24, intf addr 10.250.243.241, state backup designated router <br>Jun 20 08:26:26 lsm-sd-base1 OSPF: interface state changed, rid 192.168.254.24, intf addr 10.250.243.241, state designated router <br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color:
transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: arial,helvetica,sans-serif; background-color: transparent; font-style: normal;">My NOC is turning off monitoring from one of our tools tonight to see if that's what's causing the problem. Otherwise, does anyone have a good guess of an event that happens every 30 minutes that might cause a CPU spike?<br><br></div></div></body></html>