SSH Process on C3750 via LMS2.6

kloutsip · ‎11-08-2007

After a configuration deployment to >400 C3750's via CiscoWorks, some evidence of the process remained on >40% of the switches after the deployment:

ACC-XX-XXX.XX#sh us

Line User Host(s) Idle Location

1 vty 0 SSH Process 00:00:00

2 vty 1 abc idle 00:04:00

Please note the SSH Process. Even though the deployment concluded successfully, the host remains present indefinitely. (The Works server also appears as a host and in the arp cache.)

Although this is not an immediate problem, a recent event in which

snmp became non-responsive, due to a another deployment across the similar C3750s, required a reload of all switches affected.

We are concerned that there may be underlying problems and thought to ask

the community for feedback before forwarding to the TAC.

(C3750-IPBASEK9-M), Version 12.2(25)SEE3)

Any attempt to remove the process has been unsuccessful.

Cheers,

Peter.

Joe Clarke · ‎11-09-2007

I have a feeling this may be a known IOS bug. Please post the output of:

show stack PID

Where PID is the process ID of "SSH Process". If it is this bug, it is fixed for the 3750 in 12.2(40)SE.

kloutsip · ‎11-11-2007

Hi,

We had a look at CSCsb74409 and we do have this problem as well. As you say, our other problem does sound related - sessions remaining residual.

ACC-R3-27.CE#sh stack 229

Process 229 is currently active

ACC-R3-27.CE#sh processes cpu sorted

CPU utilization for five seconds: 6%/0%; one minute: 6%; five minutes: 6%

PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process

220 130384399 203896920 639 0.31% 0.34% 0.54% 0 SNMP ENGINE

229 1040 1632 637 0.15% 0.34% 0.22% 2 SSH Process

173 289 11129 25 0.15% 0.01% 0.00% 0 TCP Timer

218 39414562 154170794 255 0.15% 0.11% 0.11% 0 IP SNMP

77 17138818 88498465 193 0.15% 0.05% 0.05% 0 HRPC pm-counters

114 39530874 24435703 1617 0.15% 0.13% 0.17% 0 HRPC qos request

6 0 2 0 0.00% 0.00% 0.00% 0 Timers

7 427500 471869 905 0.00% 0.03% 0.01% 0 ARP Input

Best Regards,

Peter.

Joe Clarke · ‎11-11-2007

Yeah, this is the bug. Sadly, without a usable stack trace from the process, I cannot confirm if this is causing your immediate problem. Since this is SSH, you could get a show stack from either a telnet session or the console. And as I said, CSCsb74409 is fixed in 12.2(40)SE for this switch.