6500 high cpu load

Unanswered Question
platinum_jem Thu, 09/17/2009 - 00:40
User Badges:


You can do a show proc cpu sorted to sort according to order (Highest load process on top).

You can then see the process name that is hogging CPU resources. Post the process name here if you need more help.

Most of the time it is the logging daemon hogging CPU (because of sudden increase of logs)

mattwilsonuk Thu, 09/17/2009 - 02:01
User Badges:

It may not be process utilisation moreso interrupt utilisation

Could you post the output of

show proc cpu sorted 1min

Also clear all your counters and do

show int | i output drops

Giuseppe Larosa Tue, 09/22/2009 - 22:34
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Ola,

you have been kind to provide a feedback on this issue.

This helps to improve the forums.

CoPP by rate limiting packets sent to main CPU had helped and you have found an explanation of the problem.

Best Regards


rush2amol Tue, 09/22/2009 - 22:37
User Badges:


Can you let me know more details on "CoPP"; i am also facing similar issue like high utilization, it would be helpful to know more on this.


Amol More.


Sure, it is a QoS feature for traffic to the cpu, with a bonus of DOS protection.

You set it up with access-lists, class-maps and policy-maps, then bind it to the control plane with a service-policy.

The way I did it was to set it up without dropping any traffic that exceeds or violates the policy but transmit all so I wouldn't drop any traffic accidentally. You still get hits in the access-lists so that you can see where the traffic is originating from. The service policy is not needed to get hits in the access-lists, but it would give you a bonus of finding out how much traffic you have for routing, arp and so on. Make sure to add an entry for permit ip any any at the end of the access-list.

You can capture non ip traffic by matching the class-map to a protocol instead of an access-list.

Check the configuraqtion guide for your version of the IOS.

Then check the hits in the access-lists and the traffic rates with show access-list and show policy-map control-plane input.

Hope that will help you out.



This Discussion