thanks for the help.

after issuing the command i noted IP INPUT process consuming most memory.so how can i sove the problem.thanks for anticipated response

Hello Olankule,

so IP input uses a lot of cpu resources this probably means that the router is process switching a lot of packets.

Can this increase in cpu usage be caused simply by an increase in traffic?

can you compare current traffic levels on router interfaces with that of previuos time periods?

What was the cpu usage before?

My guess is it could be relatively high also before because to encapsulate IP packets into GTP tunnels is cpu intensive.

Have you performed any configuration change or change of IOS image recently?

Examing sh log on router do you see any message related to cpu usage or to cpu processes taking too much cpu time?

Hope to help

Giuseppe

thanks for kind assistance find attached debug logs, i learnt this problem is peculiar to 7200 and 7600 when doing GTP on them is it true?

Hello Olankule,

first of all sorry for the basic note:

but you don'have debug ip pack detail all the time I hope otherwise this can cause the issue you see (debug causes very high cpu usage)

looking at the debug lines I see that there are some fragmented GTP packets

-More--         Apr  3 21:58:00.282: IP: s=10.105.5.41 (FastEthernet1/1), d=41.203.65.114, len 76, rcvd 4
--More--         Apr  3 21:58:00.282:     UDP src=2152, dst=2152
--More--         Apr  3 21:58:00.282: IP: tableid=0, s=41.203.64.44 (FastEthernet1/1), d=41.203.65.114 (Loopback6), routed via RIB
--More--         Apr  3 21:58:00.282: IP: s=41.203.64.44 (FastEthernet1/1), d=41.203.65.114, len 88, rcvd 4
--More--         Apr  3 21:58:00.282:     UDP src=10651, dst=2152
--More--         Apr  3 21:58:00.282: IP: tableid=0, s=41.203.65.97 (FastEthernet1/0), d=41.203.65.114 (Loopback6), routed via RIB
--More--         Apr  3 21:58:00.282: IP: s=41.203.65.97 (FastEthernet1/0), d=41.203.65.114, len 1500, rcvd 4
--More--         Apr  3 21:58:00.282:     IP Fragment, Ident = 1910, fragment offset = 0
--More--         Apr  3 21:58:00.282:     UDP src=10651, dst=2152

this can cause an increase of cpu usage, original packets can be of normal size but then there is the GTP overhead and  this leads to the need of fragmentation

Note:

My is only a guess that GTP can cause high cpu usage based on the fact that packets needs to be inspected deeply to be placed in the correct session within the GTP tunnel it is wise to open a TAC SR if this is impacting or it is going to impact service

Hope to help

Giuseppe

THANKS FOR KIND SUPPORT AND EXPLANATION. WOULD CONTACT TAC ASP.

I must really appreciate your contributions on this forum,your responses are very useful

and precise.