Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

HIGH CPU with VSH Process in Module ACE 30

Unanswered Question
Dec 6th, 2013
User Badges:


In a ace modulo, the CPU is 60 % aprox. and I a process "VSH" that generate this high use of CPU, some session lost.

How can control this process ?


Version A5(1.2)

switch/prod# sh processes cpu | exclude 0.0

CPU utilization for five seconds: 100%; one minute: 59%; five minutes: 58%

PID    Runtime(ms)  Invoked   uSecs  1Sec   5 Sec    1 Min   5 Min  Process

-----  -----------  --------  -----  -----   ----    ----    ----  -----------

10810      79264593  164468057    481     47  71.18%  19.54%  20.34%  vsh

22988      38268195  92738856    412     57   0.1 %  22.51%  19.42%  vsh

23273      38439564  91513671    420      6  71.20%  24.51%  22.73%  vsh

24133      38732780  89694759    431     37   0.5 %  15.25%  16.59%  vsh


if you know somenthing..  please,  let me know

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Fnu Kanwaljeet Singh Fri, 12/06/2013 - 13:18
User Badges:
  • Cisco Employee,


It could be due to stuck VSH sessions. Are you using any scripts which login to ACE periodically for collecting some outputs?

Do you see it going above 60%. At that %age you should not see any session loss. Are you seeing any denied counters in sh resoource-usage?

This is a complicated process and TAC might need to go to debugshell for troubleshooting the problem. I would suggesting collecting show tech and syslogs during the high CPU usage and open a TAC case for further investigation.

It could be related to below DDTS: CSCua90111:   ACE not clearing VSH process resulting in high CPU usage.



rc5295509 Fri, 12/06/2013 - 13:43
User Badges:


there are not script..

but the ouput command "sh resource usage" have denied

to-cp-ipcp rate            1624       4321          0       5000     306795

I´d open a case in TAC.   you know what is this resource(to-cp-ipcp)?

Fnu Kanwaljeet Singh Fri, 12/06/2013 - 13:51
User Badges:
  • Cisco Employee,


to-cp-ipcp-Limits represents the IPCP traffic from the DP(dataplane) to the CP(Control Plane) in
packets per second. This keyword prevents the overwhelming of the CP under high syslog
rate conditions (for example, level 7 messages).

This is an umbrella resource intended to prevent CP saturation so this should not impact
the traffic on ACE. One way to mitigate is to reduce the logging level on each context to
limit syslog messages coming from DP to CP.

So if you have a high logging level configured in contexts like logging level 7(debug) please reduce it
to lower level like "Warning". High level logging is recommended when you are troubleshooting an issue and then
you can turn it to lower level again.

Also, internal research threw up that DDTS but i would still suggest opening a TAC case for thorough investigation.

rc5295509 Fri, 12/06/2013 - 13:46
User Badges:

hi kanwal

The bug make match with the symptom..




This Discussion