Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
406
Views
0
Helpful
2
Replies

ASA CX PRSM High CPU Load

bsantos77
Level 1
Level 1

‎08-24-2015 08:31 AM - edited ‎03-11-2019 11:29 PM

Hi,

I have a pair of ASA's 5512-x in High Availability mode, both with ASA PRSM in single mode, only one of the modules is fully licensed with WSE, AVC and IPS nextgen, (the default active ASA) and the module on the standby ASA is unlicensed since it's default licenses have expired.

Every now and the CPU usage on both CX modules (the active and standby one) jumps up to near 100% for no apparent reason, the only way I can resolve the problem is by rebooting both modules.

My ideia is that there must be some update to the IPs, WSE or AVC signatures that's causing the problem, it doesn't make much sense though since the unlicensed module shouldn't be getting updates, right?

Has anyone experienced this issue before?

The ASA Software version is 9.1(5)19 and the ASA CX module is 9.3.3.2-15.

Thanks

Bruno

 

Labels:
0 Helpful
2 Replies 2

Vibhor Amrodia
Cisco Employee
Cisco Employee

‎08-30-2015 08:07 AM

Hi,

What is the Output for this command:-

show platform software utilization

Also , I would recommend an upgrade to the latest asacx-sys-9.3.4.1-11.pkg as we have some fixes on that.

Thanks and Regards,

Vibhor Amrodia

0 Helpful

bsantos77
Level 1
Level 1
In response to Vibhor Amrodia

‎09-01-2015 11:06 AM

Hi

This is the output:

top - 19:02:30 up 6 days, 23:41,  1 user,  load average: 0.28, 0.34, 0.30
Tasks:  87 total,   1 running,  85 sleeping,   0 stopped,   1 zombie
Cpu(s): 14.1%us,  1.8%sy,  0.0%ni, 80.3%id,  3.5%wa,  0.2%hi,  0.1%si,  0.0%st
Mem:   1578624k total,  1564316k used,    14308k free,    36776k buffers
Swap:  4194296k total,  2122004k used,  2072292k free,   234096k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 2896 root      15  -5  547m 315m 141m S  2.0 20.4 732:17.16 dp_smp
    1 root      20   0  3800  540  524 S  0.0  0.0   0:04.14 init
    2 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kthreadd
    3 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 migration/0
    4 root      15  -5     0    0    0 S  0.0  0.0   0:00.19 ksoftirqd/0
    5 root      15  -5     0    0    0 S  0.0  0.0   0:00.03 events/0
    6 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 khelper
    9 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 kstop/0
  192 root      15  -5     0    0    0 S  0.0  0.0   0:01.84 kblockd/0
  194 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kacpid
  195 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kacpi_notify
  231 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 cqueue
  238 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 ata/0
  239 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 ata_aux
  241 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 ksuspend_usbd
  246 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 khubd
  249 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kseriod
  311 root      15  -5     0    0    0 S  0.0  0.0   1:24.44 kswapd0
  312 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 aio/0
  313 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 nfsiod
  494 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 iscsi_eh
  506 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 scsi_eh_0
  509 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 scsi_eh_1
  557 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kpsmoused
  565 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kstriped
  611 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 rpciod/0
  715 root      15  -5     0    0    0 S  0.0  0.0   0:09.06 kjournald
  750 root      16  -4 30344  344  344 S  0.0  0.0   0:00.11 udevd
 1594 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kjournald
 1596 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1600 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1603 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1607 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1612 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1615 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1620 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kdmflush
 1625 root      15  -5     0    0    0 S  0.0  0.0   0:04.65 kjournald
 1626 root      15  -5     0    0    0 S  0.0  0.0   3:44.89 kjournald
 1627 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kjournald
 1628 root      15  -5     0    0    0 S  0.0  0.0   0:01.29 kjournald
 1629 root      15  -5     0    0    0 S  0.0  0.0   0:11.47 kjournald
 1630 root      15  -5     0    0    0 S  0.0  0.0   0:07.44 kjournald
 1631 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kjournald
 1632 root      15  -5     0    0    0 S  0.0  0.0   0:00.00 kjournald
 2070 root      20   0 27132  400  400 S  0.0  0.0   0:00.00 sshd
 2073 root      20   0 20972  692  496 S  0.0  0.0   0:07.83 cgrulesengd
 2082 root      20   0 13224  260  260 S  0.0  0.0   0:00.00 inetd
 2085 root      20   0 12212  580  524 S  0.0  0.0   0:01.65 cron
 2088 root      20   0 15752 3484 2800 S  0.0  0.2   0:00.16 ntpd
 2102 root      20   0  5904  620  512 S  0.0  0.0   0:00.77 syslogd
 2103 root      20   0  5092  376  376 S  0.0  0.0   0:00.01 klogd
 2110 root      20   0  128m 1264  988 S  0.0  0.1   0:00.14 python
 2183 root      20   0 78072  600  600 S  0.0  0.0   0:00.00 lwsmd
 2187 root      20   0 79892  668  668 S  0.0  0.0   0:00.06 lwregd
 2198 root      20   0  172m  736  676 S  0.0  0.0   0:00.15 eventlogd
 2217 root      20   0 64960  764  764 S  0.0  0.0   0:00.02 netlogond
 2220 root      20   0 84724 1060  920 S  0.0  0.1   0:24.76 lwiod
 2224 root      20   0  199m 3144 2480 S  0.0  0.2   2:58.53 lsassd
 2306 root      20   0  212m 9776 1908 S  0.0  0.6   5:00.74 heimdall
 2311 root      20   0  3796  436  436 S  0.0  0.0   0:00.00 getty
 2312 admin     20   0  9460 1508 1036 S  0.0  0.1   0:00.01 pyos.sh
 2395 root      20   0 32388 1216 1128 S  0.0  0.1   0:10.14 cardmanager
 2460 root      20   0 37264 2060  804 S  0.0  0.1   0:02.37 lighttpd
 2498 root      20   0     0    0    0 S  0.0  0.0   0:00.08 pdflush
 2526 root      20   0  394m 4864 1544 S  0.0  0.3   0:01.50 python
 2546 root      20   0  150m 1228 1228 S  0.0  0.1   0:02.76 opdata_helper
 2598 root      20   0  129m 3492 3492 S  0.0  0.2   0:00.00 signup
 2685 root      20   0  266m 109m 109m S  0.0  7.1   0:50.20 pdts_proc
 2707 root      20   0  979m 132m 5248 S  0.0  8.6  11:53.24 python
 2710 root      20   0 94616 4628 4584 S  0.0  0.3   0:00.02 arp
 2715 root      20   0  217m 7072 5552 S  0.0  0.4   0:25.30 python
 2746 root      20   0  391m 1184 1120 S  0.0  0.1   0:00.77 python
 2751 root      20   0 13228  464  464 S  0.0  0.0   0:00.00 eventserver
 2761 root      20   0  850m 502m 4108 S  0.0 32.6 292:34.49 java
 2807 root       5 -15 1143m 152m  11m S  0.0  9.9 444:26.86 monocle
 2812 root      15  -5 1114m  66m 7604 S  0.0  4.3  22:48.06 tls_proxy
 2930 root      20   0     0    0    0 Z  0.0  0.0   0:00.00 sh <defunct>
 2934 root      20   0 1050m  11m 5588 S  0.0  0.7   2:15.16 vdi
 2939 root      20   0  297m 4640 4100 S  0.0  0.3  17:53.10 pde
 2946 root      20   0  464m  16m 4712 S  0.0  1.0   2:07.65 monitord
 3098 root      20   0 1052m  80m 8696 S  0.0  5.2  51:21.25 updater_connect
 4501 admin     20   0  9460  892  416 S  0.0  0.1   0:00.00 pyos.sh
 4502 admin     20   0  103m  21m 3656 S  0.0  1.4   0:00.93 python
 4509 root      20   0  8932 1156  956 S  0.0  0.1   0:00.00 top.sh
 4510 root      20   0 16828 1144  880 R  0.0  0.1   0:00.00 top
 4511 root      20   0 13224  632  520 S  0.0  0.0   0:00.00 more
29863 root      20   0     0    0    0 S  0.0  0.0   0:00.31 pdflush

 

Will try to update as soon as possible.

I've already updated the system before since I had "false" failover issues with these modules, slow performance, etc.

 

Thanks

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card