glen.grant Sun, 04/09/2006 - 04:07
User Badges:
  • Purple, 4500 points or more

Look at all your interfaces , one of them is probably high and for some reason it looks like it is having to process switch all the traffic , could be anything like a virus etc... Look for a high amount of drops and throttles on a particular interface.

Bobby Thekkekandam Sun, 04/09/2006 - 04:14
User Badges:
  • Cisco Employee,

Hi,


Looking at the "show proc" output, the "95%/0%;" tells me that the utilization is mainly process related rather than interrupt related. the number after the '/' is traffic switched under interrupt.


To troubleshoot further we'll need to look at the individual processes and see which are elevated. could you attach a "show proc cpu"?


thanks,


Bobby

jawwalit Sun, 04/09/2006 - 04:19
User Badges:

this l3 switch is the core switch for our company and also i have another one use as standby (hsrp) it the other one have low utilization how can i split the processing between as to reduce the utilization on the main one


i sent also another file it may contain a useful information this file on the main switch which have the high utilization


thanks



Bobby Thekkekandam Sun, 04/09/2006 - 04:49
User Badges:
  • Cisco Employee,

Hi,


Looking at that output, I see that

"K2L2 Address Table R" is at 47.88%.


This process is related to L2 entries and adjacency updates. The learning of MAC addresses on this box is done in software, so if we keep on learning too many mac addresses you will see a spike of CPU on this process. This may happen in the following

conditions:


- constant receipt of spanning tree topology change BPDUs: on PVST that reduces cam aging and you will see entries being deleted rapidly, on rapid-PVST/MST this flushes the entries. Overall a number of entries may need to be deleted/added again. Make sure you have "switchport host" configured on ports which directly connect to end devices. This will avoid TCN generation when a workstation reboots.


- mac-address moves: where a user will move from one port to another, or a mac address may be looping in the network


Check for TCNs in the network as well as any %C4K_EBM-4-HOSTFLAPPING messages in the log.


HTH,


Bobby


*Please rate helpful posts

jawwalit Sun, 04/09/2006 - 05:02
User Badges:

this happen only when i use a trunk and vlan on the switch how can i reduce the followinh logs is produce by the switch:





Attachment: 
mahmoodmkl Sun, 04/09/2006 - 05:17
User Badges:
  • Gold, 750 points or more

HI


There is a loop in u r network.if u have redundant links disconnect one by one and check if the cpu level goes down.


Thanks

Mahmood

Actions

This Discussion