Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

cisco asa control point 100%

Hi All,

What does the 100% below means. Does it indicate that the system is currently under huge cpu intensive load ?

Current control point elapsed versus the maximum control point elapsed for:

      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0% Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0%

  • Firewalling
7 REPLIES
Cisco Employee

cisco asa control point 100%

Hello,

Yes. It may be. However, you can check the output of Show CPU usage. Normally if the control Point is under 100% the ASA mostlikely would be too.

Have in consideration the following bug:

https://tools.cisco.com/bugsearch/bug/CSCtl91471

If you need further assistance, use the show process CPU usage sorted and paste it here, or open a TAC case.

Mike

Mike
New Member

cisco asa control point 100%

Hi Mike,

Can you please copy and paste the above bug symptom, condition and etc.. i am unable to view this in bool toolkit. It gives Insufficient Permissions to View Bug.

Cisco Employee

cisco asa control point 100%

Well I am unable to provide details, however let me know what version are you running into. Along with the output:

ciscoasa(config)# show cpu usage detail

Mike

Mike
New Member

cisco asa control point 100%


firewall# show cpu detailed

Break down of per-core data path versus control point cpu usage:
Core         5 sec            1 min            5 min
Core 0       1.2 (0.0 + 1.2)  2.1 (0.0 + 2.1)  1.8 (0.0 + 1.8)

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100.0%

Firewall Version 8.2(5)

New Member

I faced a similar issue and

I faced a similar issue where I can see my ASA Firewall also showing "Current control point elapsed versus the maximum control point elapsed for" 100% and the meaning of this output is not clear, I took help of CIsco TAC to find what does it mean and as per Cisco TAC the 100% is the amount of CPU available to process which is good as per below output.

Break down of per-core data path versus control point cpu usage:
Core         5 sec              1 min              5 min
Core 0       47.8 (0.0 + 47.8)  49.2 (0.0 + 49.2)  50.1 (0.0 + 50.1)

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%


CPU utilization of external processes for:
      5 seconds = 0.0%; 1 minute: 0.0%; 5 minutes: 0.0%


Total CPU utilization for:
      5 seconds = 47.8%; 1 minute: 49.3%; 5 minutes: 50.1%

New Member

Hi Yogesh, What did TAC say

Hi Yogesh, What did TAC say about this ?

New Member

As per Cisco TAC under the

As per Cisco TAC under the output section of commadn "sh cpu detailed" the "Current control point elapsed versus the maximum control point elapsed for:" the <amount>% is the amount of CPU available.

for example in below output the 100% CPU is available for 5 seconds, 99.7% is available last 1 minute and 100% available for last 5 minutes

Current control point elapsed versus the maximum control point elapsed for:
      5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%

1013
Views
10
Helpful
7
Replies
This widget could not be displayed.