cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1152
Views
0
Helpful
2
Replies

hello guys , i m having an issue with high cpu on my ASA 5520 firewall

andy akpa
Level 1
Level 1

asafirewall# show proc

    PC       SP       STATE       Runtime    SBASE     Stack Process

Mwe 00c9bb24 02068500 013e3250          0 01734830 15616/16384 emweb/cifs

Lwe 001072ac 0177022c 013e32d0          0 0176e258 8132/8192 block_diag

Mrd 00223be0 018b12dc 013e33b0  170827635 018a9398 25784/32768 Dispatch Unit

Mwe 0044432d 018b62b4 013e3250          0 018b4350 7848/8192 CF OIR

Msi 00c28db4 01f17fac 013e3250     226400 01f16028 7056/8192 ssm4ge_cfg_poll_thread

Mwe 0011b1a5 01fa99f4 013e3250          0 01fa7a80 7864/8192 Reload Control Thread

Mwe 00120606 01fb2304 013e5258          1 01fb0680 4720/8192 aaa

Mwe 001486aa 01fb90fc 013e5ae8        983 01fb5148 16020/16384 CMGR Server Process

Mwe 0014c3c5 01fbb1cc 013e3250       1447 01fb9268 7880/8192 CMGR Timer Process

Lwe 002227a1 01fc57cc 013ee360          0 01fc3808 7524/8192 dbgtrace

Msi 004be3b4 01fcbb3c 013e3250        829 01fc9b68 7908/8192 557mcfix

Msi 004be206 01fcdc5c 013e3250          0 01fcbc88 7968/8192 557statspoll

Mwe 01064b1d 01ff5784 013e3250          0 01ff3820 7848/8192 Chunk Manager

Msi 008b61b6 01ffdce4 013e3250       1373 01ffbd30 7856/8192 PIX Garbage Collector

Lsi 00ecb6ac 01fffe24 013e3250        121 01ffde50 7552/8192 route_process

Mwe 008a5ddc 0200a174 0133b430          0 020081b0 8116/8192 IP Address Assign

Mwe 00acb779 02010044 01346e10          0 0200e080 8116/8192 QoS Support Module

Mwe 0091eba9 0201219c 0133c530          0 020101d8 8116/8192 Client Update Task

Lrd 01083691 020149fc 013e3570      81797 02012ab8 7796/8192 Checkheaps

Mwe 00acfd7d 0201ab6c 013e3250          0 02018e18 6804/8192 Quack process

Mwe 00b2a260 0201d514 013e3250         87 0201b630 7364/8192 Session Manager

Mwe 00c55efd 02028364 04174a10          6 02024850 14768/16384 uauth

Mwe 00be3c9e 0202a8ec 0135c010          0 02028928 7524/8192 Uauth_Proxy

Mwe 00c52759 02030c0c 01361770          0 0202ec88 7712/8192 SMTP

Mrd 00c42d4d 02032cbc 013e33b0    6155076 02030da8 7412/8192 Logger

Mwe 00c3fd26 02034e2c 013e3250          0 02032ec8 7492/8192 Thread Logger

Mwe 00f62272 0204576c 013ac520          0 020437c8 7188/8192 vpnlb_thread

Msi 00b4097c 021096c4 013e3250        467 021076f0 8000/8192 emweb/cifs_timer

Msi 005bd338 01ff3694 013e3250      22518 01ff1700 7476/8192 arp_timer

Mwe 005c76bc 01fcfd1c 013fba50          0 01fcdda8 7960/8192 arp_forward_thread

Msi 00c5a849 028bb7cc 013e3250        421 028b9818 7968/8192 tcp_fast

Msi 00c5a589 028bd7f4 013e3250        168 028bb840 6768/8192 tcp_slow

Mwe 00c754d1 028ce5fc 013628a0          0 028cc648 8100/8192 udp_timer

Mwe 0019cb17 01feba74 013e3250          0 01fe9b00 7984/8192 CTCP Timer process

Mwe 00efe8b3 03ed29a4 013e3250          0 03ed0a50 7952/8192 L2TP data daemon

Mwe 00efef23 03ed49dc 013e3250          0 03ed2a78 7968/8192 L2TP mgmt daemon

Mwe 00eea02b 03f0caf4 013a5c10        179 03f08b80 16244/16384 ppp_timer_thread

Msi 00f62d57 03f0eb3c 013e3250        643 03f0cba8 7936/8192 vpnlb_timer_thread

Mwe 001b96e6 0202c9bc 01fc07e0          1 0202aa48 7728/8192 IPsec message handler

Msi 001c9bac 0203d2cc 013e3250      13758 0203b338 6536/8192 CTM message handler

Mwe 00af93b8 040eab4c 013e3250          0 040e8bd8 7984/8192 ICMP event handler

Mwe 00831003 040eecbc 013e3250        996 040ead48 15108/16384 IP Background

Mwe 0021b267 0414c95c 013123c0       1089 0412c9e8 121568/131072 tmatch compile thread

Mwe 009f2405 042345dc 013e3250          0 04230658 16072/16384 Crypto PKI RECV

Mwe 009f305a 042386dc 013e3250          0 04234778 16040/16384 Crypto CA

Lsi 008cbb80 01fbd35c 013e3250         12 01fbb388 8000/8192 uauth_urlb clean

Lwe 008afee7 044401ec 013e3250       2235 0443e288 6468/8192 pm_timer_thread

Mwe 0052f0bf 04442edc 013e3250          0 04440f78 7968/8192 IKE Timekeeper

Mwe 00520f6b 044482e4 0132e2b0          0 04444640 15448/16384 IKE Daemon

Mwe 00bf5c78 0444bda4 01360680          0 04449df0 8100/8192 RADIUS Proxy Event Daemon

Mwe 00bc32de 0444dc9c 02015c10          1 0444be18 7184/8192 RADIUS Proxy Listener

Mwe 00bf5e0f 0444fda4 013e3250          0 0444de40 7968/8192 RADIUS Proxy Time Keeper

Mwe 005aac4c 04451d6c 013fb980          0 0444fe68 7492/8192 Integrity FW Task

Mwe 002385ec 0448b694 01126828       1002 04483df0 25172/32768 ci/console

Msi 00472460 0448dd9c 013e3250        253 0448be18 6368/8192 fover_thread

Mwe 00ec49c5 0448fd94 014d4f08         35 0448de40 7664/8192 lu_ctl

Msi 008eb694 04491bfc 013e3250       8122 0448fe68 6076/8192 update_cpu_usage

Msi 008e6415 0449bdac 013e3250      21438 04499eb8 3136/8192 NIC status poll

Mwe 00461afc 044a1d74 013f5860          0 0449ff30 7732/8192 fover_rx

Mwe 00465444 044a3ecc 013f58c4          0 044a1f58 8036/8192 fover_tx

Mwe 00463dd3 044a5f24 013fbaf0          0 044a3f80 8040/8192 fover_ip

Mwe 00478299 044a9d4c 013f58d8          0 044a5fa8 15688/16384 fover_rep

Mwe 0046e015 044adc54 013f58e0        287 044a9fd0 15396/16384 fover_parse

Mwe 004557b3 044aff3c 013f38b0        153 044adff8 7972/8192 fover_ifc_test

Mwe 0045920d 044b1f84 013e3250          0 044b0020 7968/8192 fover_health_monitoring_thread

Mwe 0048a4be 044b61c4 013e3250          0 044b4270 7952/8192 ha_trans_ctl_tx

Mwe 0048a4be 044c9214 013e3250          0 044c72c0 7952/8192 ha_trans_data_tx

Mwe 0047fe8f 044cb25c 013e3250          0 044c92e8 7776/8192 fover_FSM_thread

Mwe 00ec42cb 044cdd24 013fbbf0          0 044cbd60 7992/8192 lu_rx

Lwe 00ec41ec 044cfd5c 014d4e28          0 044cdd88 8132/8192 lu_dynamic_sync

Mwe 005b63e6 04571944 013fbd10       3125 0456f9a0 7556/8192 IP Thread

Mwe 005becbe 04573a74 013fbcb0      20075 04571ac0 4064/8192 ARP Thread

Mwe 004c2b36 04575af4 013fbae0        835 04573be0 5556/8192 icmp_thread

Mwe 00c7722e 04577c64 013e3250        241 04575d00 7848/8192 udp_thread

Mwe 00c5d126 04579c84 013fbd00       1660 04577e20 5976/8192 tcp_thread

Mwe 0091431d 0472e6ec 013e3250         44 0472a778 15984/16384 Time Range Process

Mwe 00bc32de 0477beb4 01fc5938          1 0477a040 7512/8192 EAPoUDP-sock

Mwe 00266c15 0477dd94 013e3250          0 0477c160 7032/8192 EAPoUDP

Mwe 00c756e0 04e017bc 028cc2d4       5976 04dffed8 4036/8192 snmp

Mwe 00c5fe0d 04e0c954 0580e840          0 04e0aae0 7340/8192 listen/telnet

Mwe 00c5fe0d 04e0f16c 057e6608          0 04e0d2f8 7312/8192 listen/ssh

Mwe 00f32d0d 050fb824 013aba38          0 050f9870 8100/8192 vpnfol_thread_msg

Msi 00f38812 050fd83c 013e3250       1311 050fb898 7920/8192 vpnfol_thread_timer

Mwe 00f37032 050ff904 013abba0          0 050fd970 8068/8192 vpnfol_thread_sync

Msi 00f3837c 051019fc 013e3250       6515 050ffa48 7872/8192 vpnfol_thread_unsent

Mwe 005a6728 0ab9472c 013e3250          0 0ab927c8 7968/8192 Integrity Fw Timer Thread

Mwe 00c0f643 070c0164 013e3250          0 070be200 6384/8192 ssh/timer

M*  00c081c4 0009fefc 013e33b0        244 07c4d2b8 9072/16384 ssh

Lwe 0090c64b 066213cc 013e3250          0 0661f488 7880/8192 vPif_stats_cleaner

-     -        -         -      50550686    -         -     scheduler

-     -        -         -     228063587    -         -     total elapsed

2 Replies 2

andy akpa
Level 1
Level 1

asafirewall# show processes cpu-hog

Process:      Dispatch Unit, NUMHOG: 3, MAXHOG: 1007, LASTHOG: 1010

LASTHOG At:   12:17:25 UTC Oct 29 2013

PC:           2fed5e

Traceback:    302fc9  2fad69  7674bf  75ca16  c6251d  c62a4c  c62f6c

              75c653  767820  769cbe  645d83  223b5a  114b1f

Process:      ssm4ge_cfg_poll_thread, NUMHOG: 6, MAXHOG: 4120, LASTHOG: 770

LASTHOG At:   20:02:48 UTC Oct 28 2013

PC:           1088f0b

Traceback:    109ca1d  109cdd7  108962d  c2954b  c3ca0e  c371b5  c3ae76

              c3d845  c2928a  114b1f

Process:      NIC status poll, NUMHOG: 1, MAXHOG: 228, LASTHOG: 230

LASTHOG At:   07:41:57 UTC Oct 31 2013

PC:           10caaa

Traceback:    10cb33  4ba07f  4bc28b  4bcd30  4b4541  4b67d3  4b92db

              224374  2238f8  a8e802  646781  8e671c  114b1f

asafirewall# show cp               

asafirewall# show cpu ?

  profile  Show CPU profiling data

  usage    Show CPU usage information

  |        Output modifiers

 

asafirewall# show cpu us

asafirewall# show cpu usage

CPU utilization for 5 seconds = 98%; 1 minute: 99%; 5 minutes: 99%

Looking at the CPU info it's delated to data path.

Start by enabling unicastRPF across all interfaces then dig into what's hitting that firewall.

Open up a TAC case to make the process faster.

Review Cisco Networking products for a $25 gift card