What does the 'rtcli async executor process' process do on a Cisco ASA and why would it cause high CPU load?
I noticed that the CPU on our ASA had jumped from around %4 to 30% consistently a few weeks back. The process below seems to be causing the load, but I can't find any information on what it does and how to resolve the issue.
ASA# sh proc cpu-usage sorted non-zero PC Thread 5Sec 1Min 5Min Process 0x08a24505 0x1bdb0124 25.4% 25.6% 25.6% rtcli async executor process 0x081ecc51 0x1bdc0f3c 4.7% 4.3% 4.1% Dispatch Unit 0x08e4687c 0x1bdc0528 0.3% 0.3% 0.3% ssm4ge_cfg_poll_thread 0x08a496d0 0x1bdbecf8 0.1% 0.1% 0.1% Unicorn Admin Handler 0x0866d56e 0x1bdafd1c 0.1% 0.1% 0.1% ARP Thread
A little more background that has me concerned is that I have the exact time when the jump occurred. Since that time, I've lost ssh access to the ASA and can only access it via Telnet internally or the ASDM. I checked the certificates and a new one was generated exactly when the spike occurred. I am unsure wether or not that was a system triggered certificate generation, or if I have a security issue I need to address. Heartbleed maybe??
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...