According to your output , especially your 1 hour graph show periodic spikes. CPU reaches to a peak value , followed by a fall down. This has happened periodically , which makes me think of a periodic activity like a Network Management Server polling some values via SNMP. But I totally agree with Guislar , show proc cpu sorted will help a lot.
show proc cpu sorted will be the most valuable command when you detect the CPU is in a peak. Then, check if process 'Port manager per' is on the top of the list. From time to time, that process overload that particular supervisor model.
Following checks would also help:
1. Number of routes and memory they are consuming.
2. Possible span ports with too much traffic, specially when traffic from many vlans is being spanned.
3. Netflow statistics. For example using command 'sh ip cache flow | i K'
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...