Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

High CPU Utilization on cisco C3750 switch.

Hello Team,

We have one cisco 3750 switch which is facing issue of High cpu utilization from last few days.

Need your support to find out the root cause of this abnormality & resolution.

As a part of troubleshooting I found below information, but not found resolution over there. Please suggest.

Nov  9 18:35:18.755 IST: %HA_EM-6-LOG: CPU_Risingtest: Cpu_Spike_Triggered
Nov 10 12:10:50.897 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 10 12:29:31.675 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 17 12:21:45.931 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 17 19:40:45.535 IST: %SYS-1-CPUFALLINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr) 9%/1%.
Nov 23 19:44:43.030 IST: %SYS-1-CPURISINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr): 75%/1%, Top 3 processes(Pid/Util):  319/65%, 221/3%, 155/0%
Nov 23 19:44:43.265 IST: %HA_EM-7-LOG: CPU_Risingtest: cli:
CPU utilization for five seconds: 75%/1%; one minute: 16%; five minutes: 12%
 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
 319    16918213    951955      17772 65.49%  5.24%  1.08%   0 crypto sw pk pro
 221  14100592291495082375        943  3.51%  3.48%  3.51%   0 Spanning Tree    
  68    154501362008200680          7  0.15%  0.06%  0.05%   0 Fifo Error Detec
 145    90871465 912985295         99  0.15%  0.27%  0.29%   0 Hulc LED Process

Device is using SSH to take access of device, the RSA key will be generated every hour and you can experience hourly cpu spikes for the process 'crypto sw pk pro

Its obvious behavior.

One option to resolve this issue is to reduce the volume of encrypted traffic (re-route traffic or limit the flows that are encrypted). However, the best way to address this issue is to get a Hardware Encryption module installed for this device which eliminates the need for encryption to take place through the software.

2 REPLIES
Hall of Fame Super Blue

Post the complete output to

Post the complete output to the following commands: 

1.  sh proc cpu sort | ex 0.00; 

2.  sh run b | i snmp

Community Member

Hi Leo,

Hi Leo,

Sorry for delayed response !! :( . I was busy with another major cases .

But the issue got resolved after doing some changes on the same related to encrypted traffic rerouting.

This change had been done by customer only, so I don't have any Idea about how they had done the same.

BTW ..

Thanks for the revert.

86
Views
5
Helpful
2
Replies
CreatePlease to create content