Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Need Help CAT4HK High CPU suspected high host learning process

I got an unusual high CPU utilization for my CAT4 during unusual hour of the day, The following times are

show ver is

#show version

Cisco Internetwork Operating System Software

IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-I9K2S-M), Version 12.1(19)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

TAC Support:

Copyright (c) 1986-2003 by cisco Systems, Inc.

Compiled Mon 28-Jul-03 15:59 by eaarmas

Image text-base: 0x00000000, data-base: 0x010254B4

ROM: 12.1(12r)EW

Dagobah Revision 86, Swamp Revision 28

XXXX uptime is 21 weeks, 13 hours, 0 minutes

System returned to ROM by power-on

System restarted at 05:25:12 SGP Mon May 22 2006

System image file is "bootflash:cat4000-i9k2s-mz.121-19.EW1.bin"

cisco WS-C4506 (XPC8245) processor (revision 7) with 524288K bytes of memory.

Processor board ID XXXXX

Last reset from PowerUp

62 Gigabit Ethernet/IEEE 802.3 interface(s)

403K bytes of non-volatile configuration memory.

Configuration register is 0x2102

Below are the timings from my MRTG

Date Start Time End Time Duration

4-Oct-06 9:00 11:00 2:00

10-Oct-06 18:30 20:30 2:00

12-Oct-06 17:00 19:30 2:30

13-Oct-06 16:00 19:00 3:00

16-Oct-06 8:45 18:00 9:15

The show platform cpu packet statistics is attached.

I check on the PDF file see attached , but I can't find any relating to host learning, seems like something is doing some hacking in the network? any suggestions?


Re: Need Help CAT4HK High CPU suspected high host learning proce


The STP looks stable and hence we can rule out that case.

However I could also see that "K2FibAdjMan Host Mov" process is also consuming cpu resources.

Check whether any host connected to the switching is flapping frequently.

Check whether you could get any useful information from "show logging" or if you have any syslog captured from the switching, examine those logs to see if you notice any huge host flapping events occurring during that time.

Check this link for more details on this

Hope this helps.


CreatePlease login to create content