This EEM script (TCL policy) monitors the I/O memory of an IOS router and also keeps track of the IKE buffers. It sends a syslog when the memory drops below EEM_IKE_BUFF_INCR_THRES % level while the IKE buffers have dropped EEM_IKE_BUFF_INCR_THRES consecutive times. If the IKE buffers are freed at some point the counter starts counting from scratch. After generating the memory leak syslog the script re-initializes and will throw a new syslog when the conditions are met again.
This policy requires the followin EEM environment variables to be set:
EEM_MEM_LEAK_INTERVAL <1-100> (seconds)
EEM_MEM_LEAK_MAX_RUNTIME <1-100> (seconds)
EEM_FREE_MEMORY_THRES <1-100 percent>.
An example of the EEM policy commands commands that are needed on the router after copying the tcl script eem_ike_mem_leak.tclin the router flash: are
Note for IOS-XE: The script will not work with IOS-XE devices as is because the output of "show buffers leak resource user" does not include "Crypto IKE" output buffers. For IOS-XE, substitute "show buffers leak resource user | include Crypto IKE" in the script with "show buffers leak resource user | include IPSEC key".