high CPU usage on a firewall module in cat 6513

[admin_2]

Hello,

the CPU usage is about 77% permanently. Ther are 3700 connections app.

What can cause this CPU utilization and how can found out the reason, which debugs or monitoring commands are helpful?

Thanks in advance and best regards

[pavlosd]

I would suggest looking for similar connection patterns. I faced a similar problem with an internal DNS server trying to open hundreds of UDP connections for syncronization. The most usefull commands (which I guess you are already using)

show cpu usage

show conn

Look throu:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Another idea is to monitor your LAN using a network analyser (i,e. ethereal) to see what is causing so many connections. Do you have any VLANS at all?

[#3]

Hi,

thanks for your attention and your recommandations!

Yes, we have VLANS indeed, but I don't think, this is not the point of problem.

First I will have a look at your recommended link.