cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
485
Views
0
Helpful
7
Replies

Increased CPU usage after upgrade to 6.3(3)

haver
Level 1
Level 1

After upgrade of my 515 (not 515E), the average CPU usage went from 4% to around 12%. ACLs are same and so are the traffic patterns/load. Firewall ran 6.3(1) before the upgrade.

Any idea why this could be the case?

TIA,

haver

7 Replies 7

tohuang
Level 1
Level 1

Hi ,

Can you send us the output of show run and show process?

Thanks

Tony

Here are the relevant outputs. I can't post the config here, but you can contact me at srseh@orange.dk and I'll send it in a private email.

ows-devtest-fw# sh ver

Cisco PIX Firewall Version 6.3(3)

Cisco PIX Device Manager Version 3.0(0)148

Compiled on Wed 13-Aug-03 13:55 by morlee

ows-devtest-fw up 3 days 21 hours

Hardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHz

Flash i28F640J5 @ 0x300, 16MB

BIOS Flash AT29C257 @ 0xfffd8000, 32KB

ows-devtest-fw# sh conn count

5 in use, 15 most used

ows-devtest-fw# sh xlate count

6 in use, 6 most used

ows-devtest-fw# sh cpu u

CPU utilization for 5 seconds = 16%; 1 minute: 17%; 5 minutes: 21%

ows-devtest-fw#

ows-devtest-fw# sh proc

PC SP STATE Runtime SBASE Stack Process

Hsi 001eaa09 00a1a3c4 00555860 0 00a1943c 3628/4096 arp_timer

Lrd 001effad 00abd5bc 00555d28 0 00abc644 3928/4096 FragDBGC

Lwe 00119abf 00b3e8f4 00558fc0 0 00b3da8c 3688/4096 dbgtrace

Lwe 003e3f55 00b40a84 00555d28 0 00b3eb3c 8008/8192 Logger

Hsi 003e806d 00b43b7c 00555860 0 00b41c04 8024/8192 tcp_fast

Hsi 003e7f0d 00b45c2c 00555860 0 00b43cb4 8024/8192 tcp_slow

Lrd 003006f9 00c7c21c 00555d28 0 00c7b294 3944/4096 xlate clean

Lrd 00300607 00c7d2bc 00555d28 0 00c7c344 3928/4096 uxlate clean

Mwe 002f82d3 00e156bc 00555860 0 00e13724 7908/8192 tcp_intercept_timer_process

Lrd 0043a545 00ebff74 00555d28 0 00ebefec 3944/4096 route_process

Hsi 002e80f4 00ec1004 00555860 0 00ec009c 2748/4096 PIX Garbage Collector

Hwe 00217101 00ecb134 00555860 0 00ec71cc 16064/16384 isakmp_time_keeper

Lrd 002e5e74 00ee4e64 00555d28 0 00ee3edc 3944/4096 perfmon

Mwe 0020e719 00f0f294 00555860 0 00f0d31c 7860/8192 IPsec timer handler

Hwe 0039a4db 00f23e0c 00570980 0 00f21ec4 7048/8192 qos_metric_daemon

Mwe 00261395 00f3e944 00555860 0 00f3a9dc 15756/16384 IP Background

Lwe 002f8f4a 00ff1654 0056bc98 0 00ff07dc 3704/4096 pix/trace

Lwe 002f9182 00ff2704 0056c3c8 0 00ff188c 3704/4096 pix/tconsole

Hwe 0011f217 01004944 00502bc0 0 01000e7c 14732/16384 ci/console

Hwe 00433b3a 01006694 005cac68 0 0100575c 3684/4096 lu_ctl

Csi 002f0fd3 01007764 00555860 0 0100680c 3540/4096 update_cpu_usage

Hwe 002dcba1 010ab6fc 00534c00 0 010a7874 15884/16384 uauth_in

Hwe 003e6b5d 010ad7fc 00af29d8 0 010ab924 7896/8192 uauth_thread

Hwe 003fce0a 010ae94c 0054e788 0 010ad9d4 3960/4096 udp_timer

Hsi 001e2636 010b05f4 00555860 0 010af67c 3928/4096 557mcfix

Crd 001e25eb 010b16b4 00555cd8 4921940 010b072c 3640/4096 557poll

Lrd 001e26a5 010b2754 00555d28 0 010b17dc 3928/4096 557timer

Cwe 001e4229 010c882c 00725dc8 8100 010c6934 6940/8192 pix/intf0

Mwe 003fcb7a 010c993c 00b3b600 0 010c8a04 3896/4096 riprx/0

Msi 003a3999 010caa4c 00555860 0 010c9ad4 3888/4096 riptx/0

Cwe 001e4229 010d0be4 0079b358 202290 010cecec 6392/8192 pix/intf1

Mwe 003fcb7a 010d1cf4 00b3b5b8 0 010d0dbc 3896/4096 riprx/1

Msi 003a3999 010d2e04 00555860 0 010d1e8c 3888/4096 riptx/1

Cwe 001e4229 010d8f9c 008108f0 359410 010d70a4 6264/8192 pix/intf2

Mwe 003fcb7a 010da0ac 00b3b570 0 010d9174 3896/4096 riprx/2

Msi 003a3999 010db1bc 00555860 0 010da244 3888/4096 riptx/2

Cwe 001eccfd 010e13c4 009e69b8 0 010df45c 8040/8192 pix/intf3

Mwe 003fcb7a 010e2464 00b3b528 0 010e152c 3896/4096 riprx/3

Msi 003a3999 010e3574 00555860 0 010e25fc 3888/4096 riptx/3

Cwe 001eccfd 010e977c 009e6910 0 010e7814 8040/8192 pix/intf4

Mwe 003fcb7a 010ea81c 00b3b4e0 0 010e98e4 3896/4096 riprx/4

Msi 003a3999 010eb92c 00555860 0 010ea9b4 3888/4096 riptx/4

Cwe 001eccfd 010f1b34 009e6868 0 010efbcc 8040/8192 pix/intf5

Mwe 003fcb7a 010f2bd4 00b3b498 0 010f1c9c 3896/4096 riprx/5

Msi 003a3999 010f3ce4 00555860 0 010f2d6c 3888/4096 riptx/5

Hsi 00434921 010f5efc 00555860 0 010f4f84 3928/4096 lu_xmit_timer

Hwe 00433665 010f6f9c 00551f38 0 010f6034 3900/4096 lu_rx

Hwe 001b0a19 011320ac 0055d4d8 0 01131144 2296/4096 fover_thread

Hwe 0011f217 01132e04 00502c18 0 0113215c 3204/4096 fover_rx

Hwe 001b3791 011340ec 0055db5c 0 01133174 3960/4096 fover_tx

Hwe 001b0c44 01135104 0055db68 0 0113418c 3960/4096 fover_rep

Lwe 001b0dfd 0113612c 0055db70 0 011351a4 3976/4096 fover_lu_rep

Hwe 001b3d72 0113a134 0055db78 0 011361bc 16212/16384 fover_parse

Mwe 003fcb7a 0114d73c 00b3b450 0 0114c804 3896/4096 riprx/6

Msi 003a3999 0114e84c 00555860 0 0114d8d4 3888/4096 riptx/6

Mwe 003fcb7a 011586ac 00b3b408 0 01157774 3896/4096 riprx/7

Msi 003a3999 011597bc 00555860 0 01158844 3888/4096 riptx/7

Mwe 003e6b5d 011bf614 00af29f8 0 011bd74c 6660/8192 tacplus_get

Mwe 0039fada 011c1764 00570ac8 0 011bf7fc 7036/8192 tacplus_snd

Mrd 00257cad 011ce4ac 00555898 0 011cd534 3436/4096 ntp

Mrd 00269519 011d055c 00555898 112060 011ce5e4 6328/8192 OSPF Router

Mrd 00269519 011d267c 00555898 114440 011d0704 6328/8192 OSPF Router

Mrd 00269cb9 011d66ec 00555898 139410 011d27b4 15196/16384 OSPF Hello

Mrd 00269cb9 011da704 00555898 140060 011d67cc 15196/16384 OSPF Hello

Mwe 003fcb7a 011db70c 00b3b3c0 0 011da7e4 3548/4096 ntp7

Hwe 003fcb7a 011dc1a4 00b3b330 17740 011db7fc 900/4096 snmp

Hwe 003fcb7a 011dcb5c 00b3b378 0 011dc814 840/1024 snmp_ex

Hwe 003e6df1 011dd674 00ac9160 0 011dd02c 1196/2048 listen/ssh_0

Hwe 003e6df1 011ddf24 00ac9258 0 011dd8dc 1196/2048 listen/ssh_6

Hwe 003e6df1 011de834 00ac9540 0 011de1ec 1196/2048 listen/ssh_7

Mwe 00370852 011e0dec 00555860 270 011dee74 5476/8192 Crypto CA

Dxx 003d9c8c 011e8dd8 00555898 1180 011e6e24 5452/8192 ssh_init

Mwe 003e0b11 011ebdd4 00555860 0 011e9e5c 7872/8192 ssh/timer

Dxx 003e76e9 011f2eb8 00555898 770 011f0f04 1288/8192 ssh

Dxx 003d9c8c 011faf20 00555898 5010 011f8f6c 5372/8192 ssh_init

Dxx 003d9c8c 011fdf50 00555898 1810 011fbf9c 5452/8192 ssh_init

M* 003d9c8c 0009ff2c 00555898 70 011fdfb4 3656/8192 ssh

nkhawaja
Cisco Employee
Cisco Employee

Hi,

Could it be beacuse of the recent worms floating on the intenret.

Thanks

Nadeem

I don't think so. The incrased CPU usage happened right after upgrde to 6.3(3). I've been monitoring the firewall since, and everything is the same as before. I.e. number of average concurrent connections, memory usage, xlate counts, etc.

Anybody else seen this? I upgraded my 515E firewalls and got the same results. CPU usage increased 4 times.

Can someone shed some light on this?

I noticed the same problem with my 515's when I upgraded to 6.3(3). Average increase is between 5 and 7%.

I noticed the same thing awhile ago when upgrading from 6.1 to 6.2.

Cheers,

-Joshua

I had to downgrade all my 6.3(3) PIX'es to 6.3(1). Not only did the CPU usage increased, but VPN stopped working and PIX'es stopped logging messages.

Something is _really_ broken in 6.3(3) or they are not meant to be used with 515E or 515 series.

Just my .02 cents.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: