excessive CPU overhead?

[emilio1973]

Hi all,

This equipment is new and I'm experiencing too  slowly when I connect via SSH, access privileged mode, or typing  commands like "show run" for example.

At first glance there  appears to be excessive consumption (CPU utilization for five seconds:  2% 1% one minute: 3% five minutes: 2%), but I am very worried and wanted  to find a solution.

Does anyone know which may  be due, and how could I fix it?

Thanks

gw1-virtual#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 2%/1%; one minute: 3%; five minutes: 2%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
174     1040000   225509114          0  0.23%  0.24%  0.23%   0 HQF Shaper Backg
114   952740000    11150632         85  0.15%  0.08%  0.07%   0 IP Input      
  23      424000        1089        389  0.15%  0.15%  0.03% 388 SSH Process   
  86     1384000     1808318         0  0.07%  0.02%  0.02%   0 BPSM stat Proces

[emilio1973]

This is the output of "show interface G0/0" command:

GW-ABCD#sh int gigabitEthernet 0/0
GigabitEthernet0/0 is up, line protocol is up
  Hardware is CN Gigabit Ethernet, address is12ws.xx (bia ssxx.xxss.yyyy)
  Description: LAN ABCD
  Internet address is xxx.yyy.z.yy/26
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 242/255, txload 1/255, rxload 4/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, media type is RJ45
  output flow-control is unsupported, input flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 1899000 bits/sec, 237 packets/sec
  5 minute output rate 783000 bits/sec, 230 packets/sec
     114910363 packets input, 579299624 bytes, 0 no buffer
     Received 153712 broadcasts, 0 runts, 0 giants, 0 throttles
     11940352 input errors, 5970176 CRC, 534560 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     0 input packets with dribble condition detected
     109304271 packets output, 1527252245 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     4 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

I do not see SP or RP "drops" so  rule out that the problem is in the LAN

gw1-virtual#sh int gigabitEthernet 0/0 switching
GigabitEthernet0/0 LAN MAATG
          Throttle count          0
                   Drops         RP          0         SP          0
             SPD Flushes       Fast          0        SSE          0
             SPD Aggress       Fast          0
            SPD Priority     Inputs     260607      Drops          0

[Panos Kampanakis]

~3% CPU is very low. You should not worry.

When you connect with ssh the device will generate RSA DH numbers and it is normal to spike your CPU a little.

But still 1-3% is very very low and you should not consider it as high CPU.

To check what processes take up your CPU do "sh process" twice with 30 sec difference and do the diff on the processes to see which one took up most of the cpu during the 30seconds.

PK

[emilio1973]

Hi

add the output.  can not interpret. Can you help me ?

gw1-abcdl#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 1%/0%; one minute: 1%; five minutes: 1%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
   5   493256000      132910       3711  0.39%  0.07%  0.05%   0 Check heaps   
174     1072000   244871446          0  0.23%  0.23%  0.23%   0 HQF Shaper Backg
114  1025512000    11987107         85  0.07%  0.12%  0.09%   0 IP Input      
  23      704000        2981        236  0.07%  0.16%  0.04% 388 SSH Process   
gw1-abcd#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 1%/0%; one minute: 1%; five minutes: 1%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
   5   493268000      132916       3711  0.23%  0.05%  0.05%   0 Check heaps   
174     1072000   244881725          0  0.23%  0.23%  0.23%   0 HQF Shaper Backg
110      404000    30648734          0  0.07%  0.03%  0.02%   0 IPAM Manager  
114  1025568000    11987657         85  0.07%  0.12%  0.09%   0 IP Input     

[Panos Kampanakis · Accepted solution]

Your cpu is 0-1%. The processes look normal and low.

I don't understand what your concern is.

PK

[emilio1973]

Hi, I'm  sorry for not having explained:

what I  mean is if you think that the slowness is related to the consumption of  CPU or anything else (bad configuration, etc.) related to this other  thread.

https://supportforums.cisco.com/message/3057549#3057549

Thanks for your help

[Panos Kampanakis]

I don't think it is the CPU.

Please check the interface that you are ssh-ing for duplex mismatch with what it connects, and errors.

Also check for packet loss in the path to your computer.

Also if you are doing command authorization check if the ASA has connectivity issues to the ACS server.

These are what I would suspect.

PK

[emilio1973]

Ok,

I'll  keep looking. Thanks for your help