04-27-2007 10:49 AM - edited 03-03-2019 04:44 PM
Hi Guys,
Our Customer have one 7600 that is presenting problem of performance. When I type "show proc cpu sorted" in the interface GE-WAn display the process "CEF Scanner" in 60%. What it is this process? which is its affectation?
04-29-2007 07:01 AM
Hi,
What is your IOS version? Please post "show version" output.
CEF Scanner process computes new L2 adjacency when there is a MAC rewrite.
Dandy
05-02-2007 04:12 AM
Hi Dandy,
It follows below the show version
The version is 12.2(18)SXF4
Thank You,
Wilson
05-02-2007 04:48 AM
Hi,
There's multiple problem with that IOS including high CPU util, not CEF Scanner though but I recommend you upgrade your IOS first.
http://www.cisco.com/en/US/products/products_security_advisory09186a00807f413e.shtml
Dandy
04-29-2007 11:12 PM
HI Wilson, [Pls Rate if Helps ! !]
We too had the same problem of over loaded CPU of 7206 VXR Router upto 85% in a Site.
After several Investigations, we already had "Netflow" implemented in our Routers. Noticed that Several Client IP's in BO has communicated to single IP in HO for particular service & initiated more than 1000 IP sessions. This made the CPU Load go High upto 85%
So, without any best analyser like "Netflow" you will not be able to Investigate & Identify the Root Cause for this Situation.
Pls Rate If Helps ! !
Best Regards,
Guru Prasad R
05-02-2007 04:46 AM
Hi,
I add my voice to Guru, enable Netflow on the interface and try to investigate any malicious traffic.
interface x
ip route-cache flow
and then do "sh ip cache flow".
HTH, please rate if it does help,
Mohammed Mahmoud.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide