topic Re: ASA 5506X showing high system memory utilization in Network Security

ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 17:34:55 GMT

Why do I see only 1G memory when I have 4G memory?

sh mem
Free memory: 156208310 bytes (14%)
Used memory: 960881936 bytes (86%)
------------- ------------------
Total memory: 1117090246 bytes (100%)

sh version

Cisco Adaptive Security Appliance Software Version 9.9(2)47
Firepower Extensible Operating System Version 2.3(1.144)
Device Manager Version 7.9(2)152

show module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5506-X with FirePOWER services, 8GE, AC, ASA5506
sfr FirePOWER Services Software Module ASA5506

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 7872.5d78.9fc5 to 7872.5d78.9fce 2.1 1.1.12 9.9(2)47
sfr 7872.5d78.9fc4 to 7872.5d78.9fc4 N/A N/A 6.2.2-81

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.2.2-81

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Up Up

Re: ASA 5506X showing high system memory utilization

Sheraz.Salim — Wed, 11 Mar 2020 18:17:42 GMT

1 GIG is used for ASA code and remaining is used for Firepower SFR sensor.

to check give command on ASA.

show module sfr log console

Displaying Console Log Information for Module sfr:

***
*** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_1.img, ISO: , Num CPUs: 3, RAM: 2314MB, Mgmt MAC: 28:6F:7F:D1:3A:32, CP MAC: 00:00:00:02:00:01, HDD: -drive file=/dev/sda,cache=none,if=virtio, Dev Driver: virtio
*** TIME: 07:45:49 UTC Mar 10 202

*** EVENT: Start Parameters Continued: RegEx Shared Mem: 0MB, Cmd Op: , Shared Mem Key: 8061, Shared Mem Size: 16, Log Pipe: /dev/ttyS0_vm1, Sock: /dev/ttyS1_vm1, Mem-Path: -mem-path /hugepages
*** TIME: 07:45:49 UTC Mar 10 2020
***
Status: Mapping host 0x2aab3be00000 to VM with size 16777216
Warning: vlan 0 is not connected to host network

LILO 24.2 boot:
Loading 6.2.0.........................................................................
BIOS data check successful
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct

Re: ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 18:17:44 GMT

Is the memory utilization ok?

Re: ASA 5506X showing high system memory utilization

Sheraz.Salim — Wed, 11 Mar 2020 18:18:59 GMT

here are the logs 5506-X

show module sfr log console

Displaying Console Log Information for Module sfr:

SHOW memory
Free memory: 281760908 bytes (25%)
Used memory: 859950608 bytes (75%)
------------- ------------------
Total memory: 1141711516 bytes (100%)

Note: Free memory is the free system memory. Additional memory may
be available from memory pools internal to the firewall process.
Use 'show memory detail' to see this information, but use it
with care since it may cause CPU hogs and packet loss under load.

yes nothing to worry.

Re: ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 18:21:27 GMT

show module sfr log console

Displaying Console Log Information for Module sfr:

***
*** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_1.img, ISO: , Num CPUs: 3, RAM: 2249MB, Mgmt MAC: 78:72:5D:78:9F:C4, CP MAC: 00:00:00:02:00:01, HDD: -drive file=/dev/sda,cache=none,if=virtio, Dev Driver: virtio
*** TIME: 04:17:20 UTC Mar 7 2020

***
*** EVENT: Start Parameters Continued: RegEx Shared Mem: 0MB, Cmd Op: , Shared Mem Key: 8061, Shared Mem Size: 16, Log Pipe: /dev/ttyS0_vm1, Sock: /dev/ttyS1_vm1, Mem-Path: -mem-path /hugepages
*** TIME: 04:17:20 UTC Mar 7 2020
***
Status: Mapping host 0x2aab37e00000 to VM with size 16777216
Warning: vlan 0 is not connected to host network

LILO 24.2 boot:
Loading 6.2.2.........................................................................
BIOS data check successful
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.10.53sf.cisco-150 (build@ful-sfosbuild01) (gcc version 4.7.1 (GCC) ) #1 SMP PREEMPT Thu Aug 31 19:02:52 UTC 2017
[ 0.000000] Command line: auto BOOT_IMAGE=6.2.2 ro root=fd05 console=ttyS0,9600
[ 0.000000] e820: BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000008c8fdfff] usable
[ 0.000000] BIOS-e820: [mem 0x000000008c8fe000-0x000000008c8fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] SMBIOS 2.4 present.
[ 0.000000] Hypervisor detected: KVM
[ 0.000000] No AGP bridge found
[ 0.000000] e820: last_pfn = 0x8c8fe max_arch_pfn = 0x400000000
[ 0.000000] PAT not supported by CPU.
[ 0.000000] found SMP MP-table at [mem 0x000fdac0-0x000fdacf] mapped at [ffff8800000fdac0]
[ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
[ 0.000000] init_memory_mapping: [mem 0x8c600000-0x8c7fffff]
[ 0.000000] init_memory_mapping: [mem 0x8c000000-0x8c5fffff]
[ 0.000000] init_memory_mapping: [mem 0x80000000-0x8bffffff]
[ 0.000000] init_memory_mapping: [mem 0x00100000-0x7fffffff]
[ 0.000000] init_memory_mapping: [mem 0x8c800000-0x8c8fdfff]
[ 0.000000] ACPI: RSDP 00000000000fd900 00014 (v00 BOCHS )
[ 0.000000] ACPI: RSDT 000000008c8fe3e0 00034 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: FACP 000000008c8fff80 00074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001)
[ 0.000000] ACPI: DSDT 000000008c8fe420 011A9 (v01 BXPC BXDSDT 00000001 INTL 20100528)
[ 0.000000] ACPI: FACS 000000008c8fff40 00040
[ 0.000000] ACPI: SSDT 000000008c8ff740 007F7 (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: APIC 000000008c8ff610 00088 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001)
[ 0.000000] ACPI: HPET 000000008c8ff5d0 00038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001)
[ 0.000000] No NUMA configuration found
[ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000008c8fdfff]
[ 0.000000] Initmem setup node 0 [mem 0x00000000-0x8c8fdfff]
[ 0.000000] NODE_DATA [mem 0x8c8fa000-0x8c8fdfff]
[ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00
[ 0.000000] kvm-clock: cpu 0, msr 0:8c8f9001, boot clock
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x00001000-0x00ffffff]
[ 0.000000] DMA32 [mem 0x01000000-0xffffffff]
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00001000-0x0009efff]
[ 0.000000] node 0: [mem 0x00100000-0x8c8fdfff]
[ 0.000000] ACPI: PM-Timer IO Port: 0xb008
[ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
[ 0.000000] ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled)
[ 0.000000] ACPI: LAPIC (acpi_id[0x02] lapic_id[0x02] enabled)
[ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
[ 0.000000] ACPI: IOAPIC (id[0x00] address[0xfec00000] gsi_base[0])
[ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
[ 0.000000] Using ACPI (MADT) for SMP configuration information
[ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
[ 0.000000] smpboot: Allowing 3 CPUs, 0 hotplug CPUs
[ 0.000000] e820: [mem 0x8c900000-0xfeffbfff] available for PCI devices
[ 0.000000] Booting paravirtualized kernel on KVM
[ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:3 nr_node_ids:1
[ 0.000000] PERCPU: Embedded 24 pages/cpu @ffff88008c400000 s69568 r8192 d20544 u524288
[ 0.000000] kvm-clock: cpu 0, msr 0:8c8f9001, primary cpu clock
[ 0.000000] KVM setup async PF for cpu 0
[ 0.000000] kvm-stealtime: cpu 0, msr 8c40ba40
[ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 567751
[ 0.000000] Policy zone: DMA32
[ 0.000000] Kernel command line: auto BOOT_IMAGE=6.2.2 ro root=fd05 console=ttyS0,9600
[ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.000000] Checking aperture...
[ 0.000000] No AGP bridge found
[ 0.000000] Memory: 2260608k/2302968k available (4768k kernel code, 392k absent, 41968k reserved, 2399k data, 884k init)
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=3.
[ 0.000000] NR_IRQS:4352 nr_irqs:704 16
[ 0.000000] Console: colour VGA+ 80x25
[ 0.000000] console [ttyS0] enabled
[ 0.000000] allocated 9437184 bytes of page_cgroup
[ 0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups
[ 0.000000] tsc: Detected 1249.999 MHz processor
[ 0.003000] Calibrating delay loop (skipped) preset value.. 2499.99 BogoMIPS (lpj=1249999)
[ 0.004017] pid_max: default: 32768 minimum: 301
[ 0.005142] Security Framework initialized
[ 0.008033] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
[ 0.015035] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
[ 0.018525] Mount-cache hash table entries: 256
[ 0.019483] Initializing cgroup subsys memory
[ 0.020271] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.020271] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.020271] tlb_flushall_shift: 6
[ 0.022388] Freeing SMP alternatives: 12k freed
[ 0.027114] ACPI: Core revision 20130328
[ 0.032733] ACPI: All ACPI Tables successfully acquired
[ 0.040334] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.041010] smpboot: CPU0: Intel QEMU Virtual CPU version 1.5.0 (fam: 06, model: 02, stepping: 03)
[ 0.047000] Performance Events: unsupported p6 CPU model 2 no PMU driver, software events only.
[ 0.055295] smpboot: Booting Node 0, Processors #1[ 0.003000] kvm-clock: cpu 1, msr 0:8c8f9041, secondary cpu clock
[ 0.072090] KVM setup async PF for cpu 1
[ 0.072090] kvm-stealtime: cpu 1, msr 8c48ba40
#2 OK
[ 0.003000] kvm-clock: cpu 2, msr 0:8c8f9081, secondary cpu clock
[ 0.092168] Brought up 3 CPUs
[ 0.092099] KVM setup async PF for cpu 2
[ 0.092099] kvm-stealtime: cpu 2, msr 8c50ba40
[ 0.093011] smpboot: Total of 3 processors activated (7499.99 BogoMIPS)
[ 0.098127] devtmpfs: initialized
[ 0.101510] NET: Registered protocol family 16
[ 0.106321] ACPI: bus type PCI registered
[ 0.109012] PCI: Using configuration type 1 for base access
[ 0.159274] bio: create slab <bio-0> at 0
[ 0.163280] ACPI: Added _OSI(Module Device)
[ 0.164016] ACPI: Added _OSI(Processor Device)
[ 0.165000] ACPI: Added _OSI(3.0 _SCP Extensions)
[ 0.165000] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.173384] ACPI: Interpreter enabled
[ 0.175025] ACPI: (supports S0 S5)
[ 0.176000] ACPI: Using IOAPIC for interrupt routing
[ 0.179526] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.185146] ACPI: No dock devices found.
[ 0.211105] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.214579] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge.
[ 0.220346] PCI host bridge to bus 0000:00
[ 0.222016] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.223000] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7]
[ 0.227015] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff]
[ 0.230015] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff]
[ 0.233015] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff]
[ 0.255798] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI
[ 0.259051] pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB
[ 0.416086] acpi PNP0A03:00: ACPI _OSC support notification failed, disabling PCIe ASPM
[ 0.420012] acpi PNP0A03:00: Unable to request _OSC control (_OSC support mask: 0x08)
[ 0.424853] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
[ 0.428230] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
[ 0.431000] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
[ 0.431000] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
[ 0.431000] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
[ 0.441857] ACPI: Enabled 16 GPEs in block 00 to 0F
[ 0.445692] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
[ 0.449011] vgaarb: loaded
[ 0.451010] vgaarb: bridge control possible 0000:00:02.0
[ 0.454623] SCSI subsystem initialized
[ 0.456014] ACPI: bus type ATA registered
[ 0.460633] ACPI: bus type USB registered
[ 0.463203] usbcore: registered new interface driver usbfs
[ 0.466153] usbcore: registered new interface driver hub
[ 0.469322] usbcore: registered new device driver usb
[ 0.472922] pps_core: LinuxPPS API ver. 1 registered
[ 0.475015] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[ 0.479295] PTP clock support registered
[ 0.482361] PCI: Using ACPI for IRQ routing
[ 0.486211] NetLabel: Initializing
[ 0.488048] NetLabel: domain hash size = 128
[ 0.490049] NetLabel: protocols = UNLABELED CIPSOv4
[ 0.491000] NetLabel: unlabeled traffic allowed by default
[ 0.495387] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 0.498081] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.499000] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
[ 0.510474] Switching to clocksource kvm-clock
[ 0.512785] pnp: PnP ACPI init
[ 0.514129] ACPI: bus type PNP registered
[ 0.520912] pnp: PnP ACPI: found 8 devices
[ 0.522901] ACPI: bus type PNP unregistered
[ 0.567399] NET: Registered protocol family 2
[ 0.570615] TCP established hash table entries: 32768 (order: 7, 524288 bytes)
[ 0.574391] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)
[ 0.577747] TCP: Hash tables configured (established 32768 bind 32768)
[ 0.580870] TCP: reno registered
[ 0.582455] UDP hash table entries: 2048 (order: 4, 65536 bytes)
[ 0.585309] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)
[ 0.588679] NET: Registered protocol family 1
[ 0.591417] RPC: Registered named UNIX socket transport module.
[ 0.594175] RPC: Registered udp transport module.
[ 0.596415] RPC: Registered tcp transport module.
[ 0.598625] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.601623] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
[ 0.604418] pci 0000:00:01.0: PIIX3: Enabling Passive Release
[ 0.607183] pci 0000:00:01.0: Activating ISA DMA hang workarounds
[ 0.615138] microcode: CPU0 sig=0x623, pf=0x0, revision=0x1
[ 0.617842] microcode: CPU1 sig=0x623, pf=0x0, revision=0x1
[ 0.620448] microcode: CPU2 sig=0x623, pf=0x0, revision=0x1
[ 0.623632] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
[ 0.630714] HugeTLB registered 2 MB page size, pre-allocated 0 pages
[ 0.634771] VFS: Disk quotas dquot_6.5.2
[ 0.636800] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 0.641611] NFS: Registering the id_resolver key type
[ 0.644066] Key type id_resolver registered
[ 0.646051] Key type id_legacy registered
[ 0.648455] msgmni has been set to 4415
[ 0.653165] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 0.656641] io scheduler noop registered
[ 0.658542] io scheduler deadline registered
[ 0.660738] io scheduler cfq registered (default)
[ 0.667104] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
[ 0.670749] ACPI: Power Button [PWRF]
[ 0.681935] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
[ 0.688457] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10
[ 0.695359] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11
[ 0.704267] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[ 0.735078] 00:05: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[ 0.766163] 00:06: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[ 0.772833] Non-volatile memory driver v1.3
[ 0.774879] Linux agpgart interface v0.103
[ 0.778204] [drm] Initialized drm 1.1.0 20060810
[ 0.794163] brd: module loaded
[ 0.802998] loop: module loaded
[ 0.811021] vda: vda1 vda2 vda3 < vda5 vda6 vda7 >
[ 0.819460] Loading iSCSI transport class v2.0-870.
[ 0.831265] scsi0 : ata_piix
[ 0.833428] scsi1 : ata_piix
[ 0.835284] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14
[ 0.838475] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15
[ 0.843112] e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
[ 0.846053] e100: Copyright(c) 1999-2006 Intel Corporation
[ 0.848935] igb: Intel(R) Gigabit Ethernet Network Driver - version 5.0.3-k
[ 0.852207] igb: Copyright (c) 2007-2013 Intel Corporation.
[ 0.855125] Fusion MPT base driver 3.04.20
[ 0.857163] Copyright (c) 1999-2008 LSI Corporation
[ 0.859476] Fusion MPT SPI Host driver 3.04.20
[ 0.861933] Fusion MPT FC Host driver 3.04.20
[ 0.864394] Fusion MPT SAS Host driver 3.04.20
[ 0.867530] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 0.870664] ehci-pci: EHCI PCI platform driver
[ 0.873098] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 0.876419] uhci_hcd: USB Universal Host Controller Interface driver
[ 0.880143] usbcore: registered new interface driver usblp
[ 0.883066] usbcore: registered new interface driver usb-storage
[ 0.886710] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
[ 0.892971] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 0.895449] serio: i8042 AUX port at 0x60,0x64 irq 12
[ 0.898872] mousedev: PS/2 mouse device common for all mice
[ 0.903471] rtc_cmos 00:00: RTC can wake from S4
[ 0.907384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1
[ 0.911489] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0
[ 0.914810] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs
[ 0.918745] i2c /dev entries driver
[ 0.921439] md: raid1 personality registered for level 1
[ 0.925318] device-mapper: ioctl: 4.24.0-ioctl (2013-01-15) initialised: dm-devel@redhat.com
[ 0.929812] cpuidle: using governor ladder
[ 0.932504] hidraw: raw HID events driver (C) Jiri Kosina
[ 0.940726] usbcore: registered new interface driver usbhid
[ 0.943398] usbhid: USB HID core driver
[ 0.945499] ipip: IPv4 over IPv4 tunneling driver
[ 0.948837] TCP: cubic registered
[ 0.950486] Initializing XFRM netlink socket
[ 0.952915] NET: Registered protocol family 10
[ 0.955613] NET: Registered protocol family 17
[ 0.957890] Key type dns_resolver registered
[ 0.961226] registered taskstats version 1
[ 0.964418] console [netcon0] enabled
[ 0.966231] netconsole: network logging started
[ 0.996261] ata1.00: ATA-7: QEMU HARDDISK, 1.5.0, max UDMA/100
[ 0.999084] ata1.00: 6291456 sectors, multi 16: LBA48
[ 1.002820] ata1.00: configured for MWDMA2
[ 1.004858] ata2.00: ATAPI: QEMU DVD-ROM, 1.5.0, max UDMA/100
[ 1.005090] scsi 0:0:0:0: Direct-Access ATA QEMU HARDDISK 1.5. PQ: 0 ANSI: 5
[ 1.006384] sd 0:0:0:0: [sda] 6291456 512-byte logical blocks: (3.22 GB/3.00 GiB)
[ 1.006663] sd 0:0:0:0: [sda] Write Protect is off
[ 1.006756] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 1.022479] ata2.00: configured for MWDMA2
[ 1.022660] sd 0:0:0:0: Attached scsi generic sg0 type 0
[ 1.027441] sda: sda1 sda2
[ 1.030819] sd 0:0:0:0: [sda] Attached SCSI disk
[ 1.038963] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.5. PQ: 0 ANSI: 5
[ 1.045942] sr0: scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
[ 1.048653] cdrom: Uniform CD-ROM driver Revision: 3.20
[ 1.052783] sr 1:0:0:0: Attached scsi generic sg1 type 5
[ 1.535008] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input2
[ 1.539948] md: Waiting for all devices to be available before autodetect
[ 1.543209] md: If you don't use raid, use raid=noautodetect
[ 1.546963] md: Autodetecting RAID arrays.
[ 1.549054] md: Scanned 0 and added 0 devices.
[ 1.551183] md: autorun ...
[ 1.552588] md: ... autorun DONE.
[ 1.556140] EXT3-fs (vda5): recovery required on readonly filesystem
[ 1.559128] EXT3-fs (vda5): write access will be enabled during recovery
[ 1.613124] tsc: Refined TSC clocksource calibration: 1250.000 MHz
[ 1.861465] kjournald starting. Commit interval 5 seconds
[ 1.864593] EXT3-fs (vda5): recovery complete
[ 1.866691] EXT3-fs (vda5): mounted filesystem with ordered data mode
[ 1.869725] VFS: Mounted root (ext3 filesystem) readonly on device 253:5.
[ 1.873869] devtmpfs: mounted
[ 1.875608] Freeing unused kernel memory: 884k freed
INIT: version 2.88 booting
cat: /proc/cmdline: No such file or directory
cat: /proc/cmdline: No such file or directory
Mounting proc file system... [ OK ]
Mounting sys file system... [ OK ]
Starting udev [ 2.113006] udevd (759): /proc/759/oom_adj is deprecated, please use /proc/759/oom_score_adj instead.
[ 2.117651] udevd version 124 started
[ 2.285759] Floppy drive(s): fd0 is 1.44M, fd1 is 1.44M
[ 2.301096] FDC 0 is a S82078B
[ 2.367187] sfpacket: module license 'Proprietary' taints kernel.
[ 2.386116] Disabling lock debugging due to kernel taint
[ 2.402439] Sourcefire Bridging Packet Driver - version 6.0.0
[ 2.426791] Copyright (c) 2004-2010 Sourcefire, Inc.
[ 2.530692] SFPacket Inter-VM Shared Memory Driver - version 6.0.0
[ 2.535572] Copyright (c) 2014 Cisco Systems, Inc.
[ 2.542928] KVM_IVSHMEM: Major device number is: 247
[ 2.548788] KVM_IVSHMEM: Probing for KVM_IVSHMEM Device
[ 2.552845] KVM_IVSHMEM: result is 0
[ 2.555917] KVM_IVSHMEM: iomap base = 0x18446683600578412544
[ 2.565432] KVM_IVSHMEM: ioaddr = fc000000 ioaddr_size = 16777216
[ 2.573571] SFIVMSHM info: Registered device 'kvm_ivshmem'.
[ 2.576301] KVM_IVSHMEM: Registered with the SFIVMShm driver.
[ 2.583269] KVM_IVSHMEM: irq = 11 regaddr = febf1000 reg_size = 256

Activating all swap files/partitions...
[ 2.768806] Adding 1000444k swap on /dev/vda2. Priority:-1 extents[ OK ]s:1000444k
Mounting root file system in read-only mode... [ OK ]
Checking file systems...
e2fsck 1.42.9 (28-Dec-2013)
3D-6.2.2: clean, 20157/244320 files, 214026/976384 blocks
e2fsck 1.42.9 (28-Dec-2013)
e2fsck 1.42.9 (28-Dec-2013)
BOOT: recovering journal
/Volume: recovering journal
BOOT: clean, 51/26208 files, 24434/104420 blocks
Clearing orphaned inode 2205419 (uid=0, gid=0, mode=0100644, size=30219145)
Clearing orphaned inode 2205395 (uid=0, gid=0, mode=0100644, size=1465)
Clearing orphaned inode 2222349 (uid=0, gid=0, mode=0100600, size=217032)
Clearing orphaned inode 2205341 (uid=0, gid=0, mode=0100644, size=15111948)
Clearing orphaned inode 2099281 (uid=27, gid=27, mode=0100600, size=0)
Clearing orphaned inode 2099276 (uid=27, gid=27, mode=0100600, size=0)
Clearing orphaned inode 2099275 (uid=27, gid=27, mode=0100600, size=0)
Clearing orphaned inode 2099274 (uid=27, gid=27, mode=0100600, size=0)
Clearing orphaned inode 2099273 (uid=27, gid=27, mode=0100600, size=0)
Setting free inodes count to 2360861 (was 2360903)
Setting free blocks count to 8077465 (was 8088688)
/Volume: clean, 137699/2498560 files, 1902027/9979492 blocks [ OK ]
Remounting root file system in read-write mode...
[ 5.206158] EXT3-fs (vda5): using internal journal [ OK ]
Mounting remaining file systems...
[ 5.220635] kjournald starting. Commit interval 5 seconds
[ 5.223398] EXT3-fs (sda1): using internal journal
[ 5.225698] EXT3-fs (sda1): mounted filesystem with ordered data mode
[ 5.234329] kjournald starting. Commit interval 5 seconds
[ 5.234806] EXT3-fs (vda7): using internal journal
[ 5.234810] EXT3-fs (vda7): mounted filesystem with ordered data mo[ OK ]
Removing /var/run/* and /var/lock/subsys/* [ OK ]
Removing /var/sf/run/*
Removing /tmp/cgi* files
Removing temporary files
Creating new /var/run/utmp... [ OK ]
Removing possible /etc/nologin /fastboot and /forcefsck... [ OK ]
Removing dhcp lock files... [ OK ]
/etc/rc.d/rcsysinit.d/S51udev_retry: line 35: log_info_msg: command no[ OK ]
Setting clock... [ OK ]
Initializing kernel random number generator... [ OK ]
Saving dmesg boot log [ OK ]
Loading fuse module failed!
Bringing up the loopback interface...
Upping interface lo [ OK ]
Configuring address the lo interface... [ OK ]
Configuring hostname to firepower [ OK ]
Configuring IPv6 address the lo interface... [ OK ]
Disable IPv6 default route [ OK ]
Configuring hostname to firepower [ OK ]
Configuring Static Routes
Writing hosts file [ OK ]
verify_fsic(start)
Running file integrity checks...
FIPS mode is disabled. Skip verifying file integrity
Setting kernel paramaters [ OK ]
INIT: Entering runlevel: 3
Starting system log daemon... [ OK ]
Starting cron daemon... [ OK ]
Adding swapfile /Volume/.swaptwo
[ 9.922403] Adding 2258456k swap on /Volume/.swaptwo. Priority:-2 extents:571 across:2318548k
Flushing all current IPv4 rules and user defined chains: [ 11.011789] ip_tables: (C) 2000-2006 Netfilter Core Team
...success
Clearing all current IPv4 rules and user defined chains: ...success
Applying iptables firewall rules:
Flushing chain `PREROUTING'
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `POSTROUTING'
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
[ 11.072612] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Applying rules successed
Flushing all current IPv6 rules and user defined chains: [ 11.170279] ip6_tables: (C) 2000-2006 Netfilter Core Team
...success
Clearing all current IPv6 rules and user defined chains: ...success
Applying ip6tables firewall rules:
Flushing chain `PREROUTING'
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `POSTROUTING'
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Applying rules successed
Upping interface eth0 [ OK ]
Setting MTU... [ OK ]
No dns server or search domain specified
No ntp server specified
Configuring address the eth0 interface... [ OK ]
Configuring hostname to firepower [ OK ]
Unconfiguring IPv6 [ OK ]
Configuring Static Routes
Writing hosts file [ OK ]
Interface disabled, downing [ OK ]
Starting portmap... [ OK ]
Starting nscd...
mkdir: created directory '/var/run/nscd' [ OK ]
Setting video params
setterm: cannot (un)set powersave mode: Inappropriate ioctl for device
Loading fuse module failed!
Generating public/private rsa1 key pair.
Saving key "/etc/ssh/ssh_host_key" failed: unknown or unsupported key [ OK ]
Starting , please wait......complete. [ OK ]
Starting xinetd:
Not reconfigurating
Sat Mar 7 04:17:48 UTC 2020
Starting MySQL...
Pinging mysql
Pinging mysql, try 1
Pinging mysql, try 2
Pinging mysql, try 3
Found mysql is running
Running initializeObjects...
Stopping MySQL...
Killing mysqld with pid 3084
Wait for mysqld to exit\c
done
Sat Mar 7 04:18:19 UTC 2020
We didn't shutdown properly - running DB check!
Please wait patiently. This might take a very long time (hours...)
Warning: speed or duplex not found in config file for eth0, using defaults...
modprobe: FATAL: Module ipmi_si not found in directory /lib/modules/3.10.53sf.cisco-150
Starting Cisco ASA5506, please wait...No PM running!
...started.
Mar 07 04:19:12 firepower SF-IMS[4245]: [4245] init script:system [INFO] pmmon Setting affinity to 0-2...
pid 4239's current affinity list: 0-2
pid 4239's new affinity list: 0-2
Mar 07 04:19:12 firepower SF-IMS[4247]: [4247] init script:system [INFO] pmmon The Process Manager is not running...
Mar 07 04:19:12 firepower SF-IMS[4248]: [4248] init script:system [INFO] pmmon Starting the Process Manager...
Mar 07 04:19:13 firepower SF-IMS[4249]: [4249] pm:pm [INFO] Using model number 72J

Cisco ASA5506 v6.2.2 (build 81)
firepower login: [ 100.492555] SFHS[4250] - kvm_ivshmem: Set max latency to 0 msecs (0 jiffies)
[ 100.860356] tun: Universal TUN/TAP device driver, 1.6
[ 100.863235] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 100.943279] SFIVMSHM info: Initializing Channel 0 Client Descriptor Base...
[ 100.947377] SFIVMSHM info: Initializing Channel 1 Client Descriptor Base...
[ 100.951755] SFIVMSHM info: Initializing packet buffer pool...
[ 100.955720] SFIVMSHM info: Initializing packet buffer pool done!
[ 101.068575] IPv6: ADDRCONF(NETDEV_UP): tun1: link is not ready
[ 101.590339] SFIVMSHM info: Shared Memory start addr = ffffc90000800000 size = 16777216
[ 101.594550] SFIVMSHM info: magicNum = 0x2a1337 version = 3 asa_state = INIT_COMPLETE ips_state = INIT_COMPLETE lineStatus = 1 mode = 0 totalSize = 16777216
[ 101.601414] SFIVMSHM info: Channel Info ch_count = 2
[ 101.604195] SFIVMSHM info: Channel Info #0: [TS pool_offset = 0 nextToRead = 0 nextToWrite = 0 count = 1008 pad = 0]
[ 101.609248] SFIVMSHM info: Channel Info #0: [FS pool_offset = 36288 nextToRead = 0 nextToWrite = 0 count = 1008 pad = 0]
[ 101.614777] SFIVMSHM info: Channel Info #1: [TS pool_offset = 72576 nextToRead = 0 nextToWrite = 0 count = 1008 pad = 0]
[ 101.619965] SFIVMSHM info: Channel Info #1: [FS pool_offset = 108864 nextToRead = 0 nextToWrite = 0 count = 1008 pad = 0]
[ 101.625171] SFIVMSHM info: Packet Buffer pools [server start=147456 count=6902 size=14135296] [client start=14282752 count=1218 size=2494464] [pktbuf_size = 2048]
[ 101.633461] SFIVMSHM info: Allocated 165648 bytes for the array of 6902 IvmShm Buffers.
[ 101.645139] SFIVMSHM info: [4289]: Ring kvm_ivshmem - RX/TX thread created and started (ffff880088722400)
[ 101.649727] SFIVMSHM info: [4289]: Ring kvm_ivshmem - Done with index -1 and rval 0
[ 101.723999] IPv6: ADDRCONF(NETDEV_CHANGE): tun1: link becomes ready
[ 134.518517] SFPacket_AFBP: Copied first heartbeat for future use (78 bytes)

Re: ASA 5506X showing high system memory utilization

Sheraz.Salim — Wed, 11 Mar 2020 18:27:39 GMT

yes all good. why you worried. 5506-x are not very powerful boxes. having said said they gone EOL now. its sucessor is FTD 1010.

Re: ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 18:28:32 GMT

Whatsup Gold reports the attached issue.

Re: ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 18:33:15 GMT

Whats up Gold error was brought to my attention. I will ignore it if you say the mempool_heapcache and System memory at 90% and 86% are normal.

Re: ASA 5506X showing high system memory utilization

Sheraz.Salim — Wed, 11 Mar 2020 18:43:29 GMT

provide me the output

SHOW memory detail

show processes cpu-usage sorted

show conn count

show version | i V

Re: ASA 5506X showing high system memory utilization

GeorgeVarkey3776 — Wed, 11 Mar 2020 18:50:34 GMT

SHOW memory detail

Heap Memory:
Free Memory:
Heapcache Pool: 29372528 bytes ( 3% )
Global Shared Pool: 267152 bytes ( 0% )
Message Layer Pool: 1980144 bytes ( 0% )
System: 57422278 bytes ( 5% )
Used Memory:
Heapcache Pool: 283103120 bytes ( 25% )
Global Shared Pool: 130903152 bytes ( 12% )
Reserved (Size of DMA Pool): 205520896 bytes ( 18% )
Reserved for messaging: 117008 bytes ( 0% )
MMAP usage: 8265728 bytes ( 1% )
System Overhead: 400138240 bytes ( 36% )
------------------------------------- ----------------
Total Memory: 1117090246 bytes ( 100% )

Warning: The information reported here is computationally expensive to
determine, and may result in CPU hogs and performance impact.

-----------------------------------------------------------------------
MEMPOOL_MSGLYR POOL STATS:

Non-mmapped bytes allocated = 2097152
Number of free chunks = 8
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 2097152
Keepcost = 1979184
Max contiguous free mem = 1979184
Allocated memory in use = 117008
Free memory = 1980144

----- fragmented memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
32 2 64
48 1 48
64 1 64
96 1 96**
112 1 112
144 1 144
1979184 1 1979184*

* - top most releasable chunk.
** - contiguous memory on top of heap.

----- allocated memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
80 18 1440
96 12 1152
112 23 2576
128 21 2688
144 3 432
160 2 320
176 6 1056
192 5 960
208 2 416
224 4 896
240 6 1440
256 4 1024
384 11 4224
512 6 3072
768 3 2304
1024 6 6144
4096 1 4096
8192 9 73728

MEMPOOL_HEAPCACHE_0 POOL STATS:

Non-mmapped bytes allocated = 312475648
Number of free chunks = 819
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 312475648
Keepcost = 3713760
Max contiguous free mem = 7345904
Allocated memory in use = 283103120
Free memory = 29372528

----- fragmented memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
32 231 7392
48 228 10944
64 171 10944
80 10 800
96 1 96**
96 4 384
112 8 896
128 10 1280
144 6 864
160 5 800
176 2 352
192 5 960
208 1 208
224 3 672
240 2 480
256 11 3552
384 14 5760
512 6 3408
2048 8 22992
3072 13 47488
4096 19 83536
8192 9 81568
12288 3 40128
16384 7 131824
32768 7 269120
49152 1 64368
65536 11 885984
98304 2 209120
131072 5 909296
196608 1 212272
262144 3 995616
393216 1 397328
524288 4 2762048
786432 2 1929008
1048576 1 1417888
1572864 1 1854064
2097152 1 2803168
3145728 1 3146256
3713760 1 3713760*
6291456 1 7345904

* - top most releasable chunk.
** - contiguous memory on top of heap.

----- allocated memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
80 2102 168160
96 17828 1711488
112 3685 412720
128 5796 741888
144 3458 497952
160 611 97760
176 579 101904
192 461 88512
208 287 59696
224 242 54208
240 159 38160
256 2539 649984
384 974 374016
512 725 371200
768 537 412416
1024 751 769024
1536 163 250368
2048 346 708608
3072 62 190464
4096 372 1523712
6144 48 294912
8192 198 1622016
12288 189 2322432
16384 624 10223616
24576 31 761856
32768 64 2097152
49152 20 983040
65536 260 17039360
98304 18 1769472
131072 15 1966080
196608 17 3342336
262144 18 4718592
393216 15 5898240
524288 12 6291456
786432 7 5505024
1048576 17 17825792
1572864 4 6291456
2097152 5 10485760
3145728 2 6291456
4194304 4 16777216
8388608 1 8388608
12582912 5 62914560

MEMPOOL_DMA POOL STATS:

Non-mmapped bytes allocated = 205520896
Number of free chunks = 176
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 205520896
Keepcost = 48162448
Max contiguous free mem = 48162448
Allocated memory in use = 156897936
Free memory = 48622960

----- fragmented memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
32 2 64
48 2 96
64 3 192
80 6 480
96 1 96**
96 4 384
112 2 224
128 2 256
144 2 288
192 1 192
224 6 1344
240 2 480
256 9 2752
384 26 10624
512 8 5440
768 17 15232
1024 65 69120
1536 1 1824
2048 2 4576
4096 5 23648
6144 2 13856
8192 2 17808
12288 1 15088
16384 2 37232
32768 3 114224
49152 1 56752
65536 1 80128
48162448 1 48162448*

* - top most releasable chunk.
** - contiguous memory on top of heap.

----- allocated memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
160 2 320
224 3 672
240 50 12000
256 12 3072
384 2 768
512 4 2048
768 8 6144
1024 182 186368
1536 1023 1571328
2048 2 4096
4096 5 20480
12288 2 24576
16384 18 294912
24576 1 24576
32768 13 425984
65536 5 327680
131072 11 1441792
196608 1 196608
262144 8 2097152
393216 1 393216
524288 2 1048576
786432 7 5505024
1048576 3 3145728
1572864 9 14155776
2097152 4 8388608
3145728 3 9437184
12582912 3 37748736

MEMPOOL_GLOBAL_SHARED POOL STATS:

Non-mmapped bytes allocated = 270336
Number of free chunks = 4
Number of mmapped regions = 1682
Mmapped bytes allocated = 130899968
Max memory footprint = 0
Keepcost = 117296
Max contiguous free mem = 0
Allocated memory in use = 3184
Free memory = 267152

----- fragmented memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
4096 1 4144
12288 1 12768

----- allocated memory statistics -----

fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
88 1 88
104 1 104
168 1 168
184 3 552
65536 1682 110231552

Summary for all pools:

Non-mmapped bytes allocated = 520364032
Number of free chunks = 1007
Number of mmapped regions = 0
Mmapped bytes allocated = 130899968
Max memory footprint = 520093696
Keepcost = 53972688
Allocated memory in use = 440121248
Free memory = 80242784

show processes cpu-usage sorted
Hardware: ASA5506
Cisco Adaptive Security Appliance Software Version 9.9(2)47
ASLR enabled, text region 7f7d2d43c000-7f7d3191beac
PC Thread 5Sec 1Min 5Min Process
- - 0.1% 0.6% 0.2% DATAPATH-0-1754
0x00007f7d2e7b10f9 0x00002aaab76c4fc0 0.0% 0.0% 0.0% arp_timer
0x00007f7d2f41e3aa 0x00002aaab76b6f00 0.0% 0.0% 0.0% update_cpu_usage
0x00007f7d2f9a59a4 0x00002aaab76c5aa0 0.0% 0.0% 0.0% tcp_fast
0x00007f7d2fa22af3 0x00002aaab76ab9c0 0.0% 0.0% 0.0% snmp
0x00007f7d2e8ab2ea 0x00002aaab76dc8c0 0.0% 0.0% 0.0% intel_82576_check_link_thread
0x00007f7d2df04b52 0x00002aaab76c27e0 0.0% 0.0% 0.0% CTM message handler
0x00007f7d2f180dde 0x00002aaab76c0e80 0.0% 0.0% 0.0% zone_background_idb
0x00007f7d2fe32f7d 0x00002aaab76b6420 0.0% 0.0% 0.0% webvpn_task
0x00007f7d2e9ab1fc 0x00002aaab76dba40 0.0% 0.0% 0.0% WebVPN KCD Process
0x00007f7d2fc86884 0x00002aaab76c2f20 0.0% 0.0% 0.0% vpnlb_timer_thread
0x00007f7d2fc86ada 0x00002aaab76c8620 0.0% 0.0% 0.0% vpnlb_thread
0x00007f7d2fc69638 0x00002aaab76a9cc0 0.0% 0.0% 0.0% vpnfol_thread_unsent
0x00007f7d2fc694c5 0x00002aaab76aa400 0.0% 0.0% 0.0% vpnfol_thread_timer
0x00007f7d2fc68f30 0x00002aaab76aa060 0.0% 0.0% 0.0% vpnfol_thread_sync
0x00007f7d2fc68add 0x00002aaab76aa7a0 0.0% 0.0% 0.0% vpnfol_thread_msg
0x00007f7d2e5f26a8 0x00002aaab76bc600 0.0% 0.0% 0.0% VPN director state sync
0x00007f7d2fc3956b 0x00002aaab76bb040 0.0% 0.0% 0.0% VPN Clustering HA timer thread
0x00007f7d2fc365ed 0x00002aaab76baca0 0.0% 0.0% 0.0% VPN Cluster HA msg send thread
0x00007f7d2fc3649d 0x00002aaab76ba900 0.0% 0.0% 0.0% VPN Cluster HA msg receive thread
0x00007f7d2fc3552d 0x00002aaab76bb3e0 0.0% 0.0% 0.0% VPN Cluster HA bulk sync thread
0x00007f7d2fc32dad 0x00002aaab76bb780 0.0% 0.0% 0.0% VPN Cluster HA backup activation thread
0x00007f7d2f45e61a 0x00002aaab76a8e40 0.0% 0.0% 0.0% vPif_stats_cleaner
0x00007f7d2fa58a58 0x00002aaab76da0e0 0.0% 0.0% 0.0% UserFromCert Thread
0x00007f7d2e48243a 0x00002aaab76db300 0.0% 0.0% 0.0% USB OIR POLL
0x00007f7d2f4129aa 0x00002aaab76b6b60 0.0% 0.0% 0.0% update_mem_usage
0x00007f7d2f7f45fe 0x00002aaab76b6080 0.0% 0.0% 0.0% unique_id_task
0x00007f7d2fa58a58 0x00002aaab76abd60 0.0% 0.0% 0.0% Unicorn Proxy Thread
0x00007f7d2fa227bc 0x00002aaab76c5360 0.0% 0.0% 0.0% udp_timer
0x00007f7d2fa2317c 0x00002aaab76b38a0 0.0% 0.0% 0.0% udp_thread
0x00007f7d2f3f82bf 0x00002aaab76bd820 0.0% 0.0% 0.0% uauth_urlb clean
0x00007f7d2f9189a8 0x00002aaab76cbc80 0.0% 0.0% 0.0% Uauth_Proxy
0x00007f7d2f9a0572 0x00002aaab76cc020 0.0% 0.0% 0.0% uauth
0x00007f7d2e57a906 0x00002aaab76d2ce0 0.0% 0.0% 0.0% tunnel_ifc_init
0x00007f7d2e1454f2 0x00002aaab76c20a0 0.0% 0.0% 0.0% tmatch compile thread
0x00007f7d2e2c507d 0x00002aaab76c6920 0.0% 0.0% 0.0% TLS Proxy Inspector
0x00007f7d2e2c41e5 0x00002aaab76c6580 0.0% 0.0% 0.0% TLS Proxy Handshake
0x00007f7d2e225b7d 0x00002aaab76ac100 0.0% 0.0% 0.0% Timekeeper
0x00007f7d2f98756f 0x00002aaab76ca320 0.0% 0.0% 0.0% Thread Logger
0x00007f7d2f9ae97b 0x00002aaab76b3c40 0.0% 0.0% 0.0% tcp_thread
0x00007f7d2f9a9935 0x00002aaab76c5700 0.0% 0.0% 0.0% tcp_slow
0x00007f7d2f99aba7 0x00002aaab76c9f80 0.0% 0.0% 0.0% syslogd
0x00007f7d2f9901b5 0x00002aaab76ca6c0 0.0% 0.0% 0.0% Syslog Retry Thread
0x00007f7d2dfccbe5 0x00002aaab76d6e20 0.0% 0.0% 0.0% SXP CORE
0x00007f7d2fd689c3 0x00002aaab76ae540 0.0% 0.0% 0.0% SW Reset Button
0x00007f7d2f198e10 0x00002aaab76c0740 0.0% 0.0% 0.0% static
0x00007f7d2f97a87c 0x00002aaab76cb1a0 0.0% 0.0% 0.0% SSL
0x00007f7d2f954e45 0x00002aaab76801c0 0.0% 0.0% 0.0% ssh/timer
0x00007f7d2f9495ab 0x00002aaab7567660 0.0% 0.0% 0.0% ssh
0x00007f7d2f849362 0x00002aaab76be6a0 0.0% 0.0% 0.0% snmpfo_timer_thread
0x00007f7d2f84774c 0x00002aaab76bdf60 0.0% 0.0% 0.0% SNMP Notify Thread
0x00007f7d2f841f4b 0x00002aaab76bdbc0 0.0% 0.0% 0.0% SNMP Host Timer Thread
0x00007f7d2f99c34c 0x00002aaab76cae00 0.0% 0.0% 0.0% SMTP
0x00007f7d2e8bf383 0x00002aaab76a7140 0.0% 0.0% 0.0% shmem monitor server
0x00007f7d2e16bdad 0x00002aaab76c4140 0.0% 0.0% 0.0% sfr-vpn-status-watcher
0x00007f7d2e16ca83 0x00002aaab76d54c0 0.0% 0.0% 0.0% sfr-vpn-status
0x00007f7d2f7fcd1b 0x00002aaab76b5ce0 0.0% 0.0% 0.0% sessmgr_redist_task
0x00007f7d2f7db57c 0x00002aaab76cc760 0.0% 0.0% 0.0% Session Manager
0x00007f7d2f97dac4 0x00002aaab76bea40 0.0% 0.0% 0.0% Self-Sign Cert Thread
0x00007f7d2fce8d65 0x00002aaab76c77a0 0.0% 0.0% 0.0% scansafe_poll
0x00007f7d2fa58a58 0x00002aaab76aec80 0.0% 0.0% 0.0% rtcli async executor process
0x00007f7d304525e2 0x00002aaab76ae8e0 0.0% 0.0% 0.0% rpc_server
0x00007f7d2e521c8f 0x00002aaab76ceba0 0.0% 0.0% 0.0% REST Periodic
0x00007f7d2dd66ff5 0x00002aaab76da820 0.0% 0.0% 0.0% Reload Control Thread
0x00007f7d2dfc465a 0x00002aaab76d6a80 0.0% 0.0% 0.0% RBM CORE
0x00007f7d2f7584c2 0x00002aaab76ada60 0.0% 0.0% 0.0% radius_snd
0x00007f7d2fa22af3 0x00002aaab76ad320 0.0% 0.0% 0.0% radius_rcv_auth_v6
0x00007f7d2fa22af3 0x00002aaab76ad6c0 0.0% 0.0% 0.0% radius_rcv_auth_v4
0x00007f7d2fa22af3 0x00002aaab76acbe0 0.0% 0.0% 0.0% radius_rcv_acct_v6
0x00007f7d2fa22af3 0x00002aaab76acf80 0.0% 0.0% 0.0% radius_rcv_acct_v4
0x00007f7d2f93044d 0x00002aaab76b9e20 0.0% 0.0% 0.0% RADIUS Proxy Time Keeper
0x00007f7d2f8ec9c7 0x00002aaab76ba1c0 0.0% 0.0% 0.0% RADIUS Proxy Listener
0x00007f7d2f93270d 0x00002aaab76ba560 0.0% 0.0% 0.0% RADIUS Proxy Event Daemon
0x00007f7d2f72cd55 0x00002aaab76ccb00 0.0% 0.0% 0.0% Quack process
0x00007f7d2f70211c 0x00002aaab76ce800 0.0% 0.0% 0.0% QoS Support Module
0x00007f7d2fbf6851 0x00002aaab76c32c0 0.0% 0.0% 0.0% ppp_timer_thread
0x00007f7d2f3b31ec 0x00002aaab76bd480 0.0% 0.0% 0.0% pm_timer_thread
0x00007f7d2f635273 0x00002aaab76bede0 0.0% 0.0% 0.0% PKI CMP Timer Thread
0x00007f7d2f63792f 0x00002aaab76bf180 0.0% 0.0% 0.0% PKI CMP Thread
0x00007f7d2f3dde1e 0x00002aaab76cf2e0 0.0% 0.0% 0.0% PIX Garbage Collector
0x00007f7d2f62c6ae 0x00002aaab76bf520 0.0% 0.0% 0.0% Periodic Cert Auth Timer Thread
0x00007f7d2f6321dc 0x00002aaab76bf8c0 0.0% 0.0% 0.0% Periodic Cert Auth Thread
0x00007f7d2e8c946f 0x00002aaab76dc180 0.0% 0.0% 0.0% octnic_hm_thread
0x00007f7d2ee7f7e2 0x00002aaab76ab280 0.0% 0.0% 0.0% NTP
0x00007f7d2f9c5e71 0x00002aaab76b67c0 0.0% 0.0% 0.0% npshim_thread
0x00007f7d2f413caa 0x00002aaab76b55a0 0.0% 0.0% 0.0% NIC status poll
0x00007f7d2eb2d3c2 0x00002aaab76a91e0 0.0% 0.0% 0.0% netfs_vnode_reclaim
0x00007f7d2fa58a58 0x00002aaab76d1720 0.0% 0.0% 0.0% netfs_thread_init
0x00007f7d2eb2d299 0x00002aaab76c5e40 0.0% 0.0% 0.0% netfs_mount_handler
0x00007f7d2ea7dd20 0x00002aaab76b2a20 0.0% 0.0% 0.0% MLD
0x00007f7d2fbdaed4 0x00002aaab76afb00 0.0% 0.0% 0.0% lu_rx
0x00007f7d2fbdae48 0x00002aaab76af760 0.0% 0.0% 0.0% lu_dynamic_sync
0x00007f7d2fbdad05 0x00002aaab76b72a0 0.0% 0.0% 0.0% lu_ctl
0x00007f7d2f9917fc 0x00002aaab76caa60 0.0% 0.0% 0.0% Logger
0x00007f7d2f9ba1e9 0x00002aaab76ab620 0.0% 0.0% 0.0% listen/ssh
0x00007f7d2e9c6bda 0x00002aaab76c4880 0.0% 0.0% 0.0% Lic TMR
0x00007f7d2e9c6b23 0x00002aaab76c44e0 0.0% 0.0% 0.0% Lic HA Cluster
0x00007f7d2fc17e7f 0x00002aaab76c3660 0.0% 0.0% 0.0% L2TP mgmt daemon
0x00007f7d2fc1584b 0x00002aaab76c3a00 0.0% 0.0% 0.0% L2TP data daemon
0x00007f7d2e81e840 0x00002aaab76b3160 0.0% 0.0% 0.0% IPv6 ND
0x00007f7d2e823b3c 0x00002aaab76b3500 0.0% 0.0% 0.0% IPv6 Input
0x00007f7d2e823326 0x00002aaab76b2dc0 0.0% 0.0% 0.0% IPv6 IDB
0x00007f7d2def0bfb 0x00002aaab76c2b80 0.0% 0.0% 0.0% IPsec message handler
0x00007f7d2e7aa753 0x00002aaab76b4720 0.0% 0.0% 0.0% IP Thread
0x00007f7d2f12bc75 0x00002aaab76c0ae0 0.0% 0.0% 0.0% IP RIB Update
0x00007f7d2f180f56 0x00002aaab76c1220 0.0% 0.0% 0.0% IP Connected Route Background
0x00007f7d2efd3ec6 0x00002aaab76c15c0 0.0% 0.0% 0.0% IP Background
0x00007f7d2f3a8e52 0x00002aaab76cef40 0.0% 0.0% 0.0% IP Address Assign
0x00007f7d2e79a145 0x00002aaab76a9920 0.0% 0.0% 0.0% Integrity Fw Timer Thread
0x00007f7d2e79dbd1 0x00002aaab76b9a80 0.0% 0.0% 0.0% Integrity FW Task
0x00007f7d2e6bc8bc 0x00002aaab76bbb20 0.0% 0.0% 0.0% IKEv2 Mgd Timer Thread
0x00007f7d2e6bbe7c 0x00002aaab76bbec0 0.0% 0.0% 0.0% IKEv2 EAP Passthrough
0x00007f7d2e6e7a84 0x00002aaab76bc260 0.0% 0.0% 0.0% IKEv2 Daemon
0x00007f7d2e62c395 0x00002aaab76bcd40 0.0% 0.0% 0.0% IKE Timekeeper
0x00007f7d2e5ea108 0x00002aaab76d25a0 0.0% 0.0% 0.0% IKE Receiver
0x00007f7d2e61d0ec 0x00002aaab76bc9a0 0.0% 0.0% 0.0% IKE Daemon
0x00007f7d2e5e6f05 0x00002aaab76bd0e0 0.0% 0.0% 0.0% IKE Common thread
0x00007f7d2f316f81 0x00002aaab76d08a0 0.0% 0.0% 0.0% idfw_service
0x00007f7d2f30786d 0x00002aaab76d0c40 0.0% 0.0% 0.0% idfw_proc
0x00007f7d2f31c4ad 0x00002aaab76d0500 0.0% 0.0% 0.0% idfw_adagent
0x00007f7d2e53fef6 0x00002aaab76b3fe0 0.0% 0.0% 0.0% icmp_thread
0x00007f7d2f786c8d 0x00002aaab76c1d00 0.0% 0.0% 0.0% ICMP event handler
0x00007f7d300d21d8 0x00002aaab7649480 0.0% 0.0% 0.0% hostscan_token_cleaner
0x00007f7d2e4803ad 0x00002aaab76a8aa0 0.0% 0.0% 0.0% HDD Health Monitor
0x00007f7d2e4f7ead 0x00002aaab76b0240 0.0% 0.0% 0.0% ha_trans_data_tx
0x00007f7d2e4f7ead 0x00002aaab76b05e0 0.0% 0.0% 0.0% ha_trans_ctl_tx
0x00007f7d2e4bd438 0x00002aaab76b1f40 0.0% 0.0% 0.0% fover_tx_2
0x00007f7d2e4bd438 0x00002aaab76b22e0 0.0% 0.0% 0.0% fover_tx
0x00007f7d2e4d0387 0x00002aaab76b7640 0.0% 0.0% 0.0% fover_thread
0x00007f7d2e4bbbb4 0x00002aaab76b2680 0.0% 0.0% 0.0% fover_rx
0x00007f7d2e4d942c 0x00002aaab76b1800 0.0% 0.0% 0.0% fover_rep
0x00007f7d2e4cd635 0x00002aaab76b1460 0.0% 0.0% 0.0% fover_parse
0x00007f7d2e4beb1c 0x00002aaab76b1ba0 0.0% 0.0% 0.0% fover_ip
0x00007f7d2e49d81d 0x00002aaab76b0d20 0.0% 0.0% 0.0% fover_ifc_test
0x00007f7d2e4a31da 0x00002aaab76b0980 0.0% 0.0% 0.0% fover_health_monitoring_thread
0x00007f7d2e4eb706 0x00002aaab76afea0 0.0% 0.0% 0.0% fover_FSM_thread
0x00007f7d2e4a0aad 0x00002aaab76b10c0 0.0% 0.0% 0.0% fover_fail_check
0x00007f7d2fd3b004 0x00002aaab76c7060 0.0% 0.0% 0.0% event manager
0x00007f7d2e24d3e6 0x00002aaab76dd000 0.0% 0.0% 0.0% Environment Monitor Process
0x00007f7d2e231134 0x00002aaab76ac4a0 0.0% 0.0% 0.0% emweb/https
0x00007f7d2f80f04b 0x00002aaab76c61e0 0.0% 0.0% 0.0% emweb/cifs_timer
0x00007f7d2fbbe4b0 0x00002aaab76c1960 0.0% 0.0% 0.0% Dynamic Filter VC Housekeeper
0x00007f7d2fbd238d 0x00002aaab76ce0c0 0.0% 0.0% 0.0% Dynamic Filter cli handler
0x00007f7d2e1aed5c 0x00002aaab76ade00 0.0% 0.0% 0.0% dns_process
0x00007f7d2e1b176d 0x00002aaab76ae1a0 0.0% 0.0% 0.0% dns_cache_timer
0x00007f7d2e1fb630 0x00002aaab76cd980 0.0% 0.0% 0.0% DHCP Network Scope Monitor
0x00007f7d2e197080 0x00002aaab76d4d80 0.0% 0.0% 0.0% dbgtrace
0x00007f7d2dfbcb25 0x00002aaab76d6340 0.0% 0.0% 0.0% cts_timer_task
0x00007f7d2dfb9f01 0x00002aaab76d66e0 0.0% 0.0% 0.0% cts_task
0x00007f7d2def9a89 0x00002aaab76d71c0 0.0% 0.0% 0.0% CTM Daemon
0x00007f7d2de994f5 0x00002aaab76c3da0 0.0% 0.0% 0.0% CTCP Timer process
0x00007f7d2f5a8ab5 0x00002aaab76bfc60 0.0% 0.0% 0.0% Crypto PKI RECV
0x00007f7d2f5a9b53 0x00002aaab76c03a0 0.0% 0.0% 0.0% Crypto CA
0x00007f7d2de81567 0x00002aaab76af3c0 0.0% 0.0% 0.0% cppoll
0x00007f7d2e2d2307 0x00002aaab76b8120 0.0% 0.0% 0.0% CP Threat-Detection Processing
0x00007f7d2f9abdbf 0x00002aaab76af020 0.0% 0.0% 0.0% CP Server Process
0x00007f7d2e2d2889 0x00002aaab76b96e0 0.0% 0.0% 0.0% CP Processing
0x00007f7d2e2d292d 0x00002aaab76b9340 0.0% 0.0% 0.0% CP Midpath Processing
0x00007f7d2e2d25df 0x00002aaab76b8fa0 0.0% 0.0% 0.0% CP HA Processing
0x00007f7d2e2d23ff 0x00002aaab76b84c0 0.0% 0.0% 0.0% CP DP SFR Event Processing
0x00007f7d2e2d24ef 0x00002aaab76b8860 0.0% 0.0% 0.0% CP DP CXSC Event Processing
0x00007f7d2e2d2af1 0x00002aaab76c2440 0.0% 0.0% 0.0% CP Crypto Result Processing
0x00007f7d2f9a560b 0x00002aaab76a5440 0.0% 0.0% 0.0% CP Client Process
0x00007f7d2e2d2211 0x00002aaab76b8c00 0.0% 0.0% 0.0% CP ARP Processing
0x00007f7d2de7dcf6 0x00002aaab76d8040 0.0% 0.0% 0.0% Config History Thread
0x00007f7d2f75f082 0x00002aaab76ac840 0.0% 0.0% 0.0% coa_task
0x00007f7d2de01f15 0x00002aaab76d8b20 0.0% 0.0% 0.0% CMGR Timer Process
0x00007f7d2de00d49 0x00002aaab76d8ec0 0.0% 0.0% 0.0% CMGR Server Process
0x00007f7d2de1c0b0 0x00002aaab76de5c0 0.0% 0.0% 0.0% CMGR KVM Log 1
0x00007f7d2de1aeb1 0x00002aaab76de220 0.0% 0.0% 0.0% CMGR KVM Image Mgmt
0x00007f7d2e01205d 0x00002aaab76d3b60 0.0% 0.0% 0.0% cluster interface health monitor
0x00007f7d2e2d20c1 0x00002aaab76b7d80 0.0% 0.0% 0.0% Cluster event-queue processing thread
0x00007f7d2f487b4a 0x00002aaab76ce460 0.0% 0.0% 0.0% Client Update Task
0x00007f7d2e1c4261 0x00002aaab76b79e0 0.0% 0.0% 0.0% ci/console
0x00007f7d30417fe5 0x00002aaab76cf680 0.0% 0.0% 0.0% Chunk Manager
0x00007f7d3055c92d 0x00002aaab76cdd20 0.0% 0.0% 0.0% Checkheaps
0x00007f7d2f5ffd83 0x00002aaab76c0000 0.0% 0.0% 0.0% CERT API
0x00007f7d2fa58a58 0x00002aaab76aaee0 0.0% 0.0% 0.0% cachefs
0x00007f7d2f8ec9c7 0x00002aaab76d9260 0.0% 0.0% 0.0% Boot Message Proxy Process
0x00007f7d2dd5184f 0x00002aaab76dde80 0.0% 0.0% 0.0% block_diag
0x00007f7d2ddd30ed 0x00002aaab76d9600 0.0% 0.0% 0.0% Attribute Manager Thread
0x00007f7d2e7beff3 0x00002aaab76c4c20 0.0% 0.0% 0.0% arp_forward_thread
0x00007f7d2e7b47b2 0x00002aaab76b4380 0.0% 0.0% 0.0% ARP Thread
0x00007f7d2dd88ef5 0x00002aaab76c6cc0 0.0% 0.0% 0.0% aggregate_auth_task
0x00007f7d2fa58a58 0x00002aaab76d9d40 0.0% 0.0% 0.0% aaa_shim_thread
0x00007f7d2f9a0572 0x00002aaab76d99a0 0.0% 0.0% 0.0% aaa-url-redirect-task
0x00007f7d2dd9c3aa 0x00002aaab76da480 0.0% 0.0% 0.0% aaa

show conn count
68 in use, 2167 most used

show version | i V
Cisco Adaptive Security Appliance Software Version 9.9(2)47
Firepower Extensible Operating System Version 2.3(1.144)
Device Manager Version 7.9(2)152
Maximum VLANs : 30 perpetual
Other VPN Peers : 50 perpetual
Total VPN Peers : 50 perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Key Version : A

Re: ASA 5506X showing high system memory utilization

Sheraz.Salim — Wed, 11 Mar 2020 19:00:46 GMT

CPU is stable and normal. your conn usage is very low. it could be snmp walk creating the memory leak. there is a well know bug out for the ASA here since when you noting this high usage?