topic Re: ASA 5516 CPU Utilization 72% in Network Security

ASA 5516 CPU Utilization 72%

Pyie Phyo Htay — Mon, 21 Aug 2023 09:23:08 GMT

Dear Team,

Currently I'm facing with the ASA firewall CPU utilization high issues (72%), I just want to clarify that is normal usage for the level. It's using for Core firewall tier how can i solve this issues. Thanks.

corefw01(config)# show processes cpu-usage
Hardware: ASA5516
Cisco Adaptive Security Appliance Software Version 9.8(4)25
ASLR enabled, text region 7f44b65e9000-7f44ba987e5c
PC Thread 5Sec 1Min 5Min Process
0x00007f44b828eade 0x00007f449f2c0420 0.0% 0.0% 0.0% zone_background_idb
0x00007f44b8ee9b2d 0x00007f449f2b6840 0.0% 0.0% 0.0% webvpn_task
0x00007f44b7af74bc 0x00007f449f2dac40 0.0% 0.0% 0.0% WebVPN KCD Process
0x00007f44b8d55a04 0x00007f449f2c24c0 0.0% 0.0% 0.0% vpnlb_timer_thread
0x00007f44b8d55c5a 0x00007f449f2c7bc0 0.0% 0.0% 0.0% vpnlb_thread
0x00007f44b8d38e78 0x00007f449f2ab300 0.0% 0.0% 0.0% vpnfol_thread_unsent
0x00007f44b8d38d05 0x00007f449f2aba40 0.0% 0.0% 0.0% vpnfol_thread_timer
0x00007f44b8d38770 0x00007f449f2ab6a0 0.0% 0.0% 0.0% vpnfol_thread_sync
0x00007f44b8d3831d 0x00007f449f2abde0 0.0% 0.0% 0.0% vpnfol_thread_msg
0x00007f44b8d0c35b 0x00007f449f2bad20 0.0% 0.0% 0.0% VPN Clustering HA timer thread
0x00007f44b8d0b075 0x00007f449f2bb0c0 0.0% 0.0% 0.0% VPN Clustering HA cluster member state handler
0x00007f44b8568dba 0x00007f449f2a6e20 0.0% 0.0% 0.0% vPif_stats_cleaner
0x00007f44b8b31718 0x00007f449f2d92e0 0.0% 0.0% 0.0% UserFromCert Thread
0x00007f44b75e8c7a 0x00007f449f2da500 0.0% 0.0% 0.0% USB OIR POLL
0x00007f44b851d24a 0x00007f449f2b6f80 0.0% 0.0% 0.0% update_mem_usage
0x00007f44b85289da 0x00007f449f2b7320 0.0% 0.0% 0.0% update_cpu_usage
0x00007f44b88f5c65 0x00007f449f2b64a0 0.0% 0.0% 0.0% unique_id_task
0x00007f44b8b31718 0x00007f449f2adae0 0.0% 0.0% 0.0% Unicorn Proxy Thread
0x00007f44b8afb24c 0x00007f449f2c4900 0.0% 0.0% 0.0% udp_timer
0x00007f44b8afbb22 0x00007f449f2b4060 0.0% 0.0% 0.0% udp_thread
0x00007f44b8502ebf 0x00007f449f2bcdc0 0.0% 0.0% 0.0% uauth_urlb clean
0x00007f44b89fd058 0x00007f449f2cb220 0.0% 0.0% 0.0% Uauth_Proxy
0x00007f44b8a833d2 0x00007f449f2cb5c0 0.0% 0.0% 0.0% uauth
0x00007f44b76dfab6 0x00007f449f2d2280 0.0% 0.0% 0.0% tunnel_ifc_init
0x00007f44b72aec42 0x00007f449f2c1640 0.0% 0.0% 0.0% tmatch compile thread
0x00007f44b742e59d 0x00007f449f2c5ec0 0.0% 0.0% 0.0% TLS Proxy Inspector
0x00007f44b742d765 0x00007f449f2c5b20 0.0% 0.0% 0.0% TLS Proxy Handshake
0x00007f44b739022d 0x00007f449f2ade80 0.0% 0.0% 0.0% Timekeeper
0x00007f44b8a6a61f 0x00007f449f2c98c0 0.0% 0.0% 0.0% Thread Logger
0x00007f44b8a9151b 0x00007f449f2b4400 0.0% 0.0% 0.0% tcp_thread
0x00007f44b8a8c5f5 0x00007f449f2c4ca0 0.0% 0.0% 0.0% tcp_slow
0x00007f44b8a88734 0x00007f449f2c5040 0.0% 0.0% 0.0% tcp_fast
0x00007f44b8a7da17 0x00007f449f2c9520 0.0% 0.0% 0.0% syslogd
0x00007f44b8a73085 0x00007f449f2c9c60 0.0% 0.0% 0.0% Syslog Retry Thread
0x00007f44b7148165 0x00007f449f2d6020 0.0% 0.0% 0.0% SXP CORE
0x00007f44b8e1f333 0x00007f449f2ae960 0.0% 0.0% 0.0% SW Reset Button
0x00007f44b82a74d0 0x00007f449f2bfce0 0.0% 0.0% 0.0% static
0x00007f44b8a5d9dc 0x00007f449f2ca740 0.0% 0.0% 0.0% SSL
0x00007f44b8a38035 0x00007f449f2a7900 0.0% 0.0% 0.0% ssh/timer
0x00007f44b8a2c773 0x00007f449f2a0160 0.0% 0.0% 0.0% ssh
0x00007f44b8942bb2 0x00007f449f2bdc40 0.0% 0.0% 0.0% snmpfo_timer_thread
0x00007f44b894105c 0x00007f449f2bd500 0.0% 0.0% 0.0% SNMP Notify Thread
0x00007f44b8939582 0x00007f449f2bd160 0.0% 0.0% 0.0% SNMP Host Timer Thread
0x00007f44b8afb3ab 0x00007f449f2ad740 0.0% 0.0% 0.0% snmp
0x00007f44b8a7f17c 0x00007f449f2ca3a0 0.0% 0.0% 0.0% SMTP
0x00007f44b7a06ba3 0x00007f449f2a9d40 0.0% 0.0% 0.0% shmem monitor server
0x00007f44b72d54cd 0x00007f449f2c36e0 0.0% 0.0% 0.0% sfr-vpn-status-watcher
0x00007f44b72d615c 0x00007f449f2d4a60 0.0% 0.0% 0.0% sfr-vpn-status
0x00007f44b88de12c 0x00007f449f2cbd00 0.0% 0.0% 0.0% Session Manager
0x00007f44b8a60c14 0x00007f449f2bdfe0 0.0% 0.0% 0.0% Self-Sign Cert Thread
0x00007f44b8d9f6b5 0x00007f449f2c6d40 0.0% 0.0% 0.0% scansafe_poll
0x00007f44b8b31718 0x00007f449f2af7e0 0.0% 0.0% 0.0% rtcli async executor process
0x00007f44b950cc12 0x00007f449f2aed00 0.0% 0.0% 0.0% rpc_server
0x00007f44b76874ef 0x00007f449f2ce140 0.0% 0.0% 0.0% REST Periodic
0x00007f44b6eff5b5 0x00007f449f2d9a20 0.0% 0.0% 0.0% Reload Control Thread
0x00007f44b713fb6a 0x00007f449f2d5c80 0.0% 0.0% 0.0% RBM CORE
0x00007f44b8a13b3d 0x00007f449f2ba240 0.0% 0.0% 0.0% RADIUS Proxy Time Keeper
0x00007f44b89d1947 0x00007f449f2ba5e0 0.0% 0.0% 0.0% RADIUS Proxy Listener
0x00007f44b8a15e0d 0x00007f449f2ba980 0.0% 0.0% 0.0% RADIUS Proxy Event Daemon
0x00007f44b882dcfd 0x00007f449f2cc0a0 0.0% 0.0% 0.0% Quack process
0x00007f44b8802e1c 0x00007f449f2cdda0 0.0% 0.0% 0.0% QoS Support Module
0x00007f44b6f09c9b 0x00007f449f2afb80 0.0% 0.0% 0.0% process_runq_checker
0x00007f44b8ccf2b1 0x00007f449f2c2860 0.0% 0.0% 0.0% ppp_timer_thread
0x00007f44b84bef6c 0x00007f449f2bca20 0.0% 0.0% 0.0% pm_timer_thread
0x00007f44b8737ca3 0x00007f449f2be380 0.0% 0.0% 0.0% PKI CMP Timer Thread
0x00007f44b873a35f 0x00007f449f2be720 0.0% 0.0% 0.0% PKI CMP Thread
0x00007f44b84e9bfe 0x00007f449f2ce880 0.0% 0.0% 0.0% PIX Garbage Collector
0x00007f44b872f25e 0x00007f449f2beac0 0.0% 0.0% 0.0% Periodic Cert Auth Timer Thread
0x00007f44b8734c3c 0x00007f449f2bee60 0.0% 0.0% 0.0% Periodic Cert Auth Thread
0x00007f44b7a10edf 0x00007f449f2db380 0.0% 0.0% 0.0% octnic_hm_thread
0x00007f44b8aa86a6 0x00007f449f2b6be0 0.0% 0.0% 0.0% npshim_thread
0x00007f44b851e5ca 0x00007f449f2b5d60 0.0% 0.0% 0.0% NIC status poll
0x00007f44b7c6daf2 0x00007f449f2aa480 0.0% 0.0% 0.0% netfs_vnode_reclaim
0x00007f44b8b31718 0x00007f449f2d0cc0 0.0% 0.0% 0.0% netfs_thread_init
0x00007f44b7c6d9c9 0x00007f449f2c53e0 0.0% 0.0% 0.0% netfs_mount_handler
0x00007f44b7bc1330 0x00007f449f2b31e0 0.0% 0.0% 0.0% MLD
0x00007f44b8cb3ab4 0x00007f449f2b02c0 0.0% 0.0% 0.0% lu_rx
0x00007f44b8cb3a28 0x00007f449f2aff20 0.0% 0.0% 0.0% lu_dynamic_sync
0x00007f44b8cb38e5 0x00007f449f2b76c0 0.0% 0.0% 0.0% lu_ctl
0x00007f44b8a746dc 0x00007f449f2ca000 9.1% 9.0% 9.1% Logger
0x00007f44b8a9cb59 0x00007f449f2ad000 0.0% 0.0% 0.0% listen/ssh
0x00007f44b7b12e9a 0x00007f449f2c3e20 0.0% 0.0% 0.0% Lic TMR
0x00007f44b7b12de3 0x00007f449f2c3a80 0.0% 0.0% 0.0% Lic HA Cluster
0x00007f44b7b76aec 0x00007f449f2ae5c0 0.0% 0.0% 0.0% LACP Protocol
0x00007f44b8cf013f 0x00007f449f2c2c00 0.0% 0.0% 0.0% L2TP mgmt daemon
0x00007f44b8cedb0b 0x00007f449f2c2fa0 0.0% 0.0% 0.0% L2TP data daemon
0x00007f44b7966cb0 0x00007f449f2b3920 0.0% 0.0% 0.0% IPv6 ND
0x00007f44b796bdbc 0x00007f449f2b3cc0 0.0% 0.0% 0.0% IPv6 Input
0x00007f44b796b59a 0x00007f449f2b3580 0.0% 0.0% 0.0% IPv6 IDB
0x00007f44b708704a 0x00007f449f2c2120 0.0% 0.0% 0.0% IPsec message handler
0x00007f44b78f4303 0x00007f449f2b4ee0 0.0% 0.0% 0.0% IP Thread
0x00007f44b8239865 0x00007f449f2c0080 0.0% 0.0% 0.0% IP RIB Update
0x00007f44b828ec56 0x00007f449f2c07c0 0.0% 0.0% 0.0% IP Connected Route Background
0x00007f44b80e05a6 0x00007f449f2c0b60 0.0% 0.0% 0.0% IP Background
0x00007f44b84b5182 0x00007f449f2ce4e0 0.0% 0.0% 0.0% IP Address Assign
0x00007f44b79f2b0a 0x00007f449f2dbac0 0.0% 0.0% 0.0% intel_82576_check_link_thread
0x00007f44b78e3f85 0x00007f449f2aabc0 0.0% 0.0% 0.0% Integrity Fw Timer Thread
0x00007f44b78e7a01 0x00007f449f2b9ea0 0.0% 0.0% 0.0% Integrity FW Task
0x00007f44b781354c 0x00007f449f2bb460 0.0% 0.0% 0.0% IKEv2 EAP Passthrough
0x00007f44b783b947 0x00007f449f2bb800 0.0% 0.0% 0.0% IKEv2 DPD Client Process
0x00007f44b783c84a 0x00007f449f2bbba0 0.0% 0.0% 0.0% IKEv2 Daemon
0x00007f44b7785f35 0x00007f449f2bc2e0 0.0% 0.0% 0.0% IKE Timekeeper
0x00007f44b774d018 0x00007f449f2d1b40 0.0% 0.0% 0.0% IKE Receiver
0x00007f44b77773fc 0x00007f449f2bbf40 0.0% 0.0% 0.0% IKE Daemon
0x00007f44b774a9a5 0x00007f449f2bc680 0.0% 0.0% 0.0% IKE Common thread
0x00007f44b8425281 0x00007f449f2cfe40 0.0% 0.0% 0.0% idfw_service
0x00007f44b84157f8 0x00007f449f2d01e0 0.0% 0.0% 0.0% idfw_proc
0x00007f44b842a205 0x00007f449f2cfaa0 0.0% 0.0% 0.0% idfw_adagent
0x00007f44b76a5736 0x00007f449f2b47a0 0.0% 0.0% 0.0% icmp_thread
0x00007f44b8887c3d 0x00007f449f2c12a0 0.0% 0.0% 0.0% ICMP event handler
0x00007f44b75e6b6d 0x00007f449f2aa820 0.0% 0.0% 0.0% HDD Health Monitor
0x00007f44b765d25d 0x00007f449f2b0a00 0.0% 0.0% 0.0% ha_trans_data_tx
0x00007f44b765d25d 0x00007f449f2b0da0 0.0% 0.0% 0.0% ha_trans_ctl_tx
0x00007f44b7623b28 0x00007f449f2b2700 0.0% 0.0% 0.0% fover_tx_2
0x00007f44b7623b28 0x00007f449f2b2aa0 0.0% 0.0% 0.0% fover_tx
0x00007f44b7636607 0x00007f449f2b7a60 0.0% 0.0% 0.0% fover_thread
0x00007f44b76222a4 0x00007f449f2b2e40 0.0% 0.0% 0.0% fover_rx
0x00007f44b763ef2c 0x00007f449f2b1fc0 0.0% 0.0% 0.0% fover_rep
0x00007f44b76324a5 0x00007f449f2b1c20 0.0% 0.0% 0.0% fover_parse
0x00007f44b7633b1c 0x00007f449f2b2360 0.0% 0.0% 0.0% fover_ip
0x00007f44b760403d 0x00007f449f2b14e0 0.0% 0.0% 0.0% fover_ifc_test
0x00007f44b7609b82 0x00007f449f2b1140 0.0% 0.0% 0.0% fover_health_monitoring_thread
0x00007f44b7650aa6 0x00007f449f2b0660 0.0% 0.0% 0.0% fover_FSM_thread
0x00007f44b76071fd 0x00007f449f2b1880 0.0% 0.0% 0.0% fover_fail_check
0x00007f44b89b418c 0x00007f449f2ad3a0 0.0% 0.0% 0.0% Event mib process
0x00007f44b8df19c4 0x00007f449f2c6600 0.0% 0.0% 0.0% event manager
0x00007f44b73b7636 0x00007f449f2dc200 0.0% 0.0% 0.0% Environment Monitor Process
0x00007f44b739b4a4 0x00007f449f2ae220 0.0% 0.0% 0.0% emweb/https
0x00007f44b890980b 0x00007f449f2c5780 0.0% 0.0% 0.0% emweb/cifs_timer
0x00007f44b8c97100 0x00007f449f2c0f00 0.0% 0.0% 0.0% Dynamic Filter VC Housekeeper
0x00007f44b8caafdd 0x00007f449f2cd660 0.0% 0.0% 0.0% Dynamic Filter cli handler
0x00007f44b736437a 0x00007f449f2ac8c0 0.0% 0.0% 0.0% DHCPRA Monitor
0x00007f44b733899c 0x00007f449f2acc60 0.0% 0.0% 0.0% DHCPD Timer
0x00007f44b733d89c 0x00007f449f2ac520 0.0% 0.0% 0.0% dhcp_daemon
0x00007f44b7365dda 0x00007f449f2ccf20 0.0% 0.0% 0.0% DHCP Network Scope Monitor
0x00007f44b7300720 0x00007f449f2d4320 0.0% 0.0% 0.0% dbgtrace
0x00007f44b7138025 0x00007f449f2d5540 0.0% 0.0% 0.0% cts_timer_task
0x00007f44b7135401 0x00007f449f2d58e0 0.0% 0.0% 0.0% cts_task
0x00007f44b70992da 0x00007f449f2c1d80 0.0% 0.0% 0.0% CTM message handler
0x00007f44b708f1c9 0x00007f449f2d63c0 0.0% 0.0% 0.0% CTM Daemon
0x00007f44b70336f5 0x00007f449f2c3340 0.0% 0.0% 0.0% CTCP Timer process
0x00007f44b86ab735 0x00007f449f2bf200 0.0% 0.0% 0.0% Crypto PKI RECV
0x00007f44b86ac823 0x00007f449f2bf940 0.0% 0.0% 0.0% Crypto CA
0x00007f44b701bf37 0x00007f449f2af440 0.0% 0.0% 0.0% cppoll
0x00007f44b743b997 0x00007f449f2b8540 0.0% 0.0% 0.0% CP Threat-Detection Processing
0x00007f44b8a8eaaf 0x00007f449f2af0a0 0.0% 0.0% 0.0% CP Server Process
0x00007f44b743beb9 0x00007f449f2b9b00 3.8% 3.8% 3.8% CP Processing
0x00007f44b743bf4d 0x00007f449f2b9760 0.0% 0.0% 0.0% CP Midpath Processing
0x00007f44b743bc6f 0x00007f449f2b93c0 0.0% 0.0% 0.0% CP HA Processing
0x00007f44b743ba8f 0x00007f449f2b88e0 0.0% 0.0% 0.0% CP DP SFR Event Processing
0x00007f44b743bb7f 0x00007f449f2b8c80 0.0% 0.0% 0.0% CP DP CXSC Event Processing
0x00007f44b743c111 0x00007f449f2c19e0 0.0% 0.0% 0.0% CP Crypto Result Processing
0x00007f44b8a8839b 0x00007f449f2a8780 0.0% 0.0% 0.0% CP Client Process
0x00007f44b743b8a1 0x00007f449f2b9020 3.7% 3.7% 3.7% CP ARP Processing
0x00007f44b70186c6 0x00007f449f2d7240 0.0% 0.0% 0.0% Config History Thread
0x00007f44b6f9c765 0x00007f449f2d7d20 0.0% 0.0% 0.0% CMGR Timer Process
0x00007f44b6f9b599 0x00007f449f2d80c0 0.0% 0.0% 0.0% CMGR Server Process
0x00007f44b6fb6780 0x00007f449f2dd7c0 0.0% 0.0% 0.0% CMGR KVM Log 1
0x00007f44b6fb5581 0x00007f449f2dd420 0.0% 0.0% 0.0% CMGR KVM Image Mgmt
0x00007f44b718b375 0x00007f449f2d3100 0.0% 0.0% 0.0% cluster interface health monitor
0x00007f44b743b751 0x00007f449f2b81a0 0.0% 0.0% 0.0% Cluster event-queue processing thread
0x00007f44b859229a 0x00007f449f2cda00 0.0% 0.0% 0.0% Client Update Task
0x00007f44b732ded1 0x00007f449f2b7e00 0.0% 0.0% 0.0% ci/console
0x00007f44b94d2675 0x00007f449f2cec20 0.0% 0.0% 0.0% Chunk Manager
0x00007f44b96132fd 0x00007f449f2cd2c0 0.0% 0.0% 0.0% Checkheaps
0x00007f44b87028e3 0x00007f449f2bf5a0 0.0% 0.0% 0.0% CERT API
0x00007f44b89d1947 0x00007f449f2d8460 0.0% 0.0% 0.0% Boot Message Proxy Process
0x00007f44b6ee9ccf 0x00007f449f2dd080 0.0% 0.0% 0.0% block_diag
0x00007f44b6f6d57d 0x00007f449f2d8800 0.0% 0.0% 0.0% Attribute Manager Thread
0x00007f44b78fa2d9 0x00007f449f2c4560 0.0% 0.0% 0.0% arp_timer
0x00007f44b7908003 0x00007f449f2c41c0 0.0% 0.0% 0.0% arp_forward_thread
0x00007f44b78fd7e2 0x00007f449f2b4b40 0.0% 0.0% 0.0% ARP Thread
0x00007f44b6f21cc7 0x00007f449f2c6260 0.0% 0.0% 0.0% aggregate_auth_task
0x00007f44b8b31718 0x00007f449f2d8f40 0.0% 0.0% 0.0% aaa_shim_thread
0x00007f44b8a833d2 0x00007f449f2d8ba0 0.0% 0.0% 0.0% aaa-url-redirect-task
0x00007f44b6f3542a 0x00007f449f2d9680 0.0% 0.0% 0.0% aaa
- - 27.8% 27.8% 27.7% DATAPATH-0-2063
- - 27.7% 28.3% 28.2% DATAPATH-1-2064
corefw01(config)# show cpu
corefw01(config)# show cpu u
corefw01(config)# show cpu usage
CPU utilization for 5 seconds = 72%; 1 minute: 73%; 5 minutes: 73%
corefw01(config)#

Re: ASA 5516 CPU Utilization 72%

Milos_Jovanovic — Mon, 21 Aug 2023 10:42:24 GMT

Hi @Pyie Phyo Htay,

The output you have shared is telling you that you are indeed use 72% of CPU at the moment. Most of that is in use by traffic flow processing (DATAPATH process), so it is caused by the amount of traffic flowing through your device. You should be able to corelate this with interface load too.

You can't really solve this, as this is HW capacity thing.

Kind regards,

Milos

Re: ASA 5516 CPU Utilization 72%

Pyie Phyo Htay — Mon, 21 Aug 2023 14:51:24 GMT

Dear Milos,

Thanks for your explanation that a lot of help for me.

Re: ASA 5516 CPU Utilization 72%

Pyie Phyo Htay — Thu, 24 Aug 2023 09:42:23 GMT

Dear Milo,

I have notice that my core firewall CPU utilization raise to 78% it's normal?

mmcorefw01(config)# show cpu usage
CPU utilization for 5 seconds = 78%; 1 minute: 78%; 5 minutes: 78%
mmcorefw01(config)# sh process cpu-usage non-zero sorted
Hardware: ASA5516
Cisco Adaptive Security Appliance Software Version 9.8(4)25
ASLR enabled, text region 7f44b65e9000-7f44ba987e5c
PC Thread 5Sec 1Min 5Min Process
- - 30.5% 30.5% 30.5% DATAPATH-1-2064
- - 30.0% 30.2% 30.2% DATAPATH-0-2063
0x00007f44b8a746dc 0x00007f449f2ca000 9.4% 9.3% 9.3% Logger
0x00007f44b743b8a1 0x00007f449f2b9020 4.1% 4.1% 4.1% CP ARP Processing
0x00007f44b743beb9 0x00007f449f2b9b00 3.8% 3.8% 3.8% CP Processing
corefw01(config)# sh process cpu-
corefw01(config)# sh process cpu-
corefw01(config)# sh process cpu-u
corefw01(config)# sh process cpu-usage
Hardware: ASA5516
Cisco Adaptive Security Appliance Software Version 9.8(4)25
ASLR enabled, text region 7f44b65e9000-7f44ba987e5c
PC Thread 5Sec 1Min 5Min Process
0x00007f44b828eade 0x00007f449f2c0420 0.0% 0.0% 0.0% zone_background_idb
0x00007f44b8ee9b2d 0x00007f449f2b6840 0.0% 0.0% 0.0% webvpn_task
0x00007f44b7af74bc 0x00007f449f2dac40 0.0% 0.0% 0.0% WebVPN KCD Process
0x00007f44b8d55a04 0x00007f449f2c24c0 0.0% 0.0% 0.0% vpnlb_timer_thread
0x00007f44b8d55c5a 0x00007f449f2c7bc0 0.0% 0.0% 0.0% vpnlb_thread
0x00007f44b8d38e78 0x00007f449f2ab300 0.0% 0.0% 0.0% vpnfol_thread_unsent
0x00007f44b8d38d05 0x00007f449f2aba40 0.0% 0.0% 0.0% vpnfol_thread_timer
0x00007f44b8d38770 0x00007f449f2ab6a0 0.0% 0.0% 0.0% vpnfol_thread_sync
0x00007f44b8d3831d 0x00007f449f2abde0 0.0% 0.0% 0.0% vpnfol_thread_msg
0x00007f44b8d0c35b 0x00007f449f2bad20 0.0% 0.0% 0.0% VPN Clustering HA timer thread
0x00007f44b8d0b075 0x00007f449f2bb0c0 0.0% 0.0% 0.0% VPN Clustering HA cluster member state handler
0x00007f44b8568dba 0x00007f449f29f2e0 0.0% 0.0% 0.0% vPif_stats_cleaner
0x00007f44b8b31718 0x00007f449f2d92e0 0.0% 0.0% 0.0% UserFromCert Thread
0x00007f44b75e8c7a 0x00007f449f2da500 0.0% 0.0% 0.0% USB OIR POLL
0x00007f44b851d24a 0x00007f449f2b6f80 0.0% 0.0% 0.0% update_mem_usage
0x00007f44b85289da 0x00007f449f2b7320 0.0% 0.0% 0.0% update_cpu_usage
0x00007f44b88f5c65 0x00007f449f2b64a0 0.0% 0.0% 0.0% unique_id_task
0x00007f44b8b31718 0x00007f449f2adae0 0.0% 0.0% 0.0% Unicorn Proxy Thread
0x00007f44b8afb24c 0x00007f449f2c4900 0.0% 0.0% 0.0% udp_timer
0x00007f44b8afbb22 0x00007f449f2b4060 0.0% 0.0% 0.0% udp_thread
0x00007f44b8502ebf 0x00007f449f2bcdc0 0.0% 0.0% 0.0% uauth_urlb clean
0x00007f44b89fd058 0x00007f449f2cb220 0.0% 0.0% 0.0% Uauth_Proxy
0x00007f44b8a833d2 0x00007f449f2cb5c0 0.0% 0.0% 0.0% uauth
0x00007f44b76dfab6 0x00007f449f2d2280 0.0% 0.0% 0.0% tunnel_ifc_init
0x00007f44b72aec42 0x00007f449f2c1640 0.0% 0.0% 0.0% tmatch compile thread
0x00007f44b742e59d 0x00007f449f2c5ec0 0.0% 0.0% 0.0% TLS Proxy Inspector
0x00007f44b742d765 0x00007f449f2c5b20 0.0% 0.0% 0.0% TLS Proxy Handshake
0x00007f44b739022d 0x00007f449f2ade80 0.0% 0.0% 0.0% Timekeeper
0x00007f44b8a6a61f 0x00007f449f2c98c0 0.0% 0.0% 0.0% Thread Logger
0x00007f44b8a9151b 0x00007f449f2b4400 0.0% 0.0% 0.0% tcp_thread
0x00007f44b8a8c5f5 0x00007f449f2c4ca0 0.0% 0.0% 0.0% tcp_slow
0x00007f44b8a88734 0x00007f449f2c5040 0.0% 0.0% 0.0% tcp_fast
0x00007f44b8a7da17 0x00007f449f2c9520 0.0% 0.0% 0.0% syslogd
0x00007f44b8a73085 0x00007f449f2c9c60 0.0% 0.0% 0.0% Syslog Retry Thread
0x00007f44b7148165 0x00007f449f2d6020 0.0% 0.0% 0.0% SXP CORE
0x00007f44b8e1f333 0x00007f449f2ae960 0.0% 0.0% 0.0% SW Reset Button
0x00007f44b82a74d0 0x00007f449f2bfce0 0.0% 0.0% 0.0% static
0x00007f44b8a5d9dc 0x00007f449f2ca740 0.0% 0.0% 0.0% SSL
0x00007f44b8a38035 0x00007f449f2a7900 0.0% 0.0% 0.0% ssh/timer
0x00007f44b8a2c773 0x00007f449f292b80 0.1% 0.0% 0.0% ssh
0x00007f44b8942bb2 0x00007f449f2bdc40 0.0% 0.0% 0.0% snmpfo_timer_thread
0x00007f44b894105c 0x00007f449f2bd500 0.0% 0.0% 0.0% SNMP Notify Thread
0x00007f44b8939582 0x00007f449f2bd160 0.0% 0.0% 0.0% SNMP Host Timer Thread
0x00007f44b8afb3ab 0x00007f449f2ad740 0.3% 0.0% 0.0% snmp
0x00007f44b8a7f17c 0x00007f449f2ca3a0 0.0% 0.0% 0.0% SMTP
0x00007f44b7a06ba3 0x00007f449f2a9d40 0.0% 0.0% 0.0% shmem monitor server
0x00007f44b72d54cd 0x00007f449f2c36e0 0.0% 0.0% 0.0% sfr-vpn-status-watcher
0x00007f44b72d615c 0x00007f449f2d4a60 0.0% 0.0% 0.0% sfr-vpn-status
0x00007f44b88de12c 0x00007f449f2cbd00 0.0% 0.0% 0.0% Session Manager
0x00007f44b8a60c14 0x00007f449f2bdfe0 0.0% 0.0% 0.0% Self-Sign Cert Thread
0x00007f44b8d9f6b5 0x00007f449f2c6d40 0.0% 0.0% 0.0% scansafe_poll
0x00007f44b8b31718 0x00007f449f2af7e0 0.0% 0.0% 0.0% rtcli async executor process
0x00007f44b950cc12 0x00007f449f2aed00 0.0% 0.0% 0.0% rpc_server
0x00007f44b76874ef 0x00007f449f2ce140 0.0% 0.0% 0.0% REST Periodic
0x00007f44b6eff5b5 0x00007f449f2d9a20 0.0% 0.0% 0.0% Reload Control Thread
0x00007f44b713fb6a 0x00007f449f2d5c80 0.0% 0.0% 0.0% RBM CORE
0x00007f44b8a13b3d 0x00007f449f2ba240 0.0% 0.0% 0.0% RADIUS Proxy Time Keeper
0x00007f44b89d1947 0x00007f449f2ba5e0 0.0% 0.0% 0.0% RADIUS Proxy Listener
0x00007f44b8a15e0d 0x00007f449f2ba980 0.0% 0.0% 0.0% RADIUS Proxy Event Daemon
0x00007f44b882dcfd 0x00007f449f2cc0a0 0.0% 0.0% 0.0% Quack process
0x00007f44b8802e1c 0x00007f449f2cdda0 0.0% 0.0% 0.0% QoS Support Module
0x00007f44b6f09c9b 0x00007f449f2afb80 0.0% 0.0% 0.0% process_runq_checker
0x00007f44b8ccf2b1 0x00007f449f2c2860 0.0% 0.0% 0.0% ppp_timer_thread
0x00007f44b84bef6c 0x00007f449f2bca20 0.0% 0.0% 0.0% pm_timer_thread
0x00007f44b8737ca3 0x00007f449f2be380 0.0% 0.0% 0.0% PKI CMP Timer Thread
0x00007f44b873a35f 0x00007f449f2be720 0.0% 0.0% 0.0% PKI CMP Thread
0x00007f44b84e9bfe 0x00007f449f2ce880 0.0% 0.0% 0.0% PIX Garbage Collector
0x00007f44b872f25e 0x00007f449f2beac0 0.0% 0.0% 0.0% Periodic Cert Auth Timer Thread
0x00007f44b8734c3c 0x00007f449f2bee60 0.0% 0.0% 0.0% Periodic Cert Auth Thread
0x00007f44b7a10edf 0x00007f449f2db380 0.0% 0.0% 0.0% octnic_hm_thread
0x00007f44b8aa86a6 0x00007f449f2b6be0 0.0% 0.0% 0.0% npshim_thread
0x00007f44b851e5ca 0x00007f449f2b5d60 0.0% 0.0% 0.0% NIC status poll
0x00007f44b7c6daf2 0x00007f449f2aa480 0.0% 0.0% 0.0% netfs_vnode_reclaim
0x00007f44b8b31718 0x00007f449f2d0cc0 0.0% 0.0% 0.0% netfs_thread_init
0x00007f44b7c6d9c9 0x00007f449f2c53e0 0.0% 0.0% 0.0% netfs_mount_handler
0x00007f44b7bc1330 0x00007f449f2b31e0 0.0% 0.0% 0.0% MLD
0x00007f44b8cb3ab4 0x00007f449f2b02c0 0.0% 0.0% 0.0% lu_rx
0x00007f44b8cb3a28 0x00007f449f2aff20 0.0% 0.0% 0.0% lu_dynamic_sync
0x00007f44b8cb38e5 0x00007f449f2b76c0 0.0% 0.0% 0.0% lu_ctl
0x00007f44b8a746dc 0x00007f449f2ca000 9.2% 9.3% 9.3% Logger
0x00007f44b8a9cb59 0x00007f449f2ad000 0.0% 0.0% 0.0% listen/ssh
0x00007f44b7b12e9a 0x00007f449f2c3e20 0.0% 0.0% 0.0% Lic TMR
0x00007f44b7b12de3 0x00007f449f2c3a80 0.0% 0.0% 0.0% Lic HA Cluster
0x00007f44b7b76aec 0x00007f449f2ae5c0 0.0% 0.0% 0.0% LACP Protocol
0x00007f44b8cf013f 0x00007f449f2c2c00 0.0% 0.0% 0.0% L2TP mgmt daemon
0x00007f44b8cedb0b 0x00007f449f2c2fa0 0.0% 0.0% 0.0% L2TP data daemon
0x00007f44b7966cb0 0x00007f449f2b3920 0.0% 0.0% 0.0% IPv6 ND
0x00007f44b796bdbc 0x00007f449f2b3cc0 0.0% 0.0% 0.0% IPv6 Input
0x00007f44b796b59a 0x00007f449f2b3580 0.0% 0.0% 0.0% IPv6 IDB
0x00007f44b708704a 0x00007f449f2c2120 0.0% 0.0% 0.0% IPsec message handler
0x00007f44b78f4303 0x00007f449f2b4ee0 0.0% 0.0% 0.0% IP Thread
0x00007f44b8239865 0x00007f449f2c0080 0.0% 0.0% 0.0% IP RIB Update
0x00007f44b828ec56 0x00007f449f2c07c0 0.0% 0.0% 0.0% IP Connected Route Background
0x00007f44b80e05a6 0x00007f449f2c0b60 0.0% 0.0% 0.0% IP Background
0x00007f44b84b5182 0x00007f449f2ce4e0 0.0% 0.0% 0.0% IP Address Assign
0x00007f44b79f2b0a 0x00007f449f2dbac0 0.0% 0.0% 0.0% intel_82576_check_link_thread
0x00007f44b78e3f85 0x00007f449f2aabc0 0.0% 0.0% 0.0% Integrity Fw Timer Thread
0x00007f44b78e7a01 0x00007f449f2b9ea0 0.0% 0.0% 0.0% Integrity FW Task
0x00007f44b781354c 0x00007f449f2bb460 0.0% 0.0% 0.0% IKEv2 EAP Passthrough
0x00007f44b783b947 0x00007f449f2bb800 0.0% 0.0% 0.0% IKEv2 DPD Client Process
0x00007f44b783c84a 0x00007f449f2bbba0 0.0% 0.0% 0.0% IKEv2 Daemon
0x00007f44b7785f35 0x00007f449f2bc2e0 0.0% 0.0% 0.0% IKE Timekeeper
0x00007f44b774d018 0x00007f449f2d1b40 0.0% 0.0% 0.0% IKE Receiver
0x00007f44b77773fc 0x00007f449f2bbf40 0.0% 0.0% 0.0% IKE Daemon
0x00007f44b774a9a5 0x00007f449f2bc680 0.0% 0.0% 0.0% IKE Common thread
0x00007f44b8425281 0x00007f449f2cfe40 0.0% 0.0% 0.0% idfw_service
0x00007f44b84157f8 0x00007f449f2d01e0 0.0% 0.0% 0.0% idfw_proc
0x00007f44b842a205 0x00007f449f2cfaa0 0.0% 0.0% 0.0% idfw_adagent
0x00007f44b76a5736 0x00007f449f2b47a0 0.0% 0.0% 0.0% icmp_thread
0x00007f44b8887c3d 0x00007f449f2c12a0 0.0% 0.0% 0.0% ICMP event handler
0x00007f44b75e6b6d 0x00007f449f2aa820 0.0% 0.0% 0.0% HDD Health Monitor
0x00007f44b765d25d 0x00007f449f2b0a00 0.0% 0.0% 0.0% ha_trans_data_tx
0x00007f44b765d25d 0x00007f449f2b0da0 0.0% 0.0% 0.0% ha_trans_ctl_tx
0x00007f44b7623b28 0x00007f449f2b2700 0.0% 0.0% 0.0% fover_tx_2
0x00007f44b7623b28 0x00007f449f2b2aa0 0.0% 0.0% 0.0% fover_tx
0x00007f44b7636607 0x00007f449f2b7a60 0.0% 0.0% 0.0% fover_thread
0x00007f44b76222a4 0x00007f449f2b2e40 0.0% 0.0% 0.0% fover_rx
0x00007f44b763ef2c 0x00007f449f2b1fc0 0.0% 0.0% 0.0% fover_rep
0x00007f44b76324a5 0x00007f449f2b1c20 0.0% 0.0% 0.0% fover_parse
0x00007f44b7633b1c 0x00007f449f2b2360 0.0% 0.0% 0.0% fover_ip
0x00007f44b760403d 0x00007f449f2b14e0 0.0% 0.0% 0.0% fover_ifc_test
0x00007f44b7609b82 0x00007f449f2b1140 0.0% 0.0% 0.0% fover_health_monitoring_thread
0x00007f44b7650aa6 0x00007f449f2b0660 0.0% 0.0% 0.0% fover_FSM_thread
0x00007f44b76071fd 0x00007f449f2b1880 0.0% 0.0% 0.0% fover_fail_check
0x00007f44b89b418c 0x00007f449f2ad3a0 0.0% 0.0% 0.0% Event mib process
0x00007f44b8df19c4 0x00007f449f2c6600 0.0% 0.0% 0.0% event manager
0x00007f44b73b7636 0x00007f449f2dc200 0.0% 0.0% 0.0% Environment Monitor Process
0x00007f44b739b4a4 0x00007f449f2ae220 0.0% 0.0% 0.0% emweb/https
0x00007f44b890980b 0x00007f449f2c5780 0.0% 0.0% 0.0% emweb/cifs_timer
0x00007f44b8c97100 0x00007f449f2c0f00 0.0% 0.0% 0.0% Dynamic Filter VC Housekeeper
0x00007f44b8caafdd 0x00007f449f2cd660 0.0% 0.0% 0.0% Dynamic Filter cli handler
0x00007f44b736437a 0x00007f449f2ac8c0 0.0% 0.0% 0.0% DHCPRA Monitor
0x00007f44b733899c 0x00007f449f2acc60 0.0% 0.0% 0.0% DHCPD Timer
0x00007f44b733d89c 0x00007f449f2ac520 0.0% 0.0% 0.0% dhcp_daemon
0x00007f44b7365dda 0x00007f449f2ccf20 0.0% 0.0% 0.0% DHCP Network Scope Monitor
0x00007f44b7300720 0x00007f449f2d4320 0.0% 0.0% 0.0% dbgtrace
0x00007f44b7138025 0x00007f449f2d5540 0.0% 0.0% 0.0% cts_timer_task
0x00007f44b7135401 0x00007f449f2d58e0 0.0% 0.0% 0.0% cts_task
0x00007f44b70992da 0x00007f449f2c1d80 0.0% 0.0% 0.0% CTM message handler
0x00007f44b708f1c9 0x00007f449f2d63c0 0.0% 0.0% 0.0% CTM Daemon
0x00007f44b70336f5 0x00007f449f2c3340 0.0% 0.0% 0.0% CTCP Timer process
0x00007f44b86ab735 0x00007f449f2bf200 0.0% 0.0% 0.0% Crypto PKI RECV
0x00007f44b86ac823 0x00007f449f2bf940 0.0% 0.0% 0.0% Crypto CA
0x00007f44b701bf37 0x00007f449f2af440 0.0% 0.0% 0.0% cppoll
0x00007f44b743b997 0x00007f449f2b8540 0.0% 0.0% 0.0% CP Threat-Detection Processing
0x00007f44b8a8eaaf 0x00007f449f2af0a0 0.0% 0.0% 0.0% CP Server Process
0x00007f44b743beb9 0x00007f449f2b9b00 3.7% 3.8% 3.8% CP Processing
0x00007f44b743bf4d 0x00007f449f2b9760 0.0% 0.0% 0.0% CP Midpath Processing
0x00007f44b743bc6f 0x00007f449f2b93c0 0.0% 0.0% 0.0% CP HA Processing
0x00007f44b743ba8f 0x00007f449f2b88e0 0.0% 0.0% 0.0% CP DP SFR Event Processing
0x00007f44b743bb7f 0x00007f449f2b8c80 0.0% 0.0% 0.0% CP DP CXSC Event Processing
0x00007f44b743c111 0x00007f449f2c19e0 0.0% 0.0% 0.0% CP Crypto Result Processing
0x00007f44b8a8839b 0x00007f449f2a8780 0.0% 0.0% 0.0% CP Client Process
0x00007f44b743b8a1 0x00007f449f2b9020 4.0% 4.1% 4.1% CP ARP Processing
0x00007f44b70186c6 0x00007f449f2d7240 0.0% 0.0% 0.0% Config History Thread
0x00007f44b6f9c765 0x00007f449f2d7d20 0.0% 0.0% 0.0% CMGR Timer Process
0x00007f44b6f9b599 0x00007f449f2d80c0 0.0% 0.0% 0.0% CMGR Server Process
0x00007f44b6fb6780 0x00007f449f2dd7c0 0.0% 0.0% 0.0% CMGR KVM Log 1
0x00007f44b6fb5581 0x00007f449f2dd420 0.0% 0.0% 0.0% CMGR KVM Image Mgmt
0x00007f44b718b375 0x00007f449f2d3100 0.0% 0.0% 0.0% cluster interface health monitor
0x00007f44b743b751 0x00007f449f2b81a0 0.0% 0.0% 0.0% Cluster event-queue processing thread
0x00007f44b859229a 0x00007f449f2cda00 0.0% 0.0% 0.0% Client Update Task
0x00007f44b732ded1 0x00007f449f2b7e00 0.0% 0.0% 0.0% ci/console
0x00007f44b94d2675 0x00007f449f2cec20 0.0% 0.0% 0.0% Chunk Manager
0x00007f44b96132fd 0x00007f449f2cd2c0 0.0% 0.0% 0.0% Checkheaps
0x00007f44b87028e3 0x00007f449f2bf5a0 0.0% 0.0% 0.0% CERT API
0x00007f44b89d1947 0x00007f449f2d8460 0.0% 0.0% 0.0% Boot Message Proxy Process
0x00007f44b6ee9ccf 0x00007f449f2dd080 0.0% 0.0% 0.0% block_diag
0x00007f44b6f6d57d 0x00007f449f2d8800 0.0% 0.0% 0.0% Attribute Manager Thread
0x00007f44b78fa2d9 0x00007f449f2c4560 0.0% 0.0% 0.0% arp_timer
0x00007f44b7908003 0x00007f449f2c41c0 0.0% 0.0% 0.0% arp_forward_thread
0x00007f44b78fd7e2 0x00007f449f2b4b40 0.0% 0.0% 0.0% ARP Thread
0x00007f44b6f21cc7 0x00007f449f2c6260 0.0% 0.0% 0.0% aggregate_auth_task
0x00007f44b8b31718 0x00007f449f2d8f40 0.0% 0.0% 0.0% aaa_shim_thread
0x00007f44b8a833d2 0x00007f449f2d8ba0 0.0% 0.0% 0.0% aaa-url-redirect-task
0x00007f44b6f3542a 0x00007f449f2d9680 0.0% 0.0% 0.0% aaa
- - 30.7% 30.2% 30.2% DATAPATH-0-2063
- - 30.7% 30.5% 30.5% DATAPATH-1-2064
corefw01(config)#

Re: ASA 5516 CPU Utilization 72%

Milos_Jovanovic — Thu, 24 Aug 2023 13:52:48 GMT

Hi @Pyie Phyo Htay,

You'll need to check interface load for this. CPU spike on ASA is quite often related to data transfer spike which is happening through ASA. If you have interface monitoring, and you see traffic increase in same period where you see CPU spikes, then it is due to FW capacity.

What I see from your last and one before that outputs, I see difference of few percents for DATAPATH processes, which corelate with increase of overal CPU usage, so I still believe it is due to a FW capacity.

Kind regards,

Milos

Re: ASA 5516 CPU Utilization 72%

johnlloyd_13 — Fri, 25 Aug 2023 02:22:16 GMT

hi,

what's your ISP drain/link bandwidth? this could be due to a bandwidth oversubscription.

you can issue the crypto engine large-mod-accel global config command as an interim fix. just schedule a window when enabling this.

long term solution is to do a hardware upgrade that will support the current and future bandwidth/traffic load.

Re: ASA 5516 CPU Utilization 72%

Pyie Phyo Htay — Fri, 25 Aug 2023 03:03:36 GMT

Hi Milos,

Thank you again for your explanation.!

Re: ASA 5516 CPU Utilization 72%

Milos_Jovanovic — Fri, 25 Aug 2023 06:02:01 GMT

Hi @johnlloyd_13,

Have you tried this command on newer HW? I personally haven't, but per documentation, it should already be enabled on 5500-X models and this command should be deprecated on newer SW releases, as it is already embedded.

Kind regards,

Milos