https://community.cisco.com/t5/network-security/dispatch-unit-high-cpu-usage/m-p/2501468#M235763 <P>Hi,</P><P>On ASA 5510 8.2.5(50)</P><P>We are contantly gettin high cpu usage for Dispatch unit process for last 10 hours. The Dispatch unit is taking approx 40% usage constantly.</P><P>We checked teh following:</P><P>1. The interfaces.</P><P>&nbsp; &nbsp; No error counts, overruns, underruns reported.</P><P>2. show perform</P><P>&nbsp; &nbsp; All connections below normal/avg. values</P><P>3.show conn and xlate</P><P>&nbsp; &nbsp;Approx 1100 and 112</P><P>4. show traffic</P><P>&nbsp; &nbsp; shows very less&nbsp;&nbsp;drop counts ( max is 3 pkts/sec) on some interfaces not all.</P><P>&nbsp; &nbsp; Traffic usage is very less . Approx 4Mbps from all interfaces cumulatively.</P><P>5. Checked inspections.</P><P>&nbsp; No drops in global&nbsp;service policy [ only global is there]</P><P>------------------------------------------------------------------</P><P># sh cpu usage&nbsp;<BR />CPU utilization for 5 seconds = 39%; 1 minute: 39%; 5 minutes: 39%</P><P>sh processes cpu-usage sorted&nbsp;<BR />PC &nbsp; &nbsp; &nbsp; &nbsp; Thread &nbsp; &nbsp; &nbsp; 5Sec &nbsp; &nbsp; 1Min &nbsp; &nbsp; 5Min &nbsp; Process<BR />081aadc4 &nbsp; a79aff7c &nbsp; &nbsp;35.7% &nbsp; &nbsp;37.5% &nbsp; &nbsp;42.5% &nbsp; Dispatch Unit<BR />0853f89e &nbsp; a79a0b68 &nbsp; &nbsp; 0.4% &nbsp; &nbsp; 0.2% &nbsp; &nbsp; 0.2% &nbsp; ARP Thread</P><P># sh conn count&nbsp;<BR />1138 in use, 8777 most used</P><P># sh xlate count&nbsp;<BR />112 in use, 265 most used</P><DIV># sh interface e0/0 | inc overrun</DIV><DIV>0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort</DIV><DIV># sh interface e0/1 | inc overrun</DIV><DIV>0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort</DIV><P>&nbsp;</P><P># show perfmon detail</P><P>PERFMON STATS: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Current &nbsp; &nbsp; &nbsp;Average<BR />Xlates &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />Connections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;23/s &nbsp; &nbsp; &nbsp; &nbsp; 32/s<BR />TCP Conns &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;20/s &nbsp; &nbsp; &nbsp; &nbsp; 28/s<BR />UDP Conns &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1/s<BR />URL Access &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />URL Server Req &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Intercept Established Conns &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Intercept Attempts &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Embryonic Conns Timeout &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1/s<BR />HTTP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />FTP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Authen &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Author &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Account &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s</P><P>VALID CONNS RATE in TCP INTERCEPT: &nbsp; &nbsp;Current &nbsp; &nbsp; &nbsp;Average<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A &nbsp; &nbsp; &nbsp; &nbsp; 85.00%</P><P>SETUP RATES:<BR />Connections for 1 minute = 23/s; 5 minutes = 32/s<BR />TCP Conns for 1 minute = 18/s; 5 minutes = 27/s<BR />UDP Conns for 1 minute = 1/s; 5 minutes = 2/s</P><DIV>Regards,</DIV><DIV>Gurjit Singh</DIV><DIV>Network Engineer</DIV><DIV>Spooster IT Services.</DIV> Tue, 12 Mar 2019 04:36:16 GMT Gurjit Singh Sra 2019-03-12T04:36:16Z https://community.cisco.com/t5/network-security/dispatch-unit-high-cpu-usage/m-p/2501468#M235763 <P>Hi,</P><P>On ASA 5510 8.2.5(50)</P><P>We are contantly gettin high cpu usage for Dispatch unit process for last 10 hours. The Dispatch unit is taking approx 40% usage constantly.</P><P>We checked teh following:</P><P>1. The interfaces.</P><P>&nbsp; &nbsp; No error counts, overruns, underruns reported.</P><P>2. show perform</P><P>&nbsp; &nbsp; All connections below normal/avg. values</P><P>3.show conn and xlate</P><P>&nbsp; &nbsp;Approx 1100 and 112</P><P>4. show traffic</P><P>&nbsp; &nbsp; shows very less&nbsp;&nbsp;drop counts ( max is 3 pkts/sec) on some interfaces not all.</P><P>&nbsp; &nbsp; Traffic usage is very less . Approx 4Mbps from all interfaces cumulatively.</P><P>5. Checked inspections.</P><P>&nbsp; No drops in global&nbsp;service policy [ only global is there]</P><P>------------------------------------------------------------------</P><P># sh cpu usage&nbsp;<BR />CPU utilization for 5 seconds = 39%; 1 minute: 39%; 5 minutes: 39%</P><P>sh processes cpu-usage sorted&nbsp;<BR />PC &nbsp; &nbsp; &nbsp; &nbsp; Thread &nbsp; &nbsp; &nbsp; 5Sec &nbsp; &nbsp; 1Min &nbsp; &nbsp; 5Min &nbsp; Process<BR />081aadc4 &nbsp; a79aff7c &nbsp; &nbsp;35.7% &nbsp; &nbsp;37.5% &nbsp; &nbsp;42.5% &nbsp; Dispatch Unit<BR />0853f89e &nbsp; a79a0b68 &nbsp; &nbsp; 0.4% &nbsp; &nbsp; 0.2% &nbsp; &nbsp; 0.2% &nbsp; ARP Thread</P><P># sh conn count&nbsp;<BR />1138 in use, 8777 most used</P><P># sh xlate count&nbsp;<BR />112 in use, 265 most used</P><DIV># sh interface e0/0 | inc overrun</DIV><DIV>0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort</DIV><DIV># sh interface e0/1 | inc overrun</DIV><DIV>0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort</DIV><P>&nbsp;</P><P># show perfmon detail</P><P>PERFMON STATS: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Current &nbsp; &nbsp; &nbsp;Average<BR />Xlates &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />Connections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;23/s &nbsp; &nbsp; &nbsp; &nbsp; 32/s<BR />TCP Conns &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;20/s &nbsp; &nbsp; &nbsp; &nbsp; 28/s<BR />UDP Conns &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1/s<BR />URL Access &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />URL Server Req &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Intercept Established Conns &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Intercept Attempts &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />TCP Embryonic Conns Timeout &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1/s<BR />HTTP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />FTP Fixup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Authen &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Author &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s<BR />AAA Account &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0/s &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0/s</P><P>VALID CONNS RATE in TCP INTERCEPT: &nbsp; &nbsp;Current &nbsp; &nbsp; &nbsp;Average<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A &nbsp; &nbsp; &nbsp; &nbsp; 85.00%</P><P>SETUP RATES:<BR />Connections for 1 minute = 23/s; 5 minutes = 32/s<BR />TCP Conns for 1 minute = 18/s; 5 minutes = 27/s<BR />UDP Conns for 1 minute = 1/s; 5 minutes = 2/s</P><DIV>Regards,</DIV><DIV>Gurjit Singh</DIV><DIV>Network Engineer</DIV><DIV>Spooster IT Services.</DIV> Tue, 12 Mar 2019 04:36:16 GMT https://community.cisco.com/t5/network-security/dispatch-unit-high-cpu-usage/m-p/2501468#M235763 Gurjit Singh Sra 2019-03-12T04:36:16Z https://community.cisco.com/t5/network-security/dispatch-unit-high-cpu-usage/m-p/2501469#M235765 <P>Kindly suggest ASAP.</P><DIV style="font-size: 14.44444465637207px;">Regards,</DIV><DIV style="font-size: 14.44444465637207px;">Gurjit Singh</DIV><DIV style="font-size: 14.44444465637207px;">Network Engineer</DIV><DIV style="font-size: 14.44444465637207px;">Spooster IT Services.</DIV> Sat, 09 Aug 2014 14:44:49 GMT https://community.cisco.com/t5/network-security/dispatch-unit-high-cpu-usage/m-p/2501469#M235765 Gurjit Singh Sra 2014-08-09T14:44:49Z