topic ASA 5520 CPU usage high in Network Security https://community.cisco.com/t5/network-security/asa-5520-cpu-usage-high/m-p/2417382#M307806 <HTML><HEAD></HEAD><BODY><P>Hi Md,</P><P></P><P>As per the logs dispatch unit is utilizing the max CPU, this process is related to traffic on ASA,</P><P></P><P>Get the following Outputs:</P><P></P><PRE><STRONG>Please follow the following documents:</STRONG></PRE><PRE><STRONG> </STRONG></PRE><PRE></PRE><PRE><STRONG>show process cpu-usage sorted non-zero</STRONG></PRE><P> show tech</P><P></P><P></P><P>Cheers,</P><P></P><P>Naveen</P></BODY></HTML> Wed, 04 Dec 2013 11:47:53 GMT narawat 2013-12-04T11:47:53Z ASA 5520 CPU usage high https://community.cisco.com/t5/network-security/asa-5520-cpu-usage-high/m-p/2417381#M307805 <P>Hi,</P><P></P><P>Our peri firewall cpu usgae is very high. please find the output log and help. </P><P></P><P>PeriFW-01# sh processes cpu-usage sorted</P><P>PC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thread&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5Sec&nbsp;&nbsp;&nbsp;&nbsp; 1Min&nbsp;&nbsp;&nbsp;&nbsp; 5Min&nbsp;&nbsp; Process</P><P><STRONG>081aa5f9&nbsp;&nbsp; c8daf870&nbsp;&nbsp;&nbsp; 96.0%&nbsp;&nbsp;&nbsp; 95.5%&nbsp;&nbsp;&nbsp; 95.6%&nbsp;&nbsp; Dispatch Unit</STRONG></P><P>08b3709e&nbsp;&nbsp; c8da0c30&nbsp;&nbsp;&nbsp;&nbsp; 2.5%&nbsp;&nbsp;&nbsp;&nbsp; 2.6%&nbsp;&nbsp;&nbsp;&nbsp; 2.5%&nbsp;&nbsp; SNMP Notify Thread</P><P>08191128&nbsp;&nbsp; c8da5508&nbsp;&nbsp;&nbsp;&nbsp; 0.5%&nbsp;&nbsp;&nbsp;&nbsp; 0.5%&nbsp;&nbsp;&nbsp;&nbsp; 0.5%&nbsp;&nbsp; tmatch compile thread</P><P>0927f1ea&nbsp;&nbsp; c8daa9b0&nbsp;&nbsp;&nbsp;&nbsp; 0.2%&nbsp;&nbsp;&nbsp;&nbsp; 0.1%&nbsp;&nbsp;&nbsp;&nbsp; 0.1%&nbsp;&nbsp; Checkheaps</P><P>08b13d95&nbsp;&nbsp; c8da9210&nbsp;&nbsp;&nbsp;&nbsp; 0.2%&nbsp;&nbsp;&nbsp;&nbsp; 0.2%&nbsp;&nbsp;&nbsp;&nbsp; 0.2%&nbsp;&nbsp; Logger</P><P>08b9ac8c&nbsp;&nbsp; c8d966d0&nbsp;&nbsp;&nbsp;&nbsp; 0.1%&nbsp;&nbsp;&nbsp;&nbsp; 0.1%&nbsp;&nbsp;&nbsp;&nbsp; 0.1%&nbsp;&nbsp; ssh</P><P>083c1452&nbsp;&nbsp; c8da21d8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; fover_health_monitoring_thread</P><P>083db19b&nbsp;&nbsp; c8da29b8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; fover_ip</P><P>08054f3c&nbsp;&nbsp; c8dafc60&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; block_diag</P><P>083ae5b5&nbsp;&nbsp; c8daf480&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; CF OIR</P><P>08a1f8b0&nbsp;&nbsp; c8daf288&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; lina_int</P><P>08068755&nbsp;&nbsp; c8daeca0&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; Reload Control Thread</P><P>080705a6&nbsp;&nbsp; c8daeaa8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; aaa</P><P>08b5a75b&nbsp;&nbsp; c8dae6b8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; Boot Message Proxy Process</P><P>080a0f36&nbsp;&nbsp; c8dae4c0&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; CMGR Server Process</P><P>080a1445&nbsp;&nbsp; c8dae2c8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; CMGR Timer Process</P><P>081a974c&nbsp;&nbsp; c8dad8f0&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; dbgtrace</P><P>0843b0fc&nbsp;&nbsp; c8dad110&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; 557mcfix</P><P>0843af1e&nbsp;&nbsp; c8dacf18&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; 557statspoll</P><P>08c2bb4d&nbsp;&nbsp; c8dabd60&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; netfs_thread_init</P><P>09250e05&nbsp;&nbsp; c8dab388&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; Chunk Manager</P><P>088b480e&nbsp;&nbsp; c8dab190&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; PIX Garbage Collector</P><P>088a7cb4&nbsp;&nbsp; c8daaf98&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; IP Address Assign</P><P>08a6e896&nbsp;&nbsp; c8daada0&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; QoS Support Module</P><P>0892250f&nbsp;&nbsp; c8daaba8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; Client Update Task</P><P>08a72385&nbsp;&nbsp; c8daa3c8&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp;&nbsp;&nbsp; 0.0%&nbsp;&nbsp; Quack process</P><P></P><P>PeriFW-01# sh ver</P><P></P><P>Cisco Adaptive Security Appliance Software Version 8.2(1)</P><P>Device Manager Version 6.2(1)</P><P></P><P>Compiled on Tue 05-May-09 22:45 by builders</P><P>System image file is "disk0:/asa821-k8.bin"</P><P>Config file at boot was "startup-config"</P><P></P><P>PeriFW-01 up 2 days 17 hours</P><P>failover cluster up 2 days 17 hours</P><P></P><P>Hardware:&nbsp;&nbsp; ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz</P><P>Internal ATA Compact Flash, 256MB</P><P>BIOS Flash M50FW080 @ 0xffe00000, 1024KB</P><P></P><P>Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Boot microcode&nbsp;&nbsp; : CN1000-MC-BOOT-2.00</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPSec microcode&nbsp; : CNlite-MC-IPSECm-MAIN-2.04</P><P> 0: Ext: GigabitEthernet0/0&nbsp; : address is 0025.84fc.e984, irq 9</P><P> 1: Ext: GigabitEthernet0/1&nbsp; : address is 0025.84fc.e985, irq 9</P><P> 2: Ext: GigabitEthernet0/2&nbsp; : address is 0025.84fc.e986, irq 9</P><P> 3: Ext: GigabitEthernet0/3&nbsp; : address is 0025.84fc.e987, irq 9</P><P> 4: Ext: Management0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : address is 0025.84fc.e988, irq 11</P><P> 5: Int: Internal-Data0/0&nbsp;&nbsp;&nbsp; : address is 0000.0001.0002, irq 11</P><P> 6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5</P><P></P><P>Licensed features for this platform:</P><P>Maximum Physical Interfaces&nbsp; : Unlimited</P><P>Maximum VLANs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 150</P><P>Inside Hosts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Unlimited</P><P>Failover&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Active/Active</P><P>VPN-DES&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Enabled</P><P>VPN-3DES-AES&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Enabled</P><P>Security Contexts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 2</P><P>GTP/GPRS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Disabled</P><P>SSL VPN Peers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 2</P><P>Total VPN Peers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 750</P><P>Shared License&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Disabled</P><P>AnyConnect for Mobile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Disabled</P><P>AnyConnect for Linksys phone : Disabled</P><P>AnyConnect Essentials&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Disabled</P><P>Advanced Endpoint Assessment : Disabled</P><P>UC Phone Proxy Sessions&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 2</P><P>Total UC Proxy Sessions&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 2</P><P>Botnet Traffic Filter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Disabled</P><P></P><P>This platform has an ASA 5520 VPN Plus license.</P> Tue, 12 Mar 2019 03:12:26 GMT https://community.cisco.com/t5/network-security/asa-5520-cpu-usage-high/m-p/2417381#M307805 Md.Mosharof Hossain 2019-03-12T03:12:26Z ASA 5520 CPU usage high https://community.cisco.com/t5/network-security/asa-5520-cpu-usage-high/m-p/2417382#M307806 <HTML><HEAD></HEAD><BODY><P>Hi Md,</P><P></P><P>As per the logs dispatch unit is utilizing the max CPU, this process is related to traffic on ASA,</P><P></P><P>Get the following Outputs:</P><P></P><PRE><STRONG>Please follow the following documents:</STRONG></PRE><PRE><STRONG> </STRONG></PRE><PRE></PRE><PRE><STRONG>show process cpu-usage sorted non-zero</STRONG></PRE><P> show tech</P><P></P><P></P><P>Cheers,</P><P></P><P>Naveen</P></BODY></HTML> Wed, 04 Dec 2013 11:47:53 GMT https://community.cisco.com/t5/network-security/asa-5520-cpu-usage-high/m-p/2417382#M307806 narawat 2013-12-04T11:47:53Z