topic CPU Utilization for UDP traffic - IOS IPS in Network Security https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198184#M53988 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>Thanks for your reply. No, there dont seem to be any events triggerd whilst running the test.</P><P></P><P>Regards</P></BODY></HTML> Fri, 15 Mar 2013 08:31:11 GMT cunninghamri 2013-03-15T08:31:11Z CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198179#M53983 <P>Hi</P><P></P><P>I am experiencing high CPU utilisation on my 1861 router when the IPS feature is enabled. It would seem that the problem is experienced when UDP traffic is traversing the router. In my lab I am passing 10Mb of traffic through the device using IPERF. When I use TCP streams, my CPU utilisation is around 35%. However, if I pass 10Mb of UDP streams through the router. The CPU constantly sits betwen 98-100%. Is this expected behavior?</P><P></P><P>I only have the Virus/Worms/Trojan catagory enabled.</P><P></P><P>Any advice would be appreciated.</P><P></P><P>Regards</P><P>Richard</P> Sun, 10 Mar 2019 12:55:04 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198179#M53983 cunninghamri 2019-03-10T12:55:04Z CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198180#M53984 <HTML><HEAD></HEAD><BODY><P>I would recommend to first start with a packet capture on the interface in question to clarify the situation.</P></BODY></HTML> Tue, 12 Mar 2013 16:40:17 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198180#M53984 sofianecirat 2013-03-12T16:40:17Z CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198181#M53985 <HTML><HEAD></HEAD><BODY><P>Thanks for your reply. Could you please clarify what you mean? What should I look for in a packet caputure. </P><P></P><P>To clarify, I have a lab setup and a controlled environment. I am&nbsp; generating traffic using IPERF.This is the only traffic traversing the router. TCP traffic has a small impact on the CPU but UDP causes the CPU to reach its maximum.</P><P></P><P>Regards</P><P>Richard</P></BODY></HTML> Tue, 12 Mar 2013 16:49:10 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198181#M53985 cunninghamri 2013-03-12T16:49:10Z Re: CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198182#M53986 <HTML><HEAD></HEAD><BODY><P>I believe there's a bug with iperf using UDP as it spikes the CPU util to %100.</P><P>i never used it myself but I know that a lot of people encountered the same issue you're talking about.</P><P>I don't know if it was patched, but you can google it to find out.</P></BODY></HTML> Tue, 12 Mar 2013 17:06:33 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198182#M53986 sofianecirat 2013-03-12T17:06:33Z Re: CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198183#M53987 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Are there any events reported from the IPS while running the test?</P><P></P><P>Regards</P></BODY></HTML> Fri, 15 Mar 2013 03:42:44 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198183#M53987 Julio Carvajal 2013-03-15T03:42:44Z CPU Utilization for UDP traffic - IOS IPS https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198184#M53988 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>Thanks for your reply. No, there dont seem to be any events triggerd whilst running the test.</P><P></P><P>Regards</P></BODY></HTML> Fri, 15 Mar 2013 08:31:11 GMT https://community.cisco.com/t5/network-security/cpu-utilization-for-udp-traffic-ios-ips/m-p/2198184#M53988 cunninghamri 2013-03-15T08:31:11Z