topic New SSM-IPS40 show 50% CPU with no traffic in Network Security https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940006#M55525 <HTML><HEAD></HEAD><BODY><P>Ah, very good.&nbsp; </P><P></P><P>Thanks a bunch.</P><P></P><P>Dennis</P></BODY></HTML> Mon, 05 Mar 2012 13:58:37 GMT dschwind 2012-03-05T13:58:37Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940001#M55520 <P>We're getting ready to deploy 2 ASA 5585s with SSM-IPS40 modules.&nbsp; IDM reports 8 cpus at 100% utilization for a total of 50% cpu utilization.&nbsp; Is IDM reporting this in error?&nbsp; I'm not finding a way to check on the CLI.&nbsp; There is no traffic traversing these devices at the moment.</P><P></P><P>Thanks in advance for any help.</P><P></P><P>Dennis</P> Sun, 10 Mar 2019 12:37:47 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940001#M55520 dschwind 2019-03-10T12:37:47Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940002#M55521 <HTML><HEAD></HEAD><BODY><P>I should include the SSP_IPS40 blades shipped with 7.1(1)E4.</P></BODY></HTML> Thu, 01 Mar 2012 22:38:29 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940002#M55521 dschwind 2012-03-01T22:38:29Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940003#M55522 <HTML><HEAD></HEAD><BODY><P>As from E3 engine updates, the IPS uses a different algorithm for managing its idle</P><P>time,and spends more time polling for packets to reduce latency. The E3 changes included a</P><P>fix to a problem with high latency during low traffic loads. The fix was to have sensorApp</P><P>check the packet buffers on the driver more often. So the packet could be pulled off the</P><P>driver queue quicker for analysis instead of waiting for the driver to fill the queue</P><P>before passing it to sensorApp. This increased checking caused a corresponding increase in</P><P>cpu usage.</P><P></P><P>The CPU Utilization measurement can/will be high, due to the change made in</P><P>the E3 engine, polling the sensing interfaces for more data. This is OK as if/when the</P><P>sensorApp process requires additional CPU time, the amount the polling is using is</P><P>dynamically scaled back to useful for determining actual sensor load.</P><P></P><P>So do not worry for the HIGH CPU but check the Processing load percentage on the IPS.</P><P></P><P>Please post if there are still unanswered questions.</P><P></P><P>,</P><P>Sachin</P></BODY></HTML> Mon, 05 Mar 2012 12:23:36 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940003#M55522 svaish 2012-03-05T12:23:36Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940004#M55523 <HTML><HEAD></HEAD><BODY><P>How would I check processing load?</P><P></P><P>Dennis</P></BODY></HTML> Mon, 05 Mar 2012 13:15:59 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940004#M55523 dschwind 2012-03-05T13:15:59Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940005#M55524 <HTML><HEAD></HEAD><BODY><P>show statistics virtual-sensor VS0</P><P></P><P>Virtual Sensor Statistics</P><P></P><P>Statistics for Virtual Sensor vs0</P><P></P><P>Processing Load Percentage = XX</P><P></P><P>or on the IDM where you see the Graph for the CPU in the same circlr you would see Inspection Load.</P><P></P><P>Sachin</P></BODY></HTML> Mon, 05 Mar 2012 13:21:55 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940005#M55524 svaish 2012-03-05T13:21:55Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940006#M55525 <HTML><HEAD></HEAD><BODY><P>Ah, very good.&nbsp; </P><P></P><P>Thanks a bunch.</P><P></P><P>Dennis</P></BODY></HTML> Mon, 05 Mar 2012 13:58:37 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940006#M55525 dschwind 2012-03-05T13:58:37Z New SSM-IPS40 show 50% CPU with no traffic https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940007#M55526 <HTML><HEAD></HEAD><BODY><P>Please mark as answered <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN><SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN> if answered <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN><SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P></BODY></HTML> Mon, 05 Mar 2012 14:59:17 GMT https://community.cisco.com/t5/network-security/new-ssm-ips40-show-50-cpu-with-no-traffic/m-p/1940007#M55526 svaish 2012-03-05T14:59:17Z