topic excessive CPU overhead? in Network Security

excessive CPU overhead?

emilio1973 — Fri, 21 Feb 2020 11:56:40 GMT

Hi all,

This equipment is new and I'm experiencing too slowly when I connect via SSH, access privileged mode, or typing commands like "show run" for example.

At first glance there appears to be excessive consumption (CPU utilization for five seconds: 2% 1% one minute: 3% five minutes: 2%), but I am very worried and wanted to find a solution.

Does anyone know which may be due, and how could I fix it?

Thanks

gw1-virtual#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 2%/1%; one minute: 3%; five minutes: 2%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
174     1040000   225509114          0 0.23% 0.24% 0.23%   0 HQF Shaper Backg
114   952740000    11150632         85 0.15% 0.08% 0.07%   0 IP Input
23      424000        1089        389 0.15% 0.15% 0.03% 388 SSH Process
86     1384000     1808318         0 0.07% 0.02% 0.02%   0 BPSM stat Proces

Re: excessive CPU overhead?

emilio1973 — Tue, 27 Apr 2010 11:22:49 GMT

This is the output of "show interface G0/0" command:

GW-ABCD#sh int gigabitEthernet 0/0
GigabitEthernet0/0 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is12ws.xx (bia ssxx.xxss.yyyy)
Description: LAN ABCD
Internet address is xxx.yyy.z.yy/26
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 242/255, txload 1/255, rxload 4/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1899000 bits/sec, 237 packets/sec
5 minute output rate 783000 bits/sec, 230 packets/sec
     114910363 packets input, 579299624 bytes, 0 no buffer
     Received 153712 broadcasts, 0 runts, 0 giants, 0 throttles
     11940352 input errors, 5970176 CRC, 534560 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     0 input packets with dribble condition detected
     109304271 packets output, 1527252245 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     4 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

I do not see SP or RP "drops" so rule out that the problem is in the LAN

gw1-virtual#sh int gigabitEthernet 0/0 switching
GigabitEthernet0/0 LAN MAATG
          Throttle count          0
                   Drops         RP          0         SP          0
             SPD Flushes       Fast          0        SSE          0
             SPD Aggress       Fast          0
            SPD Priority     Inputs     260607      Drops          0

Re: excessive CPU overhead?

Panos Kampanakis — Tue, 27 Apr 2010 23:17:02 GMT

~3% CPU is very low. You should not worry.

When you connect with ssh the device will generate RSA DH numbers and it is normal to spike your CPU a little.

But still 1-3% is very very low and you should not consider it as high CPU.

To check what processes take up your CPU do "sh process" twice with 30 sec difference and do the diff on the processes to see which one took up most of the cpu during the 30seconds.

Re: excessive CPU overhead?

emilio1973 — Wed, 28 Apr 2010 08:21:59 GMT

add the output. can not interpret. Can you help me ?

gw1-abcdl#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 1%/0%; one minute: 1%; five minutes: 1%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
   5   493256000      132910       3711 0.39% 0.07% 0.05%   0 Check heaps
174     1072000   244871446          0 0.23% 0.23% 0.23%   0 HQF Shaper Backg
114 1025512000    11987107         85 0.07% 0.12% 0.09%   0 IP Input
23      704000        2981        236 0.07% 0.16% 0.04% 388 SSH Process
gw1-abcd#sh processes cpu sorted | exclude 0.00%
CPU utilization for five seconds: 1%/0%; one minute: 1%; five minutes: 1%
PID Runtime(uS)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
   5   493268000      132916       3711 0.23% 0.05% 0.05%   0 Check heaps
174     1072000   244881725          0 0.23% 0.23% 0.23%   0 HQF Shaper Backg
110      404000    30648734          0 0.07% 0.03% 0.02%   0 IPAM Manager
114 1025568000    11987657         85 0.07% 0.12% 0.09%   0 IP Input

Re: excessive CPU overhead?

Panos Kampanakis — Wed, 28 Apr 2010 12:29:39 GMT

Your cpu is 0-1%. The processes look normal and low.

I don't understand what your concern is.

Re: excessive CPU overhead?

emilio1973 — Wed, 28 Apr 2010 15:09:55 GMT

Hi, I'm sorry for not having explained:

what I mean is if you think that the slowness is related to the consumption of CPU or anything else (bad configuration, etc.) related to this other thread.

https://supportforums.cisco.com/message/3057549#3057549

Thanks for your help

Re: excessive CPU overhead?

Panos Kampanakis — Wed, 28 Apr 2010 15:25:00 GMT

I don't think it is the CPU.

Please check the interface that you are ssh-ing for duplex mismatch with what it connects, and errors.

Also check for packet loss in the path to your computer.

Also if you are doing command authorization check if the ASA has connectivity issues to the ACS server.

These are what I would suspect.

Re: excessive CPU overhead?

emilio1973 — Thu, 29 Apr 2010 07:12:35 GMT

Ok,

I'll keep looking. Thanks for your help