topic Re: Is this normal CPU% on FWSM in Network Security https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858350#M955888 <HTML><HEAD></HEAD><BODY><P>I fixed the problem.</P><P></P><P>There were about 80 DNS UDP requests passing through the FWSM per second.</P><P></P><P>inspect DNS maximum-length 512 - was enabled and this killed the CPU%</P><P></P><P>I disabled DNS inspetion and CPU dropped to 0%</P><P></P><P>I'm happy that the problem is fixed but it sucks that the FWSM cant handle this inspection properly.</P></BODY></HTML> Sun, 10 Feb 2008 19:20:15 GMT cisconoobie 2008-02-10T19:20:15Z Is this normal CPU% on FWSM https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858347#M955877 <P>I got a 6506-e with fwsm module.</P><P></P><P>I get around 80 connections per sec, mainly UDP.</P><P></P><P>The proc is constantly at 20-22%</P><P></P><P>Is this normal for these connections?</P><P></P><P>How do I troubleshoot this?</P> Mon, 11 Mar 2019 11:56:50 GMT https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858347#M955877 cisconoobie 2019-03-11T11:56:50Z Re: Is this normal CPU% on FWSM https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858348#M955880 <HTML><HEAD></HEAD><BODY><P>I'm not sure if it is normal.</P><P></P><P>Please take 3 outputs of "show proc" each 60 seconds appart and post.</P><P></P><P>Also if possible please post "show run" without sensitive information? What type of traffic are you inspecting?</P><P></P><P>If you do a "show pc conn" what connections do you see? Is there one type of traffic in particular? Again if possible post the output here?</P><P></P><P></P></BODY></HTML> Thu, 31 Jan 2008 18:17:09 GMT https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858348#M955880 excession 2008-01-31T18:17:09Z Re: Is this normal CPU% on FWSM https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858349#M955884 <HTML><HEAD></HEAD><BODY><P>Is this FWSM running in single or multiple context mode?</P></BODY></HTML> Fri, 01 Feb 2008 20:26:14 GMT https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858349#M955884 pallette 2008-02-01T20:26:14Z Re: Is this normal CPU% on FWSM https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858350#M955888 <HTML><HEAD></HEAD><BODY><P>I fixed the problem.</P><P></P><P>There were about 80 DNS UDP requests passing through the FWSM per second.</P><P></P><P>inspect DNS maximum-length 512 - was enabled and this killed the CPU%</P><P></P><P>I disabled DNS inspetion and CPU dropped to 0%</P><P></P><P>I'm happy that the problem is fixed but it sucks that the FWSM cant handle this inspection properly.</P></BODY></HTML> Sun, 10 Feb 2008 19:20:15 GMT https://community.cisco.com/t5/network-security/is-this-normal-cpu-on-fwsm/m-p/858350#M955888 cisconoobie 2008-02-10T19:20:15Z