<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ASA 5515 - Unicorn Admin Handler causing high CPU in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/asa-5515-unicorn-admin-handler-causing-high-cpu/m-p/3336223#M969671</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;First of all, what exactly is the process "Unicorn Admin Handler"?&lt;/P&gt;
&lt;P&gt;Second, why such process could be cause such a high CPU usage in my ASA 5515?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Here is some output:&lt;/P&gt;
&lt;PRE&gt;# sh proc cpu-usage non-zero sorted
PC         Thread       5Sec     1Min     5Min   Process
0x00000000016360a4   0x00007fffec836c80    76.0%    74.9%    74.8%   Unicorn Admin Handler
0x00000000006dd80b   0x00007fffec921f40    13.4%    13.2%    13.2%   tmatch compile thread
   -          -         8.0%     8.4%     8.4%   DATAPATH-0-1720
0x000000000148ce9a   0x00007fffec8e3e00     0.4%     0.5%     0.5%   Unicorn Admin Handler
0x0000000000832066   0x00007fffec91aee0     0.2%     0.2%     0.2%   CP Processing
0x00000000019acca2   0x00007fffec929e20     0.1%     0.2%     0.2%   Logger
0x000000000142451d   0x00007fffec92f8c0     0.1%     0.1%     0.1%   idfw_proc
0x000000000148bcf0   0x00007fffec8e2be0     0.0%     0.4%     0.6%   Unicorn Admin Handler
0x000000000174f4f4   0x00007fffec911a40     0.0%     0.3%     0.1%   qos_metric_dae

# sh perfmon detail

PERFMON STATS:                     Current      Average
Xlates                                0/s          0/s
Connections                          63/s          0/s
TCP Conns                            45/s          0/s
UDP Conns                            15/s          0/s
URL Access                            0/s          0/s
URL Server Req                        0/s          0/s
TCP Fixup                             0/s          0/s
TCP Intercept Established Conns       0/s          0/s
TCP Intercept Attempts                0/s          0/s
TCP Embryonic Conns Timeout           1/s          0/s
HTTP Fixup                            0/s          0/s
FTP Fixup                             0/s          0/s
AAA Authen                            0/s          0/s
AAA Author                            0/s          0/s
AAA Account                           0/s          0/s

VALID CONNS RATE in TCP INTERCEPT:    Current      Average
                                       N/A         100.00%

SETUP RATES:
Connections for 1 minute = 57/s; 5 minutes = 60/s
TCP Conns for 1 minute = 37/s; 5 minutes = 40/s
UDP Conns for 1 minute = 16/s; 5 minutes = 16/s

# sh interf | inc Interface | error | collision
Interface GigabitEthernet0/0 "inside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/1 "", is down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/2 "", is administratively down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/3 "outside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred&lt;/PRE&gt;
&lt;P&gt;Thanks,&lt;/P&gt;</description>
    <pubDate>Fri, 21 Feb 2020 15:24:24 GMT</pubDate>
    <dc:creator>adrianopinaffo1</dc:creator>
    <dc:date>2020-02-21T15:24:24Z</dc:date>
    <item>
      <title>ASA 5515 - Unicorn Admin Handler causing high CPU</title>
      <link>https://community.cisco.com/t5/network-security/asa-5515-unicorn-admin-handler-causing-high-cpu/m-p/3336223#M969671</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;First of all, what exactly is the process "Unicorn Admin Handler"?&lt;/P&gt;
&lt;P&gt;Second, why such process could be cause such a high CPU usage in my ASA 5515?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Here is some output:&lt;/P&gt;
&lt;PRE&gt;# sh proc cpu-usage non-zero sorted
PC         Thread       5Sec     1Min     5Min   Process
0x00000000016360a4   0x00007fffec836c80    76.0%    74.9%    74.8%   Unicorn Admin Handler
0x00000000006dd80b   0x00007fffec921f40    13.4%    13.2%    13.2%   tmatch compile thread
   -          -         8.0%     8.4%     8.4%   DATAPATH-0-1720
0x000000000148ce9a   0x00007fffec8e3e00     0.4%     0.5%     0.5%   Unicorn Admin Handler
0x0000000000832066   0x00007fffec91aee0     0.2%     0.2%     0.2%   CP Processing
0x00000000019acca2   0x00007fffec929e20     0.1%     0.2%     0.2%   Logger
0x000000000142451d   0x00007fffec92f8c0     0.1%     0.1%     0.1%   idfw_proc
0x000000000148bcf0   0x00007fffec8e2be0     0.0%     0.4%     0.6%   Unicorn Admin Handler
0x000000000174f4f4   0x00007fffec911a40     0.0%     0.3%     0.1%   qos_metric_dae

# sh perfmon detail

PERFMON STATS:                     Current      Average
Xlates                                0/s          0/s
Connections                          63/s          0/s
TCP Conns                            45/s          0/s
UDP Conns                            15/s          0/s
URL Access                            0/s          0/s
URL Server Req                        0/s          0/s
TCP Fixup                             0/s          0/s
TCP Intercept Established Conns       0/s          0/s
TCP Intercept Attempts                0/s          0/s
TCP Embryonic Conns Timeout           1/s          0/s
HTTP Fixup                            0/s          0/s
FTP Fixup                             0/s          0/s
AAA Authen                            0/s          0/s
AAA Author                            0/s          0/s
AAA Account                           0/s          0/s

VALID CONNS RATE in TCP INTERCEPT:    Current      Average
                                       N/A         100.00%

SETUP RATES:
Connections for 1 minute = 57/s; 5 minutes = 60/s
TCP Conns for 1 minute = 37/s; 5 minutes = 40/s
UDP Conns for 1 minute = 16/s; 5 minutes = 16/s

# sh interf | inc Interface | error | collision
Interface GigabitEthernet0/0 "inside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/1 "", is down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/2 "", is administratively down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/3 "outside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred&lt;/PRE&gt;
&lt;P&gt;Thanks,&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 15:24:24 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/asa-5515-unicorn-admin-handler-causing-high-cpu/m-p/3336223#M969671</guid>
      <dc:creator>adrianopinaffo1</dc:creator>
      <dc:date>2020-02-21T15:24:24Z</dc:date>
    </item>
  </channel>
</rss>

