CPI1.3: SNMP ENGINE overloads CPU with IOS 15.x

[artemepishov]

Hi everybody!

I've connected my c3560G which I use as Core-switch in my company to Prime Infrastructure 1.3.

And sometimes I see a CPU overload over 50% only by SNMP ENGINE process. Total CPU load at this time - up to 100%

Possibly, It's happened after IOS update from 12.2(25r)SEE4 to 15.0(2)SE2 C3560-IPSERVICESK9-M.

I've exclude some OIDs from snmp view, but problem is still exists:

PRIMEview internet - excluded nonvolatile active

PRIMEview mib-2 - excluded nonvolatile active

PRIMEview system - included nonvolatile active

PRIMEview interfaces - included nonvolatile active

PRIMEview at - excluded nonvolatile active

PRIMEview ip - excluded nonvolatile active

PRIMEview icmp - excluded nonvolatile active

PRIMEview tcp - included nonvolatile active

PRIMEview udp - included nonvolatile active

PRIMEview transmission - included nonvolatile active

PRIMEview snmp - excluded nonvolatile active

PRIMEview ospf - included nonvolatile active

PRIMEview rmon - included nonvolatile active

PRIMEview ifMIB - excluded nonvolatile active

PRIMEview cisco - included nonvolatile active

PRIMEview ciscoMgmt - included nonvolatile active

Any ideas, guys?

[Vinod Arya]

It is not required to remove these OID's from by adding view. Some of them are advised as best practices, but for now they may not help unless you find the root cause.

As you just updated, try to warm restart snmp engine, use following procedure :

To Disable

#no-snmp server

To Enable

#

eg :

#snmp-server enable traps snmp

Se if that helps. Also once try to add following OID to you SNMP View :

clmgmtLicenseInfoEntry (1.3.6.1.4.1.9.9.543.1.2.3.1)

-Thanks

[Vinod Arya]

If the high CPU persit due to SNMP ENGINE share the output of :

> show version

> show stacks <SNMP ENGINE PID>

You can get SNMP ENGINE PID from show proc cpu | inc SNMP ENGINE ouput.

-Thanks

[artemepishov]

Sorry for late answer...

I have downdated IOS back because of lots of bugs in IOS 15.0(2)SE2.

But I have the same issue with C1900.

#show version

Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.3(2)T, RELEASE SOFTWARE (fc3)

#sh stacks 373

Process 373:  SNMP ENGINE

  Stack segment 0x31B50B68 - 0x31B53A48

  FP: 0x31B53998, RA: 0x23CB52FC

  FP: 0x31B53A10, RA: 0x23EFB2C0

  FP: 0x31B53A28, RA: 0x23EFB2A4

What can I do to minimize CPU utilization?

[Vinod Arya]

You have to share additional details. And we need data when CPU is high for your device :

> show proc cpu sort | excl 0.00%

> show stacks <SNMP ENGINE PID*>

> show snmp stats oid

> show ip socket | in 161

> show snmp (3-5 times in gap of 2-3 seconds)

> show run | include snmp

If the device goes on high CPU randomly, you can configure a EEM scritp for this output to be collected when CPU spikes.

-Thanks