AIP-SSM 20 questions

[josephium]

Hi,

we have this module on an ASA 5540, while the inspection load is reaching a max of 35% , the cpu is reaching 100% sometimes.

1- how do i check the current bandwidth in Mbs being inspected ?

2- how do i check if there is drops when cpu is reaching 100%

3-if cpu hangs at 100% will fail-open work or will the module start dropping legitimate packets

4- should i upgrade my card to AIP-SSM 40 allthough inspection load is still 35% ?

Thank you

[sadbulali]

Check if you are hitting the bug CSCsw25900.

[josephium]

thank you but its not , can anyone answer these questions plz.

[rhermes]

To check if your sensor is dropping packets, get on the CLI and run

show interface - This will show you an averaged packet loss across all interfaces since last reset and on a per-interface basis.

show event stat past 01:00 inc missed - This will show you any peaks in your missed pckets over the last hour.