cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1650
Views
0
Helpful
2
Replies
Highlighted
Participant

High CPU on ASA 5585X SSP IPS10

Hi out there

Just got my attention on this other discussion on hign cpu on ips module - we have a set of 5585x where the ips module (quad core) is showing very high cpu utilization - 75% - according to the IME 3 of the 4 cores are running 100% and the last one is completely idle. The IPS module is not in use yet and besides of configured with management ip and automatic update (and with a inspection load of 0) it is in default setup.

Is this normal behavior of it?

It is running engine 7.1(6)E4 with signatur 693.0

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Hi ,

This is a normal behavior for an IPS sensor.

In  sensor running E3 engine or higher the IPS uses a different algorithm for managing its idle time, and spends more time polling for packets to reduce latency. This results in the CPU usage being reported higher than previous releases.

You can review these statistics using the "show statistics analysis-engine" command.

Also,  on sensor  running  version 7.0(7)E4 or 7.1(5)E4 (or later), you can  check the Inspection Load Percentage value displayed by the 'show  inspection-load' command instead.

Thanks and Regards,

Thulasi Shankar

View solution in original post

2 REPLIES 2
Highlighted

Hi ,

This is a normal behavior for an IPS sensor.

In  sensor running E3 engine or higher the IPS uses a different algorithm for managing its idle time, and spends more time polling for packets to reduce latency. This results in the CPU usage being reported higher than previous releases.

You can review these statistics using the "show statistics analysis-engine" command.

Also,  on sensor  running  version 7.0(7)E4 or 7.1(5)E4 (or later), you can  check the Inspection Load Percentage value displayed by the 'show  inspection-load' command instead.

Thanks and Regards,

Thulasi Shankar

View solution in original post

Highlighted

ok - thanks

best regards /ti

Content for Community-Ad