Memory and CPU issues with Cisco ASA asa845-k8.bin IOS

[plotniku7]

Hi,

yesterday i have upgraded my live asa to new version asa845-k8.bin

i read that a lot of bugs were fixed and some improvements with per user acls (need this feature).

After upgrade (zero downtime - i have A/S environment) my CPU and Memory were down:

fw01# sh processes cpu-usage non-zero                  

PC         Thread       5Sec     1Min     5Min   Process

0x081e3871   0xa81c14b0    19.5%    19.6%    17.2%   Dispatch Unit

0x095e9755   0xa81bb330     0.0%     0.6%     0.8%   Checkheaps

0x08ee15cc   0xa81b9ad0     0.3%     0.3%     0.3%   Logger

0x08069fb4   0xa81b57c8    52.0%    51.7%    52.1%   tmatch compile thread

0x086ba82e   0xa81af850     0.1%     0.1%     0.1%   ARP Thread

0x08d4da7d   0xa81ad1b8     0.2%     0.2%     0.2%   IP SLA Mon Event Processor

0x091286d2   0xa81abf70     0.1%     0.0%     0.0%   vpnfol_thread_timer

0x08e9cae5   0xa81a2f38     0.2%     0.5%     0.1%   ssh

now i have moved to before IOS - asa844-1-k8.bin

could you please help

[Marcin Latosiewicz]

Sergiu,

t_match_compile is related to ACL complication into a format easily processed by ASA's code.

Typically problems like this should be temporary, duing big change for example.

Open up a TAC case, I'm not aware of anything specific to this.

We will need to take profiler info and some more detailed ingfo about your setup.

Maybe try your confirguration out in the lab.

M.

[plotniku7]

not able to simulate as i move back to asa844-1-k8.bin IOS

i will try to another ASA environment that is not so heavily used