cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
696
Views
0
Helpful
3
Replies

standby pix with high memory

secureIT
Level 4
Level 4

Hi,

Has anyone come across pix 525 with 7.2.4 , 256 MB RAM, experienceing high memory utilization ?..

show memory was giving used memory = 97%.

All I had done was, i did a reboot of the firewall since we were not able to take the control of the f/w.

I wonder why only the standby f/w had this issue and not the primary does not have, just to rule out that it was not due to Traffic.

I have searched in bugtool kits and support forums and did not find anything relevant except for a similar issue for ASA CSCsg43844.

Can somebody please help me to find out any bugs are available for this issue.

Problem was resolved after the reboot, but cause is still Missing

1 Accepted Solution

Accepted Solutions

Hi Rajesh,

You would need the output of the following commands:

show process (taken 2-3 times in an interval of a minute)

show proc cpu-usage non-zero

show mem

show conn

shwo traffic

show interface

show cpu profile (for this, you would need to first activate CPU profile by "cpu profile activate 5000", and then an output of the command)

These outputs would be needed to troubleshoot high CPU.

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks,
Varun Rao

View solution in original post

3 Replies 3

varrao
Level 10
Level 10

Hi Rajesh,

Unforunately if you have reloaded the device, then all the counters on the PIX, which could have led us to the might have been reset now. All the evidence might have been erased. What I can suggest is monitor the firewall, if you see a spike again, then open a TAC case with us, we would help you troubleshoot it. On the forum it might be difficult to troubleshoot a critical issue like this.

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks,
Varun Rao

could you please provide the CLI cmd outputs to be taken during the problem ??

Hi Rajesh,

You would need the output of the following commands:

show process (taken 2-3 times in an interval of a minute)

show proc cpu-usage non-zero

show mem

show conn

shwo traffic

show interface

show cpu profile (for this, you would need to first activate CPU profile by "cpu profile activate 5000", and then an output of the command)

These outputs would be needed to troubleshoot high CPU.

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks,
Varun Rao
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card