VMS high utilization?

pmacdanel · ‎02-04-2005

Hello,

We are running a VMS server that is receiving SYSLOG and IDS alerts from 5 sensors and 4 PIX firewalls. Both VMS and the sensors are running the latest code releases. The rate of received alarms is not high at all, around 5-20 per min. However, the server stays at 100% utilization all the time, with receiver.exe using all the cpu time. The server is a P4 1.7 with 1GB of RAM. It does have Terminal Services running, but only for remote admin (could TS be an issue?) My question is, is this too little server for what we are doing or is this possibly some other issue?

Any thoughts you guys have on this would be appreciated

-Patrick

nataraj_v · ‎02-05-2005

Dear Patrick ,

Me also facing same problem , im using VMS 2.2 and its getting alerts from NIDS es and CSA es .. i have already posted the problem here.but no replies yet ,

i think its better to use..more RAM ( because.. 1 GB is just recommended.. ) ..if possible. u try with more RAM .

If u got free from this problem pls inform me.

Thanks and Regards

Nataraj

nataraj_v · ‎02-05-2005

Dear Patrick,

pls look at the below information,

Update for 99% CPU Utilization (CSCdt73198)

--------------------------------------------------------------------------------

Caution This update should not be installed if you are running other CiscoWorks solutions on the same server (e.g., LMS or RWAN).

--------------------------------------------------------------------------------

On a system running the VMS server, you might experience high CPU usage under certain conditions. This high CPU utilization might be triggered by any of the following conditions:

•Network connection goes down.

•Switch to which the server is connected goes down and/or is rebooted.

•Ethernet cable becomes unplugged from the server.

•The netmask and/or IP address is changed.

An update that addresses this problem is available on the VMMC Startup Disk.

--------------------------------------------------------------------------------

Step 1 Navigate to the Patches directory marked CSCdt73198-1 on the VMMC Installation Startup Disk.

Step 2 Follow the directions in the Readme file included in this directory.

Hope this helps u, if u got fixed ur problem pls let me know.

Regards

Nataraj

pmacdanel · ‎02-07-2005

Thank you Nataraj. I may already have that patch installed but I'll check and see. If I solve the issue I'll let you know.

-Patrick

sachinraja · ‎02-09-2005

Hi patrick,

This can happen due to some services running on that server. The hardware configuration seems to be really fine.. dont have problems with that... Terminal services ??? nooo dude.. disable that... if you want to manage the server, u can do it through https... VMS should not be installed where terminal services are running..

Also go to the services and check if you have enabled DHCP,DNS, etc. These services arent required. go and disable those...

Just see the speed after doing this.. it will really increase....rate replies if found useful...

Raj

5mlattimore · ‎02-10-2005

Raj

i just opened a ticket on terminal services and the official reply was Terminal Services can be utilized to manage ther server but cannot be enabled during installation.

We disabled it for the install and re-enabled it to manage the boxes and are not experiencing any adverse cpu utilization or other issues, so far

Just thought you'd like to know the official Cisco position on it

regards