High CPU on catalyst

[jeftavaneijk]

On serval switch´s it get a HIGH cpu.See below also i get a lot of these msg´s

2004 Nov 24 11:55:29 GMT +01:00 %PAGP-5-PORTFROMSTP:Port 2

29 left bridge port 2/29

2004 Nov 24 11:55:33 GMT +01:00 %PAGP-5-PORTFROMSTP:Port 2/31 left bridge port

/31

194 1432640307 412815969 9189 36.92% 39.24% 43.00% 0 Switching overh

CPU utilization for five seconds: 89.18%

one minute: 89.96%

five minutes: 89.02%

PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process

--- ----------- ---------- -------- ------- ------- ------- --- ---------------

1 2463598001 0 0 10.82% 10.04% 10.98% -2 Kernel and Idle

34 6 4 2000 0.00% 0.00% 0.00% -2 SnmpTraps

35 0 1 0 0.00% 0.00% 0.00% -2 Acct Send Bkg

37 0 1 0 0.00% 0.00% 0.00% -2 l2t_server

39 15603 56717 5000 0.00% 0.00% 0.00% -2 SysLogTask

40 789031 12129835 2000 0.00% 0.00% 0.00% -2 pinggateA

41 41233595 577358821 2000 0.77% 0.00% 0.00% -2 Authenticator_S

42 0 1 0 0.00% 0.00% 0.00% -2 dot1x_rx

43 1603764 26216023 2000 0.00% 0.00% 0.00% -2 Backend_Rx

44 41720080 473803819 2000 0.27% 0.00% 0.00% -2 Backend_SM

143 222983987 3050225440 2000 0.03% 0.00% 0.00% 0 Console

144 19534638 55017285 202000 0.51% 0.00% 0.00% -2 snmpdm

145 13699 82079 15000 0.00% 0.00% 0.00% -2 VtpRx

146 134515423 74395631 220000 38.29% 27.89% 26.18% -2 THREAD

147 41315 249 73000 0.75% 0.00% 0.00% 1083599892 telnet147

193 778151573 1218644282 12072 6.67% 6.90% 6.99% 0 Packet forwardi

194 1432640307 412815969 9189 36.92% 39.24% 43.00% 0 Switching overh

195 793383967 778496250 29954 6.80% 7.10% 6.92% 0 Admin overhead

[Kevin Dorrell]

Which model of Catalyst is this? I know the old 2900XL series always had high CPU, but not normally quite as high as this. In case it is a 2900XL, here is a couple of docs to look at:

http://www.cisco.com/en/US/products/hw/switches/ps607/products_tech_note09186a0080094e78.shtml

http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note09186a00800a70f2.shtml

Kevin Dorrell

Luxembourg

[jeftavaneijk]

Hi,

No this is a C4006

[Kevin Dorrell]

I have a few 4006 as well, with SII WS-X4013, CatOS 6.4(8).

I had a look at the CPU on the main distribution switch, and found about 40-50% loading. It's lunch time here at the moment, so the traffic (and CPU) may pick up a bit later.

(Yes, I still use 4006 as the distribution switches, but I am hoping to upgrade to 4506 with S4 soon.) But up and down the table, my utilization was almost exactly half of what you have for every process.

**** P.S. I just noticed your THREAD process. Mine is reading zero. Don't know what it does yet. ****

Maybe yours is just heavily loaded. Mine are used mainly for distributing between 18 x 4003 access switches and the datacentre switches, plus access for some Gig servers.

Kevin Dorrell

Luxembourg

[Prashanth Krishnappa]

THREAD is a process used by SNMP. Check for any unusual polling from your SNMP stations. Disable SNMP if the need be and the high CPU should go away.

[glen.grant]

If you don't know who is doing this you could also implement a permit list with just the stations you want to be able to reach this switch via snmp and i believe it will also put in the log who is trying to hit this thing illegally also in the logg buffer.