cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3117
Views
0
Helpful
1
Replies

2821, IOS content filter-BUG? HTTP CORE process eating router alive

Aaron D
Level 1
Level 1

HTTP CORE process in IOS router is causing network outage. Its 2821, zone based firewall with IOS content filter. IOS content filter was working fine for last month, all of the sudden today it is working faulty. Network is waving on and off with CPU being hogged. Tried reboot and problem returns. Any advice out there?

IOS versions below

CPU utilization for five seconds: 99%/0%; one minute: 99%; five minutes: 99%

PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process

141 2228956 11329 196747 99.20% 99.29% 99.02% 0 HTTP CORE

4 3428 294 11659 0.39% 0.09% 0.10% 0 Check heaps

210 8 14040 0 0.07% 0.00% 0.00% 0 Atheros LED Ctro

c2800nm-advsecurityk9-mz.124-22.T.bin

#sh ip trm sub status

Package Name: Security & Productivity

------------------------------------------------

Status: No subscription information available.

Status Update Time: N/A

Expiration-Date: N/A

Last Req Status: Waiting for response

Last Req Sent Time: 22:02:38 CST Sat Jan 24 2009

sh ip trm ?

config TRM config

subscription Trend Subscription information

#sh ip trm config

Server: trps.trendmicro.com ( Default *)

HTTPS Port: 443

HTTP Port: 80

Status: Active

11111 11111 11111

999999900000999999999999999999990000099999999990000099999999

999999900000999999999999999999990000099999999990000099999999

100 ************************************************************

90 ************************************************************

80 ************************************************************

70 ************************************************************

60 ************************************************************

50 ************************************************************

40 ************************************************************

30 ************************************************************

20 ************************************************************

10 ************************************************************

0....5....1....1....2....2....3....3....4....4....5....5....6

0 5 0 5 0 5 0 5 0 5 0

CPU% per second (last 60 seconds)

11111111111 11 11111111111111 11 11

0000000000090090000000000000099009900 5

0000000000090090000000000000099009900355215223

100 ####################################*

90 #####################################

80 #####################################

70 #####################################

60 #####################################

50 ##################################### *

40 ##################################### *

30 ##################################### *

20 ##################################### *

10 ##################################### ** * #

0....5....1....1....2....2....3....3....4....4....5....5....6

0 5 0 5 0 5 0 5 0 5 0

CPU% per minute (last 60 minutes)

* = maximum CPU% # = average CPU%

1 Reply 1

falain
Level 1
Level 1

Try moving to 12.4(20)T2 like me

Some issues have been corrected like object-groups for acls.

I noticed all has not been solved, but it is quite better.

On 12.4(22)T, I had memory fragmentation and overflow when I was issuing a lot of acl and object groups commands

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: