High CPU Utilization on cisco 7206VXR

[JOHNSON CHIRRA]

                   Hi All,

High cpu utilization on cisco 7206 vxr router.please help me reslove the issue.

Error:%IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/1: from the host 10.2.2.1 destined to X.X.X.X

Cisco7206-IOR#show proc cpu | exc 0.00% 0.00%

CPU utilization for five seconds: 75%/70%; one minute: 68%; five minutes: 69%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

   1        3956     30100        131  0.00%  0.00%  0.00%   0 Chunk Manager   

   2      413260   2207668        187  0.00%  0.00%  0.00%   0 Load Meter      

   3           0         1          0  0.00%  0.00%  0.00%   0 chkpt message ha

   4           0         1          0  0.00%  0.00%  0.00%   0 EDDRI_MAIN      

   5    18090620   1262740      14326  0.00%  0.06%  0.05%   0 Check heaps     

   6       37780     10006       3775  0.00%  0.00%  0.00%   0 Pool Manager 

========================================

                    1                                          

    777667778887777809888877787777888778788787767756766666765665

    995642152009289305143075446746511570915916291581184398698278

100                 **                                         

90                 #*            *       *                    

80 ***    *###* *###*###*** #** *##******#***   *        *    

70 ##** *####################################****  **  ****  *

60 ##############################################*#########**#*

50 ############################################################

40 ############################################################

30 ############################################################

20 ############################################################

10 ############################################################

   0....5....1....1....2....2....3....3....4....4....5....5....6

             0    5    0    5    0    5    0    5    0    5    0

               CPU% per minute (last 60 minutes)

              * = maximum CPU%   # = average CPU%                     1                                          
    

[Ahad Aboss · Accepted solution]

Your router encountered overlap fragments which means that the offset of one fragment overlaps the offset of another fragment.

It appears to be an attack, configure a static ACL to prevent further  overlap fragments from the sender

[JOHNSON CHIRRA]

Hi

Thanks your inputs

johnson.

[Dr.X]

hi all ,

me too i have the  same log and i had cpu high on router 7604 ,

i foudn that log on my 7200 router , and there exist another router 7604

cpu of 7200 stay fine but the 7600 router got high cpu !!!!!

the question is  how that occured ??

and prevent next attacks ???

wish to give me more details :

wish to help ASAP

regards