Hi there is hundreds of processes operating on a switch it could be any of them that jam up or there that high for a reason overloading the device etc , when your facing a high cpu you need to catch it live
Use the command ....show proc cpu sorted | I ex 0.00
This will show you what processes are the highest and then you go from there
You can also run EEM scripts to catch it all for you when a cpu hits a certain percentage , this will push a text file to flash with all the info required to see what's happening
event manager applet High_CPU
event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.4.1 get-type exact entry-op ge entry-val "70" exit-time 10 poll-interval 5
action 0.1 syslog msg "CPU Utilization is high"
action 0.2 cli command "enable"
action 0.4 cli command "show log | append flash:CPU_Profile.txt"
action 0.5 cli command "show process cpu sorted | append flash:CPU_Profile.txt"
action 0.6 cli command "show interfaces | append flash:CPU_Profile.txt"
action 0.7 cli command " show ip cef switching stat | append flash:CPU_Profile.txt"
action 0.8 cli command " show ip traffic | append flash:CPU_Profile.txt"
action 0.9 cli command " show int switching | append flash:CPU_Profile.txt"
action 1.0 cli command "no event manager applet High_CPU"
action 1.1 cli command "end"
*Please rate helpful posts*
