cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

How to check ASA Fw Current load

1823
Views
0
Helpful
1
Comments

How to check ASA Fw Current load

Comments
Cisco Employee

Please see the following link about interface or traffic or process load.
https://supportforums.cisco.com/document/47506/asa-oversubscription-interface-errors-troubleshooting

  
Additionally, "show process cpu-usage non" command is very useful to check load of each process. DATAPATH(or Dispatch Unit) is a fundamental process for firewalling such as ACL check, xlate check, connection management, etc.

asa# show proc cpu-u non
PC Thread 5Sec 1Min 5Min Process
0x00000000019bd596 0x00007fffec5c62e0 0.0% 0.1% 0.0% telnet/ci
0x000000000199db42 0x00007fffec72b040 0.2% 0.2% 0.2% Logger
0x000000000082d2c6 0x00007fffec71c4a0 3.8% 3.8% 1.8% CP Processing
0x000000000082ce21 0x00007fffec71b9c0 0.1% 0.1% 0.1% CP ARP Processing
0x0000000000bebedc 0x00007fffec715440 0.1% 0.1% 0.1% ARP Thread
- - 31.2% 28.4% 14.6% DATAPATH-0-1575

   

"show cpu detail" command is useful to check CPU load of per-core datapath(DP) vs control point(CP). CP will control high layer function such as failover, syslog, snmp, telnet, etc. 

asa# show cpu detail

Break down of per-core data path versus control point cpu usage:
Core 5 sec 1 min 5 min
Core 0 0.0 (0.0 + 0.0) 0.0 (0.0 + 0.0) 0.0 (0.0 + 0.0)