CPU usage on cat 6500

[ccna_student007]

Need help with cpu usage. im seeing more then usual usage. i have sorted the usage below.

CPU utilization for five seconds: 53%/10%; one minute: 54%; five minutes: 54%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process

254 47650988 175210481 271 5.50% 5.64% 5.72% 0 IP Input
316 14139908 116459358 121 1.59% 1.58% 1.57% 0 HTTP CORE
23 19825272 156239992 126 0.79% 0.42% 0.37% 0 IPC Seat Manager
536 1116 1948 572 0.55% 0.42% 0.23% 1 SSH Process
297 18387188 1812871 10142 0.39% 0.19% 0.17% 0 QOS Stats Gather
248 14748532 72312559 203 0.39% 0.45% 0.41% 0 CDP Protocol

[Julio E. Moisa]

Hi,

The IP input process is not too high to affect or generate high CPU utilization, do you have a baseline of CPU utilization in order to compare with the normal CPU utilization? the following link could be useful about IP input:

http://www.cisco.com/c/en/us/support/docs/routers/7500-series-routers/41160-highcpu-ip-input.html

http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/63992-6k-high-cpu.html

Also you could verify the SDM prefer (show sdm prefer), if you are using the device for routing mostly you could consider focus the resources to that role using sdm prefer routing.

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg3750/swsdm.html

Also you could open a case with the Cisco TAC to determinate the root cause of the high CPU.

Before to make any change or execute any debug, please remember take considerations and do that after business hours to avoid any impact.

Hope it is useful

:-)

[ccna_student007]

I checked our splunk logs and saw that one of the interface was dot1x re-authenticating constantly. Also saw that ise profile was not set correctly. After correcting that and bouncing the port. the cpu dropped.

Not sure if a single port reauth would cause this.

thanks.