CPU utilization for five seconds: 98%/40%; one minute: 98%; five minutes: 98%

[moadam]

CPU utilization for five seconds: 98%/40%; one minute: 98%; five minutes: 98%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

  67   252082844 757425747        332 25.21% 26.26% 26.43%   0 ARP Snoop

443    89314680 836926799        106 14.12% 13.48% 13.41%   0 Switch IP Host T

ARP statistics:

  Rcvd: 101089341 requests, 246519392 replies, 2329 reverse, 0 other

  Sent: 37722676 requests, 46631435 replies (0 proxy), 0 reverse

  Drop due to input queue full: 5651

COR01#sh ip arp summary

3465 IP ARP entries, with 130 of them incomplete

Addition Information

cisco WS-C6509-V-E (M8572) processor (revision ) with 1785856K/262144K bytes of memory.

s2t54-ipservicesk9-mz.SPA.151-2.SY4.bin

platform ip cef load-sharing ip-only
clock timezone EDT -5
clock summer-time EDT recurring

cef table consistency-check IPv4 data-checking
cef table consistency-check IPv4 error-message
cef table output-chain build favor convergence-speed
no ip source-route
ip arp proxy disable

[Philip D'Ath]

Could you post the top of the output for:

show processes cpu sorted 5min 

[moadam]

COR01#show process cpu sorted | ex 0.00

CPU utilization for five seconds: 99%/45%; one minute: 98%; five minutes: 98%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

  67   252410048 758307085        332 26.00% 26.47% 26.33%   0 ARP Snoop

443    89432784 837805556        106 15.35% 13.45% 13.33%   0 Switch IP Host T

COR01#show process cpu sorted | ex 0.0

CPU utilization for five seconds: 98%/41%; one minute: 98%; five minutes: 98%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

  67   252245208 757862552        332 27.19% 26.68% 26.53%   0 ARP Snoop

443    89372560 837362358        106 13.83% 13.34% 13.26%   0 Switch IP Host T

COR01#show process cpu sorted | ex 0.00

CPU utilization for five seconds: 98%/40%; one minute: 98%; five minutes: 98%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

  67   252082844 757425747        332 25.21% 26.26% 26.43%   0 ARP Snoop

443    89314680 836926799        106 14.12% 13.48% 13.41%   0 Switch IP Host T

[Philip D'Ath]

It looks like it is getting a pounding from ARP snooping.  Are you able to turn this feature off for a while?

[moadam]

how do i turn off this feature

[Philip D'Ath]

Have you got any "ip arp inspection" commands?

[moadam]

NOPE

[Philip D'Ath]

Try doing a netdr capture of ARP traffic, and look for something unusual for ARP.

https://supportforums.cisco.com/document/59956/troubleshooting-netdr-capture-sup7206500

[moadam]

IP ARP INSPECTION is not configured