high cpu - HTTP CORE - CISCO 3750

[yanliu2007]

we had a couple of old 3750 switches were getting high cpu in the past, https service are enabled. will it fix the issue by turing off the https? thanks.

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

*    1 52    WS-C3750G-48TS     12.2(50)SE4           C3750-IPBASEK9-M

sh processes cpu sorted

CPU utilization for five seconds: 100%/0%; one minute: 99%; five minutes: 99%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

213    13888233   2049823       6775 92.81% 92.88% 92.62%   0 HTTP CORE

  96   941374299 111674274       8429  0.79%  0.78%  0.79%   0 hpm counter proc

  35    37490648   1911604      19612  0.47%  0.04%  0.00%   0 Per-minute Jobs

141   378822583  22574282      16781  0.31%  0.31%  0.31%   0 HQM Stack Proces

  39    39939532  22575950       1769  0.15%  0.06%  0.05%   0 Compute load avg

258      396813 233817483          1  0.15%  0.01%  0.00%   0 PM Callback

#sh run | in http

no ip http server

ip http secure-server

sh processes cpu sorted
CPU utilization for five seconds: 100%/0%; one minute: 99%; five minutes: 99%
PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
213    13888233   2049823       6775 92.81% 92.88% 92.62%   0 HTTP CORE
  96   941374299 111674274       8429  0.79%  0.78%  0.79%   0 hpm counter proc
  35    37490648   1911604      19612  0.47%  0.04%  0.00%   0 Per-minute Jobs
141   378822583  22574282      16781  0.31%  0.31%  0.31%   0 HQM Stack Proces
  39    39939532  22575950       1769  0.15%  0.06%  0.05%   0 Compute load avg
258      396813 233817483          1  0.15%  0.01%  0.00%   0 PM Callback

#sh run | in http
no ip http server
ip http secure-server

[Haihua Rong]

Hello,

HTTP CORE process is related to HTTP request destined to the switch itself. You would want to check "show tcp brief" and "show ip http server all" commands to see the originators from those request when the CPU goes high again.

Action plan

Use the following steps to manually clera htt/https hung up sessions:

1) Issue the command "clear ip http client cache all"

2) If this does not help, issue the command "show tcp brief"

3) Take the output "TCB" addresses from the previous command and place them instead of the brackets in the following command:

clear tcp tcb

4) If you are using http and if the issue was due to HTTP request to the switch, the command "no ip http secure-server" would work out avoiding from re-ocurring.

Hope this helps.

Haihua

[yanliu2007]

thanks Haihua - that's really helpful, I will try it later. - Yan

[Leo Laohoo]

Upgrade to 12.2(55)SE8.

IOS you are using isn't stable. 

[mdalikhan.7491@gmail.com]

Hi Haihua,

Thanks for your help, but i just want to know how to troubleshoot with those which you provided...

show tcp brief,   show ip http server all

Please let me know. 

[Petar Bajovic]

Hi

I solved HTTP CORE high CPU utilization issue using your suggestions. To be more precise, I solved issue with this:

"4) If you are using http and if the issue was due to HTTP request to the switch, the command "no ip http secure-server" would work out avoiding from re-ocurring."

BTW: My switch info is next - WS-C3750X-24P   -   12.2(55)SE8  -   C3750E-UNIVERSALK9-M 

Thanks,

Petar

[TEAM_ADP_CDGBS]

Hello,

We have the same issue year 2021 with CISCO 2960X IOS 15.2(7)E3 

https://community.cisco.com/t5/switching/switching-2960x-crash-boot-error-message-sys-3-cpuhog-process/m-p/4425327#M507050