03-15-2010 05:42 PM - edited 03-06-2019 10:09 AM
hi experts,
i checked there's a high CPU usage on this router but logs showed no indication on which process took most of the CPU. we're running site-to-site VPN on this router. not sure if this router can handle or support this feature. i'm also thinking this might be an IOS bug. kindly advise. thanks!
ROUTER#sh proc cpu
CPU utilization for five seconds: 100%/100%; one minute: 100%; five minutes: 100%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 0 1 0 0.00% 0.00% 0.00% 0 Chunk Manager
2 0 1245 0 0.00% 0.00% 0.00% 0 Load Meter
3 52 639 81 0.00% 0.00% 0.00% 0 CRYPTO IKMP IPC
4 168 183 918 0.00% 0.00% 0.00% 2 Virtual Exec
5 108704 5856 18562 0.00% 0.00% 0.00% 0 Check heaps
6 0 1 0 0.00% 0.00% 0.00% 0 Pool Manager
7 0 2 0 0.00% 0.00% 0.00% 0 Timers
8 0 2 0 0.00% 0.00% 0.00% 0 Serial Backgroun
9 0 1 0 0.00% 0.00% 0.00% 0 AAA high-capacit
10 140 305 459 0.00% 0.00% 0.00% 0 ARP Input
11 0 2 0 0.00% 0.00% 0.00% 0 DDR Timers
12 0 2 0 0.00% 0.00% 0.00% 0 ATM Idle Timer
13 8 2 4000 0.00% 0.00% 0.00% 0 Entity MIB API
14 0 1 0 0.00% 0.00% 0.00% 0 SERIAL A'detect
15 0 6213 0 0.00% 0.00% 0.00% 0 GraphIt
16 0 2 0 0.00% 0.00% 0.00% 0 Dialer event
17 0 1 0 0.00% 0.00% 0.00% 0 Critical Bkgnd
18 32 1280 25 0.00% 0.00% 0.00% 0 Net Background
19 0 17 0 0.00% 0.00% 0.00% 0 Logger
20 8 6212 1 0.00% 0.00% 0.00% 0 TTY Background
21 16 6222 2 0.00% 0.00% 0.00% 0 Per-Second Jobs
22 24 19901 1 0.00% 0.00% 0.00% 0 LED Timers
23 0 2 0 0.00% 0.00% 0.00% 0 AUX
24 504 2499 201 0.00% 0.00% 0.00% 0 ATM Periodic
25 4 6 666 0.00% 0.00% 0.00% 0 ATM ARP INPUT
26 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM Input
27 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM TIMER
28 2424 11 220363 0.00% 0.00% 0.00% 0 AAL Coalesce
29 32 364 87 0.00% 0.00% 0.00% 0 Net Input
30 0 1246 0 0.00% 0.00% 0.00% 0 Compute load avg
31 2476 105 23580 0.00% 0.00% 0.00% 0 Per-minute Jobs
32 336 3480 96 0.00% 0.00% 0.00% 0 DSL State Machin
33 0 2 0 0.00% 0.00% 0.00% 0 AAA Server
34 0 1 0 0.00% 0.00% 0.00% 0 AAA ACCT Proc
35 0 1 0 0.00% 0.00% 0.00% 0 ACCT Periodic Pr
36 4 2 2000 0.00% 0.00% 0.00% 0 AAA Dictionary R
37 5600 6666 840 0.00% 0.00% 0.00% 0 IP Input
38 0 1 0 0.00% 0.00% 0.00% 0 ICMP event handl
40 0 3 0 0.00% 0.00% 0.00% 0 PPP Hooks
41 0 1 0 0.00% 0.00% 0.00% 0 VPDN call manage
42 0 3 0 0.00% 0.00% 0.00% 0 PPPOE discovery
43 128 381655 0 0.00% 0.00% 0.00% 0 PPPOE background
44 0 1 0 0.00% 0.00% 0.00% 0 SSS Manager
45 0 831 0 0.00% 0.00% 0.00% 0 SSS Test Client
46 52 137 379 0.00% 0.00% 0.00% 0 IP Background
47 20 115 173 0.00% 0.00% 0.00% 0 IP RIB Update
48 0 2 0 0.00% 0.00% 0.00% 0 PPP IP Route
49 4 2 2000 0.00% 0.00% 0.00% 0 PPP IPCP
50 0 18 0 0.00% 0.00% 0.00% 0 TCP Timer
51 4 3 1333 0.00% 0.00% 0.00% 0 TCP Protocols
52 0 1 0 0.00% 0.00% 0.00% 0 RARP Input
53 48 40 1200 0.00% 0.00% 0.00% 0 DHCPD Receive
54 0 1 0 0.00% 0.00% 0.00% 0 Socket Timers
55 0 2 0 0.00% 0.00% 0.00% 0 HTTP CORE
56 0 104 0 0.00% 0.00% 0.00% 0 IP Cache Ager
57 8 110 72 0.00% 0.00% 0.00% 0 Adj Manager
58 4 2 2000 0.00% 0.00% 0.00% 0 PPP Bind
59 0 2 0 0.00% 0.00% 0.00% 0 Dialer Forwarder
60 0 2 0 0.00% 0.00% 0.00% 0 PPP SSS
61 0 2 0 0.00% 0.00% 0.00% 0 SNMP Timers
62 0 2 0 0.00% 0.00% 0.00% 0 ILMI Input
63 0 2 0 0.00% 0.00% 0.00% 0 ILMI Request
64 0 2 0 0.00% 0.00% 0.00% 0 ILMI Response
65 188 3088 60 0.00% 0.00% 0.00% 0 ILMI Timer Proce
66 44 4 11000 0.00% 0.00% 0.00% 0 ATM PVC Discover
67 0 1 0 0.00% 0.00% 0.00% 0 Inspect Timer
68 20 105 190 0.00% 0.00% 0.00% 0 URL filter proc
69 0 1 0 0.00% 0.00% 0.00% 0 Authentication P
70 0 1 0 0.00% 0.00% 0.00% 0 IDS Timer
71 0 2 0 0.00% 0.00% 0.00% 0 LOCAL AAA
72 0 2 0 0.00% 0.00% 0.00% 0 ENABLE AAA
73 0 2 0 0.00% 0.00% 0.00% 0 LINE AAA
74 0 2 0 0.00% 0.00% 0.00% 0 TPLUS
75 0 2 0 0.00% 0.00% 0.00% 0 Crypto Support
76 0 3 0 0.00% 0.00% 0.00% 0 Crypto CA
77 0 1 0 0.00% 0.00% 0.00% 0 Crypto SSL
78 8 103 77 0.00% 0.00% 0.00% 0 Crypto ACL
79 29748 3222 9232 0.00% 0.00% 0.00% 0 Crypto IKMP
80 2296 207 11091 0.00% 0.00% 0.00% 0 IPSEC key engine
81 0 1 0 0.00% 0.00% 0.00% 0 IPSEC manual key
82 0 1 0 0.00% 0.00% 0.00% 0 CRYPTO QoS proce
83 4548 2845 1598 0.00% 0.00% 0.00% 0 Encrypt Proc
84 0 4 0 0.00% 0.00% 0.00% 0 Key Proc
85 4 2 2000 0.00% 0.00% 0.00% 0 AAA SEND STOP EV
86 0 2 0 0.00% 0.00% 0.00% 0 IpSecMibTopN
87 0 1 0 0.00% 0.00% 0.00% 0 VPDN Scal
88 0 104 0 0.00% 0.00% 0.00% 0 SAA Event Proces
89 248 2188 113 0.00% 0.00% 0.00% 0 IP NAT Ager
90 36 82 439 0.00% 0.00% 0.00% 0 IP SNMP
91 24 41 585 0.00% 0.00% 0.00% 0 PDU DISPATCHER
92 132 43 3069 0.00% 0.00% 0.00% 0 SNMP ENGINE
93 0 1 0 0.00% 0.00% 0.00% 0 SNMP Traps
94 0 52 0 0.00% 0.00% 0.00% 0 DHCPD Timer
95 0 1753 0 0.00% 0.00% 0.00% 0 DHCPD Database
------------
ROUTER#sh ver
Cisco Internetwork Operating System Software
IOS (tm) C837 Software (C837-K9O3Y6-M), Version 12.2(11)YV, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Synched to technology version 12.2(13.1u)T
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Mon 20-Jan-03 22:39 by ealyon
Image text-base: 0x800131E8, data-base: 0x80A2C6C8
ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)
ROM: C837 Software (C837-K9O3Y6-M), Version 12.2(11)YV, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
KORCHINA-SG-GW uptime is 1 hour, 46 minutes
System returned to ROM by power-on
System image file is "flash:c837-k9o3y6-mz.122-11.YV.bin"
CISCO C837 (MPC857DSL) processor (revision 0x200) with 29492K/3276K bytes of memory.
Processor board ID AMB070903BQ (479383020), with hardware revision 0000
CPU rev number 7
Bridging software.
1 Ethernet/IEEE 802.3 interface(s)
1 ATM network interface(s)
128K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)
Configuration register is 0x2102
03-15-2010 05:53 PM
IOS vulnerable to IOS Heap-based Overflow Vulnerability in System Timers exploitation. Migrate to 12.3(14)T4 or later.
http://www.cisco.com/en/US/partner/products/products_security_advisory09186a008055ef31.shtml
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide