Hello Team,
We have one cisco 3750 switch which is facing issue of High cpu utilization from last few days.
Need your support to find out the root cause of this abnormality & resolution.
As a part of troubleshooting I found below information, but not found resolution over there. Please suggest.
Nov 9 18:35:18.755 IST: %HA_EM-6-LOG: CPU_Risingtest: Cpu_Spike_Triggered
Nov 10 12:10:50.897 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 10 12:29:31.675 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 17 12:21:45.931 IST: %SYS-4-SNMP_WRITENET: SNMP WriteNet request. Writing current configuration to 121.244.242.180
Nov 17 19:40:45.535 IST: %SYS-1-CPUFALLINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr) 9%/1%.
Nov 23 19:44:43.030 IST: %SYS-1-CPURISINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr): 75%/1%, Top 3 processes(Pid/Util): 319/65%, 221/3%, 155/0%
Nov 23 19:44:43.265 IST: %HA_EM-7-LOG: CPU_Risingtest: cli:
CPU utilization for five seconds: 75%/1%; one minute: 16%; five minutes: 12%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
319 16918213 951955 17772 65.49% 5.24% 1.08% 0 crypto sw pk pro
221 14100592291495082375 943 3.51% 3.48% 3.51% 0 Spanning Tree
68 154501362008200680 7 0.15% 0.06% 0.05% 0 Fifo Error Detec
145 90871465 912985295 99 0.15% 0.27% 0.29% 0 Hulc LED Process
Device is using SSH to take access of device, the RSA key will be generated every hour and you can experience hourly cpu spikes for the process 'crypto sw pk pro
Its obvious behavior.
One option to resolve this issue is to reduce the volume of encrypted traffic (re-route traffic or limit the flows that are encrypted). However, the best way to address this issue is to get a Hardware Encryption module installed for this device which eliminates the need for encryption to take place through the software.
