10-14-2013 03:43 AM - edited 03-21-2019 07:51 AM
Hi there,
I have some problems in a Cisco UC540 with "Skinny Msg Server" having some CPU peaks. During peak all services are unavailable (calls, intermet access, etc. - this UC540 is our internet gateway):
100 ********** ****
90 ********** ***************
80 ********** ***************
70 *************** *************************
60 *************** *************************
50 *************** *************************
40 *************** *************************
30 *************** *************************
20 ******************** ******************************
10 ************************* ******************************
0....5....1....1....2....2....3....3....4....4....5....5....6
0 5 0 5 0 5 0 5 0 5 0
CPU% per second (last 60 seconds)
100 * ** *
90 * ** *
80 * ** *
70 # ** *
60 # * ** *
50 # * ** *
40 # * ** * * *
30 # * ** *## * * * *** * *** * *
20 #**#*****##** **** ***# **** *********** ********* ****** **
10 ####*########*####*####*####*####*####*#*####*####*#*##*#*##
0....5....1....1....2....2....3....3....4....4....5....5....6
0 5 0 5 0 5 0 5 0 5 0
CPU% per minute (last 60 minutes)
* = maximum CPU% # = average CPU%
100 * * **
90 * * **
80 * * **
70 * * * ***** *
60 * * * * ****** **
50 * *** * * * *** * ******* **
40 * *** ** * ** * *** * ** ** *** **********
CPU utilization for five seconds: 72%/26%; one minute: 80%; five minutes: 59%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
127 5803268 11898184 487 27.64% 43.85% 28.49% 0 Skinny Msg Serve
352 356 55 6472 5.82% 0.46% 0.09% 67 SSH Process
240 197724 327994 602 2.82% 0.43% 0.27% 0 Crypto IKMP
118 45398476 121106202 374 2.74% 2.06% 2.38% 0 IP Input
6 3598144 375574 9580 1.13% 0.33% 0.28% 0 Check heaps
77 41396 8074 5127 1.05% 0.10% 0.02% 0 crypto engine pr
What could be the problem? What can i do to avoid this problem?
Thanks in advance for your support.
Best regards,
V
10-14-2013 05:04 AM
Which IOS version are you using? Do you have an ACL blocking SCCP on internet interface ?
10-14-2013 05:42 AM
Hi Paolo,
First of all thanks for your reply.
1) Version 15.1(2)T2
2)
interface FastEthernet0/0
description $FW_OUTSIDE$
ip address XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX
ip access-group 102 in
ip nat outside
ip inspect SDM_MEDIUM out
ip virtual-reassembly in
duplex auto
speed auto
service-policy input sdmappfwp2p_SDM_MEDIUM
end
UC540#show ip access-lists 102
Extended IP access list 102
[...permits omitted...]
140 deny ip 192.168.100.0 0.0.0.255 any
[...permits omitted...]
200 deny ip 10.0.0.0 0.255.255.255 any
210 deny ip 172.16.0.0 0.15.255.255 any
220 deny ip 192.168.0.0 0.0.255.255 any
230 deny ip 127.0.0.0 0.255.255.255 any
240 deny ip host 255.255.255.255 any
250 deny ip host 0.0.0.0 any
260 deny ip any any log (636 matches)
The internal network is 192.168.100.0/24.
Best regards,
V
10-14-2013 07:50 AM
Update IOS then check again.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide