I've also configured netflow on the router:

!
ip flow-top-talkers
 top 25
 sort-by bytes
 cache-timeout 5000
!
interface Tunnel2 ( GRE tunnel interface)
  ip address x.x.x.x y.y.y.y
 ip mtu 1380
 ip flow ingress




On Thu, Nov 3, 2011 at 6:22 AM, manoj kaushal <[email protected]> wrote:

> Thanks a Lot to all of you for replying. I've been a passive reader of
> this forum from last 6 months but now I'll be more active.
>
> BTW can it be a bug in the IOS?
>
> #show version
> Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version
> 15.0(1)M3, RELEASE SOFTWARE (fc2)
> Technical Support: http://www.cisco.com/techsupport
> Copyright (c) 1986-2010 by Cisco Systems, Inc.
> Compiled Sun 18-Jul-10 00:57 by prod_rel_team
>
> ROM: System Bootstrap, Version 12.3(8r)YH12, RELEASE SOFTWARE (fc1)
>
>
>
> On Thu, Nov 3, 2011 at 4:31 AM, Ramcharan Arya 
> <[email protected]>wrote:
>
>> Try below EEM script these might be able to help you to detect high CPU
>> problem
>>
>>
>>
>>
>> process cpu threshold type interrupt rising 90 interval 5 falling 75
>> interval 5     ****
>>
>> event manager applet start ****
>>
>> event syslog pattern "SYS-1-CPURISINGTHRESHOLD" ****
>>
>> action 0 cli command "enable" ****
>>
>> action 1 cli command "profile task interrupt" ****
>>
>> action 2 cli command "profile  4000F000 4379FFFF 4" ****
>>
>> action 3  syslog msg "start" ****
>>
>> event manager applet stop ****
>>
>> event syslog pattern "SYS-1-CPUFALLINGTHRESHOLD" ****
>>
>> action 0 cli command "enable" ****
>>
>> action 1 cli command "profile stop" ****
>>
>> action 2 cli command "show profile terse | append flash:resterse" ****
>>
>> action 3 syslog msg "STOPED"
>>
>> ----------------------------
>> event manager applet cpu_mon
>> event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.3.1 get-type exact entry-op gt
>> entry-val 90 exit-op lt exit-val 70 poll-interval 1
>> action 1.1 syslog msg "------HIGH CPU DETECTED----, CPU: $_snmp_oid_val %"
>> action 1.2 cli command "enable"
>> action 1.4 cli command "show proc cpu | append flash:cpu_mon"
>> action 1.5 cli command "show proc cpu history | append flash:cpu_mon"
>> action 1.6 cli command "show interface | append flash:cpu_mon"
>> action 1.7 cli command "show interface stat | append flash:cpu_mon"
>> action 1.8 cli command "show log | append flash:cpu_mon"
>> action 1.9 cli command "show clock | append flash:cpu_mon"
>> action 1.10 syslog msg " --- CPU: Done ---"
>>
>> -----------------------------------------------------
>>
>> Please note the following:
>>
>> .You need to apply this script in the config mode on the router.
>> .This script should save the outputs on flash:cpu_mon once you have a CPU
>> utilization more than 60%
>>
>> Check this link
>>
>>
>> http://forums.cisco.com/eforum/servlet/EEM?page=eem&fn=script&scriptId=2303
>>
>>
>>
>> Regards,
>> Ramcharan Arya
>> CCIE # 28926
>>
>> On Wed, Nov 2, 2011 at 5:40 PM, manoj kaushal <[email protected]>wrote:
>>
>>> Can you guide me how to put event manager?
>>>
>>>
>>> On Tue, Nov 1, 2011 at 7:10 PM, Ederson Silva Rodrigues <
>>> [email protected]> wrote:
>>>
>>> > Put a event manager in the router to follow the cpu and when it reach
>>> to
>>> > 70% send a email to you with the show cpu process, this can help you
>>> >
>>> > 2011/11/1 joe nolan <[email protected]>
>>> >
>>> > > unsubscribe
>>> > >
>>> > > On Tue, Nov 1, 2011 at 8:35 AM, Scott Sierra <[email protected]
>>> >
>>> > > wrote:
>>> > >
>>> > > > Apologies - that should be...
>>> > > >
>>> > > > show proc cpu
>>> > > >
>>> > > > Scott
>>> > > >
>>> > > > On 1 November 2011 14:02, manoj kaushal <[email protected]>
>>> wrote:
>>> > > >
>>> > > > > Hi All,
>>> > > > >
>>> > > > > We are using 1811 router for our customers and 1 of 1811 is
>>> showing a
>>> > > > very
>>> > > > > strange behavior.
>>> > > > >
>>> > > > > The router is peaking upto 100% cpu utilisation once or twice a
>>> week
>>> > > even
>>> > > > > though traffic is few kbps.
>>> > > > >
>>> > > > > Any Idea of how to resolve it?
>>> > > > >
>>> > > > > --
>>> > > > > Kaushal
>>> > > > > _______________________________________________
>>> > > > > For more information regarding industry leading CCIE Lab
>>> training,
>>> > > please
>>> > > > > visit www.ipexpert.com
>>> > > > >
>>> > > > > Are you a CCNP or CCIE and looking for a job? Check out
>>> > > > > www.PlatinumPlacement.com <http://www.platinumplacement.com/> <
>>> http://www.platinumplacement.com/>
>>> > > > >
>>> > > > _______________________________________________
>>> > > > For more information regarding industry leading CCIE Lab training,
>>> > please
>>> > > > visit www.ipexpert.com
>>> > > >
>>> > > > Are you a CCNP or CCIE and looking for a job? Check out
>>> > > > www.PlatinumPlacement.com <http://www.platinumplacement.com/> <
>>> http://www.platinumplacement.com/>
>>> > > >
>>> > >
>>> > >
>>> > >
>>> > > --
>>> > > Joe Nolan
>>> > > _______________________________________________
>>> > > For more information regarding industry leading CCIE Lab training,
>>> please
>>> > > visit www.ipexpert.com
>>> > >
>>> > > Are you a CCNP or CCIE and looking for a job? Check out
>>> > > www.PlatinumPlacement.com <http://www.platinumplacement.com/>
>>> > >
>>> > _______________________________________________
>>> > For more information regarding industry leading CCIE Lab training,
>>> please
>>> > visit www.ipexpert.com
>>> >
>>> > Are you a CCNP or CCIE and looking for a job? Check out
>>> > www.PlatinumPlacement.com <http://www.platinumplacement.com/>
>>> >
>>>
>>>
>>>
>>> --
>>> Kaushal
>>> _______________________________________________
>>> For more information regarding industry leading CCIE Lab training,
>>> please visit www.ipexpert.com
>>>
>>> Are you a CCNP or CCIE and looking for a job? Check out
>>> www.PlatinumPlacement.com <http://www.platinumplacement.com/>
>>>
>>
>>
>
>
> --
> Kaushal
>
>


-- 
Kaushal
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to