A solution requires understanding the problem. To understand this problem, you
need to detect when high CPU is occurring, then get a snapshot of 'show proc
cpu' when the problem is occurring. Then you may determine which process is
causing the high cpu. Only then can you (or Cisco) begin to understand the set
of possible causes and the next step in understanding the problem. TAC should
have already asked about how to capture this information.
The source of the problem could be many things, including an IOS bug, a
configuration problem, something like a flapping link, or software switching of
a high-throughput flow causing high cpu in a routing process. More details are
needed to narrow the search for the solution.
Good luck with finding the cause and a solution.
-tcs
On 11/2/11 9:29 PM, JM NGOK wrote:
It could be a bug. I got the same CPU issue this week on a router with IOS
version 12. We are still escalating the problem with Cisco TAC.
But If I understand Manoj just need a solution to this High CPU usage rather
than a way to detect it.
Correct me if I am wrong...
Jean-Marie NGOK
________________________________
From: manoj kaushal<[email protected]>
To: Ramcharan Arya<[email protected]>
Cc: [email protected]
Sent: Wednesday, November 2, 2011 8:52 PM
Subject: Re: [OSL | CCIE_RS] strange behaviour of Cisco router
Thanks a Lot to all of you for replying. I've been a passive reader of this
forum from last 6 months but now I'll be more active.
BTW can it be a bug in the IOS?
#show version
Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version
15.0(1)M3, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Sun 18-Jul-10 00:57 by prod_rel_team
ROM: System Bootstrap, Version 12.3(8r)YH12, RELEASE SOFTWARE (fc1)
On Thu, Nov 3, 2011 at 4:31 AM, Ramcharan Arya<[email protected]>wrote:
Try below EEM script these might be able to help you to detect high CPU
problem
process cpu threshold type interrupt rising 90 interval 5 falling 75
interval 5 ****
event manager applet start ****
event syslog pattern "SYS-1-CPURISINGTHRESHOLD" ****
action 0 cli command "enable" ****
action 1 cli command "profile task interrupt" ****
action 2 cli command "profile 4000F000 4379FFFF 4" ****
action 3 syslog msg "start" ****
event manager applet stop ****
event syslog pattern "SYS-1-CPUFALLINGTHRESHOLD" ****
action 0 cli command "enable" ****
action 1 cli command "profile stop" ****
action 2 cli command "show profile terse | append flash:resterse" ****
action 3 syslog msg "STOPED"
----------------------------
event manager applet cpu_mon
event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.3.1 get-type exact entry-op gt
entry-val 90 exit-op lt exit-val 70 poll-interval 1
action 1.1 syslog msg "------HIGH CPU DETECTED----, CPU: $_snmp_oid_val %"
action 1.2 cli command "enable"
action 1.4 cli command "show proc cpu | append flash:cpu_mon"
action 1.5 cli command "show proc cpu history | append flash:cpu_mon"
action 1.6 cli command "show interface | append flash:cpu_mon"
action 1.7 cli command "show interface stat | append flash:cpu_mon"
action 1.8 cli command "show log | append flash:cpu_mon"
action 1.9 cli command "show clock | append flash:cpu_mon"
action 1.10 syslog msg " --- CPU: Done ---"
-----------------------------------------------------
Please note the following:
.You need to apply this script in the config mode on the router.
.This script should save the outputs on flash:cpu_mon once you have a CPU
utilization more than 60%
Check this link
http://forums.cisco.com/eforum/servlet/EEM?page=eem&fn=script&scriptId=2303
Regards,
Ramcharan Arya
CCIE # 28926
On Wed, Nov 2, 2011 at 5:40 PM, manoj kaushal<[email protected]>wrote:
Can you guide me how to put event manager?
On Tue, Nov 1, 2011 at 7:10 PM, Ederson Silva Rodrigues<
[email protected]> wrote:
Put a event manager in the router to follow the cpu and when it reach to
70% send a email to you with the show cpu process, this can help you
2011/11/1 joe nolan<[email protected]>
unsubscribe
On Tue, Nov 1, 2011 at 8:35 AM, Scott Sierra<[email protected]>
wrote:
Apologies - that should be...
show proc cpu
Scott
On 1 November 2011 14:02, manoj kaushal<[email protected]>
wrote:
Hi All,
We are using 1811 router for our customers and 1 of 1811 is
showing a
very
strange behavior.
The router is peaking upto 100% cpu utilisation once or twice a
week
even
though traffic is few kbps.
Any Idea of how to resolve it?
--
Kaushal
_______________________________________________
For more information regarding industry leading CCIE Lab training,
please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com<http://www.platinumplacement.com/> <
http://www.platinumplacement.com/>
_______________________________________________
For more information regarding industry leading CCIE Lab training,
please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com<http://www.platinumplacement.com/> <
http://www.platinumplacement.com/>
--
Joe Nolan
_______________________________________________
For more information regarding industry leading CCIE Lab training,
please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com<http://www.platinumplacement.com/>
_______________________________________________
For more information regarding industry leading CCIE Lab training,
please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com<http://www.platinumplacement.com/>
--
Kaushal
_______________________________________________
For more information regarding industry leading CCIE Lab training, please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com<http://www.platinumplacement.com/>
--
Terry Slattery CCIE# 1026
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
