Replying to my own post. Concerning the CPU, this is a known issue:
CSCsi63155 "the CPU usage of one of the context goes up to 60% and it stays there " (http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/release/notes/fwsmrn31 .html#wp161596) Christophe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Varaillon Jean Christophe Sent: Friday, November 14, 2008 2:07 PM To: 'Cisco-nsp' Subject: Re: [c-nsp] FWSM (3.1) - Memory and CPU issue >The CPU of context2 is never changing (stack at 62%) and this does not >reflect at all the pattern of traffic/connection/translation that we get >during a wotrking day. Why What would keep the CPU so busy given that the >amount of traffic is not the issue here? This output shows clearly that the traffic is almost null but still it has 60% of CPU. What could justify such a value? FWSM/context2# show cpu usage CPU utilization for 5 seconds = 60.5%; 1 minute: 62.2%; 5 minutes: 62.4% FWSM/context2# show perfmon PERFMON STATS: Current Average Xlates 0/s 0/s Connections 0/s 0/s TCP Conns 0/s 0/s UDP Conns 0/s 0/s URL Access 0/s 0/s URL Server Req 0/s 0/s TCP Fixup 279/s 0/s HTTP Fixup 0/s 0/s FTP Fixup 0/s 0/s AAA Authen 0/s 0/s AAA Author 0/s 0/s AAA Account 0/s 0/s TCP Intercept 0/s 0/s Thanks, Christophe __________ Information from ESET Smart Security, version of virus signature database 3613 (20081114) __________ The message was checked by ESET Smart Security. http://www.eset.com _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ __________ Information from ESET Smart Security, version of virus signature database 3617 (20081117) __________ The message was checked by ESET Smart Security. http://www.eset.com __________ Information from ESET Smart Security, version of virus signature database 3617 (20081117) __________ The message was checked by ESET Smart Security. http://www.eset.com _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
