Cisco IP NBAR Protocol Discovery > Causing Extreme High CPU

Posted on April 14, 2008. Filed under: Uncategorized |

Finding another factor of what really makes your Cisco CPU High ?
Check this “ip nbar protocol-discovery”. if this not really necessary please have this remove.
You’ll have more and more extreme space on CPU heap.

ip nbar protocol-discovery

To configure Networked-Based Application Recognition (NBAR) to discover traffic for all protocols known to NBAR on a particular interface, use the ip nbar protocol-discovery interface configuration command. To disable traffic discovery, use the no form of this command.

ip nbar protocol-discovery

no ip nbar protocol-discovery

Example :

interface G 0/1

ip nbar protocol-discovery


Before Removing (2) IP NBAR DISCOVERY PROTOCOL on 2 GIG INTERFACES :

CPU utilization for five seconds: 75%/74%; one minute: 78%; five minutes: 77%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 0 2 0 0.00% 0.00% 0.00% 0 Chunk Manager
2 28336 5898931 4 0.00% 0.00% 0.00% 0 Load Meter
3 70576 25848112 2 0.00% 0.00% 0.00% 0 NTP
4 0 1 0 0.00% 0.00% 0.00% 0 EDDRI_MAIN
5 224966592 11311155 19889 0.00% 0.20% 0.28% 0 Check heaps
6 11712 159024 73 0.00% 0.00% 0.00% 0 Pool Manager
7 0 2 0 0.00% 0.00% 0.00% 0 Timers
8 0 2 0 0.00% 0.00% 0.00% 0 Serial Backgroun
9 0 2 0 0.00% 0.00% 0.00% 0 ATM Idle Timer
10 0 2 0 0.00% 0.00% 0.00% 0 ATM AutoVC Perio
11 0 2 0 0.00% 0.00% 0.00% 0 ATM VC Auto Crea
12 0 2 0 0.00% 0.00% 0.00% 0 AAA high-capacit
13 2965596 29327850 101 0.00% 0.00% 0.00% 0 EnvMon
14 12 3 4000 0.00% 0.00% 0.00% 0 OIR Handler
15 3944 491833 8 0.00% 0.00% 0.00% 0 IPC Dynamic Cach
16 0 1 0 0.00% 0.00% 0.00% 0 IPC Zone Manager
17 134516 29326709 4 0.00% 0.00% 0.00% 0 IPC Periodic Tim
18 105216 29326722 3 0.00% 0.00% 0.00% 0 IPC Deferred Por
19 0 1 0 0.00% 0.00% 0.00% 0 IPC Seat Manager
20 251292 1560171 161 0.00% 0.00% 0.00% 0 ARP Input
21 99744 7320085 13 0.00% 0.00% 0.00% 0 HC Counter Timer
22 0 2 0 0.00% 0.00% 0.00% 0 DDR Timers
23 0 4 0 0.00% 0.00% 0.00% 0 Entity MIB API
24 0 1 0 0.00% 0.00% 0.00% 0 SERIAL A'detect
25 109144 29326651 3 0.00% 0.00% 0.00% 0 GraphIt
26 0 2 0 0.00% 0.00% 0.00% 0 Dialer event
27 0 9 0 0.00% 0.00% 0.00% 0 Critical Bkgnd
28 58604344 8771551 6681 0.15% 0.17% 0.14% 0 Net Background
29 147952 8664207 17 0.00% 0.00% 0.00% 0 Logger
30 232880 29326703 7 0.00% 0.00% 0.00% 0 TTY Background
31 24549660 29325429 837 0.23% 0.22% 0.25% 0 Per-Second Jobs
32 0 1 0 0.00% 0.00% 0.00% 0 Inode Table Dest
33 0 1 0 0.00% 0.00% 0.00% 0 CSP Timer
34 0 1 0 0.00% 0.00% 0.00% 0 SONET alarm time
35 0 1 0 0.00% 0.00% 0.00% 0 POS APS Event Pr
36 0 2 0 0.00% 0.00% 0.00% 0 VNM DSPRM MAIN
37 0 1 0 0.00% 0.00% 0.00% 0 CES Line Conditi
38 0 2 0 0.00% 0.00% 0.00% 0 Flash MIB Update
39 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM Input
40 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM TIMER
41 8 2435 3 0.00% 0.00% 0.00% 0 TurboACL
42 0 2 0 0.00% 0.00% 0.00% 0 AAA Server
43 0 1 0 0.00% 0.00% 0.00% 0 AAA ACCT Proc
44 0 1 0 0.00% 0.00% 0.00% 0 ACCT Periodic Pr
45 0 1 0 0.00% 0.00% 0.00% 0 AAA_SERVER_DEADT
46 0 2 0 0.00% 0.00% 0.00% 0 AAA Dictionary R

After Removing (2) IP NBAR DISCOVERY PROTOCOL on 2 GIG INTERFACES :

CPU utilization for five seconds: 18%/18%; one minute: 28%; five minutes: 38%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 0 2 0 0.00% 0.00% 0.00% 0 Chunk Manager
2 28340 5899323 4 0.00% 0.00% 0.00% 0 Load Meter
3 70584 25850083 2 0.00% 0.00% 0.00% 0 NTP
4 0 1 0 0.00% 0.00% 0.00% 0 EDDRI_MAIN
5 224984364 11312051 19888 0.00% 0.73% 0.48% 0 Check heaps
6 11712 159024 73 0.00% 0.00% 0.00% 0 Pool Manager
7 0 2 0 0.00% 0.00% 0.00% 0 Timers
8 0 2 0 0.00% 0.00% 0.00% 0 Serial Backgroun
9 0 2 0 0.00% 0.00% 0.00% 0 ATM Idle Timer
10 0 2 0 0.00% 0.00% 0.00% 0 ATM AutoVC Perio
11 0 2 0 0.00% 0.00% 0.00% 0 ATM VC Auto Crea
12 0 2 0 0.00% 0.00% 0.00% 0 AAA high-capacit
13 2965608 29329775 101 0.00% 0.00% 0.00% 0 EnvMon
14 12 3 4000 0.00% 0.00% 0.00% 0 OIR Handler
15 3944 491865 8 0.00% 0.00% 0.00% 0 IPC Dynamic Cach
16 0 1 0 0.00% 0.00% 0.00% 0 IPC Zone Manager
17 134524 29328634 4 0.00% 0.00% 0.00% 0 IPC Periodic Tim
18 105240 29328647 3 0.00% 0.00% 0.00% 0 IPC Deferred Por
19 0 1 0 0.00% 0.00% 0.00% 0 IPC Seat Manager
20 251308 1560257 161 0.00% 0.00% 0.00% 0 ARP Input
21 99748 7320571 13 0.00% 0.00% 0.00% 0 HC Counter Timer
22 0 2 0 0.00% 0.00% 0.00% 0 DDR Timers
23 0 4 0 0.00% 0.00% 0.00% 0 Entity MIB API
24 0 1 0 0.00% 0.00% 0.00% 0 SERIAL A'detect
25 109168 29328576 3 0.00% 0.00% 0.00% 0 GraphIt
26 0 2 0 0.00% 0.00% 0.00% 0 Dialer event
27 0 9 0 0.00% 0.00% 0.00% 0 Critical Bkgnd
28 58610892 8772010 6681 0.00% 0.12% 0.12% 0 Net Background
29 147952 8664221 17 0.00% 0.00% 0.00% 0 Logger
30 232940 29328628 7 0.00% 0.00% 0.00% 0 TTY Background
31 24559620 29327354 837 0.00% 0.00% 0.00% 0 Per-Second Jobs
32 0 1 0 0.00% 0.00% 0.00% 0 Inode Table Dest
33 0 1 0 0.00% 0.00% 0.00% 0 CSP Timer
34 0 1 0 0.00% 0.00% 0.00% 0 SONET alarm time
35 0 1 0 0.00% 0.00% 0.00% 0 POS APS Event Pr
36 0 2 0 0.00% 0.00% 0.00% 0 VNM DSPRM MAIN
37 0 1 0 0.00% 0.00% 0.00% 0 CES Line Conditi
38 0 2 0 0.00% 0.00% 0.00% 0 Flash MIB Update
39 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM Input
40 0 2 0 0.00% 0.00% 0.00% 0 ATM OAM TIMER
41 8 2435 3 0.00% 0.00% 0.00% 0 TurboACL
42 0 2 0 0.00% 0.00% 0.00% 0 AAA Server
43 0 1 0 0.00% 0.00% 0.00% 0 AAA ACCT Proc
44 0 1 0 0.00% 0.00% 0.00% 0 ACCT Periodic Pr
45 0 1 0 0.00% 0.00% 0.00% 0 AAA_SERVER_DEADT
46 0 2 0 0.00% 0.00% 0.00% 0 AAA Dictionary R

a. rahman isnaini r.sutan

Make a Comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

One Response to “Cisco IP NBAR Protocol Discovery > Causing Extreme High CPU”

RSS Feed for tukang-tukang oprek Comments RSS Feed

FYI,

Traffic on the gig interface to be recognized is : (50 Mbps in/40 Mbps Out) & (30 Mbps)

a. rahman isnaini r.sutan


Where's The Comment Form?

Liked it here?
Why not try sites on the blogroll...

%d bloggers like this: