Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Cisco 2811 High CPU - HQF Shaper Backg

Posted on 2010-09-20
3
Medium Priority
?
3,491 Views
Last Modified: 2013-12-27
I recently put in a Cisco 2811 for acting as a SIP gateway and it provides Zone firewall.  All is working.  I am however seeing fairly constant high CPU.  The highest proc % appears to be HQF Shaper Backg.  What is this and how can I lower the CPU impact?  

Also - does anyone understand why the individual proc percents do not add up to the total CPU utilization figure?  Do tell!

c2811-1#sho proc cpu
CPU utilization for five seconds: 53%/50%; one minute: 54%; five minutes: 52%

180      121888      51382361      2      1.35%      1.43%      1.34%      0      HQF Shaper Backg
115      321248      307382      1045      1.19%      0.72%      0.85%      0      IP Input      
41      21564      207381      103      0.15%      0.15%      0.15%      0      Per-Second Jobs
2      8120      41499      195      0.07%      0.19%      0.16%      0      Load Meter
342      156972      118980      1319      0.07%      0.12%      0.14%      0      SCCP Application
90      267688      207205      1291      0.07%      0.12%      0.13%      0      tCOUNTER
190      14908      56070      265      0.07%      0.10%      0.12%      0      FW DP Inspect pr
327      9512      404794      23      0.07%      0.08%      0.07%      0      IP NAT Ager
181      14652      2069324      7      0.07%      0.07%      0.07%      0      RBSCP Background
126      6276      254228      24      0.07%      0.03%      0.02%      0      Spanning Tree
64      5752      828956      6      0.07%      0.02%      0.00%      0      Netclock Backgro
50      2116      41496      50      0.07%      0.01%      0.00%      0      Compute load avg
153      2596      38679      67      0.07%      0.01%      0.00%      0      TCP Timer
109      2048      28821      71      0.07%      0.00%      0.00%      0      CDP Protocol
188      2492      404687      6      0.07%      0.00%      0.00%      0      Inspect process
332      1792      25084      71      0.07%      0.00%      0.00%      0      IP SLA Mon Sync
230      1236      83      14891      0.00%      0.31%      0.08%      514      SSH Process
5      387280      28658      13513      0.00%      0.16%      0.17%      0      Check heaps
51      105612      3472      30418      0.00%      0.07%      0.05%      0      Per-minute Jobs
317      398956      2439      163573      0.00%      0.05%      0.06%      0      CCSIP_SPI_CONTRO
349      9776      829031      11      0.00%      0.04%      0.03%      0      MLD      
339      16228      64851      250      0.00%      0.03%      0.05%      0      NAT MIB Helper
258      7220      1036363      6      0.00%      0.03%      0.02%      0      Atheros LED Ctro
19      43352      124032      349      0.00%      0.01%      0.00%      0      ARP Input
122      904      239      3782      0.00%      0.01%      0.00%      0      AFW_application_
147      3716      318911      11      0.00%      0.01%      0.00%      0      CEF: IPv4 proces
1      392      428      915      0.00%      0.00%      0.00%      0      Chunk Manager
3      0      5      0      0.00%      0.00%      0.00%      0      Collection proce
4      0      1      0      0.00%      0.00%      0.00%      0      EDDRI_MAIN
6      40      22      1818      0.00%      0.00%      0.00%      0      Pool Manager
0
Comment
Question by:amigan_99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 32

Accepted Solution

by:
harbor235 earned 2000 total points
ID: 33724717

First off the 53%/50 means that 50% of the CPU time is spent in interrupt level. So you either have a
misconfigured forwarding methodology or perhaps your box has a good deal of traffic being directed at it, potentially a DOS. It's hard to tell without more info.

Do you have CEF ebnabled? (show ip cef summary)

Try this command also to isolate teh high CPU [percentage, "show proc cpu | exc 0.0"

harbor235 ;}
0
 
LVL 1

Author Comment

by:amigan_99
ID: 33934184
Thanks for the tip on the exc 0.0.  That's a keeper.  CEF seems to be enabled.

sfo-c2811-1#sho ip cef summ
IPv4 CEF is enabled and running
VRF Default:
 33 prefixes (33/0 fwd/non-fwd)
 Default network 0.0.0.0/0
 Table id 0
 Database epoch:        0 (33 entries at this epoch)


sfo-c2811-1#sho proc cpu | exc 0.0
CPU utilization for five seconds: 15%/12%; one minute: 21%; five minutes: 19%
 PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
 115       57008       24742       2304  0.55%  1.08%  0.87%   0 IP Input      
 180       16988      899963         18  1.35%  1.28%  1.27%   0 HQF Shaper Back
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 33963744
TY
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question