Solved

Cisco router CPU spike after adding monitor session to remote-span vlan

Posted on 2011-03-02
2
988 Views
Last Modified: 2012-05-11
What could have caused this?


Today we added a monitor port on one of our routers.

This is a standard procedure that we have performed in the past on several other devices.

A physical interface (uplink port) was set as the source and the remote vlan was set as the destination.

The remote vlan was only trunked across a single link to another router.

The other router was setup with a monitor source of the remote vlan and destination of the physical uplink to the sniffer.

Both of the routers in question are part of an HSRP pair.

Both of the routers in question are running FWSM.

When the monitor port was enabled, the cpu usage spiked to 100% causing HSRP flapping.

The remote router was no longer responding to pings due to cpu usage.

0
Comment
Question by:c-h-r-i-s-t-o-p-h
2 Comments
 
LVL 24

Accepted Solution

by:
rfc1180 earned 500 total points
ID: 35021999
0
 

Author Closing Comment

by:c-h-r-i-s-t-o-p-h
ID: 35038057
device is a 6500 series router
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now