早上八点，重启路由后的CPU，大家看看有没有问题

ppp2 · 发表于 2009-7-20 08:44:59

早上八点，重启路由后的CPU，大家看看有没有问题

CPU utilization for five seconds: 54%/53%; one minute: 50%; five minutes: 17%
PID Runtime(ms) Invoked    uSecs 5Sec 1Min 5Min TTY Process
1          0       1       0  0.00%  0.00%  0.00% 0 Chunk Manager
2          4       21       190  0.00%  0.00%  0.00% 0 Load Meter
3       241    102    2362  0.39%  0.22%  0.05%  66 Virtual Exec
4       172       15    11466  0.00%  0.05%  0.01% 0 Check heaps
5          8       4    2000  0.00%  0.00%  0.00% 0 Pool Manager
6          0       1       0  0.00%  0.00%  0.00% 0 AAA_SERVER_DEADT
7          0       2       0  0.00%  0.00%  0.00% 0 Timers
8          0       5       0  0.00%  0.00%  0.00% 0 Environmental mo
9       44       33    1333  0.00%  0.00%  0.00% 0 ARP Input
  10          4       2    2000  0.00%  0.00%  0.00% 0 ATM Idle Timer
  11          0       2       0  0.00%  0.00%  0.00% 0 AAA high-capacit
  12          0       2       0  0.00%  0.00%  0.00% 0 DDR Timers
  13          4       2    2000  0.00%  0.00%  0.00% 0 Entity MIB API
  14          4       6       666  0.00%  0.00%  0.00% 0 HC Counter Timer
  15          0       2       0  0.00%  0.00%  0.00% 0 Serial Backgroun
  16       20       97       206  0.00%  0.00%  0.00% 0 GraphIt
  17          0       2       0  0.00%  0.00%  0.00% 0 Dialer event
  18          0       1       0  0.00%  0.00%  0.00% 0 SERIAL A'detect
  19          0       1       0  0.00%  0.00%  0.00% 0 Critical Bkgnd
  20          8       31       258  0.00%  0.00%  0.00% 0 Net Background
  21          0       5       0  0.00%  0.00%  0.00% 0 Logger
  22       56       93       602  0.00%  0.01%  0.00% 0 TTY Background
  23       24    103       233  0.00%  0.00%  0.00% 0 Per-Second Jobs
  24          0       1       0  0.00%  0.00%  0.00% 0 AggMgr Process
  25          0       1       0  0.00%  0.00%  0.00% 0 dev_device_inser
  26          0       1       0  0.00%  0.00%  0.00% 0 dev_device_remov
  27          0       1       0  0.00%  0.00%  0.00% 0 sal_dpc_process
  28          0       1       0  0.00%  0.00%  0.00% 0 ARL Table Manage
  29          0       2       0  0.00%  0.00%  0.00% 0 ESWILPPM
  30          0       2       0  0.00%  0.00%  0.00% 0 SM Monitor
  31          4       27       148  0.00%  0.00%  0.00% 0 Net Input
  32          4       21       190  0.00%  0.00%  0.00% 0 Compute load avg
  33       88       2    44000  0.00%  0.02%  0.00% 0 Per-minute Jobs
  34          4       2    2000  0.00%  0.00%  0.00% 0 DTP Protocol
  35       16       97       164  0.00%  0.00%  0.00% 0 PI MATM Aging Pr
  36          0       11       0  0.00%  0.00%  0.00% 0 EtherChnl
  37          4       2    2000  0.00%  0.00%  0.00% 0 VLAN Manager
  38          0       2       0  0.00%  0.00%  0.00% 0 AAA Dictionary R
  39          0       2       0  0.00%  0.00%  0.00% 0 AAA Server
  40          0       1       0  0.00%  0.00%  0.00% 0 AAA ACCT Proc
  41          0       1       0  0.00%  0.00%  0.00% 0 ACCT Periodic Pr
  42       20       12    1666  0.00%  0.00%  0.00% 0 CDP Protocol
  43       802    402    1995  0.23%  0.21%  0.08% 0 IP Input
  44          0       1       0  0.00%  0.00%  0.00% 0 ICMP event handl
  45          0       3       0  0.00%  0.00%  0.00% 0 MOP Protocols
  46          0       3       0  0.00%  0.00%  0.00% 0 PPP Hooks
  47          0       1       0  0.00%  0.00%  0.00% 0 SSS Manager
  48       12       13       923  0.00%  0.00%  0.00% 0 SSS Test Client
  49          0       1       0  0.00%  0.00%  0.00% 0 VPDN call manage
  50          0       1       0  0.00%  0.00%  0.00% 0 X.25 Encaps Mana
  51       20       11    1818  0.00%  0.00%  0.00% 0 IP Background
  52          0       7       0  0.00%  0.00%  0.00% 0 IP RIB Update
  53          0       2       0  0.00%  0.00%  0.00% 0 PPP IP Route
  54          0       2       0  0.00%  0.00%  0.00% 0 PPP IPCP
  55          0       1       0  0.00%  0.00%  0.00% 0 Asy FS Helper
  56       213    197    1081  0.00%  0.06%  0.02% 0 CEF process
  57       16       49       326  0.00%  0.00%  0.00% 0 TCP Timer
  58          4       2    2000  0.00%  0.00%  0.00% 0 TCP Protocols
  59          0       1       0  0.00%  0.00%  0.00% 0 COPS
  60          0       1       0  0.00%  0.00%  0.00% 0 SNMP Timers
  61       68       2    34000  0.00%  0.00%  0.00% 0 SCTP Main Proces
  62          0       1       0  0.00%  0.00%  0.00% 0 IUA Main Process
  63       36    104       346  0.00%  0.00%  0.00% 0 RUDPV1 Main Proc
  64          0       1       0  0.00%  0.00%  0.00% 0 bsm_timers
  65          4    107       37  0.00%  0.00%  0.00% 0 bsm_xmt_proc
  66          0       1       0  0.00%  0.00%  0.00% 0 Socket Timers
  67       13       3    4333  0.00%  0.00%  0.00% 0 DHCPD Receive
  68          4       2    2000  0.00%  0.00%  0.00% 0 Dialer Forwarder
  69          4       3    1333  0.00%  0.00%  0.00% 0 Adj Manager
  70          0       2       0  0.00%  0.00%  0.00% 0 HTTP CORE
  71          0       2       0  0.00%  0.00%  0.00% 0 IP Cache Ager
  72          0       1       0  0.00%  0.00%  0.00% 0 RARP Input
  73          0       1       0  0.00%  0.00%  0.00% 0 PAD InCall
  74          0       2       0  0.00%  0.00%  0.00% 0 X.25 Background
  75          0       2       0  0.00%  0.00%  0.00% 0 PPP Bind
  76          0       2       0  0.00%  0.00%  0.00% 0 PPP SSS
  77          4       6       666  0.00%  0.00%  0.00% 0 CRM_CALL_UPDATE_
  78          0       2       0  0.00%  0.00%  0.00% 0 ENABLE AAA
  79          0       2       0  0.00%  0.00%  0.00% 0 LINE AAA
  80          0       2       0  0.00%  0.00%  0.00% 0 LOCAL AAA
  82          0       2       0  0.00%  0.00%  0.00% 0 TPLUS
  83       32    169       189  0.00%  0.00%  0.00% 0 Inline Power
  84          0       1       0  0.00%  0.00%  0.00% 0 PM Callback
  85       24       3    8000  0.00%  0.00%  0.00% 0 CEF Scanner
  86          0       2       0  0.00%  0.00%  0.00% 0 AAA SEND STOP EV
  87          0       1       0  0.00%  0.00%  0.00% 0 Syslog Traps
  88          0       1       0  0.00%  0.00%  0.00% 0 VPDN Scal
  89       400    918       435  0.00%  0.03%  0.01% 0 fastblk backgrou
  90          0       1       0  0.00%  0.00%  0.00% 0 DHCPD Timer
  91          0       24       0  0.00%  0.00%  0.00% 0 DHCPD Database

ppp2 · 发表于 2009-7-20 08:47:47

八点半时的CPU使用率，完了，完了，

CPU utilization for five seconds: 93%/92%; one minute: 88%; five minutes: 76%
PID Runtime(ms) Invoked    uSecs 5Sec 1Min 5Min TTY Process
1          0       1       0  0.00%  0.00%  0.00% 0 Chunk Manager
2       178    206       864  0.00%  0.00%  0.00% 0 Load Meter
3       6261    114    54921  0.00%  0.45%  0.12%  66 Virtual Exec
4       4081    172    23726  0.00%  0.08%  0.05% 0 Check heaps
5          8       4    2000  0.00%  0.00%  0.00% 0 Pool Manager
6          0       1       0  0.00%  0.00%  0.00% 0 AAA_SERVER_DEADT
7          0       2       0  0.00%  0.00%  0.00% 0 Timers
8       24       36       666  0.00%  0.00%  0.00% 0 Environmental mo
9       408    109    3743  0.00%  0.00%  0.00% 0 ARP Input
  10          4       2    2000  0.00%  0.00%  0.00% 0 ATM Idle Timer
  11          0       2       0  0.00%  0.00%  0.00% 0 AAA high-capacit
  12          0       2       0  0.00%  0.00%  0.00% 0 DDR Timers
  13          4       2    2000  0.00%  0.00%  0.00% 0 Entity MIB API
  14       1355       52    26057  0.00%  0.00%  0.00% 0 HC Counter Timer
  15          0       2       0  0.00%  0.00%  0.00% 0 Serial Backgroun
  16       437    991       440  0.00%  0.00%  0.00% 0 GraphIt
  17          0       2       0  0.00%  0.00%  0.00% 0 Dialer event
  18          0       1       0  0.00%  0.00%  0.00% 0 SERIAL A'detect
  19          0       1       0  0.00%  0.00%  0.00% 0 Critical Bkgnd
  20       898    198    4535  0.00%  0.00%  0.00% 0 Net Background
  21          0       5       0  0.00%  0.00%  0.00% 0 Logger
  22       526    987       532  0.07%  0.01%  0.00% 0 TTY Background
  23       1386    996    1391  0.07%  0.01%  0.00% 0 Per-Second Jobs
  24          0       1       0  0.00%  0.00%  0.00% 0 AggMgr Process
  25          0       1       0  0.00%  0.00%  0.00% 0 dev_device_inser
  26          0       1       0  0.00%  0.00%  0.00% 0 dev_device_remov
  27          0       1       0  0.00%  0.00%  0.00% 0 sal_dpc_process
  28          0       1       0  0.00%  0.00%  0.00% 0 ARL Table Manage
  29          0       2       0  0.00%  0.00%  0.00% 0 ESWILPPM
  30          0       2       0  0.00%  0.00%  0.00% 0 SM Monitor
  31       88    221       398  0.07%  0.00%  0.00% 0 Net Input
  32       853    207    4120  0.00%  0.00%  0.00% 0 Compute load avg
  33       2983       19    157000  0.00%  0.07%  0.04% 0 Per-minute Jobs
  34          4       2    2000  0.00%  0.00%  0.00% 0 DTP Protocol
  35       533    991       537  0.00%  0.00%  0.00% 0 PI MATM Aging Pr
  36       20    104       192  0.00%  0.00%  0.00% 0 EtherChnl
  37          4       2    2000  0.00%  0.00%  0.00% 0 VLAN Manager
  38          0       2       0  0.00%  0.00%  0.00% 0 AAA Dictionary R
  39          0       2       0  0.00%  0.00%  0.00% 0 AAA Server
  40          0       1       0  0.00%  0.00%  0.00% 0 AAA ACCT Proc
  41          0       1       0  0.00%  0.00%  0.00% 0 ACCT Periodic Pr
  42       296    112    2642  0.00%  0.00%  0.00% 0 CDP Protocol
  43    15599    3068    5084  0.23%  0.22%  0.17% 0 IP Input
  44          0       1       0  0.00%  0.00%  0.00% 0 ICMP event handl
  45          4       4    1000  0.00%  0.00%  0.00% 0 MOP Protocols
  46          0       3       0  0.00%  0.00%  0.00% 0 PPP Hooks
  47          0       1       0  0.00%  0.00%  0.00% 0 SSS Manager
  48       40    139       287  0.00%  0.00%  0.00% 0 SSS Test Client
  49          0       1       0  0.00%  0.00%  0.00% 0 VPDN call manage
  50          0       1       0  0.00%  0.00%  0.00% 0 X.25 Encaps Mana
  51       292       43    6790  0.00%  0.00%  0.00% 0 IP Background
  52       20       23       869  0.00%  0.00%  0.00% 0 IP RIB Update
  53          0       2       0  0.00%  0.00%  0.00% 0 PPP IP Route
  54          0       2       0  0.00%  0.00%  0.00% 0 PPP IPCP
  55          0       1       0  0.00%  0.00%  0.00% 0 Asy FS Helper
  56       9607    1680    5718  0.15%  0.11%  0.10% 0 CEF process
  57       116    119       974  0.00%  0.00%  0.00% 0 TCP Timer
  58       32       3    10666  0.00%  0.00%  0.00% 0 TCP Protocols
  59          0       1       0  0.00%  0.00%  0.00% 0 COPS
  60          0       1       0  0.00%  0.00%  0.00% 0 SNMP Timers
  61       68       2    34000  0.00%  0.00%  0.00% 0 SCTP Main Proces
  62          0       1       0  0.00%  0.00%  0.00% 0 IUA Main Process
  63       728    998       729  0.00%  0.00%  0.00% 0 RUDPV1 Main Proc
  64          0       1       0  0.00%  0.00%  0.00% 0 bsm_timers
  65       1319    1000    1319  0.00%  0.00%  0.00% 0 bsm_xmt_proc
  66          0       1       0  0.00%  0.00%  0.00% 0 Socket Timers
  67       45       18    2500  0.00%  0.00%  0.00% 0 DHCPD Receive
  68          4       2    2000  0.00%  0.00%  0.00% 0 Dialer Forwarder
  69       176       19    9263  0.00%  0.01%  0.00% 0 Adj Manager
  70       60       9    6666  0.00%  0.00%  0.00% 0 HTTP CORE
  71          0       18       0  0.00%  0.00%  0.00% 0 IP Cache Ager
  72          0       1       0  0.00%  0.00%  0.00% 0 RARP Input
  73          0       1       0  0.00%  0.00%  0.00% 0 PAD InCall
  74          0       2       0  0.00%  0.00%  0.00% 0 X.25 Background
  75          0       2       0  0.00%  0.00%  0.00% 0 PPP Bind
  76          0       2       0  0.00%  0.00%  0.00% 0 PPP SSS
  77       20       43       465  0.00%  0.00%  0.00% 0 CRM_CALL_UPDATE_
  78          0       2       0  0.00%  0.00%  0.00% 0 ENABLE AAA
  79          0       2       0  0.00%  0.00%  0.00% 0 LINE AAA
  80          0       2       0  0.00%  0.00%  0.00% 0 LOCAL AAA
  82          0       2       0  0.00%  0.00%  0.00% 0 TPLUS
  83       818    1625       503  0.00%  0.00%  0.00% 0 Inline Power
  84          0       1       0  0.00%  0.00%  0.00% 0 PM Callback
  85       40       36    1111  0.00%  0.00%  0.00% 0 CEF Scanner
  86          0       2       0  0.00%  0.00%  0.00% 0 AAA SEND STOP EV
  87          0       1       0  0.00%  0.00%  0.00% 0 Syslog Traps
  88          0       1       0  0.00%  0.00%  0.00% 0 VPDN Scal
  89       6598    8999       733  0.00%  0.06%  0.05% 0 fastblk backgrou
  90          0       9       0  0.00%  0.00%  0.00% 0 DHCPD Timer
  91       40    279       143  0.00%  0.00%  0.00% 0 DHCPD Database

ppp2 · 发表于 2009-7-20 09:30:19

取消访问控制列表后，CPU使用率降到50%左右，
access-list 101 deny icmp any any
access-list 101 deny tcp any any eq 445
access-list 101 deny udp any any eq 445
access-list 101 deny tcp any eq 445 any
access-list 101 deny udp any eq 445 any
access-list 101 deny tcp any any eq 135
access-list 101 deny udp any any eq 135
access-list 101 deny tcp any eq 135 any
access-list 101 deny udp any eq 135 any
access-list 101 deny tcp any eq 139 any
access-list 101 deny tcp any eq exec any
access-list 101 deny tcp any any eq exec
access-list 101 permit ip any any

ppp2 · 发表于 2009-7-20 09:30:50

CPU utilization for five seconds: 51%/48%; one minute: 47%; five minutes: 48%
PID Runtime(ms) Invoked    uSecs 5Sec 1Min 5Min TTY Process
1          0       1       0  0.00%  0.00%  0.00% 0 Chunk Manager
2       8448    701    12051  0.00%  0.00%  0.00% 0 Load Meter
3       280    112    2500  2.15%  0.19%  0.04%  66 Virtual Exec
4    15094    544    27746  0.00%  0.05%  0.05% 0 Check heaps
5          8       4    2000  0.00%  0.00%  0.00% 0 Pool Manager
6          0       1       0  0.00%  0.00%  0.00% 0 AAA_SERVER_DEADT
7          0       2       0  0.00%  0.00%  0.00% 0 Timers
8       28    120       233  0.00%  0.00%  0.00% 0 Environmental mo
9       6208    746    8321  0.07%  0.02%  0.00% 0 ARP Input
  10          4       2    2000  0.00%  0.00%  0.00% 0 ATM Idle Timer
  11          0       2       0  0.00%  0.00%  0.00% 0 AAA high-capacit
  12          0       2       0  0.00%  0.00%  0.00% 0 DDR Timers
  13          4       2    2000  0.00%  0.00%  0.00% 0 Entity MIB API
  14       1899    177    10728  0.00%  0.00%  0.00% 0 HC Counter Timer
  15          0       2       0  0.00%  0.00%  0.00% 0 Serial Backgroun
  16       6014    3366    1786  0.00%  0.00%  0.00% 0 GraphIt
  17          0       2       0  0.00%  0.00%  0.00% 0 Dialer event
  18          0       1       0  0.00%  0.00%  0.00% 0 SERIAL A'detect
  19          0       1       0  0.00%  0.00%  0.00% 0 Critical Bkgnd
  20       2321    641    3620  0.00%  0.00%  0.00% 0 Net Background
  21          0       7       0  0.00%  0.00%  0.00% 0 Logger
  22       1506    3363       447  0.07%  0.01%  0.00% 0 TTY Background
  23       5656    3374    1676  0.00%  0.00%  0.00% 0 Per-Second Jobs
  24          0       1       0  0.00%  0.00%  0.00% 0 AggMgr Process
  25          0       1       0  0.00%  0.00%  0.00% 0 dev_device_inser
  26          0       1       0  0.00%  0.00%  0.00% 0 dev_device_remov
  27          0       1       0  0.00%  0.00%  0.00% 0 sal_dpc_process
  28          0       1       0  0.00%  0.00%  0.00% 0 ARL Table Manage
  29          0       2       0  0.00%  0.00%  0.00% 0 ESWILPPM
  30          0       2       0  0.00%  0.00%  0.00% 0 SM Monitor
  31       829    742    1117  0.00%  0.00%  0.00% 0 Net Input
  32       1519    701    2166  0.00%  0.00%  0.00% 0 Compute load avg
  33       9281       61    152147  0.00%  0.02%  0.04% 0 Per-minute Jobs
  34          4       2    2000  0.00%  0.00%  0.00% 0 DTP Protocol
  35       1623    3366       482  0.00%  0.00%  0.00% 0 PI MATM Aging Pr
  36       168    353       475  0.00%  0.00%  0.00% 0 EtherChnl
  37          4       2    2000  0.00%  0.00%  0.00% 0 VLAN Manager
  38          0       2       0  0.00%  0.00%  0.00% 0 AAA Dictionary R
  39          0       2       0  0.00%  0.00%  0.00% 0 AAA Server
  40          0       1       0  0.00%  0.00%  0.00% 0 AAA ACCT Proc
  41          0       1       0  0.00%  0.00%  0.00% 0 ACCT Periodic Pr
  42       684    361    1894  0.00%  0.00%  0.00% 0 CDP Protocol
  43    58670    5633    10415  0.23%  0.11%  0.08% 0 IP Input
  44          0       1       0  0.00%  0.00%  0.00% 0 ICMP event handl
  45          4       8       500  0.00%  0.00%  0.00% 0 MOP Protocols
  46          0       3       0  0.00%  0.00%  0.00% 0 PPP Hooks
  47          0       1       0  0.00%  0.00%  0.00% 0 SSS Manager
  48       80    473       169  0.00%  0.00%  0.00% 0 SSS Test Client
  49          0       1       0  0.00%  0.00%  0.00% 0 VPDN call manage
  50          0       1       0  0.00%  0.00%  0.00% 0 X.25 Encaps Mana
  51       955       86    11104  0.00%  0.00%  0.00% 0 IP Background
  52       68       65    1046  0.00%  0.00%  0.00% 0 IP RIB Update
  53          0       2       0  0.00%  0.00%  0.00% 0 PPP IP Route
  54          0       2       0  0.00%  0.00%  0.00% 0 PPP IPCP
  55          0       1       0  0.00%  0.00%  0.00% 0 Asy FS Helper
  56    46855    5324    8800  0.07%  0.04%  0.05% 0 CEF process
  57       268    590       454  0.00%  0.01%  0.00% 0 TCP Timer
  58       40       4    10000  0.00%  0.00%  0.00% 0 TCP Protocols
  59          0       1       0  0.00%  0.00%  0.00% 0 COPS
  60          0       1       0  0.00%  0.00%  0.00% 0 SNMP Timers
  61       68       2    34000  0.00%  0.00%  0.00% 0 SCTP Main Proces
  62          0       1       0  0.00%  0.00%  0.00% 0 IUA Main Process
  63       2349    3371       696  0.00%  0.00%  0.00% 0 RUDPV1 Main Proc
  64          0       1       0  0.00%  0.00%  0.00% 0 bsm_timers
  65       2737    3374       811  0.00%  0.00%  0.00% 0 bsm_xmt_proc
  66          0       1       0  0.00%  0.00%  0.00% 0 Socket Timers
  67       193       57    3385  0.00%  0.00%  0.00% 0 DHCPD Receive
  68          4       2    2000  0.00%  0.00%  0.00% 0 Dialer Forwarder
  69       520       61    8524  0.07%  0.00%  0.00% 0 Adj Manager
  70       96       25    3840  0.00%  0.00%  0.00% 0 HTTP CORE
  71          4       60       66  0.00%  0.00%  0.00% 0 IP Cache Ager
  72          0       1       0  0.00%  0.00%  0.00% 0 RARP Input
  73          0       1       0  0.00%  0.00%  0.00% 0 PAD InCall
  74          0       2       0  0.00%  0.00%  0.00% 0 X.25 Background
  75          0       2       0  0.00%  0.00%  0.00% 0 PPP Bind
  76          0       2       0  0.00%  0.00%  0.00% 0 PPP SSS
  77       96    144       666  0.00%  0.00%  0.00% 0 CRM_CALL_UPDATE_
  78          0       2       0  0.00%  0.00%  0.00% 0 ENABLE AAA
  79          0       2       0  0.00%  0.00%  0.00% 0 LINE AAA
  80          0       2       0  0.00%  0.00%  0.00% 0 LOCAL AAA
  82          0       2       0  0.00%  0.00%  0.00% 0 TPLUS
  83       1806    5514       327  0.00%  0.00%  0.00% 0 Inline Power
  84          0       1       0  0.00%  0.00%  0.00% 0 PM Callback
  85       65    123       528  0.00%  0.00%  0.00% 0 CEF Scanner
  86          0       2       0  0.00%  0.00%  0.00% 0 AAA SEND STOP EV
  87          0       1       0  0.00%  0.00%  0.00% 0 Syslog Traps
  88          0       1       0  0.00%  0.00%  0.00% 0 VPDN Scal
  89    15804    31668       499  0.00%  0.02%  0.00% 0 fastblk backgrou
  90       16       30       533  0.00%  0.00%  0.00% 0 DHCPD Timer
  91       1169    993    1177  0.00%  0.00%  0.00% 0 DHCPD Database

ppp2 · 发表于 2009-7-21 08:55:07

查了查，只要添加
access-list 101 deny icmp any any
这一句，CPU使用率立码大幅上升

sailor · 发表于 2009-7-21 09:50:18

先show下该ACL有多少数据包匹配,
然后利用sniffer对该接口做分析应该就可以知道了
下次你可以利用该命令show proc cpu | e 0.00 可以很快的查看到哪个进程占用的资源这样会更好些,要不然眼睛都看大了.