CISCO 2851为什么CPU跑满了

2007-05-28, 16:15
可以肯定是被攻击了，只是不知道被怎么攻击了，请各位大虾帮着看看
cisco#sh proc
CPU utilization for five seconds: 99%/98%; one minute: 99%; five minutes: 76%
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
1 Cwe 400C41F8 0 2 0 5556/6000 0 Chunk Manager
2 Csp 4009A7D4 14480 4279 3383 2560/3000 0 Load Meter
4 Lst 400C154C 28444 2664 10677 5264/6000 0 Check heaps
5 Cwe 400C9750 68 14 4857 5304/6000 0 Pool Manager
6 Mst 40A756DC 0 2 0 5520/6000 0 Timers
7 Mwe 4012D870 0 357 0 5672/6000 0 IPC Dynamic Cach
8 Mwe 40121D8C 0 1 0 5588/6000 0 IPC Zone Manager
9 Mwe 401218CC 736 21378 34 5700/6000 0 IPC Periodic Tim
10 Mwe 4012176C 220 21377 10 5564/6000 0 IPC Deferred Por
11 Mwe 40121ACC 0 1 0 5536/6000 0 IPC Seat Manager
12 Mwe 40124FC0 0 1 0 5600/6000 0 IPC BackPressure
13 Mwe 4027C12C 0 1 011556/12000 0 OIR Handler
14 Mwe 403249A4 0 1 023476/24000 0 Crash writer
15 Msi 40427BB0 1320 714 1848 5528/6000 0 Environmental mo
16 Mwe 40832284 8284 12188 679 4628/6000 0 ARP Input
17 Mwe 4088709C 0 2 0 5516/6000 0 ATM Idle Timer
18 Mwe 40A30EC8 0 2 0 5508/6000 0 AAA high-capacit
19 Lwe 40A35F90 0 1 0 5736/6000 0 AAA_SERVER_DEADT
20 Mwe 40A9C89C 0 1 011540/12000 0 Policy Manager
21 Mwe 40B42734 0 2 0 5508/6000 0 DDR Timers
22 Lwe 40B9BCE8 0 2 0 5244/6000 0 Entity MIB API
23 Mwe 40CCCD84 112 4278 26 5660/6000 0 HC Counter Timer
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
24 Mwe 41273634 0 2 0 5520/6000 0 Serial Backgroun
25 Mwe 413B1310 0 1 0 5724/6000 0 RO Notify Timers
26 Mwe 4015376C 0 2 0 5532/6000 0 SMART
27 Msp 40ACC1E8 192 21400 8 5568/6000 0 GraphIt
28 Mwe 40B67848 0 2 011524/12000 0 Dialer event
29 Mwe 41279DAC 0 1 0 5580/6000 0 SERIAL A'detect
30 Mwe 414C364C 0 2 011544/12000 0 XML Proxy Client
31 M* 0 5108 289 17674 9956/12000322 Virtual Exec
32 Mwe 4014FF2C 0 1 0 2528/3000 0 Inode Table Dest
33 Cwe 413A5ADC 0 1 0 5592/6000 0 Critical Bkgnd
34 Mwe 4033C884 3924 6447 60810216/12000 0 Net Background
35 Mwe 4033CB14 0 2 011408/12000 0 IDB Work
36 Lwe 40A65508 4 7 57110400/12000 0 Logger
37 Mwe 40A8E278 700 21384 32 4792/6000 0 TTY Background
38 Msp 4034FC60 3632 21422 169 8464/9000 0 Per-Second Jobs
39 Msi 4025EFB8 24 1428 16 5540/6000 0 c2800 Periodic
40 Mwe 401901F8 0 1 0 5740/6000 0 AggMgr Process
41 Mwe 40110D84 0 1 0 2604/3000 0 dev_device_inser
42 Mwe 40110DCC 0 1 0 2608/3000 0 dev_device_remov
43 Mwe 401E4A40 0 1 011580/12000 0 sal_dpc_process
44 Mwe 401EB73C 0 1 0 5580/6000 0 ARL Table Manage
45 Hwe 4043AEBC 0 2 0 5536/6000 0 ESWPPM
46 Mwe 40444658 0 2 0 2508/3000 0 Eswilp Storm Con
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
47 Hwe 40456DE0 0 2 0 5536/6000 0 ESWILPPM
48 Mwe 4047D260 0 2 0 2364/3000 0 Eswilp Storm Con
49 Msp 40624FBC 464 85571 5 5520/6000 0 Netclock Backgro
50 Mwe 4065D6C4 0 2 0 5524/6000 0 SM Monitor
52 Msi 404835A0 152 21392 7 5524/6000 0 Ether-Switch RBC
53 Hwe 40675CCC 0 1 0 2568/3000 0 IGMP Snooping Pr
54 Hwe 40675BE4 0 1 0 2576/3000 0 IGMP Snooping Re
55 Msi 406AE16C 28 715 39 5528/6000 0 Call Management
56 Mwe 403BBF68 0 2 0 5492/6000 0 dot1x
57 Mwe 40416670 0 2 0 5476/6000 0 DTP Protocol
58 Msi 40628610 332 21392 15 5568/6000 0 PI MATM Aging Pr
59 Msi 406F9ECC 16 2142 7 5564/6000 0 EtherChnl
60 Mwe 407484C8 0 1 011584/12000 0 L2X Data Daemon
61 Mwe 40809DF0 0 2 0 5532/6000 0 AAA Dictionary R
62 Mwe 40813C30 0 2 0 5508/6000 0 AAA Server
63 Mwe 40816584 0 1 0 5700/6000 0 AAA ACCT Proc
64 Mwe 40816784 0 1 0 5708/6000 0 ACCT Periodic Pr
65 Mwe 40989748 820 2636 311 4932/6000 0 CDP Protocol
66 Mrd 40D6BE14 21880 36159 60510400/12000 0 IP Input
67 Mwe 40D95CB4 0 1 0 5720/6000 0 ICMP event handl
68 Mwe 40F8CDA8 0 4 0 5524/6000 0 TurboACL
69 Hwe 40F8CF30 0 2 0 5540/6000 0 TurboACL chunk
70 Mwe 41004EDC 4 38 105 5400/6000 0 MOP Protocols
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
71 Mwe 413C4C3C 0 3 011544/12000 0 PPP Hooks
73 Mwe 412D51C0 0 1 011712/12000 0 SSS Manager
74 Mwe 412D8B9C 8 2855 211636/12000 0 SSS Test Client
75 Mwe 412E2CE4 0 1 0 5584/6000 0 SSS Feature Mana
76 Mwe 412E2DA0 852 83585 10 5672/6000 0 SSS Feature Time
77 Mwe 413ED7E8 0 1 011676/12000 0 VPDN call manage
78 Mwe 4143593C 0 1 011712/12000 0 L2X Socket proce
79 Mwe 413FEED4 0 1 011552/12000 0 L2X SSS manager
80 Mwe 4140C790 0 2 011508/12000 0 L2TP mgmt daemon
81 Lwe 41490E84 0 1 0 5252/6000 0 X.25 Encaps Mana
82 Mwe 40F18C08 888 547 1623 7964/9000 0 IP Background
83 Mwe 40F20278 144 360 400 8152/9000 0 IP RIB Update
84 Mwe 413C4C3C 0 2 011540/12000 0 PPP IP Route
85 Mwe 413C4C3C 0 2 011540/12000 0 PPP IPCP
86 Hwe 40F7FDAC 152 21380 7 5652/6000 0 Socket Timers
87 Mrd 40F9F63C 520 1088 47710984/12000 0 TCP Timer
88 Lwe 40FA48CC 128 10 1280010904/12000 0 TCP Protocols
89 Mwe 40A06784 0 1 023564/24000 0 COPS
90 Lwe 40BEF09C 14456 32406 446 4936/6000 0 CEF process
91 Mwe 40515EEC 0 2 0 4836/6000 0 L2MM
92 Mwe 4051096C 0 1 0 5568/6000 0 MRD
93 Mwe 4050F2C8 0 1 0 5556/6000 0 IGMPSN
94 Mwe 412AEB9C 0 1 0 5700/6000 0 SNMP Timers
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
95 Mwe 4124A5C0 0 2 0 5316/6000 0 SCTP Main Proces
96 Mwe 4092B618 0 1 0 5592/6000 0 IUA Main Process
97 Mwe 4123DBAC 884 21400 41 5532/6000 0 RUDPV1 Main Proc
98 Mwe 409331F4 0 1 0 5720/6000 0 bsm_timers
99 Msi 409301D4 420 21396 19 5676/6000 0 bsm_xmt_proc
100 Mwe 40F76860 13600 42762 31810436/12000 0 DHCPD Receive
101 Mwe 40B62FE8 0 2 0 5520/6000 0 Dialer Forwarder
102 Lsi 40DCDB14 40 357 112 5576/6000 0 IP Cache Ager
103 Mwe 40C121A4 920 361 2548 8444/9000 0 Adj Manager
104 Mwe 40CFCC58 8 73 109 8496/9000 0 HTTP CORE
105 Mwe 40DAE704 0 1 0 5680/6000 0 IP Traceroute
106 Mwe 40F18A1C 0 1 0 5584/6000 0 RARP Input
107 Hwe 4109DEAC 0 1 0 5544/6000 0 PAD InCall
108 Mwe 41492D10 0 2 011392/12000 0 X.25 Background
109 Mwe 413C4C3C 0 2 0 5544/6000 0 PPP Bind
110 Mwe 410EAA50 0 2 0 5504/6000 0 PPP SSS
111 Mwe 40735BB8 4 858 4 5460/6000 0 CRM_CALL_UPDATE_
112 Mwe 40B99D34 0 2 0 5540/6000 0 ENABLE AAA
113 Mwe 40BA8308 0 1 0 5580/6000 0 EM Background Pr
114 Mwe 40FB4E98 0 1 0 5740/6000 0 Key chain liveke
115 Mwe 40FD350C 0 2 0 5544/6000 0 LINE AAA
116 Mwe 40FE254C 0 2 0 5544/6000 0 LOCAL AAA
117 Mwe 4136356C 0 2 0 5380/6000 0 TPLUS
PID QTy PC Runtime (ms) Invoked uSecs Stacks TTY Process
118 Mwe 406A25B4 0 1 0 5568/6000 0 PM Callback
119 Mwe 40B1A894 4 179 22 5688/6000 0 DHCPD Timer
120 Mwe 40A2989C 0 2 0 5508/6000 0 AAA SEND STOP EV
121 Msi 411CB2DC 16 2142 7 5560/6000 0 RMON Recycle Pro
122 Mwe 411D5754 0 2 0 5540/6000 0 RMON Deferred Se
123 Mwe 4134C8E8 0 1 0 5608/6000 0 Syslog Traps
124 Mwe 40703BA4 12 2 6000 3480/6000 0 VLAN Manager
125 Lwe 40D56B74 0 4 011544/12000 0 Syslog
126 Mwe 4143F2C4 0 1 0 5552/6000 0 VPDN Scal
127 Hwe 4034F760 3784 75880 49 5568/6000 0 Net Input
128 Msp 40344110 440 4288 102 5548/6000 0 Compute load avg
129 Msp 4034FCC0 16012 381 42026 5604/6000 0 Per-minute Jobs
130 Lwe 40BEE864 68 744 91 5324/6000 0 CEF Scanner
131 Hwe 407C90F4 0 1 023216/24000 0 tHUB
132 Hwe 407C90F4 0 2 011280/12000 0 tENM
133 Msi 40B22320 0 363 0 5060/6000 0 DHCPD Database



网友1：
就是流量过大，有啥大惊小怪的...

看看是谁，拔网线...

网友2：

你做了NAT了吧。。。当 CPU 90多的时候你打CLEAR NAT
清除下NAT的转换记录然后在看看CPU使用情况。如果是这个问题，。那么你就把NAT的TCP，UDP。DNS等等的TIME OUT改小点

网友3：

HOHO保证是这个NAT搞地，偶以前遇到过2次这个样子地问题给3640干的4-5天死一次