From: raul raul (juvenn@hotmail.com)
Date: Wed Sep 24 2008 - 07:20:13 ART
HI ;
I have this problem
after i apply the cbac preventing dos attack why my cpu hit almost 100 %
i did use internetwork workbook as guide
CPU utilization for five seconds: 99%/7%; one minute: 99%; five minutes: 99%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
248 15993328 594076 26921 91.59% 90.31% 89.13% 0 IP NAT Ager
this is my config :
interface GigabitEthernet0/0
ip address x.x.x.x
ip access-group Inbound in
ip inspect all_appfw out
ip nat outside
ip inspect audit-trailip inspect max-incomplete high 20000000ip inspect max-incomplete low 1100ip inspect one-minute high 100000000ip inspect one-minute low 1100ip inspect dns-timeout 10ip inspect tcp max-incomplete host 100000 block-time 0ip inspect name all_appfw icmp router-trafficip inspect name all_appfw tcp router-trafficip inspect name all_appfw udp router-trafficip inspect name all_appfw httpip inspect name all_appfw ftpip inspect name all_appfw https
This archive was generated by hypermail 2.1.4 : Sat Oct 04 2008 - 09:26:19 ART