juniper ISG2000 CPU 使用率过高的排查方法

juniperISG2000CPU使用率过高的排查方法、CPU利用率历史记录查看nsisg2000(M)->getperformancecpudetailAverageSystemUtilization:28%Last60seconds:59:50*58:4757:4656:54*55:4254:4753:4952:3951:3650:4349:3348:4347:4546:4145:4244:4443:3342:3941:4340:3039:3538:4337:3336:4335:3934:4033:3732:3931:3430:4129:3428:3527:3926:3925:3724:4223:3722:4221:4120:3819:3718:4517:3716:4215:4414:4413:3812:4811:3710:409:468:387:406:465:374:433:462:361:400:46Last60minutes:59:4158:3957:3956:4655:4054:3853:3852:3851:3850:3849:3948:3847:3946:4145:3444:3943:3942:3741:3840:3739:3638:3837:3936:3735:3834:3733:3532:3831:3730:3629:3528:3427:3826:4325:3724:3723:3622:4121:3920:4219:4118:4617:59*16:4015:3814:3313:3912:3811:3510:349:348:387:366:345:344:363:392:391:390:39Last24hours:23:3822:2321:2220:2619:54*18:54*17:50*16:2915:1014:913:912:911:910:99:98:97:106:115:164:463:462:55*1:74**0:53*从设备输出显示中可以看到，在过去的24小时中，曾经出现过CPU利用率接近一个较高水平的情况。Juniper官方文档解释如下：•Asingleasterisk*indicatestheCPUisnearingawarningthreshold.Itismarkedwhenutilizationis三50%&W70%.

Doubleasterisks**indicatestotheadministratorthatCPUisnearingahighlevel;theadministratorshouldinvestigatethecauseofwhyCPUisnearingthislevel.Itismarkedwhenutilization三70%&W85%.Tripleasterisks***indicatestheCPUutilizationishigh;theadministratorshouldinvestigatethecauseofwhyCPUishigh.Itismarkedwhenutilizationis三85%.二、防火墙日志查看SystemEventLog(Currentsystemtime:Wed,2June201022:47:41)DateTimeModulelevelTypeDescription2010-06-0222:47:28systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from3:12602010-06-0221:56:03systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from3:31112010-06-0221:55:41systemwarn00515AdminusernetscreenhasloggedoutviaTelnetfrom3:29402010-06-0221:55:41telnet-cmd:21.2010-06-0221:52:38adminnetscreen.2010-06-0221:52:10netscreen.2010-06-0221:51:49netscreen.systeminfo007672010-06-0221:55:41telnet-cmd:21.2010-06-0221:52:38adminnetscreen.2010-06-0221:52:10netscreen.2010-06-0221:51:49netscreen.2010-06-0221:51:31systemwarn00515AdminusernetscreenhasloggedonviaTelnetfrom3:29402010-06-0220:10:40systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from6:28932010-06-0220:03:15systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from3:16752010-06-0219:48:42systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from6:24442010-06-0219:17:13systemwarn00519Adminuser"netscreen"loggedinforWeb(http)management(port80)from3:13212010-06-0111:38:47systeminfo00767Environmentvariable.hash-segchangedto4(-685206584).＜略＞系统日志输出无异常告警。由于ISG2000防火墙有2个CPU,—个是用来处理流量的，另一个是用来处理任务的，所以要确认CPU利用率较高的原因，首先得搞清楚是因为用户流量产生的，还是因为防火墙处理某些任务所产生的。综合设备日志和CPU利用率相关信息判断，该问题有可能是处理某些任务产生的一个突发事件，不是防火墙硬件故障导致的。目前CPU利用率在正常范围（平均为28%），因此建议先观察一段时间。如果防火墙CPU利用率再次出现突发异常峰值，需要抓取以下信息，以便于故障排除:一、查看CPU利用率，执行以下操作：getperfcpudetail二、查看任务（task）对CPU的利用率，请执行以下步骤：settask"sessionscan"debuggettask"sessionscan"三、查看流（flow）对CPU的利用率，请执行以下步骤：setfprofilepacketenablesetfprofilepacketstartgetf