>[оверквотинг удален]
> sh proc cpu sort (достаточно первых 15-20 строк)
> sh proc cpu hist
> sh ip inat tran
> sh arp
> 2. Избавтесь от DNS на маршрутизаторе. Судя по конфигу у вас внутри
> все равно есть DNS сервер - используйте его, не надо делать
> из маршрутизатора DNS сервер, это не его задачи).
> no ip dns service
> 3. Если уверены, что это действительно imap, то попробуйте поставить rate-limit (или
> шейпинг) на трафик по 143 порту.
Перегрузил удаленно. Потихоньку начал тормозить..
Syslog logging: enabled (0 messages dropped, 27 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 660 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level warnings, 8 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: level informational, 687 message lines logged
Logging Source-Interface: VRF Name:
Log Buffer (51200 bytes):
*Mar 15 17:46:58.195: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to up
*Mar 15 17:48:39.727: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to up
*Mar 15 17:48:40.383: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to down
*Mar 15 17:48:42.495: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to up
*Mar 15 17:48:48.663: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=84.47.156.236
, prot=50, spi=0x5D10D116(1561383190), srcaddr=84.47.169.67, input interface=FastEthernet4
*Mar 15 17:49:05.571: %CRYPTO-4-IKMP_NO_SA: IKE message from 84.47.169.67 has no SA and is not an initialization offer
*Mar 15 17:50:38.819: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1824549975 1400 bytes is out-of-order; expected seq:1
824526855. Reason: TCP reassembly queue overflow - session 192.168.3.143:49945 to 37.140.166.230:80
*Mar 15 17:51:05.447: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:787126786 1064 bytes is out-of-order; expected seq:78
7105282. Reason: TCP reassembly queue overflow - session 192.168.3.143:49955 to 37.140.166.230:80
----------------------------------
CPU utilization for five seconds: 99%/2%; one minute: 99%; five minutes: 96%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
307 1578328 27527 57337 95.40% 95.04% 91.38% 0 DNS Server
117 31112 40485 768 0.74% 0.89% 0.88% 0 IP Input
308 71052 25506 2785 0.74% 0.94% 1.10% 0 DNS Server Input
5 5548 452 12274 0.37% 0.11% 0.13% 0 Check heaps
83 24996 8762 2852 0.22% 0.02% 0.11% 0 COLLECT STAT COU
2 656 560 1171 0.07% 0.02% 0.00% 0 Load Meter
30 4632 11641 397 0.07% 0.14% 0.15% 0 ARP Input
295 916 2877 318 0.07% 0.05% 0.05% 0 Per-Second Jobs
8 0 2 0 0.00% 0.00% 0.00% 0 Timers
9 0 72 0 0.00% 0.00% 0.00% 0 WATCH_AFS
10 0 1 0 0.00% 0.00% 0.00% 0 License Client N
11 0 1 0 0.00% 0.00% 0.00% 0 Image License br
13 0 567 0 0.00% 0.00% 0.00% 0 IPC Event Notifi
12 2188 48 45583 0.00% 0.08% 0.05% 0 Licensing Auto U
15 0 1 0 0.00% 0.00% 0.00% 0 IPC Session Serv
--------------------
impex 09:38:46 PM Tuesday Mar 15 2016 Moscow
11111 111 111111
990000099999999000999999999999999990000009999999999999999999
990000099999999000999999999999999990000009999999999999999999
100 ************************************************************
90 ************************************************************
80 ************************************************************
70 ************************************************************
60 ************************************************************
50 ************************************************************
40 ************************************************************
30 ************************************************************
20 ************************************************************
10 ************************************************************
0....5....1....1....2....2....3....3....4....4....5....5....6
0 5 0 5 0 5 0 5 0 5 0
CPU% per second (last 60 seconds)
111111111
000000000999999998999888877786656565444333552888
000000000999967468613829677402582202752642113112
100 #########****** * *
90 #############********* **
80 #################*##******* * ***
70 #########################**** * ***
60 #############################**** * ***
50 #################################*#*** ** ***
40 ######################################** ** ***
30 ##########################################** *#*
20 ################################################
10 ################################################
0....5....1....1....2....2....3....3....4....4....5....5....6
0 5 0 5 0 5 0 5 0 5 0
CPU% per minute (last 60 minutes)
* = maximum CPU% # = average CPU%
100
90
80
70
60
50
40
30
20
10
0....5....1....1....2....2....3....3....4....4....5....5....6....6....7..
0 5 0 5 0 5 0 5 0 5 0 5 0
CPU% per hour (last 72 hours)
* = maximum CPU% # = average CPU%
-----------------------------------------------------------------