Skinny Msg Server CPU Peak

Question

Hi there,
I have some problems in a Cisco UC540 with "Skinny Msg Server" having some CPU peaks. During peak all services are unavailable (calls, intermet access, etc. - this UC540 is our internet gateway):
  100                                              ********** ****
   90           **********                         ***************
   80           **********                         ***************
   70      ***************               *************************
   60      ***************               *************************
   50      ***************               *************************
   40      ***************               *************************
   30      ***************               *************************
   20      ********************     ******************************
   10 *************************     ******************************
     0....5....1....1....2....2....3....3....4....4....5....5....6
               0    5    0    5    0    5    0    5    0    5    0
               CPU% per second (last 60 seconds)
  100 *        **           *
   90 *        **           *
   80 *        **           *
   70 #        **           *
   60 #  *     **           *
   50 #  *     **           *
   40 #  *     **           *        *                   *
   30 #  * ** *##     *     *    * ***  *  ***           * *
   20 #**#*****##** **** ***# **** *********** ********* ****** **
   10 ####*########*####*####*####*####*####*#*####*####*#*##*#*##
     0....5....1....1....2....2....3....3....4....4....5....5....6
               0    5    0    5    0    5    0    5    0    5    0
               CPU% per minute (last 60 minutes)
              * = maximum CPU%   # = average CPU%
  100 *                                             *                **
   90 *                                             *                **
   80 *                                             *                **
   70 *                  *                          *                *****  *
   60 *                  *            *             *                ****** **
   50 *     ***  *   *   *           ***            *               ******* **
   40 *     *** **   *   ** *        ***  *    **   **       ***    **********
CPU utilization for five seconds: 72%/26%; one minute: 80%; five minutes: 59%
PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
127     5803268    11898184        487 27.64% 43.85% 28.49%   0 Skinny Msg Serve
352         356          55       6472  5.82%  0.46%  0.09%  67 SSH Process
240      197724      327994        602  2.82%  0.43%  0.27%   0 Crypto IKMP
118    45398476   121106202        374  2.74%  2.06%  2.38%   0 IP Input
   6     3598144      375574       9580  1.13%  0.33%  0.28%   0 Check heaps
  77       41396        8074       5127  1.05%  0.10%  0.02%   0 crypto engine pr
What could be the problem? What can i do to avoid this problem?
Thanks in advance for your support.
Best regards,
V

Answer 1

Hi Paolo,
First of all thanks for your reply.
1) Version 15.1(2)T2
2)
interface FastEthernet0/0
description $FW_OUTSIDE$
ip address XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX
ip access-group 102 in
ip nat outside
ip inspect SDM_MEDIUM out
ip virtual-reassembly in
duplex auto
speed auto
service-policy input sdmappfwp2p_SDM_MEDIUM
end
UC540#show ip access-lists 102
Extended IP access list 102
     [...permits omitted...]
    140 deny ip 192.168.100.0 0.0.0.255 any
     [...permits omitted...]    
    200 deny ip 10.0.0.0 0.255.255.255 any
    210 deny ip 172.16.0.0 0.15.255.255 any
    220 deny ip 192.168.0.0 0.0.255.255 any
    230 deny ip 127.0.0.0 0.255.255.255 any
    240 deny ip host 255.255.255.255 any
    250 deny ip host 0.0.0.0 any
    260 deny ip any any log (636 matches)
The internal network is 192.168.100.0/24.
Best regards,
V