Wmiprvse.exe and high cpu with tzres.dll on 2008 R2

This sounds like a fairly common problem but I am about to go crazy troubleshooting this.  I have a Windows 2008 R2 Standard 64-bit server running RDS session host role as a virtual machine on VMware ESXi 5.0 update 2 with the latest patches and the
latest VMware Tools loaded.  It has an average of about 15 users on it at any given time.  I see CPU start to increase after a while and notice the WmiPrvSE.exe processing (running as Network Service) consuming any available cycles.  Running
Process Monitor I see a bunch of references to tzres.dll stream by.  I enabled WMI Logging and checked but it seems to be a select statement for all processes coming from PID 0.  I tried using NetMon and looking but it doesn't seem to be coming from
a network endpoint.  I looked at the time zone patch from December 2010 as mentioned in other threads but that doesn't install because I guess I am patched past it (Windows Update only has a Silverlight patch remaining).  I tried to look at the threads
through Process Explorer and by taking dump of the process and opening it in Windbg but honestly I'm not really sure what I am looking at.  Nothing looked unusual but again, I'm not very good with those tools.  We are not running WSRM or SMS
agent.
Versions:
OS Version:  6.1.7601
Service Pack:  1.0
WMI Version:  7601.17514
C:\Windows\System32\wbem\WinMgmt.exe - 7/13/2009 8:39 PM, version 6.1.7600.16385, size 78.0 KB
C:\Windows\System32\wbem\WmiPrvSE.exe - 11/20/2010 9:24 PM, version 6.1.7601.17514, size 364 KB
C:\Windows\System32\tzres.dll - 11/8/2012 11:45 PM, version 6.1.7601.17994, size 2.00 KB
C:\Windows\System32\tzutil.exe - 11/20/2010 9:24 PM, version 6.1.7601.17514, size 57.0 KB
Any help before I open up a case?

I had the same issue on a 2008 R2 terminal server,, so much research I put into it and not a lot of consistent help on this issue.  I finally ran a
winmgmt.exe /resetrepository  to start the sync over and CPU dropped to normal function.
I have been monitoring it all day and it seems fine, If it comes back I'll set the damn thing on a batch and schedule haha.
Deselo

Similar Messages

  • FPEnumerateExt2 and high CPU with Network Homes

    Hi there, since 10.4 we are fighting against high cpu-load on our network home servers. With 10.4 the problem was delayed_ack which seems to be fixed in 10.5 server. But in Mac OS X 10.5 server the high cpu load isn't gone. Here it seems that FPEnumerateExt2 in the AFP communication is the problem. We extracted this in several network traces. FPEnumerateExt2 is an AFP command to get contents of a directory. The command is sent with a volume id and a directory id (which you can see with ls -li in terminal). The strange part is if we look deeper in this communication. We found that most of the FPEnumerateExt2-commands are sent twice. The first FPEnumerateExt2 is sent and one or two packets later there is a reply with the desired information. But then the FPEnumerateExt2 is sent again to the same volume id and the same directory id and the reply is "Object not found". The directories which FPEnumerateExt2 is asking for are NO tmp files or so which may change. Does anyone know why this is happening? Thanks for help!

    I had the same issue on a 2008 R2 terminal server,, so much research I put into it and not a lot of consistent help on this issue.  I finally ran a
    winmgmt.exe /resetrepository  to start the sync over and CPU dropped to normal function.
    I have been monitoring it all day and it seems fine, If it comes back I'll set the damn thing on a batch and schedule haha.
    Deselo

  • Firefox very slow and high cpu usage!! (all other browse slow too)

    Sorry, I asked it in 'Newbie Corner' , but still no resolved. so I asked here.
    Hi all,
            when i open a website just as www.sohu.com,   my firefox (3.0.3) hang on, then display the web page very slow , and slow scroll , firefox cpu usage nearly about 100.
            I tried some sloution,like modify /etc/enviroment to set MOD_DISABLE_PANGO=1,
    or disable 'tell me if a web site ...' in firefox security option.
    but still slow.
    some people says it's must because flash or some js.
    but when  i try it in windows or ubuntu, it very fast, not like in archlinux.
    so i think some thing wrong in archlinux.  I need your helps.
    thank you.
    p.s.
    1.  pacman is very fast (the speed of wget about 400k/s)
    2.  gnome web browser like firefox , slow and high cpu.
    3.  the list of output of 'locale'  about 11 lines.
    4.  i have already set host name like wiki says.
    5.   the system is  a new system

    http://wiki.archlinux.org/index.php/For … Bumping.27 ??

  • CSS11800 - High CPU with Sticky and L3 rule

    I have a customer who wants to maintain sticky between TCP80 and TCP443, so we selected a L3 content rule.
    content L3_www.ourcustomer.com
    vip address 1.2.3.4
    sticky-mask 255.255.128.0
    add service web004
    add service web005
    add service web006
    sticky-inact-timeout 10
    advanced-balance sticky-srcip
    active
    The problem I see is that without a low inactivity timeout the CPU goes through the roof to 100%. Even with 10 minute inactivity timer it rockets to 60-80% CPU, but at least it isn't locked at 100% (which causes latency and other problems).
    The customer is pushing 12Mbps with on average 5-10K connections. No sticky rejects or collisions and plenty of FCBs available. At any time the average number of used sticky entries is 8-10K.
    I can make the CPU immediately drop like a rock to 1-10% by simply purging the sticky table or by removing sticky from the content rule. As a result I am confident the issue appears to be sticky related. I didn't find any bugs opened on this issue tho. We run sticky for quite a few customers and have rarely, if ever, seen anything like this before.
    I did some testing in production and experienced this high CPU problem with 4.01.44.s, 5.01.69s and 6.10.405 and saw it on a CSS11150 before I moved the customer to a CSS11800 where we experience the same exact issue.
    I have dozens of CSS11150s, CSS11800s, and a few CSS11500 series in production but never experienced this on any version of code before.
    Has anyone seen this before? Due to "shopping cart" issues we need to maintain persistence between 80->443 transitions so I think I am stuck with sticky and a L3 rule.
    Any thoughts would be most appreciated.
    Thanks!
    Mike

    I have also not seen an issue like this. Have you tried with changing the sticky inactivity timeout and did that help. You could find more information on how the entries are removed in the following document.
    http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080094b4b.shtml

  • Major issues with plugincontainer.exe using high cpu freezing firefox 34

    Plugincontainer.exe is ruining my experience with firefox by constantly causing it to freeze due to high cpu use. Please advise of a work around or other solution. Thank you.

    The only solution I have found was to downgrade to Firefox version 30.
    The odd thing is that the high cpu does not happen on all web sites. wsj.com (Wall Street Journal) is fine, but cspan.org is not.
    My PC does not freeze up, but it has a sustained CPU usage of 70 to 80 percent. I am running an Intel Dual Core on Windows XP.
    Is this the case that my CPU is just to slow? This should no be the case since version 30 runs at the regular 15 to 30% usage.
    Forgot to mention that this is the Adobe Flash player that is causing the high CPU readings.
    Thx

  • High number of threads and high CPU usage on a single instance

    Without any apparent reason, in some moments of day the website reports an increment of the HTTP Queue Length from an average of 10/20 queued requests to 100/200 and more.
    In that period of time the Average Response Time increases but the number of the requests on the website don't. Even increasing the instances it doesn't help to resolve the problem (maybe it just reduced it).
    It seems that the problem is not related to the traffic on the site. This issue happens either when the traffic is high or low.
    The autoscaling works well, we don't have peak of traffic but always a slow increasing of requests and the CPU is always below the 50% (memory too). The issue is resolved by the swap of the site and sometimes it's resolve by itself after a while.
    What I discovered when the issue happens, is that there's an instance (just an instance only), that has an high number of threads and CPU usage on the W3WP.exe process and these values are above the mean than the other instances. Eg, instances are around
    50/60 threads and 10/20% of CPU, the instance with the problem has 200 threads and 50/60% of CPU. If I kill the W3WP process on that instance the issue is resolved. 
    I monitored the HTTP requests, I tried the website extension "Diagnostics as service" but I can't discover anything that can help me to understand the problem. Of course, there are many requests that go in timeout but it is a consequences of a
    unresponsive instance.
    On the web hosting plan there are only two sites: the production site and its staging which is used for update of the production only and it's always sleeping. Plus, no webjobs are running on this site.
    What can I do to gather useful information that can help me to understand the reason of this problem?
    Thank you!

    "Does the instance with the high counts receive more traffic than the other instances? Is it possible that the load balancer not
    working the way it should be?"
    How can I get that information? I can't see metrics for a specific instance
    "Does it always happen to the first instance?"
    I will check it better, but in the order given by the Processes panel it's the second instance which has the issue. The scaling is at 2 instances for the most part of the time (it's the minimum).
    Maybe one time it was the 3th instance but I'm not sure, I'll give it more attention.
    " How long do these moment last?"
    The time can be 10 to 30 minutes, but I fix it as soon as I see the problem. It's not the down-scaling to resolve it because in these situations the CPU as well is high so the scaling holds or increases the number of instances.
    "- How often do these moments occurs?"
    It occurs quite often, 2/4 times a week.

  • SCCM 2012 Agent and high CPU utilization.

    We have numerous Windows workstations and servers running with very high CPU utilization. Services are slow to start and login can take an hour. The service running with high CPU is svchost.exe, we determined that it is Windows Management Instrumentation
    that is causing high CPU in svchost.exe.
    If we stop or uninstall the SCCM 2012 Agent, everything calms down on the computer.
    Any ideas as to way this would be?

    Same issue seen on a clients and KB2617858 resolves it. I am deploying using the App model no problem with x86 and x64 hotfixes with requisite OS requirements. Is there a way to configure to only apply to those that it applies to...if that makes sense. I
    ask because my B&C x64 W7Sp1 image does not require it (I have not included it) whereas other non-B&C do - what's the condition or applicability (or non-applicability) if not as listed on the KB..! If I run it one W7 machine it says it doesn't apply
    and isn't already, whereas another it installs..!
    http://support.microsoft.com/kb/2705357:
    To apply this hotfix, you must be running one of the following operating systems:
    Windows 7
    Windows 7 Service Pack 1 (SP1)
    Windows Server 2008 R2
    Windows Server 2008 R2 Service Pack 1 (SP1)
    ..obviously, if a client has the issue it applies :)
    Donald Rumsfeld's 'known unknowns' comes to mind here. Sorry.

  • Server 2008 R2 Terminal Server c0000005 and c0000006 errors with KERNELBASE.dll error in RDP sessions.

    We installed a new Server 2008 R2 server this spring. It is configured as a Terminal Server with 16 Wyse t10 thin clients connecting with RDP. We are a small resort so we run Springer Miller Host and SpaSoft. Ever since moving from PCs to the thin clients
    and TS we have been seeing SpaSoft randomly crash with KERNELBASE.dll errors and also a lot of c0000005 and c0000006 errors. Springer Miller support says its a Microsoft Networking issue so no help there. The company we worked with to install this has no clue
    so I hope to reach out to this community to solve this. I can also open support case with Microsoft Support but I am not sure if they will be of any help. Here are some examples of the errors:
    "Event 1000
    Faulting application name: SpaWin.exe, version: 3.4.0.0, time stamp: 0x2a425e19
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
    Exception code: 0x0eedfade
    Fault offset: 0x0000c42d
    Faulting process id: 0x3718
    Faulting application start time: 0x01cf9ac7922487e9
    Faulting application path: \\spasoft\spaapps\TermServ\SpaWin.exe
    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
    Report Id: cfdcf9a9-06ba-11e4-a5af-000c298d9aa5"
    Also:
    "Faulting application name: VH.EXE, version: 18.80.430.0, time stamp: 0x3f73b447
    Faulting module name: VFP8R.DLL, version: 8.0.0.3117, time stamp: 0x3f73c232
    Exception code: 0xc0000006
    Fault offset: 0x0001d598
    Faulting process id: 0x2bc8
    Faulting application start time: 0x01cf99297ee1742f
    Faulting application path: J:\HOSTPLUS\fxp32\VH.EXE
    Faulting module path: J:\HOSTPLUS\fxp32\VFP8R.DLL
    Report Id: 5fbc65c4-055c-11e4-a5af-000c298d9aa5"
    And:
    "Faulting application name: SpaWin.exe, version: 3.4.0.0, time stamp: 0x2a425e19
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x00000000
    Faulting process id: 0x2aa0
    Faulting application start time: 0x01cf988e6770e619
    Faulting application path: \\spasoft\spaapps\TermServ\SpaWin.exe
    Faulting module path: unknown
    Report Id: 01029179-04b9-11e4-a5af-000c298d9aa5"
    There are no network specific errors in any of the logs. I am thinking that SpaSoft needs to be run as an administrator but I am not sure how to do that in this environment. We have disabled DEP for all but essential Windows processes. All of the firewall
    and AV has been completely disabled, and still getting these errors. Is there a way to run these applications as admin without the user actually being an admin? Should I go ahead and open a Microsoft support case? Thanks

    Hi,
    Thank you for posting in Windows Server Forum.
    Explanation
    The indicated program stopped unexpectedly. The message contains details on which program and module stopped. A matching event with Event ID 1001 might also appear in the event log. This matching event displays information about the specific error that occurred.
    User Action
    If an error report was generated for this error, you might be able to obtain more information about the error by sending the report to Microsoft for analysis.
    Yeah, you can open a support case with Microsoft as they will help and guide you for proper solution. You can go through
    this source article.
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • K8NGM2-FID problems: no usb and high cpu usage - HELP!

    hi folks,
    i've setup K8NGM2-FID inside an htpc with a clean install of mce 2005 (onboard video). For the past couple of days I've noticed a few things:
    1) if the pc goes into standby (S3) and then wakes up, sometimes task manager shows a cpu usage of 50% (on the graph) but looking at the list of tasks (for all users) nothing is runing that high - in fact system idle process shows 98% (while the graph is still showing about 50%) and the system is a bit sluggish; reboot fixes this but it's getting really annoying. I've installed the latest AMD x2 driver. Sometimes it goes to 98-99% after waking up but that's been rare.
    2) i've been getting a few BSODs lately, actually all started yesterday - 3 of them in a span of about 2 hours after insalling Nero. I'm going to try to figure out what is causing it that (proabably Nero - I hope since that's easy to undo) but what i've noticed is that when the system reboots after the blue screen, none of the USB devices work (i.e. keyboard, mouse, etc.). windows has to load, then I need to go in the back and unplug/replug the usb devices which then 'wakes' them up; this can get really annoying in a typical cramped home theater setup. software restarts seem to be good - ok hardware restarts are the problem. hooking things up to a usb hub has the same effect - i.e. I need to re-plug the hub to get them to work - it just means less things to plug/unplug.
    has anyone else noticed this? help save my sanity - this is driving me crazy. since this is an mce setup, it goes into sleep and wakes up several times a day so the high cpu issue when it comes up really gets in the way of using the pc. btw. during high cpu times, no mce related function (record/watch/the shell itself) is running.
    here's my setup:
    K8NGM2-FID - boots up with 3 short beeps - I think it's 1 beep pause then 2 beeps
    2 gigs kingston 3 CAS (2 x 1 GIG kit) pc3200 - boot screen shows it running at 400mhz in dual channel config
    X2 3800+ stock fan/heatsink with silver 5 (runs around 35-38 idle - inside a silverstone 'stereo rack' case)
    ms usb keyboard/mouse/mce remote
    coolmax 550W power
    3 140GB WD drives (ata 133 - not sata)
    onboard video - framebuffer set to 128megs
    latest (as of 2 days ago) nvidia and msi drivers - msi bios is the stock 3.0 (more on that later)
    the bios settings are all default as far as I can tell.
    pvr-150 tuner card
    promise ata 100 card
    nec 3500dvd
    all running on mce 2005 with rollup 2 and all the updates windows could find
    i haven't updated the bios because i've read about other folks having blue screen problems and the suggestion has been to up the voltage for the ram (I guess the default setup from MSI is lower than it should be) but apparently that option is missing from the 3.1 and later bioses? and reading the text file, it wasn't very apparent what the bios 3.1 was fixing other than a few cosmetic bootup texts. I'm planning to up the voltage later today.
    anyhow, any suggestions short of throwing the entire pc out the door are welcomed.
    thanks!

    ok here's what I've found about the high cpu...
    using process explorer, hardware interrups is taking all the cpu. i've tried to disable items one by one but nothing is working so far. what does work is if i choose scan for new hardware, cpu goes down to normal. standby and resume and cpu is up again. do the scan and it goes down again - without changing anything.
    i've re-installed the graphic board driver, nvidia 430 drivers, sound driver. not sure what else to do. checked my drives and they are all properly master/slave set.
    this is really getting crazy...anyone come across this?
    i'm a bit hesitant to go to bios 3.1 since i've seen lots of posts about BSOD and i've just gotten rid of that.
    thanks
    thanks a bunch!

  • Runtime error R6034, itunesHelper.exe and the missing library MSVCR80.dll

    I made the mistake of upgrading to the new version of itunes and I appeared the following errors:
    - Runtime Error R6034 on ituneshelper.exe
    - Library MSVCR80.dll not found
    - Error 7 (windows error 126)
      I tried to install and uninstall as they say apple forums, I researched on my own restoring records, and review it with MicrosoftFixit which is also a solution to the problem but none of the options mentioned above solves the problem. I'm about to format my pc, but I read it in 3 forums that solution does not help. Lords of apple, what's going on with you? Sorry forgot to mention that since I restored settings to my pc that was 1 month ago and nothing happened.
    I have windows XP
    250 gb hard disk
    1 gb RAM
    Thanks

    first disable your antivirus (you can re-enable later)
    go to start, right click on computer and choose properties - note if you have 64 bit or 32 bit operating system
    then make sure all users on the computer are logged off
    log into admin user (if yours isn't already one)
    then uninstall in this order
    itunes
    apple software update
    apple mobile device support (if it won't go - support.microsoft.com/fixit - skip step 1 and go to step 2 - click install or upgrade software or hardware - then scroll down to the bottom of step 3 and click run now next to Fix problems that programs cannot be installed or uninstalled - basically tell it you want to manually tell it want you wantto do and then choose to uninstall and choose apple mobile device - if it freezes or stops around the end then just quit it and relaunch control panel and the apple mobile device should be gone)
    then continue to remove
    bonjour
    apple application support
    then restart computer
    click start - left click on computer - double click on c drive
    double click on program files
    make sure the itunes, ipod, and bonjour folders are gone - if they aren't select them, then right click and delete
    if you are on 64 bit
    complete the steps for program files and then also do program files x86
    if you had to delete any of those folders manually restart again afterwards
    for 32bit os - go to www.apple.com/itunes and download new itunes
    for 64bit os - support.apple.com/kb/DL1615 and download the 64bit version of itunes for windows
    this will resolve any issues related to the update
    NOTE - this will not touch your playlists or media files - your songs are not saved in the itunes application itself those are in a different folder in your music folder

  • High CPU with AFP & SMB

    I have setup a 2.3DP XServer running Tiger/1047 and it seems to be working fine. This is a stand alone box with accounts imported from our main 2.0 SP XServer running Panther/1039 (both are stand alone). Most of these accounts were taken from a 10.1.5 server (without any issues).
    For some odd reason, I am seeing extremely high CPU utilization for the users connection. Sometimes one users will cause AFP (root) to run at upwards of 90% CPU (using all of one CPU). SMB is similar - we have one remote user connecting this way.
    The Tiger server went into production (pre-production at this point) as 10.4.7 and has only been rebooted once (which is really too much, but I digress). I have stoped and started AFP, but its still going crazy hogging the CPU. I have not seen anything like this on our 10.3.9 box (even when it was 10.3.7).
    The Tiger box has the following services running:
    AFP
    Software Update (but not functioning yet ...)
    Web
    Windows (SMB)
    The only other things that come to mind is one of the shares (there are only 3) is self mounted on the servers desktop over "SMB" (though I'm told its not exactly like mounting a remote SMB volume).
    The system have the PCI video card (Radeon) but is not running with monitor ...
    and I'm am showing the following errors
    Aug 31 03:43:14 4ql5d91 servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    Aug 31 04:13:14 4ql5d91 servermgrd: servermgr_dns: more than one name for the primary IP address, unable to pick one
    we have the DNS setup for two domains ... also the random promp "4ql5d91" is annoying (I've seen this in OS X client frequently, but have not shown it to cause any problem).
    Any ideas as to how to resolve the performance issue?
    thx

    I have setup a 2.3DP XServer running Tiger/1047 and it seems to be working fine. This is a stand alone box with accounts imported from our main 2.0 SP XServer running Panther/1039 (both are stand alone). Most of these accounts were taken from a 10.1.5 server (without any issues).
    For some odd reason, I am seeing extremely high CPU utilization for the users connection. Sometimes one users will cause AFP (root) to run at upwards of 90% CPU (using all of one CPU). SMB is similar - we have one remote user connecting this way.
    The Tiger server went into production (pre-production at this point) as 10.4.7 and has only been rebooted once (which is really too much, but I digress). I have stoped and started AFP, but its still going crazy hogging the CPU. I have not seen anything like this on our 10.3.9 box (even when it was 10.3.7).
    The Tiger box has the following services running:
    AFP
    Software Update (but not functioning yet ...)
    Web
    Windows (SMB)
    The only other things that come to mind is one of the shares (there are only 3) is self mounted on the servers desktop over "SMB" (though I'm told its not exactly like mounting a remote SMB volume).
    The system have the PCI video card (Radeon) but is not running with monitor ...
    and I'm am showing the following errors
    Aug 31 03:43:14 4ql5d91 servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    Aug 31 04:13:14 4ql5d91 servermgrd: servermgr_dns: more than one name for the primary IP address, unable to pick one
    we have the DNS setup for two domains ... also the random promp "4ql5d91" is annoying (I've seen this in OS X client frequently, but have not shown it to cause any problem).
    Any ideas as to how to resolve the performance issue?
    thx

  • Photos and high CPU activity

    Importing photos the CPU runs fast and my laptop runs hot. Checking Activity Monitor, Photos App pushes the CPU well beyond 100%.  com.apple.photos.videoconversionservice does the same. Apparently the 'video conversion' is a default setting for importing videos to enable storing videos in iCloud. However, I don't use iCloud for storing any photos or videos and I don't want to...so this conversion is completely unecessary as well as annoying and a waste of time. It can't be doing my laptop much good either running it at a very hot temperature. I've read others having a similar problem but have yet to see any concrete solutions to the problem. Any thoughts or suggestions?

    Thanks for the advice- What do I look for in the console log?
    From Mac Help:
    *Viewing system messages*
    While your system performs tasks, it sends messages between applications, processes, and the operating system. Some of these messages are displayed, but most are not displayed because they can be too detailed and technical. If you are a programmer debugging software, or are troubleshooting a problem with a service technician, messages related to the problem may be located system logs. To view these messages you can use the Console utility located in the Utilities folder in the Applications folder.
    For more information, Open Console, and then choose Help > Console Help.
    Click on the all logs in the source pane on the left - most of the stuff is impossible to figure out but over temperature warnings are clear as is the sleep message that follows it
    Also, I'm not sure if it is overheating- it shows high CPU activity even when I first start using my computer (after hours of non use), so it is not hot at all- can it still overheat?
    It is possible - the way to find out is to read the log and see what it says
    Have you inspected the air vents including the one on the back under the stand?
    LN

  • Pageserver.exe showing high CPU processing on server

    We have been running Crystal Enterprise 10 for awhile on the same server.  Starting Thursday evening the pageserver.exe process showing high CPU utilitzation on the server.  We have restarted all the Crystal services through the Central Configuration Manager but the problem still came back.  The high CPU utilitization occurs during the day and at night when no one would be running any reports.  Does any know what else we could look for?
    Also does a separate pageserver.exe start for each user that runs a Crystal report, we show about 6-8 pageserver.exe processes at any given time.  Is that normal?  When do these pageserver.exe processes go away.  I logged out of Infoview but a pageserver.exe process did not go away.
    Thanks
    Adam

    Closed never answered.

  • Packet drops and High CPU on Cisco 3845 Switch

    Hello Experts,
    We are facing a lot of packet drops in our LAN.
    When we try to ping one of the access switches from the CE router, we get the follwoing output:
    pdel1799#ping 10.132.136.17 so 10.132.164.1 si 100 re 500
    Type escape  sequence to abort.
    Sending 500, 100-byte ICMP Echos to 10.132.136.17, timeout  is 2 seconds:
    Packet sent with a source address of  10.132.164.1
    Success  rate is 98 percent (491/500), round-trip min/avg/max = 1/9/44  ms
    pdel1799#
    Success  rate is 98 percent (491/500), round-trip min/avg/max = 1/9/44  ms
    pdel1799#
    Some command outputs and show tech of all switches attached from the customer which I have attached.
    I have also attached a diagram but the only router''s IP address is correct in the diagram while IP address of switches in the diagram are incorrect. Here are the correct IPs of the switches:
    Core Switch : 10.132.139.2
    Access Switches:
    10.132.136.17
    10.132.136.18
    10.132.136.29
    Apart from packet drops on VLAN 1 we are seeing  high CPU utilization on core switch
    ingur-msl-coresw#sh processes cpu sorted | ex 0.0
    Core 0: CPU utilization for five seconds: 61%; one minute: 45%;  five minutes: 47%
    Core 1: CPU utilization for five seconds: 63%; one minute: 46%;  five minutes: 56%
    Core 2: CPU utilization for five seconds: 36%; one minute: 74%;  five minutes: 69%
    Core 3: CPU utilization for five seconds: 85%; one minute: 69%;  five minutes: 65%
    PID    Runtime(ms) Invoked  uSecs  5Sec     1Min     5Min     TTY   Process
    5638   2374911     23863975 131    52.03    52.24    52.58    1088  fed               
    9227   43623       21191441 182    8.36     5.53     5.71     0     iosd              
    6146   1437288     13888905 56     0.95     0.68     0.70     0     pdsd              
    5639   1292905     86276135 11     0.13     0.13     0.11     0     platform_mgr      
    6161   2831440     20952285 955    0.13     0.12     0.10     0     cpumemd    
    I can get more details required to resolve this, please help!!

    Hi,
    I can see several Mac Flaps in the logs provided.... i.e. on int gi 1/1/3.  have you verified you don't have any bridging loop occurring on the network?
    Regards,
    Yaseen

  • Screen Sharing freezing and high CPU usage

    Hello all,
    I use screen sharing to remote my mac mini as a media server connected to ma HD TV to play movies, music and surf.
    Since I upgrade to mavericks on my macs (Macbook Pro Retina and my Mac Mini) I have some troubles with the screen sharing feature.
    No problems with the login step, the connexion is fast, all permissions are OK (I saw there were a bug with some RDP release) but sometimes, when I use fullscreen software as VLC, Firefox, etc (not the native apple full screen feature, I just clic on the + at the top of the window), my sreen sharing freeze and I can't do or move anything on the remoted mac mini. I'm unable to close (or reduce) the screen sharing app too, it's totaly busy (But I can see the movie or the website on the 2 computer, there is no deconnection)... I have to kill the process through the monitoring activity.
    During the freezing time, I try to use vnc light from my Iphone and I have no problem, I can move the mouse, reduce le VLC windows... As soon I reduce the VLC windows, the screen sharing works again. I also use the logitech TouchMouse to remote the mouse, everything work fine.
    Here are a screen shot of the monitoring activity of the Mac running the screen sharing app, we can see that there is a very high CPU usage when I use VLC in fullscreen on my mac mini. The first is in normal mode. The second is in freeze mode. Screen Sharing is named "Partage d'écran".
    Can someone help me to fix that, everything works fine with Mountain Lion.

    I have a Macbook Pro 13.5" 2.8 GHz 4 core (2 real, 2 hyperthreaded) i7 machine running with 1920X1200 display, 3 virtual screens and VMWare adding a few virtual screens (full sized).  I have another Macbook Pro 15" with 2.6 GHz Haswell 8 core (4 real, 4 hyperthreaded).  I see the problem using Screen Sharing on the 15 inch (Retina screen) mode simulating 1920 X 1200 pixels using Screen Sharing to the 13.5" Macbook Pro.
    When I get the ScreenSharing problem, I have identified it as related to the VMWare screen on the 13.5" Macbook Pro being shown through Screen Sharing on the Retina Screen.  Before you conclude it is a VMWare problem, the computations are only on the Screen Sharing client side, not on the server side running VMWare.  The mouse gets unusable through Screen Sharing.  If I physically move the mouse on the 13.5" Macbook, no problem.  If I switch virtual screens, the Screen Sharing goes to normal processing.
    I see an appearance of a compute-bound thread on the Screen Sharing client.  It takes 100% CPU on one thread, the machine as a whole is 12.5% busy (the performance monitor considers all 8 threads as equal when in fact, they are not).
    A few more pieces of information.  The VMWare client ends up having a lot of overlapping windows with a lot of changing graphics.  My mouse runs into problems especially when it is overlaying a changing plot (Perfmon running in Windows 7, or updating email client).  It does turn out that VMWare has a "native" VNC server built-in and I tried to connect to the virtual screen using the Screen Sharing Client on the machine with computing problem and voila!, no problem.  I end up having a Screen Sharing Client running native running screen (supposed to be VNC, but I have not verified that) sharing protocol on a virtual screen that is NOT the VMWare virtual screen and a separate session using actual VNC protocol using the VMWare VNC server.  It works perfectly fine.
    If I may hazard a guess, I think I know what the bug is, or at least, what is the nature of the problem that I have.  The rest of you may have a different bug.  When I have difficulty, it is because I am on a window that suppresses the dock, both in remote virtual screen and on the local machine showing the screen.  Two docks are suppressed, one remote, one local.  Throw in overlapping windows with changing graphics in the overlapped windows and toss in a mouse on top of that.  I think that the Screen Sharing is trying to refresh overlapping windows with mouse and going through the suppressed dock calculations and never converging on what the picture should be.  The mouse ends up being the visible cue that shows the time frame for iterating the windows - flickers with a timeframe of greater than a second.  That is far greater than the screen update time.  It is totally compute bound with all the overlapping stuff that it is deconflicting.  At least, that is what I think is going on.
    Meanwhile, the VMWare VNC server appears to send out a single graphics context and causes the Screen Sharing client to converge to a picture.  Note, the mouse appearance is very different when attaching to the VMWare VNC Server rather than the ScreenSharing native server.  I see two mouse renderings, the virtual machine remote and a mouse rendering from my Screen Sharing client side.  They are mostly in sync in position unless I move the mouse very quickly.  If I use Screen Sharing client and server instead, I usually see only one mouse, the client side's mouse rendering.
    I have a solution for my problem.  It is similar to using a different VNC server/client pairing.  I will use a VNC server for the systems giving me trouble that is not Screen Sharing Server exercising a probable bug in the Client (though, it could be a problem in the design of Screen Sharing itself).

Maybe you are looking for