sshd process high cpu

[patkszen]

Hi Al

Our 12508 JF431C seem to have a problem with sshd process, it holds 66% of cpu constantly. 

I've tried disabling ssh, I'm not sure what is expected behaviour but process remained running.

Is it safe to just kill the process? 

[HP 12508]dis cpu history
100%|
 95%|
 90%|
 85%|
 80%|
 75%|
 70%|############################################################
 65%|############################################################
 60%|############################################################
 55%|############################################################
 50%|############################################################
 45%|############################################################
 40%|############################################################
 35%|############################################################
 30%|############################################################
 25%|############################################################
 20%|############################################################
 15%|############################################################
 10%|############################################################
  5%|############################################################
     ------------------------------------------------------------
              10        20        30        40        50        60  (minutes)
                   cpu-usage (CPU 0) last 60 minutes (SYSTEM)

[HP 12508]dis proc cpu
CPU utilization in 5 secs: 70.0%; 1 min: 70.0%; 5 mins: 70.0%
 JID 5Sec 1Min 5Min Name
........
421 65.6% 65.6% 66.3% sshd
........

[drk787]

Hi

Can you check the 'display users' to see if there are any users logged in to the device, if yes, try to clear by 'free line <number> and check if the cpu utilization comes down.

If you plan to terminate the process, you need ot be cautious before clearing it, may be during off business hours.

[pattap]

Like mentioned in the first post, ssh server has been disabled at some point with command undo ssh server to see if the process would free up the resource

I need to know what is the risk of killing the process, switch crash, reboot etc

[pattap · Accepted solution]

I have stopped the process which solved the problem.

Just in case if anyone needs it, that's how you do it on 12508 running comware 7

<Sysname> monitor thread 

84 processes; 107 threads 

Thread states: 1 running, 106 sleeping, 0 stopped, 0 zombie 

CPU states: 94.43% idle, 0.76% user, 3.64% kernel, 1.15% interrupt 

Memory: 755M total, 417M available, page size 4K 

    JID    TID  LAST_CPU  PRI  State  HH:MM:SS   MAX    CPU    Name 

   1176   1176      0     120    R    00:00:01     1   3.42%   top 

    866    866      0     120    S    00:00:12     1   0.85%   devd 

    881    881      0     120    S    00:00:09     1   0.64%   diagd 

      1      1      0     120    S    00:00:06     1   0.42%   scmd 

   1160   1160      0     120    S    00:00:01     1   0.21%   sshd 

      2      2      0     115    S    00:00:00     0   0.00%   [kthreadd] 

      3      3      0     115    S    00:00:01     0   0.00%   [ksoftirqd/0] 

      4      4      0      99    S    00:00:00     1   0.00%   [watchdog/0] 

      5      5      0     115    S    00:00:00     0   0.00%   [events/0] 

      6      6      0     115    S    00:00:00     0   0.00%   [khelper] 

·           Enter h or a question mark (?) to display help information as follows: 

Help for interactive commands: 

        ?,h      Show the available interactive commands 

          c      Sort by the CPU field(default) 

          d      Set the delay interval between screen updates 

          k      Kill a job 

          l      Refresh the screen 

          n      Set the maximum number of threads to display 

          q      Quit the interactive display 

          t      Sort by run time of threads since last restart 

          <      Move sort field to the next left column 

          >      Move sort field to the next right column 

 

ref http://www.h3c.com.hk/Technical_Support___Documents/Technical_Documents/Switches/H3C_S12500_Series_Switches/Command/Command/H3C_S12500_CR-Release7128-6W710/12/201301/772581_1285_0.htm#_Toc341254878