cisco ASA 5580 防火墙内存占用率过高，怎么降下来
我有一台cisco ASA5580-40防火墙，内存占用率已经达到91%了，有办法降下来吗？设备只做了冗余和ACL，针对组做的ACL做了600多条，之前是64%，配置没变，每天都涨1-2%，现在已经91%了，急需降下来，在线等。
以下是进程：
ASA5580# show memory
Free memory: 391640008 bytes ( 9%)
Used memory: 3903327287 bytes (91%)
------------- ----------------
Total memory: 4294967295 bytes (100%)
ASA5580# show processes memory
--------------------------------------------------------------
Allocs Allocated Frees Freed Process
(bytes) (bytes)
--------------------------------------------------------------
0 0 0 0 *System Main*
0 0 0 0 PTHREAD-1303
0 0 0 0 PTHREAD-1304
0 0 169 12196 SSL
0 0 0 0 PTHREAD-1305
1963492272096967551374 374527433 2103064422860 DATAPATH-0-1306
68648710 2061630932058 215508986 2063090771152 DATAPATH-1-1307
42610959522030395277988 15609041 2020026890675 DATAPATH-2-1308
2608547532117135871006 487793291 2128432001421 DATAPATH-3-1309
1441546412085830052566 326339993 2092622650038 DATAPATH-4-1310
1907022192099154868150 411233210 2109836917847 DATAPATH-5-1311
2678797132109975740246 398367478 2109287576793 DATAPATH-6-1312
3200372812128637940354 517458767 2135792034420 DATAPATH-7-1313
3 641124 51497886 1029957720 IPsec message handler
9 216 0 0 fover_tx
3 2108 0 0 emweb/https
0 0 0 0 SMTP
23155 1376703 18312 889710 CTM message handler
0 0 0 0 fover_tx_2
5 7360 0 0 I/O Bridge
1 36 0 0 Logger
0 0 0 0 NAT security-level reconfiguration
375466 8072519 187733 1877330 fover_ip
0 0 0 0 Syslog Retry Thread
0 0 0 0 ICMP event handler
0 0 0 0 fover_rep
0 0 13 12061 Thread Logger
0 0 0 0 Dynamic Filter VC Housekeeper
180777 25033018 179945 16784665 fover_parse
3 200 0 0 NTP
0 0 0 0 IP Background
0 0 0 0 fover_ifc_test
31 6536 0 0 IPMI Poll Thread
15136 2260857 13877 4635392 tmatch compile thread
310294 7447056 0 0 fover_health_monitoring_thread
0 0 0 0 Crypto PKI RECV
0 0 0 0 ha_trans_ctl_tx
0 0 0 0 netfs_vnode_reclaim
0 0 0 0 Crypto CA
17536 420864 0 0 ha_trans_data_tx
0 0 0 0 CERT API
841 5656887 635 2217042 fover_FSM_thread
0 0 0 0 uauth_urlb clean
4122 110275310 2249 7869928 lu_rx
30 908491 0 0 netfs_thread_init
3 8356 0 0 vpnlb_thread
0 0 0 0 pm_timer_thread
0 0 0 0 lu_dynamic_sync
0 0 150 5775 ssh/timer
0 0 0 0 IKE Timekeeper
6 8568 140 1548 SNMP Notify Thread
32 62136 0 0 IKE Daemon
283 6996409 120 4484366 rtcli async executor process
0 0 0 0 RADIUS Proxy Event Daemon
0 0 0 0 IP Thread
9 25488 0 0 block_diag
0 0 0 0 pci_nt_bridge
4 4208 0 0 RADIUS Proxy Listener
13 496 0 0 ARP Thread
0 0 0 0 RADIUS Proxy Time Keeper
0 0 0 0 icmp_thread
597 1662844 210 3360 listen/ssh
0 0 0 0 Chunk Manager
0 0 0 0 TLS Proxy Inspector
7 14163 0 0 Integrity FW Task
0 0 0 0 udp_thread
117704 950332 235158 1881264 emweb/https
40 5243972 2408817 896830555 PIX Garbage Collector
0 0 0 0 emweb/cifs_timer
2315820360214039063063 929658530 180421123421 CP Processing
0 0 0 0 tcp_thread
242955 155467100 238490 7785984 Unicorn Proxy Thread
0 0 0 0 IP Address Assign
3 8356 0 0 netfs_mount_handler
39195 52241320 17990 37566237 CP Midpath Processing
201 3216 201 4824 npshim_thread
2712 63435377 24 7938 Init Thread
0 0 0 0 QoS Support Module
2 32 0 0 arp_timer
262 36100 183 225770 SRTP Processing
1 24 0 0 EAPoUDP-sock
1 640 0 0 Reload Control Thread
0 0 0 0 Client Update Task
0 0 0 0 arp_forward_thread
196 26976 230 265125 CP HA Processing
0 0 0 0 EAPoUDP
636 35445 812 40373 aaa
0 0 269 77724 Checkheaps
0 0 0 0 Lic TMR
28 17971 3 1527 ci/console
30 1713931 5 33004 UserFromCert Thread
0 0 0 0 tcp_fast
63 323020 2 80 fover_thread
117581 940648 0 0 Timekeeper
0 0 0 0 CMGR Server Process
0 0 0 0 tcp_slow
8 2935254 0 0 lu_ctl
0 0 0 0 CMGR Timer Process
3 936 0 0 Quack process
0 0 0 0 udp_timer
8 256 0 0 update_cpu_usage
0 0 0 0 Session Manager
0 0 0 0 health_check
0 0 0 0 CTCP Timer process
3 2689839 0 0 uauth
0 0 0 0 L2TP data daemon
39 13108 2 24 NIC status poll
43019 1960274 38548 1876570 ssh
0 0 0 0 dbgtrace
0 0 0 0 Uauth_Proxy
0 0 0 0 L2TP mgmt daemon
0 0 0 0 Integrity Fw Timer Thread
0 0 0 0 ppp_timer_thread
0 0 0 0 vpnlb_timer_thread
0 0 0 0 fover_r
求大家帮忙
页:
[1]