[tac_plus] High cpu usage

[heasley]

Thu, Apr 25, 2013 at 12:03:11PM -0400, Asif Iqbal:
> Where to look for cause of high cpu usage ? users experience slowness in
> typing command
> on router when cpu usage is high, consistently
> 
>   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
>  2739 root         20   0    615m 244m  840 R   37      6.2
> 389:06.39 tac_plus
> 
> I have 27 tac_plus process running
> 
> $ ps -ef | grep tac_plus | grep main | wc -l
> 27
> 
> $ ps -ef | grep tac_plus
> /usr/local/bin/tac_plus -L -B 192.168.6.20 -l
> /var/log/tacacs-main.daemon.log -C /etc/tacacs.conf
> [..]
> 

1) someone trying to break into one of your routers - see the tacacs log
2) someone is attacking the daemon
3) a serial line w/ tacacs having a fight with a connected device because
the serial line does not have 'no login' (or it might be 'no exec').
4) the daemon is having an argument with a misbehaving client device
5) there is a bug, unlikely