ASA 5515 - Unicorn Admin Handler causing high CPU

adrianopinaffo1 · ‎02-22-2018

Hello,

First of all, what exactly is the process "Unicorn Admin Handler"?

Second, why such process could be cause such a high CPU usage in my ASA 5515?

Here is some output:

# sh proc cpu-usage non-zero sorted
PC         Thread       5Sec     1Min     5Min   Process
0x00000000016360a4   0x00007fffec836c80    76.0%    74.9%    74.8%   Unicorn Admin Handler
0x00000000006dd80b   0x00007fffec921f40    13.4%    13.2%    13.2%   tmatch compile thread
   -          -         8.0%     8.4%     8.4%   DATAPATH-0-1720
0x000000000148ce9a   0x00007fffec8e3e00     0.4%     0.5%     0.5%   Unicorn Admin Handler
0x0000000000832066   0x00007fffec91aee0     0.2%     0.2%     0.2%   CP Processing
0x00000000019acca2   0x00007fffec929e20     0.1%     0.2%     0.2%   Logger
0x000000000142451d   0x00007fffec92f8c0     0.1%     0.1%     0.1%   idfw_proc
0x000000000148bcf0   0x00007fffec8e2be0     0.0%     0.4%     0.6%   Unicorn Admin Handler
0x000000000174f4f4   0x00007fffec911a40     0.0%     0.3%     0.1%   qos_metric_dae

# sh perfmon detail

PERFMON STATS:                     Current      Average
Xlates                                0/s          0/s
Connections                          63/s          0/s
TCP Conns                            45/s          0/s
UDP Conns                            15/s          0/s
URL Access                            0/s          0/s
URL Server Req                        0/s          0/s
TCP Fixup                             0/s          0/s
TCP Intercept Established Conns       0/s          0/s
TCP Intercept Attempts                0/s          0/s
TCP Embryonic Conns Timeout           1/s          0/s
HTTP Fixup                            0/s          0/s
FTP Fixup                             0/s          0/s
AAA Authen                            0/s          0/s
AAA Author                            0/s          0/s
AAA Account                           0/s          0/s

VALID CONNS RATE in TCP INTERCEPT:    Current      Average
                                       N/A         100.00%

SETUP RATES:
Connections for 1 minute = 57/s; 5 minutes = 60/s
TCP Conns for 1 minute = 37/s; 5 minutes = 40/s
UDP Conns for 1 minute = 16/s; 5 minutes = 16/s

# sh interf | inc Interface | error | collision
Interface GigabitEthernet0/0 "inside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/1 "", is down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/2 "", is administratively down, line protocol is down
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
Interface GigabitEthernet0/3 "outside", is up, line protocol is up
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred

Thanks,