you could do a who and check and see if it still shows the client connection. If the session shows you can do a kill <session-id>. If not I am not aware of a way to kill a process without a reboot. Does the same thing happen with a longer idle out time. If not why are you doing it at 1 minute? Doesn't seem like much time to even let an admin think of what he is looking for at 1 minute;)
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Technical Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Garrett Skjelstad Sent: Thursday, May 20, 2010 1:40 PM To: [email protected] Subject: [OSL | CCIE_Security] ASA 8.2.2 bug/feature? Not sure if this is the good forum for this, but figure there are plenty of smart fellows with lab gear to try this on. =) I was wondering if anyone has seen something similar as follows, First set your ssh timeout to something like 1 minute SSH in, and start a packet-capture and specify for it to output real-time, let your SSH session timeout... or get disconnected some how. My SSH process seems to hang and continue to run at high <40% cpu (when I do a show processes cpu-usage) Does anyone know how to force kill/restart a process (or just the SSH process) without restarting the ASA? I've seen this happen a number of times, and suspect this order of events is the culprit. If anyone has a few minutes to test this out, confirm/deny and hit me back, or perhaps they have seen this issue already? -Garrett
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
