内存告急！2621 CPU 100%

我的2621今天一早发现很慢，一看内存过低，CPU占用率很快达到100%
1 V, J% a) _& Z* V: G自然机器也死掉了，真是很烦。各位大虾，请不吝赐教！

是不是有病毒,贴配置（注意去掉敏感信息）

ro_cqczx#sh ru
Building configuration...
4 w. M) x& r$ H0 r
' y  M- u7 F0 l0 O+ @) P" [Current configuration : 997 bytes
!
version 12.2
. C. a5 h, l! o4 s! i& n, cservice timestamps debug uptime
. T5 }' m- ^$ V% K1 lservice timestamps log uptime
9 q# j) [4 U" \5 xno service password-encryption
- [! p5 M0 G+ {: ^! y!
' g, h0 a/ Y7 B, {% s6 x+ v) xhostname ro_cqczx
5 o* O! d# a8 v; `. P!
+ c$ K" v7 B7 e2 z# y" Q2 Penable secret 5 $1$25Hc$mMjslvhotWmcINFSkMMIf0
!
no ip subnet-zero
!
!
!
!
!
!
interface FastEthernet0/0
* d0 l" |" ]3 S/ }3 I ip address 211.158.*.* 255.255.255.240
2 T. |; ^9 a7 s ip nat outside
duplex auto
% u  k& t. |$ H/ o% u" O( i4 K0 e speed auto
!
% r0 G8 _/ o2 K3 W$ x# minterface FastEthernet0/1
4 @# J- m' w% ^0 X7 ^4 m8 C( { ip address 192.168.1.1 255.255.255.0 secondary
( U4 d+ k7 i  Z1 F& ]+ N7 G ip address 192.168.2.1 255.255.255.0 secondary
ip address 192.168.3.1 255.255.255.0 secondary
ip address 192.168.0.249 255.255.255.0
ip nat inside
duplex auto
2 I" P" b* ~( F6 o$ ~$ R4 t speed auto
* _0 G& I2 E9 a0 `; v!
ip nat pool cqczx 211.158.*.* 211.158.*.* netmask 255.255.255.240
ip nat inside source list 2 pool cqczx overload
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
7 [" S1 K; v3 A  {9 eip http server
no ip pim bidir-enable
8 C2 v& p# |* u1 P5 o' q!
$ ~$ O# h3 A4 O. {0 y1 `5 h!
access-list 2 permit any
' H9 U% R; }/ D' lsnmp-server community public RO
snmp-server community center RW
: x  D& E8 \' x& K4 M!
line con 0
$ E1 l  `- M) Y" t, P7 Uline aux 0
4 M# ^" I. F4 M: b. o* s8 t1 Zline vty 0 4
password *******
: `- v) p" q; |8 y, b login
1 T' h7 m0 e: w9 Pline vty 5 15
password *******
: z2 E! c0 z* [8 z; G7 V$ | login
!
!

我发现网内很多广播包发自UDP 2699的，这个端口是什么呀！
急…………………………

还有现在CPU占用率直线攀高了，和平时差异太大了请教各位大虾帮忙呀。
6 d# y( ^& G5 o. D$ G( U, r+ ^4 s9 ?7 \小弟在这不甚感激！

加访问列表101
3 K; h! L3 S+ ]access-list 120 deny icmp any any
0 Z3 F" x. M, B( haccess-list 120 deny ucp any eq 2699 any
access-list 120 deny tcp any any eq echo
/ Y% E/ F$ e/ v! j2 _/ W0 m$ xaccess-list 120 deny tcp any any eq chargen
* i! J& }1 U+ U) ^% \; k/ faccess-list 120 deny tcp any any eq 135
access-list 120 deny tcp any any eq 136
6 N, a( A# ~. M8 j$ naccess-list 120 deny tcp any any eq 137
access-list 120 deny tcp any any eq 138
access-list 120 deny tcp any any eq 139
access-list 120 deny tcp any any eq 389
access-list 120 deny tcp any any eq 445
access-list 120 deny tcp any any eq 4444
" g3 y2 s7 J% c' e! eaccess-list 120 deny tcp any any eq 69
2 U" N! ~# ^/ H& B, l( I  Z5 Zaccess-list 120 deny udp any any eq 135
: |& J4 x3 n9 m$ J2 Aaccess-list 120 deny udp any any eq 136
5 c: D4 O( w$ Q( q0 l! T; C$ Oaccess-list 120 deny udp any any eq 137
access-list 120 deny udp any any eq 138
access-list 120 deny udp any any eq 139
access-list 120 deny udp any any eq snmp
" y3 }) }2 x3 \: zaccess-list 120 deny udp any any eq 389
3 d. \1 S% b8 p" S5 Daccess-list 120 deny udp any any eq 445
; \, c. b8 @2 _; I6 t7 Q5 a5 ^access-list 120 deny udp any any eq 1434
3 j& A: Z, S& caccess-list 120 deny udp any any eq 1433
access-list 120 permit ip any any

# u/ \- }! B) Z' @
# L) V- @4 r7 D1 D% U6 E5 R应用到f0/1试试
ip access-group 120 in

测试ING
/ A) I. q+ j- e谢谢！

毒!!

2621。。。可以换了，都停产的路由器了

广开思路，线路质量也可以造成这个情况，你看看有flapping没。
另外，ios有的版本很搞笑，其实负载不高，但是显示很高，是个bug。前一段我的3650就遇到个类似的bug，TAC查了半天。。。