<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD><TITLE>Bericht</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1607" name=GENERATOR>
<STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2>Matt,</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff size=2>It looks like
your config is not using the 64bit counters but the 32bit counters. At
about 114Mbits/s the 32bit counters roll over once per 5 minutes. MRTG can deal
with one roll over per interval but there is no way to deal with multiple roll
overs.</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff size=2>Resent versions
of MRTG detect the availability of the ifHC* (i.e. 64bit) counters. In
the older versions you need to specify the usage of the 64bit counters in the
cfgmaker command: --snmp-options=:::::2</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff size=2>You can also
manualy add the :::::2 at the end of the targetlines in the mrtg cfg file to get
the 64bit counters.</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff size=2>An other
possibility is that the ifIndex for the specific port has changed, and now you
are looking at an graph with figures from an other port. This
can easily happen after changes in the configuration. </FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2>To fix an interface to one graph you can add '--ifref=name' or
'--ifref=descr' in the cfgmaker command.</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2>HTH,</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2>Jan.</FONT></SPAN></DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=530540615-21032008><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=nl dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B>
mrtg-bounces@lists.oetiker.ch [mailto:mrtg-bounces@lists.oetiker.ch] <B>On
Behalf Of </B>Kettler, Matt<BR><B>Sent:</B> Friday, March 21, 2008 3:48
PM<BR><B>To:</B> mrtg@lists.oetiker.ch<BR><B>Subject:</B> [mrtg] cisco
switches, etherchannel,and artificially low graph values?<BR><BR></FONT></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I’ve got an odd problem with my
interface graphs never reaching their proper peak.. They all seem to be scaled
down inappropriately.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">For starters, I’ve pointed
cfgmaker at a variety of ordinary Cisco switches. I’ll be using examples
from a Cisco 4948 running 12.2(20r)EW1, but I’ve seen the same affects
on 3750’s 12.2(25r)SE1.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I’ve got MRTG running in daemon
mode at 5 minute intervals.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">When I run cfgmaker, I use this
basic form:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">cfgmaker --global 'WorkDir:
/var/mrtg/work' --global 'Options[_]:bits,growright' --global 'WithPeak[_]:
wmy' --no-down --show-op-down --output switchname.cfg
community@switchname<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">This generates me a nice little
switchname.cfg file, so far so good.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">It properly adds the global
Options[_]: bits, growright, which makes MRTG graph in bits, not bytes, which
I prefer, etc..<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Cfgmaker generates an entry for
each port (ie: gi1/3, gi1/4), and one for the combined port (ie: po7).
However, MRTG seems to handle the combined ports
strangely.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">This particular example is a
2gbit/sec LACP port made of 2 gig-e interfaces. cfgmaker understands this port
and generated:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">MaxBytes[switch_96]:
250000000<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">And pagetop
contains:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">
<td>Max Speed:</td><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">
<td>2000.0
Mbits/s</td><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Which is all as it should be. When
MRTG runs, it generates the graphs which claim to be in bits, but the values
never reach as high as they should.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">When I log into the switch and use
sho int I get:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">5 minute output rate 208729000
bits/sec, 17265 packets/sec<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">That’s 208mbit/sec, or perhaps 199
mbit/sec if you count by 1024’s. This is a port to my backup server, and it
sustains rates around 300-500mbit/sec pretty
readily.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">However, MRTG is reporting this on
the daily graph:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">
Max Average
Current<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Out
143.0 Mb/s (0.9%) 23.9 Mb/s
(0.1%) 75.1 Mb/s
(0.5%)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Earlier I had the switch reporting
463mbit/sec for an extended period of time, and I’ve not gotten a report out
of the switch below 200mbit/sec in repeated queries over the past hour minutes
or so. However, even the 24hr max doesn’t line up with my current
measurements.....<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Both are operating on 5 minute
averages, and the load is fairly sustained, so why the low numbers in
MRTG?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Also, in the same graph update
MRTG reports:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">
Max Average
Current<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Gi1/3
Out 106.8 Mb/s (1.3%)
18.9 Mb/s (0.2%)
96.3 Mb/s
(1.2%)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Gi1/4
Out 165.6 Mb/s (2.1%)
16.7 Mb/s (0.2%)
46.7 Mb/s (0.6%)
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Po7
Out 143.0 Mb/s (0.9%)
24.3 Mb/s (0.2%)
46.2 Mb/s
(0.3%)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">How does an etherchannel have a
lower current output rate than either of its
children?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Is there a known issue on cisco
switches and their reporting of etherchannel interfaces over
SNMP?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">In general I seem to be having
anomalous numbers on all my switch ports, but they’re most noticeable on
etherchannels<o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre>_________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd.
Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden,
wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen.
De staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook,
die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.
_________________________________________________________
This message may contain information that is not intended for you.
If you are not the addressee or if this message was sent to you by mistake,
you are requested to inform the sender and delete the message.
The state accepts no liability for damage of any kind resulting from the risks
inherent in the electronic transmission of messages.
_________________________________________________________</pre></font></td></tr></table>