Hey, <br><br>I'm new to this list and I've been using MRTG for some years now, excellent <br>piece of code!<br><br>My question:<br><br>I've been searching the web (mainly reading features of all sorts of network <br>
monitoring and graphing software and all sorts of proggies that use RRDtool) <br>for a system that can recognize and alert on traffic anomalies. dynamically.<br><br>What I mean is the following: <br><br>Lets say I'm monitoring router traffic. (pretty stable traffic pattern in my case) <br>
I want to get an alert if the current traffic is somewhat unusual for this time of <br>day (or even this time of day + day of the week). the easy way to do it is that every time <br>I take a measurement of traffic, I compare the current value (say I'm measuring at 13:00) <br>
with the average of the last 7 days at the same time (13:00) and if the <br>current measurement is (say) 30% higher/lower than the average of that time. issue an alert.<br><br>That's the idea, VERY EASY to implement. (rrdtool + couple lines of perl, this could be <br>
even implemented on top of MRTGs threshold mechanism, but it could also be<br>a stand alone daemon that would periodically 'query' .rrd files)<br><br><br>But I'm wondering if anyone knows some sorts of (open source) monitoring suite<br>
that does just that (or something better). or if someone sees a flaw with this approach. <br><br>Thanks,<br>Eddie.<br><br><br clear="all"><br>-- <br>map{map{$a=unpack"C",$_;map{$c=$a-ord;print$_ x$c and goto"a"if$c>0}("Z",<br>
" ");a:}split//;print"\n"}(q{&[%[%`#[%["},q{&[$[![$[%["[%["},q{&[#[#[#[%[<br>"[%["},q{&["[%["`#a"},q{[%["a"[([%["},q{[%["[%["[([%["},q{!_#[%["[([%["})