<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
nangineni praneeth wrote:
<blockquote cite="mid:794551.90530.qm@web65716.mail.ac4.yahoo.com"
type="cite">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top"><br>
sorry for not being clear......I was using MRTG with rateup and i set
the poll for every 5 minutes...I was monitoring tcp connections and as
well as inbound and outbound traffic...I just gave an example on
established tcp connections to show how MRTG is representing the green
colour graph(showing everything from zero instead of a constant
line)...Yes i do know that MRTG assumes zeroes
in absense of traffic.But i have checked the logfile and there were no
zeroes at all... This log file shows the entries of the number of tcp
connections
established...........<br>
<br>
</td>
</tr>
</tbody>
</table>
</blockquote>
Not absence of traffic, but absence of data in your data files(for a
time period). minor but significant difference to MRTG & rateup.<br>
<blockquote cite="mid:794551.90530.qm@web65716.mail.ac4.yahoo.com"
type="cite">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top"><br>
it shows 8 8 8 8 <br>
8 8 8 8<br>
until i polled for the last time<br>
<br>
</td>
</tr>
</tbody>
</table>
</blockquote>
This snippet shows the data, but not the timestamps on them. And you
did not post the captions against the graphs so we can see what the
green portion represented. And the green uses a fill method in the
graphs, painting the area under the lines. I also suspect you will
have better control over the graphing if you convert to rrd and use a
frontend like routers2 to make the graphs.<br>
<br>
Lle<br>
<br>
<blockquote cite="mid:794551.90530.qm@web65716.mail.ac4.yahoo.com"
type="cite">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top">This is my configfile.........<br>
<pre>Target[tcp]: .1.3.6.1.2.1.6.9.0&.1.3.6.1.2.1.6.9.0:community@server</pre>
maxbytes[tcp]: 100<br>
options[tcp]:gauge,nopercent,integer,noo<br>
<br>
So
as i understand since the logfile is showing constant entries MRTG
should also graph a constant line but instead it was showing graphs
starting from zero........But if i represnt the graph by hiding the
first variable(that is green colour graph) it is showing a constant line<br>
<br>
The values below the graph were like<br>
<br>
tcp connections; max: 8 connections average:8 connections current: 8
connections <br>
</td>
</tr>
</tbody>
</table>
</blockquote>
<blockquote cite="mid:794551.90530.qm@web65716.mail.ac4.yahoo.com"
type="cite">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top"><br>
<span style="font-style: italic;">A cisco router traffic data
is for all traffic. A cisco router does
not know how to separate http traffic from ftp traffic. A cisco router
can only show total traffic.</span><br>
<br>
The only traffic i was using in my lab environment was ftp
traffic........yeah cisco router traffic includes cdp traffic,ftp
traffic...........But MRTG was reporting higher traffic rate than the
cisco router is showing<br>
<br>
Regards<br>
Venkat<br>
<br>
<br>
<br>
--- On <b>Thu, 12/18/08, Lyle Giese <i><a class="moz-txt-link-rfc2396E" href="mailto:lyle@lcrcomputer.net"><lyle@lcrcomputer.net></a></i></b>
wrote:<br>
<blockquote
style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;">From:
Lyle Giese <a class="moz-txt-link-rfc2396E" href="mailto:lyle@lcrcomputer.net"><lyle@lcrcomputer.net></a><br>
Subject: [mrtg] [Fwd: Re: MRTG-bugs]<br>
To: <a class="moz-txt-link-abbreviated" href="mailto:mrtg@lists.oetiker.ch">mrtg@lists.oetiker.ch</a><br>
Date: Thursday, December 18, 2008, 2:19 AM<br>
<br>
<div id="yiv219845037"> I did it again. Forgot to include
the list in my reply.<br>
<br>
Lyle<br>
<br>
<br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0"
cellpadding="0" cellspacing="0">
<tbody>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">Subject:
</th>
<td>Re: [mrtg] MRTG-bugs</td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">Date:
</th>
<td>Wed, 17 Dec 2008 14:42:28 -0600</td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">From:
</th>
<td>Lyle Giese <a moz-do-not-send="true" rel="nofollow"
class="moz-txt-link-rfc2396E" target="_blank"
href="mailto:lyle@lcrcomputer.net"><lyle@lcrcomputer.net></a></td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">To:
</th>
<td>nangineni praneeth <a moz-do-not-send="true"
rel="nofollow" class="moz-txt-link-rfc2396E" target="_blank"
href="mailto:nv_2030@yahoo.com"><nv_2030@yahoo.com></a></td>
</tr>
<tr>
<th align="right" nowrap="nowrap" valign="baseline">References:
</th>
<td><a moz-do-not-send="true" rel="nofollow"
class="moz-txt-link-rfc2396E" target="_blank"
href="mailto:764194.96446.qm@web65708.mail.ac4.yahoo.com"><764194.96446.qm@web65708.mail.ac4.yahoo.com></a></td>
</tr>
</tbody>
</table>
<br>
<br>
nangineni praneeth wrote:
<blockquote type="cite">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top"><br>
<br>
Hello everyone<br>
<br>
... I am using MRTG in my masters project and i
think i have noticed few errors in it...........<br>
<br>
1) I have
calculated the log file entries in the log file and took the average
over the time for which i ran MRTG.......The value which it shows it
different from the value which it graphed....Ther were couple of people
who posted this question on the mrtg forum but no one has replied....So
does anyone think this is a error or the way i am calculating it is
wrong<br>
<br>
2)
I posted this on the MRTG forum and one of them
tried to give me an explanation for this.......its with the green
colour traffic....the traffic is showing as if it starts from
zero....because i limited the amount of traffic the server sends to
4kBPs so i must see a constant line(or sawtooth like graph) on MRTG
graphs but everything starts from zero......i
have checked my logfile and there are no zeroes in it.........But the
outbound traffic is showingup correctly like a sawtooth
waverform(because of TCP).........The same thing happened when i was
monitoring TCP connections on the server i suppressed the blue colour
graph and the same story every sample MRTG is graphing starts from
zero..........I am attaching a png image so that everyone can
understand it
better<br>
<br>
3)
I am using cisco router and when i saw the 5 min average input rate and
output rate..The values are different from the values MRTG is
reporting.................I have checked this many times.......<br>
<br>
....I ran MRTG continuously for 15 hours and and found these things<br>
<br>
Regards<br>
Venkat<br>
<br>
</td>
</tr>
</tbody>
</table>
<br>
<br>
</blockquote>
You have not explained what or how you collected this data. MRTG &
rateup, in the absence of data, assumes a zero for the time period.
MRTG & rateup default to a 5 min sample rate. <br>
<br>
You state you were collecting traffic from this device somehow, but the
graph below shows connections, which is not the same as traffic. <br>
<br>
Unless you have written a special tool to collect ftp only traffic, the
normal snmp data available is for total traffic only.<br>
<br>
A cisco router traffic data is for all traffic. A cisco router does
not know how to separate http traffic from ftp traffic. A cisco router
can only show total traffic.<br>
<br>
In other words, you have made some statements as to what you think are
errors, but you have not provided any background as to how the data was
collected, graphed, and what parameters were feed into MRTG &
rateup.<br>
<br>
Lyle Giese<br>
LCR Computer Services, Inc.<br>
<blockquote type="cite">
<hr size="4" width="90%"></blockquote>
</div>
</blockquote>
</td>
</tr>
</tbody>
</table>
<br>
</blockquote>
<br>
</body>
</html>