<div dir="ltr">Thanks for the ideas. Community string is actually redacted, but I guess I should've made that more obvious than mashing the keyboard :)<div><br></div><div style>Agreed, my first thought was v1 but I am now specifically targetting 64bit counter OIDs and I've verified it is using SNMP v2 through debug options. Definitely sure the port is the same - low values are slightly different but the intervals are also slightly different (Cacti is running on 1 minute, MRTG is running on 10 minutes.)</div>
<div style><br></div><div style>The MRTG version is super old - that was one of my first thoughts, I'm just somewhat reluctant to even touch it as it's running on an incredibly old version of Linux as well but I think that is my next plan.</div>
<div style><br></div><div style>Not using a third party front end, it is a custom PHP script that calls 'rrdtool graph' directly. I will try rearranging the config file, thanks for that idea.</div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Tue, May 14, 2013 at 10:34 PM, Steve Shipway <span dir="ltr"><<a href="mailto:s.shipway@auckland.ac.nz" target="_blank">s.shipway@auckland.ac.nz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-NZ" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">A few thoughts<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>1.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">You’ve just told the world your SNMP community string. Oops.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>2.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">It certainly looks a bit like an SNMPv1 issue, though that would generally top off about 120Mbps. However the config seems to use v2 correctly.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>3.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Are you absolutely certain that both graphs relate to the same port? Possibly there is some confusion in the settings?<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>4.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Look at the two graphs close up. Are they exactly the same for low values, then lose it for high values? If so, maybe its using SNMPv1 anyway. If not, maybe you’re graphing something different.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>5.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Which version of MRTG do you have? Possibly an old one is not handling things correctly. Get a copy of 2.17.x installed and see if the problem goes away.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>6.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">There’s always the possibility that Cacti is getting it wrong, so check there as well.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>7.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Is it a bits/bytes issue? If Cacti is showing 8x the MRTG value, maybe MRTG is showing in bytes. Though you have ‘options bits’.<u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><span>8.<span style="font:7.0pt "Times New Roman""> </span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">What frontend are you using for MRTG/RRD? Some, notably Routers2.cgi in earlier versions, want the Target line to come first in the stanza. Try rearranging them this way, maybe the Options line is getting ignored and you’re viewing in bytes/sec.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">HTH<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Steve<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><hr size="2" width="100%" align="center">
</span></div><p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Steve Shipway</span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1f497d">ITS Unix Services Design Lead<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1f497d">University of Auckland, New Zealand<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Floor 1, 58 Symonds Street, Auckland<u></u><u></u></span></p><p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#595959">Phone: <a href="tel:%2B64%20%280%299%203737599%20ext%2086487" value="+6493737599" target="_blank">+64 (0)9 3737599 ext 86487</a><u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#595959">DDI: <a href="tel:%2B64%20%280%299%20923%206487" value="+6499236487" target="_blank">+64 (0)9 923 6487</a><u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#595959">Mobile: <a href="tel:%2B64%20%280%2921%20753%20189" value="+6421753189" target="_blank">+64 (0)21 753 189</a><u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#595959">Email: <a href="mailto:s.shipway@auckland.ac.nz" target="_blank"><span style="color:#595959">s.shipway@auckland.ac.nz</span></a><u></u><u></u></span></i></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:18.0pt;font-family:Webdings;color:green">P</span><span lang="EN-GB" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:blue"> </span><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial Narrow","sans-serif";color:green">Please consider the environment before printing this e-mail</span><span lang="EN-GB" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:blue"> : </span><span lang="ZH-TW" style="font-size:10.0pt;font-family:"MS Gothic";color:green">打印本</span><span lang="ZH-TW" style="font-size:10.0pt;font-family:MingLiU;color:green">邮件，将减少一棵树存活的机会</span><span lang="EN-GB" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:navy"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> mrtg-bounces+s.shipway=<a href="mailto:auckland.ac.nz@lists.oetiker.ch" target="_blank">auckland.ac.nz@lists.oetiker.ch</a> [mailto:<a href="mailto:mrtg-bounces%2Bs.shipway" target="_blank">mrtg-bounces+s.shipway</a>=<a href="mailto:auckland.ac.nz@lists.oetiker.ch" target="_blank">auckland.ac.nz@lists.oetiker.ch</a>] <b>On Behalf Of </b>Simon Westlake<br>
<b>Sent:</b> Wednesday, 15 May 2013 2:26 p.m.<br><b>To:</b> <a href="mailto:mrtg@lists.oetiker.ch" target="_blank">mrtg@lists.oetiker.ch</a><br><b>Subject:</b> [mrtg] Strange MRTG problem<u></u><u></u></span></p></div></div>
<div><div class="h5"><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">Hello,<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">It's been a long time since I used MRTG (I've been writing directly to rrds for a long time now) but an old employer of mine asked me to troubleshoot a legacy MRTG setup and I'm having a strange problem with it I cannot decipher.<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">I am graphing a port in two ways. One is in Cacti, one is with MRTG. Both are using 64bit counters (I have even setup the MRTG configuration to specifically use the HC OIDs rather than assuming they are being queried by specifying :::::2)<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">In Cacti, I get the correct value (approximately 700-800Mbps per second.) In MRTG, it is never more than 190-200Mbps.<u></u><u></u></p></div>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">My MRTG configuration looks like this:<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><div><p class="MsoNormal">
WorkDir:/var/www/mrtg<u></u><u></u></p></div><div><p class="MsoNormal">Forks: 30<u></u><u></u></p></div><div><p class="MsoNormal">Refresh: 300<u></u><u></u></p></div><div><p class="MsoNormal">Interval: 5<u></u><u></u></p>
</div><div><p class="MsoNormal">MaxAge: 999999999999999999999999<u></u><u></u></p></div><div><p class="MsoNormal">SnmpOptions: retries => 1, timeout => 1<u></u><u></u></p></div><div><p class="MsoNormal">LogFormat: rrdtool<u></u><u></u></p>
</div></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><div><p class="MsoNormal">Options[DAS-c3229-bandwidth]: growright,bits,nolegend,nobanner,nopercent<u></u><u></u></p>
</div><div><p class="MsoNormal">Directory[DAS-c3229-bandwidth]: DAS-c3229<u></u><u></u></p></div><div><p class="MsoNormal">Target[DAS-c3229-bandwidth]: 1.3.6.1.2.1.31.1.1.1.10.140&1.3.6.1.2.1.31.1.1.1.6.140:8GF8961u@24.160.238.254:::::2<u></u><u></u></p>
</div><div><p class="MsoNormal">Extension[DAS-c3229-bandwidth]: php<u></u><u></u></p></div><div><p class="MsoNormal">Suppress[DAS-c3229-bandwidth]: y<u></u><u></u></p></div><div><p class="MsoNormal">Title[DAS-c3229-bandwidth]: Bandwidth Utilization<u></u><u></u></p>
</div><div><p class="MsoNormal">Maxbytes[DAS-c3229-bandwidth]: 200000000000000000<u></u><u></u></p></div><div><p class="MsoNormal">AbsMax[DAS-c3229-bandwidth]: 200000000000000000<u></u><u></u></p></div><div><p class="MsoNormal">
<u></u> <u></u></p></div><div><p class="MsoNormal">I have tried tweaking a lot of things and I can't seem to figure out what's going on. Any insight would be appreciated as I'm 2+ days into troubleshooting this thing and it's driving me crazy. Thanks!<u></u><u></u></p>
</div><p class="MsoNormal" style="margin-bottom:12.0pt">-- <br>- Simon Westlake<u></u><u></u></p></div></div></div></div></div></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>- Simon Westlake<br>[ <a href="http://digitalgunfire.com">digitalgunfire.com</a> ]<br>
AIM: ShirowDG<br>ICQ: 2227213<br>Voice: (414) 810-6392
</div>