<DIV>Hi Tobi,</DIV>
<DIV> </DIV>
<DIV>Is it also workable to check for only 1 ==U? Having two ==U in your example would mean that the host missed two polling before its declared offline?<BR><BR>regards,</DIV>
<DIV> Bee Hock.</DIV>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">----- Original Message -----<BR>From: "Tobias Oetiker" <TOBI@OETIKER.CH><BR>To: "B. Cook" <BCOOK@POUGHKEEPSIESCHOOLS.ORG><BR>Subject: Re: [smokeping-users] question about 'someloss' alerts..<BR>Date: Fri, 1 Jun 2007 15:56:14 +0200 (CEST)<BR><BR><BR>B,<BR><BR>the pattern you picked will trigger at much less pronounced loss<BR>cenarious than what you see ... the pattern says that you want an<BR>alert if there are three instances of loss mixed up with no-loss<BR>situations ...<BR><BR>to see if a line is don when you start smokeping, you can anchore a<BR>pattern at the 'start':<BR><BR><BR>+offstart<BR>type = rtt<BR>pattern = ==S,==U<BR>comment = Box is offline at startup<BR><BR><BR>+offline<BR>type = rtt<BR>pattern = !=U,==U,==U<BR>comment = Box went offline<BR><BR>+online<BR>type = rtt<BR>pattern = ==U,==U,!=U<BR>comment = Box went online<BR><BR><BR>Today B. Cook wrote:<BR><BR>> Hello,<BR>><BR>> I've just added smokeping to a network that currently has 3 of it's<BR>> circuits (T1's) down.<BR>><BR>> and I am continually bombarded with someloss alerts; But I think the<BR>> confusion is about how I am understanding the pattern for the alert.<BR>><BR>> Pattern<BR>> -------<BR>> > >0%,*12*,>0%,*12*,>0%<BR>><BR>> Data (old --> now)<BR>> ------------------<BR>> loss: 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%,<BR>> 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%, 100%,<BR>> 100%, 100%, 100%, 100%<BR>> rtt: U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U, U,<BR>> U, U, U, U, U<BR>><BR>> I am wondering if there is a better alert that i could make that would<BR>> indicate the obvious that the circuit was never up (yet) and that it is<BR>> still down.<BR>><BR>> I guess I am wondering why the alert is called 'someloss' when there<BR>> actually is a total loss..<BR>><BR>> I was wondering if someone else had an alert for 'totalloss' or<BR>> something better than someloss for this type of an alert/pattern.<BR>><BR>> _______________________________________________<BR>> smokeping-users mailing list<BR>> smokeping-users@lists.oetiker.ch<BR>> https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users<BR>><BR>><BR><BR>--<BR>Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten<BR>http://it.oetiker.ch tobi@oetiker.ch ++41 62 213 9902<BR><BR>_______________________________________________<BR>smokeping-users mailing list<BR>smokeping-users@lists.oetiker.ch<BR>https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users<BR></BLOCKQUOTE><BR>
--
<p>
<a href="http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=en-mail_a_01" target=_blank>
<img alt="" src="http://a8-asy.a8ww.net/a8-ads/adftrview?redirectid=en-mail_i_01" border="0"></a>
</p>