[mrtg] Re: Untraceable traffic spikes

[Isaac Grover]

Hey everyone,

Apparently I miscommunicated my problem in yesterday's message.  There's multiple reasons
for traffic spikes: network backups, large file transfers, DoS attacks, the list goes on.
But all those situations have an in/out = out/in correlation on the graphs.  My situation
doesn't correlate well.

I've attached two GIFs that represent opposite sides of the same pair of fiber.  This is
what I saw just minutes ago, so I'd appreciate any insight.

Isaac

Isaac Grover wrote:

> Hey everyone,
>
> I've been watching these spikes for the past couple weeks trying
> to find the source of the traffic spikes in the graph, but I'm
> not getting anywhere.
>
> This device is a Xylan OmniSwitch Router with an ASX-622 ATM
> uplink (the source of the graph) with one ESX 10/100 blade.  The
> device on the other end of the fiber is a Xylan OmniSwitch 9-slot
> chassis with ASM-622 ATM uplinks.  I've been watching every
> interface on both the OS/R and the OSW/9, but the only interface
> that shows these spikes is the ASX-622; even the ASM-622 on the
> other end of the fiber shows no spikes.
>
> Here's a copy of my cfg for this particular interface (mrtg 2.9.2
> on FreeBSD 4.1.1-i386 BTW):
>
> ---8<---
> Options[^]: growright, bits,
>
> #---------------------------------------------------------------
> # System Name: OSR-237
>
> Target[192.168.x.x.2001]:
> 1.3.6.1.4.1.800.2.4.3.1.1.4.2.1&1.3.6.1.4.1.800.2.4.3.1.1.7.2.1:community at 192.168.x.x*53
>
> MaxBytes[192.168.x.x.2001]: 77750000
> Title[192.168.x.x.2001]: OSR-237 CSM-155 to OSW9-204
> ---8<---
>
> Not only do I have no idea where this data is coming from, but
> it's very out of the ordinary on this network to see anything
> larger than 4Mbps so these traffic spikes are hindering the
> visual "normalcy" of my graphs.  =)
>
> Has anyone else seen something like this before?
>
> P.S. Please don't pester me about the GIF image.  Steve's
> routers.cgi v1.2 did GIFs by default, and I'm in the process of
> transitioning to v1.5 which creates PNGs.  Thank you.  =)

--
Isaac Grover - isaac at coe.engr.sjsu.edu
SJSU College of Engineering, ECS / Networking
ENG 237, (408) 924-4074




-- Attached file removed by Listar and put at URL below --
-- Type: image/gif
-- Size: 18k (19372 bytes)
-- URL : http://www.ee.ethz.ch/~slist/pantomime/02-OSR-237.2001-d-n.gif


-- Attached file removed by Listar and put at URL below --
-- Type: image/gif
-- Size: 19k (20410 bytes)
-- URL : http://www.ee.ethz.ch/~slist/pantomime/OSW9-204.4002-d-n.gif


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi