[mrtg] Re: Different traffic on each side of a link

[Nicolai Strøm Gylling]

>You seem to insist that the switch is the problem.  Why not the server?

Well, mainly because we have an unusual amount of bradcast-traffic, generated by 2 servers, which spans several switches, and we have also observed some spikes, which only appears in the switch end.

> Maybe you want to deploy a network sniffer.  Do the following:
>
> 1) Start a capture session
> 2) query the ifInOctets and ifOutOctets counters on both ends
> 3) wait some time, for instance a minute
> 4) query the ifInOctets and ifOutOctets counters on both ends again
> 5) stop the capture
> In the capture you will see the device being polled so you know what is counted from that moment on.  You can > thus edit the capture file and strip anything between (1) and (2) as well as between (4) and (5).
> Now you can analize the data in your capture file and compare with
> delta(ifInOctets) and delta(ifOutOctets).

Yes, i will try this. Thanks for the help.

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi