[mrtg] Re: negative values?

[Billy McCord]

Are you polling the SNMP V2 mibs? It looks like the counter might be
wrapping before you sample the next time... just a thought, ...


-Billy
----- Original Message -----
From: "Perry, Duane" <PerryD at missouri.edu>
To: <mrtg at list.ee.ethz.ch>
Sent: Monday, April 22, 2002 3:26 PM
Subject: [mrtg] negative values?


>
>
> > We are using MRTG to track down the ever increasing amount of denial of
service attacks here.  Most of our port stats are collected using RRD.  The
attacks usually show up as 60Mb spikes on the graphs.  I noticed a number of
spikes today that had a lower case "m" for the scale.  I used rrdtool to
dump the data and found lines with negative values like this:
> >
> > <!-- 2002-04-22 -3:30:00 CDT / 1019464200 --> <row><v> 1.0819672131e-03
</v><v> 1.0819672131e-03 </v></row>
> > <!-- 2002-04-22 -3:35:00 CDT / 1019464500 --> <row><v> 3.2786885246e-03
</v><v> 3.2786885246e-03 </v></row>
> >
> > What does the loser case m stand for? Has anyone else ever seen this?
What could cause values like that?
> >
> > I have MaxBytes set to 12500000 with Options: bits
> >
> > Duane Perry
> > University of Missouri
> >
> >
>
> --
> Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
> Archive     http://www.ee.ethz.ch/~slist/mrtg
> FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi