[mrtg] Re: negative values?

[Perry, Duane]

I forgot that in notation it is reporting 1/1000th of a bit.  So it is reporting millibits?  microbits?   MRTG ignores values above the MaxBytes settings, why would it report extremely small values that would be better displayed as zero?  These are workstations that usually have a constant background traffic of 10-20k which should set the scale high enough that these tiny spikes should disappear.  Here is the link to the graphs, you can see that some stations actually have 60M spikes while others show the 25m (note the lower case m) spikes: http://npsstat7.iats.missouri.edu/perl/14all.cgi?cfg=gillett450-252.cfg  Thanks for the positive tip but I still don't get it.

Duane Perry
University of Missouri

-----Original Message-----
From: Alex van den Bogaerdt [mailto:alex at slot.hollandcasino.nl]
Sent: Monday, April 22, 2002 5:47 PM
To: Perry, Duane
Cc: MRTG users
Subject: Re: [mrtg] negative values?


Perry, Duane wrote:

> > We are using MRTG to track down the ever increasing amount of denial of service attacks here.  Most of our port stats are collected using RRD.  The attacks usually show up as 60Mb spikes on the graphs.  I noticed a number of spikes today that had a lower case "m" for the scale.  I used rrdtool to dump the data and found lines with negative values like this:
> > 
> > <!-- 2002-04-22 -3:30:00 CDT / 1019464200 --> <row><v> 1.0819672131e-03 </v><v> 1.0819672131e-03 </v></row>
> > <!-- 2002-04-22 -3:35:00 CDT / 1019464500 --> <row><v> 3.2786885246e-03 </v><v> 3.2786885246e-03 </v></row>

These are small, positive values.  

> > Duane Perry 
> > University of Missouri


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi