[mrtg] Re: MRTG or SNMP Oddity

[Merton Campbell Crockett]

On Mon, 20 Jan 2003, Holt Grendal wrote:

> 
> Hello all,
> 
> I'm having a strage problem with our mrtg bandwidth graphs when
> sudden spikes (DoS attacks) occur.
> 
> Logging into the Cisco switch during the DoS attack and doing
> a "show int" on the involved ports clearly shows the attack going
> into port 1 and out of port 10, in bits/sec and packets/sec.
> 
> I'm beginning to think there is some kind of problem with
> SNMP. Does anyone have any ideas or have seen this type of
> behavior before?

SNMP is discardable UDP traffic.  It is not unusual to see SNMP packets
discarded when a network device becomes overloaded.

Merton Campbell Crockett


-- 
BEGIN:				vcard
VERSION:			3.0
FN:				Merton Campbell Crockett
ORG:				General Dynamics Advanced Information Systems;
				Intelligence Solutions
N:				Crockett;Merton;Campbell
EMAIL;TYPE=internet:		mcc at CATO.GD-AIS.COM
TEL;TYPE=work,voice,msg,pref:	+1(805)497-5045
TEL;TYPE=pager,msg:		+1(877)528-0049
TEL;TYPE=fax,work:		+1(805)497-5050
TEL;TYPE=cell,voice,msg:	+1(805)377-6762
END:				vcard

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi