[mrtg] Re: Graph is different

[PAUL WILLIAMSON]

>>> Beast <beast at i6x.org> 06/10/05 9:40 AM >>>
> 
> I have monitor small cisco router (3640/2600) for many years, 
> however in the last 3 weeks,  the graph is *very* different 
> between eth0 (LAN) and s0(WAN).

Ok, that would indicate a problem on one side or the other.

> Since it only 2 interfaces, the graph should be identical, but 
> not right now. 

That is a very bad assumption.  Rarely is this the case for 
our internet facing routers.  Even within our network, 
the internal eth (or fa, or ge) interfaces are sometimes not 
the same as the "outgoing" ones.

> For example incoming on S0 is 29 kbps but outgoing in ETH0 
> is 490kbps and it happen most of the time, what could be 
> the reason?

Virus on a PC.  Something wild going on inside your LAN.
Start up something like ntop or ethereal and span a port 
to capture data on the lan side. 

> I already tried to restart router or clear the counter but 
>it still happen.

Because all the router is doing is reporting the packets it 
is handling.  You haven't done anything to figure out 
WHY there is lots more traffic internally.

Paul

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi