From v.guk at zaz.zp.ua Mon Feb 18 14:48:50 2013 From: v.guk at zaz.zp.ua (Victor Guk) Date: Mon, 18 Feb 2013 15:48:50 +0200 Subject: [mrtg] MRTG not draw outbound traffic Message-ID: <51223142.3060805@zaz.zp.ua> Hi, MRTG(2.16.2) not draw my outbound traffic. Config: WorkDir: /srv/www/mrtg Options[_]: bits,growright EnableIPv6: no ### Interface 8 >> Descr: 'eth0.10' | Name: '' | Ip: '11.0.0.1' | Eth: '' ### Target[xxxxxxxxxxxx_8]: 8:public at xxxxxxxxxxxx: SetEnv[xxxxxxxxxxxx_8]: MRTG_INT_IP="11.0.0.1" MRTG_INT_DESCR="eth0.10" MaxBytes[xxxxxxxxxxxx_8]: 625000 AbsMax[xxxxxxxxxxxx_8]: 12500000 YSize[xxxxxxxxxxxx_8]: 250 XSize[xxxxxxxxxxxx_8]: 600 Title[xxxxxxxxxxxx_8]: Traffic Analysis for 8 -- Gate PageTop[xxxxxxxxxxxx_8]:

Traffic Analysis for 8 -- Gate

System: Gate in Unknown
Maintainer: root at localhost
Description: eth0.10
ifType: ethernetCsmacd (6)
ifName:
Max Speed: 12.5 MBytes/s
Ip: 11.0.0.1 ()
When I interrogate counters for SNMP, the correct values ??are returned test:/etc/mrtg # snmpget -c public -v 2c xxxxxxxxxxxx IF-MIB::ifInOctets.8 IF-MIB::ifInOctets.8 = Counter32: 295138047 test:/etc/mrtg # snmpget -c public -v 2c xxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 102886 Why not draw mrtg outbound traffic? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.oetiker.ch/pipermail/mrtg/attachments/20130218/6868603a/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: cfgajfdf.png Type: image/png Size: 11344 bytes Desc: not available Url : http://lists.oetiker.ch/pipermail/mrtg/attachments/20130218/6868603a/attachment.png From dan.mcdonald at austinenergy.com Mon Feb 18 16:50:52 2013 From: dan.mcdonald at austinenergy.com (Daniel McDonald) Date: Mon, 18 Feb 2013 09:50:52 -0600 Subject: [mrtg] MRTG not draw outbound traffic In-Reply-To: <51223142.3060805@zaz.zp.ua> Message-ID: On 2/18/13 7:48 AM, "Victor Guk" wrote: > Hi, > Config: > > WorkDir: /srv/www/mrtg > Options[_]: bits,growright > EnableIPv6: no > > test:/etc/mrtg # snmpget -c public -v 2c xxxxxxxxxxxx IF-MIB::ifInOctets.8 > IF-MIB::ifInOctets.8 = Counter32: 295138047 > > test:/etc/mrtg # snmpget -c public -v 2c xxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 102886 Your config doesn't show snmp version 2. It's sanitized, so you might have just skipped it, but you probably need to show it. If using snmp v2, the relevant counters are ifHCInOctets and ifHCOutOctets You currently have maxbytes as 5mb/s and absmax as 100mb/sec. If all of the traffic is over 100mb/sec then MRTG will ignore it. Have you tried taking several snapshots of ifHCOutOctets to see if it is incrementing? Cisco subinterfaces (like eth0.10) have a long history of bad mibs... Might be a bug in whatever version of code you are running. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 From s.shipway at auckland.ac.nz Mon Feb 18 20:20:43 2013 From: s.shipway at auckland.ac.nz (Steve Shipway) Date: Mon, 18 Feb 2013 19:20:43 +0000 Subject: [mrtg] MRTG not draw outbound traffic In-Reply-To: <51223142.3060805@zaz.zp.ua> References: <51223142.3060805@zaz.zp.ua> Message-ID: <7294716191A1E142B80615ED2C633BCA5788551A@uxcn10-2.UoA.auckland.ac.nz> Check that the ifOutOctets counter is actually increasing - MRTG graphs the rate of increase, so possibly the rate is zero. The number looks rather small. Check that the rate of increase is not greater than AbsMax (100Mbps), since if it is, it will be ignored. If the device supports SNMPv2, use that by having the :::::2 suffix on the target -- Targets[xxxx_8]: 8:public at xxxx:::::2 Some SNMP agents support v1 or v2c correctly but not the other. Steve Steve Shipway University of Auckland ITS UNIX Systems Design Lead s.shipway at auckland.ac.nz Ph: +64 9 373 7599 ext 86487 ________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.oetiker.ch/pipermail/mrtg/attachments/20130218/7d3826cf/attachment-0001.htm From v.guk at zaz.zp.ua Tue Feb 19 08:07:55 2013 From: v.guk at zaz.zp.ua (Victor Guk) Date: Tue, 19 Feb 2013 09:07:55 +0200 Subject: [mrtg] MRTG not draw outbound traffic In-Reply-To: <7294716191A1E142B80615ED2C633BCA5788551A@uxcn10-2.UoA.auckland.ac.nz> References: <51223142.3060805@zaz.zp.ua> <7294716191A1E142B80615ED2C633BCA5788551A@uxcn10-2.UoA.auckland.ac.nz> Message-ID: <512324CB.3080007@zaz.zp.ua> 18.02.2013 21:20, Steve Shipway ?????: > Check that the ifOutOctets counter is actually increasing - MRTG > graphs the rate of increase, so possibly the rate is zero. The number > looks rather small. Measured with an interval of 5 minutes. test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103806 test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103806 test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103852 test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103898 test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103898 test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 IF-MIB::ifOutOctets.8 = Counter32: 103990 > > Check that the rate of increase is not greater than AbsMax (100Mbps), > since if it is, it will be ignored. On this interface can not pass more than 5 MB/s. Of this I am sure. > > If the device supports SNMPv2, use that by having the :::::2 suffix on > the target -- > > Targets[xxxx_8]: 8:public at xxxx:::::2 > > Some SNMP agents support v1 or v2c correctly but not the other. > > Steve Apparently SNMPv2 not supported by the remote device. Incidentally, it is not CISCO device, is Linux server. test:/tmp # mrtg /tmp/mrtg.cfg --debug="snpo" --snpo: run snmpget from ifHCInOctets&ifHCOutOctets:public at xxxxxxxxxxxxxx --snpo: simple If: .4 --snpo: simple If: .4 --snpo: SNMPGet from public at xxxxxxxxxxxxxx:::::2 -- ifHCInOctets.4,ifHCOutOctets.4,sysUptime,sysName --snpo: SNMPfound -- 'undef', 'undef', '23:45:57', 'Gate' 2013-02-19 08:27:34: ERROR: Target[xxxxxxxxxxxxxx_8][_IN_] ' $target->[0]{$mode} ' did not eval into defined data 2013-02-19 08:27:34: ERROR: Target[xxxxxxxxxxxxxx_8][_OUT_] ' $target->[0]{$mode} ' did not eval into defined data -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.oetiker.ch/pipermail/mrtg/attachments/20130219/8f68d157/attachment.htm From dan.mcdonald at austinenergy.com Tue Feb 19 13:56:43 2013 From: dan.mcdonald at austinenergy.com (Daniel McDonald) Date: Tue, 19 Feb 2013 06:56:43 -0600 Subject: [mrtg] MRTG not draw outbound traffic In-Reply-To: <512324CB.3080007@zaz.zp.ua> Message-ID: On 2/19/13 1:07 AM, "Victor Guk" wrote: > > > 18.02.2013 21:20, Steve Shipway ?????: > > >> Check that the ifOutOctets counter is actually increasing - MRTG graphs the >> rate of increase, so possibly the rate is zero. The number looks rather >> small. >> > > Measured with an interval of 5 minutes. > > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103806 > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103806 > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103852 > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103898 > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103898 > test:/tmp # snmpget -c public -v 2c xxxxxxxxxxxxxx IF-MIB::ifOutOctets.8 > IF-MIB::ifOutOctets.8 = Counter32: 103990 Less than 200 bytes in 5 minutes? Mrtg is accurately displaying what your mib is reporting - essentially zero traffic. Knowing that it is a sub-interface you are using, I would suspect you have a routing problem on your box in which packets are received on this interface and transmitted out a "default" interface. More than likely the only traffic transmitted out this interface is arp. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281