[rrd-users] Problems with setting up RRD for counting firewallhits

[Torben Janssen]

Hi,

i'm trying to set up a rrd to measure the hits in my firewall. i wrote a
script, that check
the firewall-log and count the hits per minute.

i thought that i should use ABSOLUTE as DST. i'd like to have a graph where
the hits are
drawn like in my little ascii-art below.

!
!   #
!   #                  #
!   #          #      #
!   #    #    #      #
!   ####    #      #
------------------------->
y=hits per minute / x=time

i used:
rrdtool create firewall.rrd --step 60 -b -1year\
DS:hits:ABSOLUTE:60:U:U \
RRA:MAX:0.999:1:1440

my script only add data to the rrd when at least one hit per minute was
logged. i thought
that for every minute where no data is added the value is NaN.

but that does not work. i'm not sure where my problem is.

i am a little confused about the DST.
when i add data like:
rrdtool update firewall.rrd 1029925800:15     # 12:30:00
rrdtool update firewall.rrd 1029925860:1       # 12:31:00
rrdtool update firewall.rrd 1029925980:1       # 12:33:00
rrdtool update firewall.rrd 1029926040:4       # 12:34:00
rrdtool update firewall.rrd 1029926100:2       # 12:35:00
rrdtool update firewall.rrd 1029926160:2       # 12:36:00
rrdtool update firewall.rrd 1029926220:6       # 12:37:00
rrdtool update firewall.rrd 1029926280:4       # 12:38:00
rrdtool update firewall.rrd 1029926400:2       # 12:40:00
rrdtool update firewall.rrd 1029926700:2       # 12:45:00

i thought that all steps without data is NaN but the dump shows:
<!-- 2002-08-21 12:30:00 CEST / 1029925800 --> <row><v> NaN </v></row>
<!-- 2002-08-21 12:31:00 CEST / 1029925860 --> <row><v> 1.6666666667e-02
</v></row>
<!-- 2002-08-21 12:32:00 CEST / 1029925920 --> <row><v> 8.3333333333e-03
</v></row>
<!-- 2002-08-21 12:33:00 CEST / 1029925980 --> <row><v> 8.3333333333e-03
</v></row>
<!-- 2002-08-21 12:34:00 CEST / 1029926040 --> <row><v> 6.6666666667e-02
</v></row>
<!-- 2002-08-21 12:35:00 CEST / 1029926100 --> <row><v> 3.3333333333e-02
</v></row>
<!-- 2002-08-21 12:36:00 CEST / 1029926160 --> <row><v> 3.3333333333e-02
</v></row>
<!-- 2002-08-21 12:37:00 CEST / 1029926220 --> <row><v> 1.0000000000e-01
</v></row>
<!-- 2002-08-21 12:38:00 CEST / 1029926280 --> <row><v> 6.6666666667e-02
</v></row>
<!-- 2002-08-21 12:39:00 CEST / 1029926340 --> <row><v> 1.6666666667e-02
</v></row>
<!-- 2002-08-21 12:40:00 CEST / 1029926400 --> <row><v> 1.6666666667e-02
</v></row>
<!-- 2002-08-21 12:41:00 CEST / 1029926460 --> <row><v> 6.6666666667e-03
</v></row>
<!-- 2002-08-21 12:42:00 CEST / 1029926520 --> <row><v> 6.6666666667e-03
</v></row>
<!-- 2002-08-21 12:43:00 CEST / 1029926580 --> <row><v> 6.6666666667e-03
</v></row>
<!-- 2002-08-21 12:44:00 CEST / 1029926640 --> <row><v> 6.6666666667e-03
</v></row>
<!-- 2002-08-21 12:45:00 CEST / 1029926700 --> <row><v> 6.6666666667e-03
</v></row>

i cannot understand that data. i would like to have the values
15,1,NaN,1,4,2,2,6,4,NaN,2,....

where am i wrong???

thank you.

torben







--
Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
Archive     http://www.ee.ethz.ch/~slist/rrd-users
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi