[rrd-users] Re: RRD-Implementation of Aberrant Behavior Detection
ch_cu2 at yahoo.fr
ch_cu2 at yahoo.fr
Fri Oct 27 15:40:32 MEST 2006
Hi Christoph,
We've recently begun testing the HoltWinters algorithm... and that's not
that easy to configure. I mean, the setting of the alpha, beta, etc. all
depends to the particular behavior & nature of your data sources. Thus,
a particular set of values may become outdated if the nature of your
data source's evolution changes over time. A concrete example: we got a
firewall monitored, which was on a relatively peaceful network. Then a
bulky web application was added, which modified slightly the behavior of
the traffic on this firewall...
So, nothing easy, but definitively useful... And of course any advice
and question will be welcomed!
PS: we are not using RRDTool itself but a c# port that we've built and
which, relying on the same specifications, is supposed to do the same
aberrant behavior detection.
Cheers,
Christian
Baumann, Christoph a écrit :
> Content-Type: text/plain;
> charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> Hi,
>
> =20
>
> I use rrdtool to store a lot of data about interfaces, cpu, memory ect.
>
> =20
>
> As I use a combination of rrdtool (the greatest) and draw (also the
> greatest) see: http://web.taranis.org/drraw/=20
>
> I feel now ready for struggling with "RRD-Implementation of Aberrant
> Behavior Detection"
>
> =20
>
> I made all RRA's with the Option "RRA:HWPREDICT:1440:0.1:0.0035:288".=20
>
> =20
>
> So I am ready for it. But what does it mean? A bit I can see here:=20
> http://oss.oetiker.ch/rrdtool/doc/index.en.html
>
> A very good, but form the year 2000 you can find here:=20
> http://cricket.sourceforge.net/aberrant/rrd_hw.htm
> <http://cricket.sourceforge.net/aberrant/rrd_hw.htm>=20
>
> =20
>
> But how do they work together? Who does work with this Feature and likes
> to exchange some experiences ??
>
> =20
>
> =20
>
> Christoph Baumann
>
> =20
>
> =20
>
>
>
>
> -- Attached file removed by Ecartis and put at URL below --
> -- Type: image/png
> -- Desc: predict2.png
> -- Size: 64k (66086 bytes)
> -- URL : http://lists.ee.ethz.ch/p/predict2.png
>
>
> --
> Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
> Help mailto:rrd-users-request at list.ee.ethz.ch?subject=help
> Archive http://lists.ee.ethz.ch/rrd-users
> WebAdmin http://lists.ee.ethz.ch/lsg2.cgi
>
>
>
___________________________________________________________________________
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions !
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses
http://fr.answers.yahoo.com
--
Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
Help mailto:rrd-users-request at list.ee.ethz.ch?subject=help
Archive http://lists.ee.ethz.ch/rrd-users
WebAdmin http://lists.ee.ethz.ch/lsg2.cgi
More information about the rrd-users
mailing list