monitor graph

[suthomas1]

Hello ,

Although this is non-cisco , wanted to get an opinion on my query from folks here.

Attached is an image from mrtg output of a link. It has been observed that for past few days, the graph levels out as seen in the image file.

Anyone, please help me understand what could be causing this. Is this normal or not?

Appreciate all assistance.

[Joe Clarke]

That's hard to say.  Normal is very subjective.  You should look at the octet counters on this interface to see if they match the pattern you are seeing in this graph.  It could very well be that this interface has reached a constant steady-state of traffic.  MRTG will calculate interface throughput by looking at the input and output octets over a five minute period.  The function is (for output bps):

delta(ifOutOctets) * 8
---------------------- = bps
         300

[suthomas1]

Thanks for your answer. Few more queries though, setup is as follows:

   Two routers at headend in HSRP mode ( loadsharing mode by bgp) , connected to two distribution mode layer 2 switches , which then go to different spoke sites.

With this setup, we are trying to gather usage for each spoke site. Both routers are configured as multiple encapsulation to the access switch ports for each spoke. we ran mrtg on both routers . Strange thing noticed is router1's graph looks near accurate whereas router2's graphs for spokes looks inaccurate with usage being very low and getting flat at bps.( which is highly unlikely ).

Please help as to why is this happening so? router2's graph should also be getting its stats from Switch2 as that is the access part.

Anyways to rectify this.

Thanks in advance!

[Joe Clarke]

What do the "show interface" counters report for the same interfaces being managed by MRTG?  Do they agree?

[suthomas1]

Corresponding interface counters on devices dont match with what is seen on graph. Interface shows quite good amount of traffic.

Thanks!

[Joe Clarke]

What kind of interface is this?  Post the output of "show interface" run twice with a five minute gap between each execution.  Additionally, post the output of an SNMP Walk of the ifTable taken at the same times as the "show interface" output.

[suthomas1]

Thanks. How do i get the snmp walk of iftable . Is there a command to get it, please let me know .

Thanks!

[Joe Clarke]

You will need an snmpwalk tool like the one provided in the Net-SNMP suite (http://net-snmp.sf.net).  Then, run the command:

snmpwalk -v 2c -c COMMUNITY IP ifTable