Indeed, Observium itself replaces ifSpeed with the contents of ifHighSpeed if that is being sent. So if we're not getting ifHighSpeed in for some reason the Speed will be set at 2^32 ...
Maybe we should handle 2^32 as "the interface is high speed and we need ifHighSpeed - if we don't receive it, stay at old value" ?
Tom
On 13/09/2016 22:13, Adam Armstrong wrote:
the larger number comes from ifHighSpeed. If that's occasionally missing from the output, it'll revert to the ifSpeed value.
adam.On 13/09/2016 14:38:54, Tim Cooper <lists@coop3r.com> wrote:
4294967295 is the maximum value of a 32bit value, this is likely to be being returned by the device. Not sure why.
adam.
Looks like ifSpeed is supposed to report back 4294967295 if the interface is faster that 1gig. Thinking back I remember seeing something about this on the mailing list a while back? Question is why the device is switching to 10000000000 on ifSpeed intermittently when it should be a 32bit limit...
Will have to set something up to try and capture it happening and raise a TAC case :/
Thanks for your help,
Tim C
On 13/09/2016 13:38:53, Tim Cooper <lists@coop3r.com> wrote:
The only way this is likely to happen is if the ifSpeed/ifHighSpeed value of the device changes.
adam.
Thanks Adam. Yep, ifSpeed seems to be changing between 4294967295 and 10000000000 intermittently. :/
Just to save the first bit of digging, is this likely to be the device mis-reporting this specific value, or being set to a special value by observium because of missing or invalid response?
On 2016-09-13 11:39, Mailing Lists wrote:
Had a couple of utilisation alerts come through today reporting a
10Gig port as over 80% utilisation, when in reality it doesnt appear
to be that busy?.
The alert email shows this graph, showing over 100% utilisation and a
solid 80+% most of the day:
When you click through the embedded link to the 'real' graph in
Observium itself, it reports the correct utilisation figures I would
epxect to see based on the traffic graph:
Traffic graph for the port:
Are the alerts reading the information from a different rrd? Doesn't
seem like it as the port would be alarming constantly based on the
graph in the email as it shows over 80% for most of the day?
Happy to accept that the port may have spiked to 8Gbps, but I would
have thought this would have been reflected in the graphs somewhere
but if anything traffic was tailing off?
Is there possibly an issue with the alerting on ifInOctets_perc or do
I need to be looking more closely at what the device is reporting,
which on face value _seems_ OK looking at a debug of poller.php?
Thanks,
Tim C
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium