weird graphing issue

[btomjack]

attached is a screen shot of a weird graphing occurrence that has plagued one of the graphs monitoring the primary router of my network.

here is the setup:

eth0 is the eternal internet interface
eth1 is the internal interface
eth2 is a dmz network of servers

for some reason eth0 is heavily gapping (even though there is traffic flowing at all times) this happens every day, and appears to be only when the interface is under load. but eth1 doesn't do this, and it sees more traffic than the other interface.


any hints on what would be causing this type of behavior is greatly appreciated

thanks!

[gandalf]

Please visit Graph Management, select DEBUG to find the rrd file used. Then, run "rrdtool info" against that file to find the current MAXIMUM settings for that data source. Please report findings
Reinhard

[btomjack]

Here is the output:

[root@ns1 ~]# rrdtool info /var/www/html/cacti/rra/firewall_traffic_in_749.rrd
filename = "/var/www/html/cacti/rra/firewall_traffic_in_749.rrd"
rrd_version = "0003"
step = 300
last_update = 1208190065
ds[traffic_in].type = "COUNTER"
ds[traffic_in].minimal_heartbeat = 600
ds[traffic_in].min = 0.0000000000e+00
ds[traffic_in].max = 1.0000000000e+07
ds[traffic_in].last_ds = "1709871460"
ds[traffic_in].value = 6.2849958217e+08
ds[traffic_in].unknown_sec = 0
ds[traffic_out].type = "COUNTER"
ds[traffic_out].minimal_heartbeat = 600
ds[traffic_out].min = 0.0000000000e+00
ds[traffic_out].max = 1.0000000000e+07
ds[traffic_out].last_ds = "2246084260"
ds[traffic_out].value = 1.3133037050e+08
ds[traffic_out].unknown_sec = 0
rra[0].cf = "AVERAGE"
rra[0].rows = 600
rra[0].pdp_per_row = 1
rra[0].xff = 5.0000000000e-01
rra[0].cdp_prep[0].value = NaN
rra[0].cdp_prep[0].unknown_datapoints = 0
rra[0].cdp_prep[1].value = NaN
rra[0].cdp_prep[1].unknown_datapoints = 0
rra[1].cf = "AVERAGE"
rra[1].rows = 700
rra[1].pdp_per_row = 6
rra[1].xff = 5.0000000000e-01
rra[1].cdp_prep[0].value = 3.7609527674e+07
rra[1].cdp_prep[0].unknown_datapoints = 0
rra[1].cdp_prep[1].value = 7.6958066668e+06
rra[1].cdp_prep[1].unknown_datapoints = 0
rra[2].cf = "AVERAGE"
rra[2].rows = 775
rra[2].pdp_per_row = 24
rra[2].xff = 5.0000000000e-01
rra[2].cdp_prep[0].value = 3.7609527674e+07
rra[2].cdp_prep[0].unknown_datapoints = 0
rra[2].cdp_prep[1].value = 7.6958066668e+06
rra[2].cdp_prep[1].unknown_datapoints = 0
rra[3].cf = "AVERAGE"
rra[3].rows = 797
rra[3].pdp_per_row = 288
rra[3].xff = 5.0000000000e-01
rra[3].cdp_prep[0].value = 4.5567945589e+08
rra[3].cdp_prep[0].unknown_datapoints = 1
rra[3].cdp_prep[1].value = 9.7309065357e+07
rra[3].cdp_prep[1].unknown_datapoints = 0
rra[4].cf = "MAX"
rra[4].rows = 600
rra[4].pdp_per_row = 1
rra[4].xff = 5.0000000000e-01
rra[4].cdp_prep[0].value = NaN
rra[4].cdp_prep[0].unknown_datapoints = 0
rra[4].cdp_prep[1].value = NaN
rra[4].cdp_prep[1].unknown_datapoints = 0
rra[5].cf = "MAX"
rra[5].rows = 700
rra[5].pdp_per_row = 6
rra[5].xff = 5.0000000000e-01
rra[5].cdp_prep[0].value = 9.6322162307e+06
rra[5].cdp_prep[0].unknown_datapoints = 0
rra[5].cdp_prep[1].value = 2.1007338878e+06
rra[5].cdp_prep[1].unknown_datapoints = 0
rra[6].cf = "MAX"
rra[6].rows = 775
rra[6].pdp_per_row = 24
rra[6].xff = 5.0000000000e-01
rra[6].cdp_prep[0].value = 9.6322162307e+06
rra[6].cdp_prep[0].unknown_datapoints = 0
rra[6].cdp_prep[1].value = 2.1007338878e+06
rra[6].cdp_prep[1].unknown_datapoints = 0
rra[7].cf = "MAX"
rra[7].rows = 797
rra[7].pdp_per_row = 288
rra[7].xff = 5.0000000000e-01
rra[7].cdp_prep[0].value = 9.9120787517e+06
rra[7].cdp_prep[0].unknown_datapoints = 1
rra[7].cdp_prep[1].value = 2.1007338878e+06
rra[7].cdp_prep[1].unknown_datapoints = 0

[jdc1898]

did you try using 64 bit counters?

[btomjack]

im not quite sure if i fully understand what counters you are talking about. so the likely answer there is no i guess. but if you could elaborate a little bit more on that i would appreciate it. (the system doing the polling is not a 64 bit system)