Aggregate Graph issues

[gesalec]

Okay, so the idea was to create a graph that only showed the total inbound and total outbound for multiple switch ports.

The numbers are coming up correctly, the only problem is that the graph itself is messed up. The outbound line follows the inbound area and it should not be doing that. Does anyone have an idea as to why it might be?

I have provided my graph image, graph debug printout, and graph defintion below.



/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="xxxxxxxxxxxx" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="bits per second" \
--slope-mode \
DEF:a="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_in:AVERAGE \
DEF:b="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_in:AVERAGE \
DEF:c="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_in:AVERAGE \
DEF:d="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_in:AVERAGE \
DEF:e="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_out:AVERAGE \
DEF:f="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_out:AVERAGE \
DEF:g="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_out:AVERAGE \
DEF:h="/usr/share/cacti/site/rra/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rrd":traffic_out:AVERAGE \
CDEF:cdefa=a,8,* \
CDEF:cdefb=b,8,* \
CDEF:cdefc=c,8,* \
CDEF:cdefd=d,8,* \
CDEF:cdefe=TIME,1181679081,GT,a,a,UN,0,a,IF,IF,TIME,1181679081,GT,b,b,UN,0,b,IF,IF,TIME,1181679081,GT,c,c,UN,0,c,IF,IF,TIME,1181679081,GT,d,d,UN,0,d,IF,IF,TIME,1181679081,GT,d,d,UN,0,d,IF,IF,TIME,1181679081,GT,e,e,UN,0,e,IF,IF,TIME,1181679081,GT,f,f,UN,0,f,IF,IF,TIME,1181679081,GT,g,g,UN,0,g,IF,IF,TIME,1181679081,GT,h,h,UN,0,h,IF,IF,TIME,1181679081,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
CDEF:cdefi=e,8,* \
CDEF:cdefj=f,8,* \
CDEF:cdefba=g,8,* \
CDEF:cdefbb=h,8,* \
CDEF:cdefbc=TIME,1181679081,GT,a,a,UN,0,a,IF,IF,TIME,1181679081,GT,b,b,UN,0,b,IF,IF,TIME,1181679081,GT,c,c,UN,0,c,IF,IF,TIME,1181679081,GT,d,d,UN,0,d,IF,IF,TIME,1181679081,GT,d,d,UN,0,d,IF,IF,TIME,1181679081,GT,e,e,UN,0,e,IF,IF,TIME,1181679081,GT,f,f,UN,0,f,IF,IF,TIME,1181679081,GT,g,g,UN,0,g,IF,IF,TIME,1181679081,GT,h,h,UN,0,h,IF,IF,TIME,1181679081,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
AREA:cdefa:"" \
AREA:cdefb:"":STACK \
AREA:cdefc:"":STACK \
AREA:cdefd:"":STACK \
AREA:cdefe#00CF00:"Inbound" \
GPRINT:cdefd:LAST:" Current\:%8.2lf%s" \
GPRINT:cdefd:AVERAGE:"Average\:%8.2lf%s" \
GPRINT:cdefd:MAX:"Maximum\:%8.2lf%s\n" \
AREA:cdefi:"" \
AREA:cdefj:"":STACK \
AREA:cdefba:"":STACK \
AREA:cdefbb:"":STACK \
LINE1:cdefbc#002A97:"Outbound" \
GPRINT:cdefbb:LAST:"Current\:%8.2lf%s" \
GPRINT:cdefbb:AVERAGE:"Average\:%8.2lf%s" \
GPRINT:cdefbb:MAX:"Maximum\:%8.2lf%s\n" \
HRULE:4139211.94#FF0000:"95th Percentile" \
COMMENT:"(4.14 mbit in+out)"

RRDTool Says:

OK

[gandalf]

CDEF:cdefe=TIME,1181677953,GT,a,a,UN,0,a,IF,IF,TIME,1181677953,GT,b,b,UN,0,b,IF,IF,TIME,1181677953,GT,c,c,UN,0,c,IF,IF,TIME,1181677953,GT,d,d,UN,0,d,IF,IF,TI

ME,1181677953,GT,d,d,UN,0,d,IF,IF,TIME,1181677953,GT,e,e,UN,0,e,IF,IF,TIME,1181677953,GT,f,f,UN,0,f,IF,IF,TIME,1181677953,GT,g,g,UN,0,g,IF,IF,TIME,1181677953

,GT,h,h,UN,0,h,IF,IF,TIME,1181677953,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
...
CDEF:cdefbc=TIME,1181677953,GT,a,a,UN,0,a,IF,IF,TIME,1181677953,GT,b,b,UN,0,b,IF,IF,TIME,1181677953,GT,c,c,UN,0,c,IF,IF,TIME,1181677953,GT,d,d,UN,0,d,IF,IF,T

IME,1181677953,GT,d,d,UN,0,d,IF,IF,TIME,1181677953,GT,e,e,UN,0,e,IF,IF,TIME,1181677953,GT,f,f,UN,0,f,IF,IF,TIME,1181677953,GT,g,g,UN,0,g,IF,IF,TIME,118167795

3,GT,h,h,UN,0,h,IF,IF,TIME,1181677953,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
...
AREA:cdefe#00CF00:"Inbound" \
...
LINE1:cdefbc#002A97:"Outbound" \

cdefe and cdefbc are virtually the same, so they show up as mentioned
Reinhard

[gesalec]

I accidentally used the graph image and debug info from a different graph that I was messing with. I have since posted what I had originally intended to.

[gesalec]

cdefe and cdefbc are virtually the same, so they show up as mentioned
Reinhard

The only problem is that cdefe is for outbound traffic and cdefbc is for inbound traffic so they should be different.

[gandalf]

The only problem is that cdefe is for outbound traffic and cdefbc is for inbound traffic so they should be different.

But cdefe refers to DEF's a,b,c,d and not to the correct ones. So it is a wrong cdef for your purpose
Reinhard

[gesalec]

The only problem is that cdefe is for outbound traffic and cdefbc is for inbound traffic so they should be different.

But cdefe refers to DEF's a,b,c,d and not to the correct ones. So it is a wrong cdef for your purpose
Reinhard

Hmmm.....I see that. Any ideas why it is doing this? cdefe should only include DEF's a,b,c and d while cdefbc should only inlcude e,f,g, and h.

I suppose a better question would be....is there a way to make it do this?

[gandalf]

Please delete Item#13 and rebuild it from scratch. Select any OUTBOUND ds when creating it using a "SIMILAR_DATA_SOURCES_NODUPS"-based cdef
Reinhard

[gesalec]

Please delete Item#13 and rebuild it from scratch. Select any OUTBOUND ds when creating it using a "SIMILAR_DATA_SOURCES_NODUPS"-based cdef
Reinhard

I deleted line 13 and recreated. I have included a screen shot of the graph item setup and the resulting output from the graph debug. As you can see the graph debug produces the same results. Oddly enough, I tried this on our development box and it seems to work fine. Same operating system, same version of cacti, etc...


DEF:a="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_298.rrd":traffic_in:AVERAGE \
DEF:b="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_297.rrd":traffic_in:AVERAGE \
DEF:c="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_295.rrd":traffic_in:AVERAGE \
DEF:d="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_296.rrd":traffic_in:AVERAGE \
DEF:e="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_298.rrd":traffic_out:AVERAGE \
DEF:f="/usr/share/cacti/site/rra/ustxhoul3swc07_48a_traffic_in_269.rrd":traffic_out:AVERAGE \
DEF:g="/usr/share/cacti/site/rra/ustxhoul3swc07_48a_traffic_in_271.rrd":traffic_out:AVERAGE \
DEF:h="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_296.rrd":traffic_out:AVERAGE \
CDEF:cdefa=a,8,* \
CDEF:cdefb=b,8,* \
CDEF:cdefc=c,8,* \
CDEF:cdefd=d,8,* \
CDEF:cdefe=TIME,1181912846,GT,a,a,UN,0,a,IF,IF,TIME,1181912846,GT,b,b,UN,0,b,IF,IF,TIME,1181912846,GT,c,c,UN,0,c,IF,IF,TIME,1181912846,GT,d,d,UN,0,d,IF,IF,TIME,1181912846,GT,d,d,UN,0,d,IF,IF,TIME,1181912846,GT,e,e,UN,0,e,IF,IF,TIME,1181912846,GT,f,f,UN,0,f,IF,IF,TIME,1181912846,GT,g,g,UN,0,g,IF,IF,TIME,1181912846,GT,h,h,UN,0,h,IF,IF,TIME,1181912846,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
CDEF:cdefi=e,8,* \
CDEF:cdefj=f,8,* \
CDEF:cdefba=g,8,* \
CDEF:cdefbb=h,8,* \
CDEF:cdefbg=TIME,1181912846,GT,a,a,UN,0,a,IF,IF,TIME,1181912846,GT,b,b,UN,0,b,IF,IF,TIME,1181912846,GT,c,c,UN,0,c,IF,IF,TIME,1181912846,GT,d,d,UN,0,d,IF,IF,TIME,1181912846,GT,d,d,UN,0,d,IF,IF,TIME,1181912846,GT,e,e,UN,0,e,IF,IF,TIME,1181912846,GT,f,f,UN,0,f,IF,IF,TIME,1181912846,GT,g,g,UN,0,g,IF,IF,TIME,1181912846,GT,h,h,UN,0,h,IF,IF,TIME,1181912846,GT,h,h,UN,0,h,IF,IF,+,+,+,+,+,+,+,+,+,8,* \
AREA:cdefa:"" \
AREA:cdefb:"":STACK \
AREA:cdefc:"":STACK \
AREA:cdefd:"":STACK \
AREA:cdefe#00CF00:"Inbound"

[gesalec]

This is perhaps a better example of the problem that I am having....

Here is the Graph Debug with just the inbound traffic and aggregate:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Bastion - Aggregate - 2" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
DEF:a="/usr/share/cacti/site/rra/*****************_traffic_in_298.rrd":traffic_in:AVERAGE \
DEF:b="/usr/share/cacti/site/rra/*****************_traffic_in_295.rrd":traffic_in:AVERAGE \
DEF:c="/usr/share/cacti/site/rra/*****************_traffic_in_297.rrd":traffic_in:AVERAGE \
DEF:d="/usr/share/cacti/site/rra/*****************_traffic_in_296.rrd":traffic_in:AVERAGE \
CDEF:cdefa=a,8,* \
CDEF:cdefb=b,8,* \
CDEF:cdefc=c,8,* \
CDEF:cdefd=d,8,* \
CDEF:cdefe=TIME,1181917934,GT,a,a,UN,0,a,IF,IF,TIME,1181917934,GT,b,b,UN,0,b,IF,IF,TIME,1181917934,GT,c,c,UN,0,c,IF,IF,TIME,1181917934,GT,d,d,UN,0,d,IF,IF,TIME,1181917934,GT,d,d,UN,0,d,IF,IF,+,+,+,+,8,* \
AREA:cdefa:"" \
AREA:cdefb:"":STACK \
AREA:cdefc:"":STACK \
AREA:cdefd:"":STACK \
AREA:cdefe#00CF00:"Total Inbound\:" \
GPRINT:cdefe:LAST:"Current\:%8.2lf%s" \
GPRINT:cdefe:AVERAGE:"Average\:%8.2lf%s" \
GPRINT:cdefe:MAX:"Maximum\:%8.2lf%s"

Here is the Graph debug out put after adding outbound traffic from just one of the ports that I want to monitor (added to the bottom of the graph items list):

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Bastion - Aggregate - 2" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
DEF:a="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_298.rrd":traffic_in:AVERAGE \
DEF:b="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_295.rrd":traffic_in:AVERAGE \
DEF:c="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_297.rrd":traffic_in:AVERAGE \
DEF:d="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_296.rrd":traffic_in:AVERAGE \
DEF:e="/usr/share/cacti/site/rra/ustxhoul3swc07_49a_traffic_in_298.rrd":traffic_out:AVERAGE \
CDEF:cdefa=a,8,* \
CDEF:cdefb=b,8,* \
CDEF:cdefc=c,8,* \
CDEF:cdefd=d,8,* \
CDEF:cdefe=TIME,1181919185,GT,a,a,UN,0,a,IF,IF,TIME,1181919185,GT,b,b,UN,0,b,IF,IF,TIME,1181919185,GT,c,c,UN,0,c,IF,IF,TIME,1181919185,GT,d,d,UN,0,d,IF,IF,TIME,1181919185,GT,d,d,UN,0,d,IF,IF,TIME,1181919185,GT,e,e,UN,0,e,IF,IF,+,+,+,+,+,8,* \
CDEF:cdefi=e,8,* \
AREA:cdefa:"" \
AREA:cdefb:"":STACK \
AREA:cdefc:"":STACK \
AREA:cdefd:"":STACK \
AREA:cdefe#00CF00:"Total Inbound\:" \
GPRINT:cdefe:LAST:"Current\:%8.2lf%s" \
GPRINT:cdefe:AVERAGE:"Average\:%8.2lf%s" \
GPRINT:cdefe:MAX:"Maximum\:%8.2lf%s" \
AREA:cdefi:""


As you can see, the outbound traffic is added to the inbound aggregate.

[gandalf]

Thanks for clarification. I'm quite sure that it is possible to solve this. But it will take considerable time to figure out and explain. I will put it onto my todo list
Reinhard

[gandalf]

Please show the the garph item that was used for totalling and the CDEF used therein (please post two screenshots)
Reinhard