traffic interface overflowing

[Devroush]

Hi,

I noticed something strange yesterday in one of my traffic graphs, when I was moving quite a lot of data. I took a screenshot (see attachment). At some point the outbound traffic just didn't show up on the graph anymore.
The last valid datapoint was at 9.40 PM, at 11.20 PM, the outbound traffic showed up again. I looked in the logs and this is what I got:

Code: Select all

11/01/2008 09:40:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3385314491
11/01/2008 09:45:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3454308448
11/01/2008 09:50:11 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3524015726
11/01/2008 09:55:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3590498413
11/01/2008 10:00:11 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3663184849
11/01/2008 10:05:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3730070511
11/01/2008 10:10:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3800559364
11/01/2008 10:15:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3870917173
11/01/2008 10:20:11 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3944887480
11/01/2008 10:25:14 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4016578645
11/01/2008 10:30:11 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4084355959
11/01/2008 10:35:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4155611327
11/01/2008 10:40:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4226732440
11/01/2008 10:45:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 2957899
11/01/2008 10:50:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 71106141
11/01/2008 10:55:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 139288183
11/01/2008 11:00:14 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 210901623
11/01/2008 11:05:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 275849196
11/01/2008 11:10:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 343758333
11/01/2008 11:15:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 412039073
11/01/2008 11:20:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 480252224
11/01/2008 11:25:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 500548029
11/01/2008 11:30:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 501047712
11/01/2008 11:35:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 535726269
11/01/2008 11:40:09 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 536991813
11/01/2008 11:45:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 538007421
11/01/2008 11:50:10 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 539909398
11/01/2008 11:55:11 PM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 541436326
11/02/2008 12:00:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 664224672
11/02/2008 12:05:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1186370858
11/02/2008 12:10:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1616338200
11/02/2008 12:15:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 2045796447
11/02/2008 12:20:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 2471309391
11/02/2008 12:25:12 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 2753720824
11/02/2008 12:30:12 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3036084488
11/02/2008 12:35:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3468655610
11/02/2008 12:40:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 3899702678
11/02/2008 12:45:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4262228662
11/02/2008 12:50:09 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4263280342
11/02/2008 12:55:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 4272086859
11/02/2008 01:00:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 318195237
11/02/2008 01:05:12 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 936221656
11/02/2008 01:10:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1447036276
11/02/2008 01:15:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1665425443
11/02/2008 01:20:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1666759225
11/02/2008 01:25:10 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1668338024
11/02/2008 01:30:11 AM - CMDPHP: Poller[0] Host[9] DS[122] SNMP: v1: Corleone, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 1982935377

At some point, the variable overflowed. Now, I know this is standard UNIX behaviour, that the traffic amount overflows at 4 GiB. But the first overflow happened at 10.40PM (not 9.40 PM), I checked and yes, the logs show the correct time, so I guess it isn't a daylight saving time issue. And why did the traffic show up on the graph again specifically at 11.20 PM? I'm just a little bit confused from what happened here. I hope you guys could clarify . Also, I wonder if cacti really doesn't have a workaround for this overflow issue?

[BorisL]

The simpiest way is to use 64 bit counters.

Never the less, please show creation script for rrd-file for this graph (can be gained turning on debug in datasource edit dialog).