Checkpoint Firewall Packet Statistics

[d0nni3q]

Anyone else experiencing large (14+ million packets) spikes when installing the policy through SmartDashboard? If I leave the firewall policy(s) alone, the graphs are okay, and it contains usable information. However, when I install a policy after updating a rule, etc., all packet counters spike up to over 14 million, then immediately drop off.

I've already tried running removespikes.pl against the related rrd files, but nothing changes.

Yes; however, it can be fixed by changing the data source type to "DERIVE" rather than "COUNTER". The difference is defined here http://www.cacti.net/downloads/docs/htm ... _TEMPLATES. Enjoy.

[eugenchirila]

Nobody fix this???
I have the same problem with my cacti 0.8.7d run on fedora 9, and this is my RRD tool say:


RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="CheckPoint FW1 - Checkpoint Packet Statistics" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="Packets" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
DEF:a="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwAcceptPcktsIn:AVERAGE \
DEF:b="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwDropPcktsIn:AVERAGE \
DEF:c="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwRejectPcktsIn:AVERAGE \
AREA:a#00CF00FF:"Accepted Packets\:" \
GPRINTLAST:"Current\:" \
GPRINTAVERAGE:"Average\:" \
GPRINTMAX:"Maximum\:\n" \
AREA:b#FF0000FF:"Dropped Packets\:" \
GPRINTLAST:" Current\:" \
GPRINTAVERAGE:"Average\:" \
GPRINTMAX:"Maximum\:\n" \
AREA:c#FFAB00FF:"Rejected Packets\:" \
GPRINT:c:LAST:"Current\:" \
GPRINT:c:AVERAGE:"Average\:" \
GPRINT:c:MAX:"Maximum\:\n"
RRDTool Says:

ERROR: bad format for GPRINT in 'Current:'