Graph Doesn't Display High Values for Data In/Out

[m00tpoint]

Please see the attached .pdf. I have some torrents running, so Di1 (the router virtual interface for the DSL line) is pretty busy, and there are very very big gaps in the traffic graph for that interface. But on the same device, CPU stats and the trickle of traffic on the Tu0 interface (a GRE interface) are missing nothing. I've checked all the following:

1) cacti log looks fine. Just one time the cron job ran 30 seconds late for some reason or another, all the rest are green.

2) Ran tcpdump on the box running cacti. SNMP traffic is sent and received every 5 minutes, with apparently valid data in the packets. No missing packets, a data reply comes back for each query packet sent.

3) A script that logs into the router via telnet every 5 minutes has also never missed even 1 packet to cause a retransmit.

4) Smokeping likewise shows no packet loss between cacti box and router.

How should I troubleshoot from here? I tried setting the graph scale for Di1 traffic to auto, but that did not help either.

m00t

[TheWitness]

Set logging to MEDIUM, or low and look for ERRORS/WARNINGS in your cacti.log. Please provide a dump of that.

TheWitness

[m00tpoint]

With debug set to high:

12/19/2008 05:15:04 PM - SYSTEM STATS: Time:2.1863 Method:cmd.php Processes:1 Threads:N/A Hosts:3 HostsPerProcess:3 DataSources:15 RRDsProcessed:6
12/19/2008 05:15:04 PM - CMDPHP: Poller[0] Time: 1.6395 s, Theads: N/A, Hosts: 2
12/19/2008 05:15:04 PM - CMDPHP: Poller[0] Host[5] DS[19] SNMP: v2: 192.168.20.1, dsname: errors_out, oid: .1.3.6.1.2.1.2.2.1.20.1, output: 0
12/19/2008 05:15:04 PM - CMDPHP: Poller[0] Host[5] DS[19] SNMP: v2: 192.168.20.1, dsname: discards_out, oid: .1.3.6.1.2.1.2.2.1.19.1, output: 1956
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[5] DS[18] SNMP: v2: 192.168.20.1, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.1, output: 1458064426
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[5] DS[19] SNMP: v2: 192.168.20.1, dsname: discards_in, oid: .1.3.6.1.2.1.2.2.1.13.1, output: 0
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[5] DS[18] SNMP: v2: 192.168.20.1, dsname: traffic_out, oid: .1.3.6.1.2.1.2.2.1.16.1, output: 2520174383
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[5] DS[19] SNMP: v2: 192.168.20.1, dsname: errors_in, oid: .1.3.6.1.2.1.2.2.1.14.1, output: 12066
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[5] SNMP: Host responded to SNMP
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[4] DS[20] SNMP: v2: 192.168.200.1, dsname: errors_in, oid: .1.3.6.1.2.1.2.2.1.14.7, output: 0
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[4] DS[21] SNMP: v2: 192.168.200.1, dsname: 5min_cpu, oid: .1.3.6.1.4.1.9.2.1.58.0, output: 32
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[4] DS[20] SNMP: v2: 192.168.200.1, dsname: discards_in, oid: .1.3.6.1.2.1.2.2.1.13.7, output: 0
12/19/2008 05:15:03 PM - CMDPHP: Poller[0] Host[4] DS[20] SNMP: v2: 192.168.200.1, dsname: discards_out, oid: .1.3.6.1.2.1.2.2.1.19.7, output: 2080
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] DS[20] SNMP: v2: 192.168.200.1, dsname: errors_out, oid: .1.3.6.1.2.1.2.2.1.20.7, output: 0
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] DS[16] SNMP: v2: 192.168.200.1, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.6, output: 35271518
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] DS[16] SNMP: v2: 192.168.200.1, dsname: traffic_out, oid: .1.3.6.1.2.1.2.2.1.16.6, output: 39487325
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] DS[17] SNMP: v2: 192.168.200.1, dsname: traffic_out, oid: .1.3.6.1.2.1.2.2.1.16.7, output: 682114701
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] DS[17] SNMP: v2: 192.168.200.1, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.7, output: 3389060708
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] SNMP: Host responded to SNMP
12/19/2008 05:15:02 PM - CMDPHP: Poller[0] Host[4] PING: Host is alive
12/19/2008 05:15:02 PM - POLLER: Poller[0] NOTE: Poller Int: '300', Cron Int: '300', Time Since Last: '300', Max Runtime '298', Poller Runs: '1'


I currently have a couple of downloads running; the router shows ~4 megabits/sec in, and ~500 kbits/sec out. The inbound traffic is not showing up on the graph. My gut tells me there's some kind of "This value cannot exceed x" problem going on when the graph is created, but I can't find it (or whatever it actually is).

Thanks,
m00tpoint

[m00tpoint]

That's sure what it looks like. One download is now finished, and the torrent traffic slowed down some. Now that the traffic volume is lower (as in fits on the graph maybe?), the data is on the graph again.

m00t

[verstrg]

Any updates on this ???
It seems that i have the same problem. Traffic graphs are ok untill i start a large file transfer. The no data in the graph.
When the transfer has finished, the graph resumes correcly !
We have this issue on a Cisco 3800 router on a tunnel interface, but that shouldn't matter.

[meralias]

If you go to 'Data Sources' and find the data source for this graph, does it have a supplemental data area and a maximum value? if so, what is it for in and out?

[TheWitness]

Please insure that the max value in the RRDfile is correct. The Data Template should indicate this as well. If the Max value is too low RRDtool discards the data. This is likely why you are getting those messages.

TheWitness