[nsp] traffic monitor

[Sam Stickland]

MRTG supports thresholds. You can have a script fire when the five minute
average is over a particular value.

Alternatively, Nagios (Netsaint's successor) has plugins that support the
examination of both mrtg's native log files, and rrd files. I imagine you
should be able to get those plugins to work with netstaint as well, with a
little work.

While we're on this subject, does anyone know of any monitoring software
that supports recurrent CUSUM analysis of bandwidth data? I've been
considering rolling my own since the algorithm isn't the most complex in the
world.

Sam

----- Original Message -----
From: "Alban Dani" <adani at stevens.edu>
To: "'Sam Stickland'" <sam_ml at spacething.org>
Cc: <cisco-nsp at puck.nether.net>
Sent: Friday, September 19, 2003 3:45 PM
Subject: RE: [nsp] traffic monitor


> Thanks Sam,
>
> I am using netsaint for monitoring.
> I have the switches set up so that every time the ifOctet output in a
> particular interface goes over a certain value, in a 6 min delta, it sends
a
> trap which is received by netsaint.
> Netsaint then e-mails/pages me and so on.
> However I am not convinced that ifOctet output is the best thing to check.
> I'll be much happier if I could check the 5 min rate average instead.
>
> Alban
>
> -----Original Message-----
> From: Sam Stickland [mailto:sam_ml at spacething.org]
> Sent: Friday, September 19, 2003 10:39 AM
> To: Alban Dani; cisco-nsp at puck.nether.net
> Subject: Re: [nsp] traffic monitor
>
> MRTG?
>
> http://people.ee.ethz.ch/~oetiker/webtools/mrtg/
>
> ----- Original Message -----
> From: "Alban Dani" <adani at stevens.edu>
> To: <cisco-nsp at puck.nether.net>
> Sent: Friday, September 19, 2003 3:23 PM
> Subject: [nsp] traffic monitor
>
>
> > I am trying to put together some rmon configuration on my catalyst
> switches.
> >
> > Right now I am monitoring the total number of input/output bytes but am
> not
> > totally happy with it.
> >
> > This is the kind of statement I am using:
> >
> > rmon alarm 3 ifEntry.16.47 360 delta rising-threshold 2000000000 1
> > falling-threshold 2000000000 2 owner adani
> >
> >
> >
> > I have been looking unsuccessfully for some snmp representation of the 5
> min
> > input/output rate as otherwise shown by the show interface command.
> >
> >
> >
> > Can anybody help me with this?
> >
> >
> >
> > Thanks,
> >
> >
> >
> > Alban
> >
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
>