[c-nsp] SNMP ifInOctets: before or after rate-limit

Gustavo Rodrigues Ramos gustavo at acmesecurity.org
Tue May 16 19:43:58 EDT 2006


Hi,

Vincent De Keyzer wrote:
> Hello,
> I have a customer whose interface is limited to 16 Mbps upstream with 
> 
> interface GigabitEthernet0/1.400
>  encapsulation dot1Q 400
>              rate-limit input 16000000 3000000 4000000 conform-action
> transmit exceed-action drop
> 
> However, when I look at the traffic in real-time, I see a sustained 24 Mbps
> in (something is congesting the line at this moment). 
> 
> Is it because rate-limiting happens after SNMP measurement?

Yes. If you want to measure the traffic AFTER the rate-limit you must 
use ccarStatSwitchedBytes [1].

[1] 
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.113.1.2.1.1.2

Gustavo.


More information about the cisco-nsp mailing list