[c-nsp] SNMP ifInOctets: before or after rate-limit
Gustavo Rodrigues Ramos
gustavo at acmesecurity.org
Tue May 16 19:43:58 EDT 2006
Hi,
Vincent De Keyzer wrote:
> Hello,
> I have a customer whose interface is limited to 16 Mbps upstream with
>
> interface GigabitEthernet0/1.400
> encapsulation dot1Q 400
> rate-limit input 16000000 3000000 4000000 conform-action
> transmit exceed-action drop
>
> However, when I look at the traffic in real-time, I see a sustained 24 Mbps
> in (something is congesting the line at this moment).
>
> Is it because rate-limiting happens after SNMP measurement?
Yes. If you want to measure the traffic AFTER the rate-limit you must
use ccarStatSwitchedBytes [1].
[1]
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.113.1.2.1.1.2
Gustavo.
More information about the cisco-nsp
mailing list