[c-nsp] SNMP traffic monitoring / alerting

[Peter Rathlev]

Whatever you measure yourself, your ISP (and their accounting) probably
has the last saying. Couldn't you strike a deal with them, having them
send you a notice when approaching the limit? Or maybe they could just
make their measurements available to you, and then you could watch this
value?

Still not completely sure about what you want to measure though. Isn't
it typically the 95 percentile that decides how much you pay?

If it's simply some rate you shouldn't cross you could setup some
shaping in front of their box. :-)

Regards,
Peter
 
On Thu, 2008-02-14 at 19:13 +0900, Aaron R wrote:
> Hi Howard,
> 
> You are absolutely correct. I am already graphing / totaling the amount of
> traffic out the interface I just need a way to be alerted when it exceeds a
> particular threshold and we have to pay our ISP big bucks for going over our
> limit. Saves me from checking graphs each day!
> 
> Cheers,
> 
> Aaron.
> 
> -----Original Message-----
> From: Howard Jones [mailto:howie at thingy.com] 
> Sent: Thursday, February 14, 2008 5:36 PM
> To: Aaron R
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] SNMP traffic monitoring / alerting
> 
> Aaron R wrote:
> > Hey Guys,
> >
> >  
> >
> > Has anyone come across a good app (open source or not) that will monitor
> the
> > amount of traffic flowing in/out a particular interface and alert you once
> a
> > certain threshold has been reached? Alerting via email would be
> preferable.
> > I don't really have the time to invest in writing a script in perl as I
> can
> > see there will be headaches with keeping track of the interface counter
> > resets.
> >
> >  
> Are you looking for flow *rate* (bits/sec) or total bytes transferred to 
> alert on? It's not clear from your replies - you seem to be concerned 
> about the size of SNMP counters which implies it's the total you a re 
> looking for.
> 
> Cacti (with it's plugin architecture and the Threshold plugin) will do 
> this for you. If you need to alarm on total transferred, then you might 
> need to make a new data source in Cacti - I've never wanted that 
> particular alarm. See http://www.cacti.net/
> It also does a *lot* more, so possibly is too much.
> 
> Howie
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/