[collectd] Strange SNMP collection glitches
octo at verplant.org
Tue Jan 19 09:10:55 CET 2010
On Mon, Jan 18, 2010 at 10:20:20AM +0100, Mirko Buffoni wrote:
this looks like a half-normal overflow. Half-normal, because the
difference between the first two values is roughly 1.652 million while
the difference between the second and third value (assuming a 32 bit
wrap-around) is 17.806 million, i.e. one magnitude higher. Still,
17.8 MByte in 15 seconds looks reasonable to me.
This, on the other hand, is a problem. Because you're using COUNTER, the
RRD library will assume an overflow and calculate the TX-rate as:
((2^32 - 15791119) + 994360) / (1263461048 - 1263461033)
That's roughly 285 MByte/s or 2.28 GBit/s.
Interesting, this looks like a normal overflow and a reset right
> As you can see, there is no router reset (rx is still a valid value),
> while TX counter goes nuts for some time after overflowing.
From the values you provided, it looks a bit like the problem always
appears shortly after a regular 32bit overflow.
> I have three different Zyxel SHDSL routers (Different firmwares) but
> they have this same behavior. Could it be a bug in the firmware?
I doubt that this behavior is normal. So, yes, I'd say blame the
> For now I solved by fixing a maximum range to the rrd database, so I
> have blanks in place of peaks. I'd be glad to hear if this behavior
> can be corrected in some other way or not.
Well, from collectd's point of view you can do only two things:
1) Set the maximum value to the actual speed of the link (plus some
percent for safety). Pro: Regular overflows (which appear to happen
regularly to you) are handled gracefully. Con: Need to maintain
2) Use DERIVE instead of COUNTER and set the minimum value to zero.
Pro: Works with arbitrary link speeds. Con: You'll use the values of
the resets AND the overflows.
Unfortunately, making sense out of bogus data is simply impossible, so
keeping the data out of the RRD archives is the only thing we can do
Florian octo Forster
Hacker in training
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.verplant.org/pipermail/collectd/attachments/20100119/5f41aa6f/attachment.pgp
More information about the collectd