Ad Widget

Collapse

Zabbix shows input/output traffic from router (snmp) less than actual.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • zabbixfk
    Senior Member
    • Jun 2013
    • 256

    #1

    Zabbix shows input/output traffic from router (snmp) less than actual.

    Hello All,

    I have configured router to send snmp data to zabbix, where i see that input and output traffic readings are shown less when compared to router readings.
    If i do snmpwalk, i get below data, (something like 350kbps )

    Code:
    IF-MIB::ifInOctets.22 = Counter32: 351772510
    Where zabbix shows 3.5kbps. ( suppose to show 350 kbps )
    Settings on zabbix is as follows,
    Code:
    Key : ifOutOctets.11
    OID : .1.3.6.1.2.1.2.2.1.16.11
    Type : Numeric ( unsigned )
    Datatype : Decimal
    Units : bps
    custom multiplier : 8
    Store value : Delta ( speed per second).
    Am i missing something here, does unit or custom multiplier needs to be changed? Any pointers are greatly helpful.

    Thanks.
  • aib
    Senior Member
    • Jan 2014
    • 1615

    #2
    Are you sure, that two different interfaces has to have the same traffic?

    In snmpwalk you checked Incoming traffic on interface 22:
    Code:
    IF-MIB::[B]ifInOctets.22[/B] = Counter32: 351772510
    But in Zabbix you check Outgoing traffic on interface 11 :
    Code:
    Key : [B]ifOutOctets.11[/B]
    OID : .1.3.6.1.2.1.2.2.1.16.11
    It confuses me.

    Could you check the result of snmpwalk for ifOutOctets.11 and compare it with Zabbix item?
    Sincerely yours,
    Aleksey

    Comment

    • zabbixfk
      Senior Member
      • Jun 2013
      • 256

      #3
      Zabbix shows input/output traffic from router (snmp) less than actual.

      Yes, i am also monitoring interface 22. ( about 2-3 interfaces are being monitored) - and for all i am getting traffic less than what is shown on router end.

      Thanks

      Comment

      • aib
        Senior Member
        • Jan 2014
        • 1615

        #4
        Is it possible that you have so heavy traffic that your counter overflow between updates?

        For some heavy loaded interfaces is better to use Counter64 (if your router can provide it). Especially for 1Gbit/10Gbit interfaces.

        For additional information check CISCO: SNMP Counters: Frequently Asked Questions
        Sincerely yours,
        Aleksey

        Comment

        • zabbixfk
          Senior Member
          • Jun 2013
          • 256

          #5
          Zabbix shows input/output traffic from router (snmp) less than actual.

          Thanks for the reply.
          The router has only 512kbps connection, and i think that's not a heavy load. SNMPWalk shows Counter32 with the number, zabbix database has the same number. That means router is sending it properly, and zabbix database ( items table) has correct data. Only problem is showing it in the UI.

          Looks like, something to do with custom multplier 8 or bps as a unit.
          Any pointers are greatly helpful.

          Thanks.

          Comment

          • rekeds
            Junior Member
            • Feb 2014
            • 21

            #6
            octet is 8 bits, if you want bps, use multiplier 8.

            Comment

            Working...