Unusual High bits sent/received reported by agent.

[pctrindade]

Hello,

I'm currently using a zabbix 6.0.25 installation to monitor linux rhel 9 machines.

The template is the default Linux Active Agent with some more custom items (I didnt modify the default items).

Recently I've seen some unusual bits sent/received values going to petabits/s and even more...

These machines have a normal traffic of 35-90mbps.

It seems that from time to time the agent sends incorrect values to the server, does anyone had the same issue or have any idea of whats happening?

[pctrindade]

Just found out there were some hosts with the same hostname in the network, their zabbix agent version was 6.4.9.

I disabled the agent on those and there was no more anomalous data.

[LenR]

Is it happening on just some hosts? Do they have anything in common? Your issue appears to be just a few minutes apart. I had a few occurrences on network gear that would do this at reboot, I don't recall the exact issue, either reboot, patch, counter rollover or some negative number. We added the postprocessing in-range validation to a reasonable value for the interface speed. If you had different Linux hosts with widely different nic speeds, that might not work. You might be able to use the max for your fastest links.

[pctrindade]

It's happening on some specific rhel9 hosts. I'm currently working on comparing the packages and kernel params to see the differences between the anomalous and non-anomalous hosts.

[pctrindade]

Just found out there were some hosts with the same hostname in the network, their zabbix agent version was 6.4.9.

I disabled the agent on those and there was no more anomalous data.