Ad Widget

Collapse

high bandwidth alerts constantly triggering

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bloodyskullz
    Member
    • Jan 2025
    • 46

    #1

    high bandwidth alerts constantly triggering

    Problem is:

    4 vm's running debian 11 and 12 reporting numbers astronomically high for interface triggering high bandwidth alerts
    values recieved for bits recieved and sent are in the realm of 1.38 Tbps and 691.55 Gbps

    Common info amongst the 4 vms:
    all connected through the same proxy
    iftop on the interface shows low numbers (KB and MB)
    agent versions are the same amongst all 4 (7.2)
    vms run on esxi 8.x
    vmxnet3 interface
    zabbix detecting correct interface speed

    Tried:
    deleting host
    changing the intervals for the item prototypes for net if
    changing the trigger completely

    Current trigger:

    problem
    Code:
    (
    avg(/P9 Linux by Zabbix agent active-Chris/net.if.in["{#IFNAME}"],15m) >
    ({$IF.UTIL.MAX:"{#IFNAME}"}/100) *
    (last(/P9 Linux by Zabbix agent active-Chris/vfs.file.contents["/sys/class/net/{#IFNAME}/speed"]) * 1000000)
    or
    avg(/P9 Linux by Zabbix agent active-Chris/net.if.out["{#IFNAME}"],15m) >
    ({$IF.UTIL.MAX:"{#IFNAME}"}/100) *
    (last(/P9 Linux by Zabbix agent active-Chris/vfs.file.contents["/sys/class/net/{#IFNAME}/speed"]) * 1000000)
    )
    and
    last(/P9 Linux by Zabbix agent active-Chris/vfs.file.contents["/sys/class/net/{#IFNAME}/speed"])>0
    recovery

    Code:
    avg(/P9 Linux by Zabbix agent active-Chris/net.if.in["{#IFNAME}"],15m) <
    (({$IF.UTIL.MAX:"{#IFNAME}"}-10)/100) *
    (last(/P9 Linux by Zabbix agent active-Chris/vfs.file.contents["/sys/class/net/{#IFNAME}/speed"]) * 1000000)
    and
    avg(/P9 Linux by Zabbix agent active-Chris/net.if.out["{#IFNAME}"],15m) <
    (({$IF.UTIL.MAX:"{#IFNAME}"}-10)/100) *
    (last(/P9 Linux by Zabbix agent active-Chris/vfs.file.contents["/sys/class/net/{#IFNAME}/speed"]) * 1000000)
    I am at a loss here. Logs show nothing and the only other thing i didn't do is remove the agent and install a later version but other vms run the same agent version and no issues.
Working...