Traffic Graph showing Negative Value



  • Hi all, I have some difficult when I come to setup my second VLAN. The graph is showing negative values, may I know which part could have done wrong.
    ![Suricata_Firewall 3.PNG](/public/imported_attachments/1/Suricata_Firewall 3.PNG)
    ![Suricata_Firewall 3.PNG_thumb](/public/imported_attachments/1/Suricata_Firewall 3.PNG_thumb)



  • Some records is showing:

    Host IP : Session_timeout
    Bandwidth In: undefined Bits/sec
    Bandwidth Out: undefined Bits/sec



  • I haven't experienced this before, but is your session timed out?



  • It's always done this for me (negative values for interface-out).  I assumed it was by design.



  • @KOM:

    It's always done this for me (negative values for interface-out).  I assumed it was by design.

    Yes, but his screenshot is strange where the y axis has no units. Overall something smells off, but the text with "session timeout" sounds like they needed to fresh the page.



  • Overall something smells off, but the text with "session timeout" sounds like they needed to fresh the page.

    Yes, I've had this same issue where the table doesn't update.  A refresh fixes it all up.



  • @Harvy66:

    I haven't experienced this before, but is your session timed out?

    Not sure about that. I am trying to monitor 2 different network on one pfsense.



  • I am still getting this after a refresh.

    And i added a new screenshot of the Interface Assignments.

    ![Suricata_Firewall 4.PNG](/public/imported_attachments/1/Suricata_Firewall 4.PNG)
    ![Suricata_Firewall 4.PNG_thumb](/public/imported_attachments/1/Suricata_Firewall 4.PNG_thumb)
    ![Suricata_Firewall 5.PNG](/public/imported_attachments/1/Suricata_Firewall 5.PNG)
    ![Suricata_Firewall 5.PNG_thumb](/public/imported_attachments/1/Suricata_Firewall 5.PNG_thumb)


  • Rebel Alliance

    Are the interface actually working?  Your talking to the interface - so your sure there is actually in out traffic, its just not showing in the graph?

    You can turn off inverse if you don't like it..



  • This is not a bug, and it's not showing "negative" values. The default rendering simply shows outgoing traffic underneath and incoming traffic on top instead of overlaying both on the top. It's controlled by the "Inverse" setting in the graph.

    Picture attached.

    ![2018-02-04 23_15_11-Web_ Status_ Dashboard - pfsense.lan.png](/public/imported_attachments/1/2018-02-04 23_15_11-Web_ Status_ Dashboard - pfsense.lan.png)
    ![2018-02-04 23_15_11-Web_ Status_ Dashboard - pfsense.lan.png_thumb](/public/imported_attachments/1/2018-02-04 23_15_11-Web_ Status_ Dashboard - pfsense.lan.png_thumb)


  • Rebel Alliance

    But what is odd is not showing any in the other direction also.. Maybe its really really low?  But think there is a something wrong where he is only seeing 1 half of the traffic.. As I already stated if you don't want to see the inverse you can just turn that off..



  • @johnpoz:

    Are the interface actually working?  Your talking to the interface - so your sure there is actually in out traffic, its just not showing in the graph?

    You can turn off inverse if you don't like it..

    Hi, thanks for your reply. May I know how do I check if I am "talking" to the interface?

    For the graph turning off the inverse is not the main issue. Main issue is that does not show any activities….


  • Rebel Alliance

    "Main issue is that does not show any activities…. "

    That is what it looks like to me as well which is really odd..

    What does say

    systat -ifstat 5

    show you for your interfaces traffic?  What about say something like

    
    [2.4.2-RELEASE][root@sg4860.local.lan]/root: netstat -i -b -n -I igb2
    Name    Mtu Network       Address              Ipkts Ierrs Idrop     Ibytes    Opkts Oerrs     Obytes  Coll
    igb2   1500 <link#3>00:08:a2:0c:e6:20 243692313     0     0 33829938506 166012308     0 220759170807     0
    igb2      - fe80::%igb2/6 fe80::208:a2ff:fe        0     -     -          0        1     -        116     -
    igb2      - 192.168.2.0/2 192.168.2.253        95013     -     -   13184546    48803     -   10963069     -
    [2.4.2-RELEASE][root@sg4860.local.lan]/root: 
    
    You can call up a specific vlan with say 
    [2.4.2-RELEASE][root@sg4860.local.lan]/root: netstat -i -b -n -I igb2.5
    Name    Mtu Network       Address              Ipkts Ierrs Idrop     Ibytes    Opkts Oerrs     Obytes  Coll
    igb2.  1500 <link#12>00:08:a2:0c:e6:20   667311     0     0   40451516     4895     0     809821     0
    igb2.     - fe80::%igb2.5 fe80::208:a2ff:fe        0     -     -          0        2     -        172     -
    igb2.     - 192.168.5.0/2 192.168.5.253           42     -     -      20976      133     -      13931     -
    [2.4.2-RELEASE][root@sg4860.local.lan]/root:</link#12></link#3> 
    

 

© Copyright 2002 - 2018 Rubicon Communications, LLC | Privacy Policy