Incorrect RRD

0tt0 · Feb 24, 2010, 6:33 PM

1.2.3-RELEASE
built on Sun Dec 6 23:38:21 EST 2009
FreeBSD 7.2-RELEASE-p5 i386

I'm not sure if it was some temp thing though, if I look at today's graphs they seem not to show the same type of errors. Maybe the errors were corrected somehow or dissapeared into the accumulated traffic in the older graphs.

Eugene · Mar 5, 2010, 3:21 AM

What makes you think they are not correct?

0tt0 · Mar 6, 2010, 9:48 AM

@Eugene:

What makes you think they are not correct?

Have you looked at the picture?!
http://forum.pfsense.org/index.php?action=dlattach;topic=22471.0;attach=7520;image

Red areas (wan-in) summon up to 94.58 MEGABYTEs
Grey areas (wan-out) summon up 1,45 GIGABYTEs

What makes you think they are not incorrect?

Efonnes · Mar 6, 2010, 10:16 AM

Does your WAN connection support 50 megabits per second in? If it does, then the data might not be incorrect.

0tt0 · Mar 6, 2010, 4:41 PM

@Efonne:

Does your WAN connection support 50 megabits per second in? If it does, then the data might not be incorrect.

It supports 100 Mbps

Eugene · Mar 6, 2010, 4:49 PM

@0tt0:

@Eugene:

What makes you think they are not correct?

Have you looked at the picture?!
http://forum.pfsense.org/index.php?action=dlattach;topic=22471.0;attach=7520;image

Red areas (wan-in) summon up to 94.58 MEGABYTEs
Grey areas (wan-out) summon up 1,45 GIGABYTEs

What makes you think they are not incorrect?

Sorry, did not pay attention to number of bytes. Apparently counter just wrapped. It can happen in 1.2.3.

0tt0 · Mar 6, 2010, 5:48 PM

@Eugene:

Sorry, did not pay attention to number of bytes. Apparently counter just wrapped. It can happen in 1.2.3.

Don't think I've heard of it (besides notes on Status | Interfaces page).

There must be many networks with tons of more traffic than mine, when and how does it wrap?

Eugene · Mar 6, 2010, 5:53 PM

I do not think lots of people pay attention at absolute values (number of bytes). Rate is much more interesting.
Regarding counters wrapping: http://forum.pfsense.org/index.php/topic,20624.0.html

cmb · Apr 6, 2010, 11:21 PM

That's not nearly enough bandwidth to wrap the counters, that takes closer to 10 times that much. It very well could be accurate, I've never seen a scenario where they aren't aside from wrapping counters and that's not nearly enough for that. If you catch it while it's happening, check Status > Traffic graph to compare, and get a packet capture on WAN as well. You could have been hit by a DoS attack.

Eugene · Apr 7, 2010, 4:52 PM

Agree and sorry for wrong conclusion.
I have a firewall which shows more than 100TB in Total (over 8 months).