Interface bandwidth reporting incorrect

We currently have Netflow configured on our HQ router and capturing Ingress / Egress Netflow on all interfaces. We have a 150MB to our DR site. So data traveling from our servers (internal) to the DR site will be captured twice... (take a 10MB example):
10MB leaves Server --> 6509 --> 10MB Ingress on Inside interface --> 10MB Egress on Outside interface. Therefore, according to our monitoring software, the Outside interface will show 20MB of traffic.
We use Whatsup Flow Monitor. When we view the Interface utilization, we will often see the interface way over 100%. I realize we need to turn off Ingress or Egress strategically to make sure we only use one data stream, but what are other people doing to monitor the interfaces of their devices?
We are using Netflow version 5. Would version 9 do anything to solve this isse? Or, with IOS v15 and Flexible Netflow, will this type of scenario be avoided with the use of templates?
Any thoughts will be appreciated.
Thanks

Last I hear, the rule of thumb is to pick one direction (ingress or egress) and stick to that for configuring all the interfaces of the entire router, lest the same flow gets counted twice due to mixing ingress-and-egress as you've witnessed. Even then, if one router's all ingress or another all egress, but they both export NetFlow records to the same collector/reporting server, a flow passing through a set of neighbor interfaces on the two routers would still get double-counted. I don't know how NetFlow v9 or Flexi NetFlow resolves this issue without the IOS allowing an interface to be configured with both ingress and egress flow cache simultaneously. That, plus the NetFlow collector/analyzer needs to have the intelligence to deduplicate.
Here's a blog post that seems to suggest some NetFlow reporting sw can resolve this issue alone, working with mixed-direction NetFlow v9 exports. However, I can't ascertain if this software exists yet.
http://www.plixer.com/blog/scrutinizer/netflow-version-9-egress-vs-ingress/

Similar Messages

Why are DWDM XFP tunables reporting incorrect wavelength channels?

Why are the channel numbers output from "show controllers tenGigE <port> phy" reporting incorrect channels?
I have seen this in IOS XR 4 and 5 now. The channel is incorrect but the tuned wave is correct and the channel appears correct in the configuration.
I searched for caveats but found nothing... Am I just overlooking something?
RP/0/RSP0/CPU0:ios(config)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:ios(config-if)#shut
RP/0/RSP0/CPU0:ios(config-if)#controller dwdm 0/1/0/0
RP/0/RSP0/CPU0:ios(config-dwdm)#admin-state maintenance
Wed Mar 5 11:29:49.698 UTC
Maintenance will be Forced one if it is disabled for this port. You may first verify the status by the show interfaces command.
RP/0/RSP0/CPU0:ios(config-dwdm)#commit
Wed Mar 5 11:29:50.818 UTC
RP/0/RSP0/CPU0:ios(config-dwdm)#wavelength 55
RP/0/RSP0/CPU0:ios(config-dwdm)#commit
Wed Mar 5 11:29:58.577 UTC
RP/0/RSP0/CPU0:ios(config-dwdm)#admin-state in-service
RP/0/RSP0/CPU0:ios(config-dwdm)#commit
Wed Mar 5 11:30:05.217 UTC
RP/0/RSP0/CPU0:ios(config-dwdm)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:ios(config-if)#no shut
RP/0/RSP0/CPU0:ios(config-if)#commit
Wed Mar 5 11:30:13.810 UTC
RP/0/RSP0/CPU0:ios(config-if)#exit
RP/0/RSP0/CPU0:ios(config)#exi
RP/0/RSP0/CPU0:ios#
RP/0/RSP0/CPU0:ios#
RP/0/RSP0/CPU0:ios#show controllers tenGigE 0/1/0/0 phy | begin Signal
Wed Mar 5 11:30:32.570 UTC
        Signal Condition Control: Normal Async REFCLK,
        Thresholds:                    Alarm High         Warning High          Warning Low            Alarm Low
              Temperature:               73.000                70.000                -5.000                -8.000
                  Voltage:           0.000 Volt            0.000 Volt            0.000 Volt            0.000 Volt
                     Bias:         85.000 mAmps          72.000 mAmps          10.000 mAmps           5.000 mAmps
           Transmit Power: 3.981 mW (6.00 dBm)   2.512 mW (4.00 dBm)   0.794 mW (-1.00 dBm)   0.501 mW (-3.00 dBm)
            Receive Power: 0.398 mW (-4.00 dBm)   0.251 mW (-6.00 dBm)   0.002 mW (-27.96 dBm)   0.001 mW (-30.00 dBm)
        Laser First Frequency: 191 THz, 950.000 GHz
        Laser Last Frequency: 196 THz, 0.000 GHz
        Laser Min Grid Spacing: 50.000 GHz
        Wavelength Control: setpoint=1550.05 nm, error=0.00 nm
        FEC Control: amplitude_threshold=50.00%, phase_setpoint=50.00%
        Temperature: 42.949
        Voltage: 0.000 Volt
        Tx Bias: 20.654 mAmps
        Tx Power: 1.413 mW (1.50 dBm)
        Rx Power: 0.000 mW (<-40.00 dBm)
        Control Status: Module NR, Interrupt, Rx LOS, Rx not ready, Rx CDR not locked,
        Wavelength Channel: 30
        Wavelength Error: 0.000 GHz

1)
CLI configures XR Channel.
'wavelength 55' maps to Wavelength '1550.116 nm'
The following CLI gives CLI mapping to Wavelength (nm).
RP/0/RSP0/CPU0:RR03#sh controllers dwdm 0/1/0/0 wavelength-map
55 6 193.40 1550.116
2)
SW translates configured 'wavelength <channel number>' to
Optics Channel number (30) to get Wavelength 1550.05 nm.
RP/0/RSP0/CPU0:ios#show controllers tenGigE 0/1/0/0 phy | begin Signal
Laser First Frequency: 191 THz, 950.000 GHz
        Laser Last Frequency: 196 THz, 0.000 GHz
        Laser Min Grid Spacing: 50.000 GHz
        Wavelength Control: setpoint=1550.05 nm, error=0.00 nm
        FEC Control: amplitude_threshold=50.00%, phase_setpoint=50.00%
        Temperature: 42.949
        Voltage: 0.000 Volt
        Tx Bias: 20.654 mAmps
        Tx Power: 1.413 mW (1.50 dBm)
        Rx Power: 0.000 mW (<-40.00 dBm)
        Control Status: Module NR, Interrupt, Rx LOS, Rx not ready, Rx CDR not locked,
        Wavelength Channel: 30
        Wavelength Error: 0.000 Ghz
3)
Instead we recommend our customers to use the following CLI which gives option to
Configure wavelength in 'nm'.
RP/0/RSP0/CPU0:RR03(config-dwdm)#wavelength update ?
<1528773-1568362> Enter 7-digit Wavelength data; e.g. 1532290 for 1532.29 nm
Available wavelength is given by this CLI.
RP/0/RSP0/CPU0:RR03#sh controllers dwdm 0/1/0/0 wavelength-map

LMS 4.2.3 Query on Interface utilization report

Hi All,
Interface Utilization report displays the interface utilization data for each device polled for the Interface Utilization
template. The information is presented using the percentage specifier.
For eg its displayed % (Rx Max%,Rx Avg%,RxMin%,
Tx Max%,Tx Avg%,TxMin%)
I wants report should have the data(interface utilization In Bytes of data)
Can we display the data instead of the percentage?? is it possible ???
Regards,
Channa

Hi Channa,
log into dbreader using the following::
http://servername : 1741/dbreader/dbreader.html
or
https:// servername : 443/dbreader/dbreader.html
user Id is DBA
Database Name is upm
password :: user defined (by default password is c2ky2k)
1. Here is the query to get the pollerwise managed MIBObjects:
"select count (*), PollerName from Poller_Details_Table a,Poller_Definition_Table b where a.PollerId = b.PollerId and b.Poller_State NOT IN (1) Group by b.PollerName;"
2. Here is the query to get the total mibobject count for the active pollers
“select count (*) from Poller_Details_Table a,Poller_Definition_Table b where a.PollerId =
b.PollerId and b.Poller_State NOT IN (1);”
Hope it will help
Thanks-
Afroz
***Ratings Encourages Contributors ***

PRC: Interface Expense Reports to Payables

Hi All,
In R12, If we enter Expenditure batches using Expense Report classification in Projects, can we interface these Expense Reports to Payables?
Wat is the signifance of "Expense Report Cost Account", function in Projects AutoAccounting? There is no clearing Account function for Expense Reports ?
Please can any one let us know what report in R12 replaced,"PRC: Interface Expense Reports to Payables"?
Rgds

Hi all Guru including Dina,
EBS 12 i
I want your help for project billing integration with SCM shipment.
hey,I create one financial task called supply of material. and i am initiating event via project contract module for initiate shipment and delivery based billing. after draft revenue and draft invoice.
I want to know - how to control where user can not release invoice and revenue for financial task "supply of material" unless and untill he makes shipment ..i.e. ship confirm.
If you can share with me - some notes on integration of SCM with Project modules.
my email is - [email protected] (upto 5 MB) and if more then that [email protected]
Thanks for your kind support as always on behalf of everybody.
Regards,
Bharat Bhopani
+91-9892003019

LMS 4.2 specific interface utilization report

Hi,
is there a way to create a interface utilization report only for a specific port? Like switch1->interface fa0/10
Right now i can only choose all ports from a device?
Thank you.
Chris

So, the new weekly report does not show the high Utilizations anymore, but there is a new problem:
In the "Report Details", there are 7 devices and 126 interfaces, but in the "Interface Utilization Summary", there are only 49 Interfaces.
I have added a screenshot, so that you can see, what I mean.

Interface Volume reporting

Hi ,
I am working on Interface Volume reporting of PI like daily, weekly and monthly, individual and aggregate reports and also interactive reporting of Interfaces, the sources are going to be databases of ABAP engine, AAE and Archive data of both the stacks.
I am looking for if someone worked on volume reporting on the Interfaces on messages are in the database and Archived. Currently we are using Performance monitoring to get reporting from Database but our retention period of the interfaces is only 2 days so we can't rely on this monitoring we wanted to run the similar reports on the Archived data as well.
My understanding is that History (SMX*HIST, ) and Archive metadata tables(ZARIXBC1) contains interfaces metadata info so we can run reports on these tables. So I am wondering if anyone worked on the same lines or any other better solution.
Thanks,
Laxman

Last I hear, the rule of thumb is to pick one direction (ingress or egress) and stick to that for configuring all the interfaces of the entire router, lest the same flow gets counted twice due to mixing ingress-and-egress as you've witnessed. Even then, if one router's all ingress or another all egress, but they both export NetFlow records to the same collector/reporting server, a flow passing through a set of neighbor interfaces on the two routers would still get double-counted. I don't know how NetFlow v9 or Flexi NetFlow resolves this issue without the IOS allowing an interface to be configured with both ingress and egress flow cache simultaneously. That, plus the NetFlow collector/analyzer needs to have the intelligence to deduplicate.
Here's a blog post that seems to suggest some NetFlow reporting sw can resolve this issue alone, working with mixed-direction NetFlow v9 exports. However, I can't ascertain if this software exists yet.
http://www.plixer.com/blog/scrutinizer/netflow-version-9-egress-vs-ingress/

SSL peer reports incorrect Message Authentication Code (Error code: ssl_error_bad_mac_alert) after Firefox 36 Upgrade

When upgrading from Firefox 35 to 36 (Windows 8, 32 bit) I start getting "SSL peer reports incorrect Message Authentication Code (Error code: ssl_error_bad_mac_alert)" SSL errors on at least one website I use. (https://marketplace.ibmcloud.com).
The message only appears when I get redirected to the website again after a previous OpenID login (some more cookies are set). When I browse the website without authentication it works on the encryption without any issues.
None of [1] applied, I do not experience this problem with any other browser or the previous version of Firefox. It seems to be limited to the specific case. Clearing any kind of cache, enable / disabled the ssl3* mechanisms, did have zero effect.
Is there any other way to debug this or someone has an idea what changed with Firefox 36 to introduce this behavior? I downgraded back to 35 for now to work again.
[1] https://support.mozilla.org/en-US/questions/new/desktop/fix-problems/form?search=SSL+peer+reports+incorrect+Message+Authentication+Code+(Error+code%3A+ssl_error_bad_mac_alert)&step=aaq-question

I created a ticket there as well for them to investigate, although knowing IBM I guess we know the answer already, if I hear anything from there I will let you know.
However, as the problem only occurs on the one version of Firefox as of right now, I'm inclined to role out potential server side issues as a reason and pass it to something within Firefox, or was there a change any encryption defaults that might force the server to switch to a different version or something that might have the bug?

Uptime being reported incorrectly

Hey guys
I have this little weird problem... I know I shoudln't be -too- concerned about uptime since my arch still works beautifully, but it's like one of those small details in a picture that keeps annoying you from far, far away until you finally explode and rant about it, if you get what I mean .
The problem is simple: my uptime is being reported incorrectly! take a look:
[dragon@cave ~]$ uptime
09:57:21 up 13 min, 1 user, load average: 0.02, 0.12, 0.10
[dragon@cave ~]$ date
mié ago 26 09:57:22 VET 2009
[dragon@cave ~]$
Apparently, I turned the PC about 10 hours ago? I just turned it on 30 minutes ago! what could be happening?
Here goes some "last" output:
dragon tty7 :0 Wed Aug 26 09:44 still logged in
reboot system boot 2.6.30-ARCH Wed Aug 26 09:43 (00:14)
dragon tty7 :0 Wed Aug 26 03:26 - down (01:23)
dragon tty7 :0 Wed Aug 26 03:25 - 03:26 (00:01)
dragon tty7 :0 Wed Aug 26 00:25 - 03:25 (03:00)
reboot system boot 2.6.30-ARCH Wed Aug 26 00:25 (04:25)
dragon tty7 :0 Mon Aug 24 15:12 - down (1+07:19)
dragon tty7 :0 Mon Aug 24 12:37 - 15:12 (02:35)
reboot system boot 2.6.30-ARCH Mon Aug 24 12:37 (1+09:55)
dragon tty1 Mon Aug 24 05:15 - down (01:14)
dragon tty1 Mon Aug 24 05:15 - 05:15 (00:00)
dragon tty7 :0 Mon Aug 24 05:04 - down (01:25)
dragon tty7 :0 Mon Aug 24 23:14 - 05:04 (-18:-10)
reboot system boot 2.6.30-ARCH Mon Aug 24 23:14 (-16:-44)
dragon tty7 :0 Mon Aug 24 03:53 - crash (19:20)
dragon tty7 :0 Mon Aug 24 03:29 - 03:53 (00:24)
dragon tty7 :0 Mon Aug 24 03:28 - 03:29 (00:00)
dragon tty7 :0 Mon Aug 24 03:27 - 03:28 (00:00)
dragon tty7 :0 Mon Aug 24 03:22 - 03:27 (00:05)
dragon tty7 :0 Mon Aug 24 03:15 - 03:22 (00:06)
dragon tty7 :0 Mon Aug 24 03:15 - 03:15 (00:00)
dragon tty1 Mon Aug 24 03:15 - crash (19:59)
dragon tty1 Mon Aug 24 03:15 - 03:15 (00:00)
dragon tty7 :0 Mon Aug 24 03:14 - 03:15 (00:00)
dragon tty7 :0 Mon Aug 24 19:30 - 03:14 (-16:-16)
dragon tty7 :0 Mon Aug 24 19:30 - 19:30 (00:00)
dragon tty7 :0 Mon Aug 24 18:57 - 19:30 (00:32)
dragon tty1 Mon Aug 24 18:55 - 18:56 (00:01)
dragon tty1 Mon Aug 24 18:55 - 18:55 (00:00)
dragon tty7 :0 Mon Aug 24 18:53 - 18:57 (00:03)
dragon tty1 Mon Aug 24 18:52 - 18:53 (00:00)
dragon tty1 Mon Aug 24 18:52 - 18:52 (00:00)
dragon tty7 :0 Mon Aug 24 17:30 - 18:53 (01:23)
dragon tty7 :0 Mon Aug 24 17:29 - 17:30 (00:00)
dragon tty1 Mon Aug 24 17:29 - 17:29 (00:00)
dragon tty1 Mon Aug 24 17:29 - 17:29 (00:00)
dragon tty7 :0 Mon Aug 24 17:25 - 17:29 (00:03)
dragon tty7 :0 Mon Aug 24 17:23 - 17:25 (00:01)
dragon tty7 :0 Mon Aug 24 16:53 - 17:23 (00:30)
dragon tty7 :0 Mon Aug 24 16:52 - 16:53 (00:00)
reboot system boot 2.6.30-ARCH Mon Aug 24 16:51 (-10:-21)
dragon tty2 Mon Aug 24 16:41 - down (00:09)
dragon tty2 Mon Aug 24 16:41 - 16:41 (00:00)
dragon tty1 Mon Aug 24 16:40 - down (00:09)
dragon tty1 Mon Aug 24 16:40 - 16:40 (00:00)
reboot system boot 2.6.30-ARCH Mon Aug 24 16:40 (00:09)
dragon tty2 Mon Aug 24 04:57 - 05:13 (00:15)
dragon tty2 Mon Aug 24 04:57 - 04:57 (00:00)
dragon tty2 Mon Aug 24 04:52 - 04:56 (00:04)
dragon tty2 Mon Aug 24 04:52 - 04:52 (00:00)
dragon tty1 Mon Aug 24 04:50 - down (00:40)
dragon tty1 Mon Aug 24 04:50 - 04:50 (00:00)
root tty1 Mon Aug 24 04:48 - 04:49 (00:01)
root tty1 Mon Aug 24 04:48 - 04:48 (00:00)
reboot system boot 2.6.30-ARCH Mon Aug 24 04:48 (00:41)
dragon tty2 Mon Aug 24 04:33 - down (00:13)
dragon tty2 Mon Aug 24 04:33 - 04:33 (00:00)
dragon tty1 Mon Aug 24 04:29 - down (00:18)
dragon tty1 Mon Aug 24 04:29 - 04:29 (00:00)
root tty1 Mon Aug 24 04:28 - 04:29 (00:01)
root tty1 Mon Aug 24 04:28 - 04:28 (00:00)
reboot system boot 2.6.30-ARCH Mon Aug 24 04:27 (00:19)
About details... well, it's a desktop PC and I never suspend or hibernate it...
Any ideas guys? if you need any more info just say, I don't know what else is needed to help solve the problem
Thanks in advance!
- DARKGuy
Last edited by DARKGuy (2009-08-26 14:37:43)

AHH... huh, y'know, I think I should do a backflip and kick myself in the back for having overlooked that up and created this thread XD...
/me hides in shame
Thank you guys ;;
Last edited by DARKGuy (2009-08-26 14:41:13)

I need interfaces and reports with wxample

Hi all,
I need interface sample date.If any one having please provide
Best Regards
Gopal

What do you mean exactly ?
Nicolas.
Well, I assume more info in your duplicate thread :
i need interfaces and reports with wxample
Message was edited by:
N. Gasparotto

FRSM Randomly Reports Incorrect Quota Usage

We are using Server 2008 with FSRM 6.1 and are randomly seeing some quotas reporting incorrectly that they are at 100%. If the folder is checked they are well under the quota but FRSM still reports it as 100% even after a refresh.
The only way that I have seen the quotas reporting as normal is when we delete them and recreate them but it returns a few weeks later.
This is only happening on one file server (we have several that FRSM manages the quota allocations for) and disk compression has not been turned on for that volume. This also is not happening to every quota on that volume, only some.
Any ideas?

Hi,
Firstly, please refer to the thread to check if the disk usage of the folder is reported correctly:
Server 2008R2 reports disk size/free space incorrectly in explorer and disk manager
http://social.technet.microsoft.com/Forums/en-US/bf5445d5-e796-4cbb-9571-8639b900cfd4/server-2008r2-reports-disk-sizefree-space-incorrectly-in-explorer-and-disk-manager?forum=winserverfiles
Then check if your current account have permissions to access subfolders. If the user does not have permission to access all subfolder. The size of some folders will not be counted with right click on a folder.
FSRM usage quota incorrect after deletion of 'RECYCLER' folder
http://social.technet.microsoft.com/Forums/en-US/4a076bd3-6e84-4392-9d1a-d93e67a9c319/fsrm-usage-quota-incorrect-after-deletion-of-recycler-folder?forum=winserver8gen
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Portal component information reporting incorrect version

Dear all,
Has anyone experienced that the portal content information (http://hostname:port/monitoring/ComponentInfo)is reporting incorrect information? We have installed XSS 603 components and the summary part does not reflect that , but the details does.
Its also not reporting SAPPCUI_GP in the software component part. Has anyone seen this and whats the fix?
Thanks!
Neeta

HI Shanti,
I followed the intructions in note # 910073 and all worked fine. However, the version information is still not reported correctly. component information is reporting ESS600 and we have ESS603 installed & no PCUI component is reported but the details show that its deployed.?
Does the portal need to be restarted after the change in note 910073?
Regards, Neeta

Airport Extreme 802.11n reports incorrect Locale and Country Code

I have just replaced my MacBook Pro CoreDuo's Airport Extreme card with a Mac Pro one that gives excellent throughput with 802.11n but, depending upon which channel it connects to the wireless router, System Profiler displays a weird selection of locales and country codes (e.g. locale: RoW, country code X2) .... perhaps this does't matter ... perhaps it does as other threads here report not being able to make a connection when an available channel is supposed not to be available in the incorrectly reported country.
What controls this (incorrect) choice and how can it be fixed?
System Profile of en1:
Card Type: AirPort Extreme (0x14E4, 0x88)
Firmware Version: Broadcom BCM43xx 1.0 (5.10.91.19)
Locale: RoW
Country Code: X2
Supported PHY Modes: 802.11 a/b/g/n

AirPort-Guy wrote:
The Locale is programmed into the card. If you bought your Mac Pro in a country other than where you are currently living, and you are using the card that came with it, you could be violating your country's wireless regulations.
Actually this is not entirely correct.
Rather the Mac sets its AirPort country code based upon the first beacon packet containing regulatory domain information received when the Mac starts passively listening to incoming packets after the AirPort interface is enabled.
RoW does stand for "rest of world" and the "X" domains are temporary used ones when searching for regulatory domain information.
So if you're seeing your Mac's AirPort card programmed to a different country code regulatory domain than it should be, it's because someone near you is using an illegal wireless access point/router.

Pros & Cons of Using SAP PI Interfaces for Report Generation

Hi Guru's
I have a Scenario's like
I have to generate a customized report in SAP with the main data's available in SAP ECC and some required data available in the Legacy System.
I want to know the Pros & cons of using SAP PI RFC/Proxy adapter interface to get the data from the legacy system for each time the user execute the report in SAP ECC.
Thanks in Advance

There are couple of "dimensions" to consider in your PI interface design. For exemple when you are running the sizing exercise (Since we are considering adding a net new interface), you will need to capture specific information about new interface.i.e. S/A, adapters, frequency, avg payload size. etc..Note that the last two attributes will be hard to size properly in this case since you can't predict how frequent the end user will run the report which will impact the latency time required to pull the data. Latency will affect the user experience as visible side affect and definitely the SLA for other interfaces running at the same time.
On the other hand, the data you are trying to retrieve from the legacy won't be used for transactional purpose but for the end user to pull KPIs from the system which can affect ECC as well. You may end up doing lot hot fixes for your report (Assuming that the report is a medium complexity code)
There are other factors to consider but let's consider these are the major one.
Cheers,
F

Interface Control Report in SAP

Hi Interface Gurus -
Could you please help me with the below ......
I need to create a daily audit trail report either in SAP/BW that should show the data that has been transmitted (thru interface) from Non-SAP to SAP System. Also I have to show the report ased on the record type for any date.
Thanks
Jay

Dear Jay,
Are you maintaing the data in a custom table (including record type). If yes, you would just need to fetch the data from that table.
Regards,
Naveen.

Report-Report Interface ECC Reports

Dear all,
I'm making a report using report painter (TCode GRR2) and now I need to drill-down to the documents. I think that I can build it via report-report interface.
So, have I to use RSBBS tcode to built it? In fact, I need to built a drill-down to a ECC table, Is the process the same?
Could anybody explain me steps to follow to built it? thanks in advance.
Kr
Arriamu.

You assign drill-down report at report group level (GR52).
Report/Report interface > Configure, use the "insert row" icon to assign reports.

Interface bandwidth reporting incorrect

Similar Messages

Maybe you are looking for