I was wondering if someone could figure out what is going wrong on this one.
We have a VPN concentrator anchoring about 1,600 sites. MRTG measures successfully both WAN and LAN interfaces. A lot of the sites in the concentrator mesh to other sites also anchored in the box. We wanted to measure the "bounce" traffic that never enters the LAN, just bounces off the concentrator in between VPN sites. The solution we came up to was to subtract from the WAN-out (SNMP 2) the LAN-in (SNMP 4). That would define the bounce: traffic leaving the concentrator towards the cloud that did not come from the LAN. The target line attempted was short: Target [sonicw-3rd-bounce]: (2:[EMAIL PROTECTED]::10:10) - (-4:[EMAIL PROTECTED]::10:10) This delivered garbage numbers unrelated to actual traffic. We thought that maybe the (IN/OUT swap on using the minus sign in the LAN (4) interface was behind the problem, and tried directly with OIDs: Target [sonicw-3rd-bounce]: ( (.1.3.6.1.2.1.2.2.1.16.2&.1.3.6.1.2.1.2.2.1.16.2:[EMAIL PROTECTED]::10 :10) - (.1.3.6.1.2.1.2.2.1.10.4&.1.3.6.1.2.1.2.2.1.10.4:[EMAIL PROTECTED]::10 :10) ) Still dreck results. Attempts to play with the parenthesis, adding more, did not help. One strange thing is that the garbage results are unrelated to the arithmetic possible with the four combinations of WAN/LAN and In/Out. For instance, if traffic is hovering around 4 megs in the LAN and 6 in the WAN, we could get 26 megs on the target above. Thanks if someone can point in the right direction. Fernando
_______________________________________________ mrtg mailing list [email protected] https://lists.oetiker.ch/cgi-bin/listinfo/mrtg
