From netramet-owner Tue Oct 3 14:10:38 1995
Received: (from majordom@localhost) by net.auckland.ac.nz (8.6.12/8.6.12) id NAA02383 for netramet-outgoing; Tue, 3 Oct 1995 13:55:13 +1300
Received: from ccvcom.auckland.ac.nz (ccvcom.auckland.ac.nz [130.216.1.2]) by net.auckland.ac.nz (8.6.12/8.6.12) with ESMTP id NAA01636 for <
[email protected]>; Tue, 3 Oct 1995 13:45:28 +1300
Received: from papaioea.manawatu.gen.nz by ccvcom.auckland.ac.nz
(PMDF V4.3-7 #2864) id <
[email protected]>; Tue,
3 Oct 1995 13:45:34 GMT+1300
Received: from papaioea.manawatu.gen.nz
(
[email protected] [202.36.148.65]) by papaioea.manawatu.gen.nz
(8.6.12/8.6.12) with SMTP id NAA04373 for <
[email protected]>; Tue,
3 Oct 1995 13:44:36 +1300
Date: Tue, 3 Oct 1995 13:44:35 +1300 (NZDT)
From: Alan Brown <
[email protected]>
Subject: Overreporting
X-Sender:
[email protected]
To:
[email protected]
Message-id: <
[email protected]>
MIME-version: 1.0
Content-type: TEXT/PLAIN; charset=US-ASCII
Content-transfer-encoding: 7BIT
Sender:
[email protected]
Precedence: bulk
Has anyone else seen overreporting on certain flow types?
In particular we're seeing an order of magnitude excess being
given as a traffic figure on long flows such as IRC.
Additionally I'm getting strange figures on Iphone (UDP, 22555:22555)
and http traffic.
One user was reported as having a 6Mb iphone flow when he was only
online 3/4 hour on a 14k4 link. Other users are getting similar
traffic figures which don't match their link speed/time.
AB
From netramet-owner Tue Oct 3 17:40:25 1995
Received: (from majordom@localhost) by net.auckland.ac.nz (8.6.12/8.6.12) id RAA20155 for netramet-outgoing; Tue, 3 Oct 1995 17:25:13 +1300
Received: from ccvcom.auckland.ac.nz (ccvcom.auckland.ac.nz [130.216.1.2]) by net.auckland.ac.nz (8.6.12/8.6.12) with ESMTP id RAA20039 for <
[email protected]>; Tue, 3 Oct 1995 17:22:41 +1300
Received: from ccu1.auckland.ac.nz by ccvcom.auckland.ac.nz (PMDF V4.3-7 #2864)
id <
[email protected]>; Tue,
3 Oct 1995 17:23:11 GMT+1300
Received: (from nevil@localhost) by ccu1.auckland.ac.nz (8.6.12/8.6.12)
id EAA27644; Tue, 3 Oct 1995 04:22:18 GMT
Date: Tue, 3 Oct 1995 17:22:18 +1300 (NDT)
From: J Nevil Brownlee <
[email protected]>
Subject: Re: Overreporting
In-reply-to: <
[email protected]>
from "Alan Brown" at Oct 3, 95 01:44:35 pm
To:
[email protected] (Alan Brown)
Cc:
[email protected] (NeTraMet mailing list)
Message-id: <
[email protected]>
MIME-version: 1.0
X-Mailer: ELM [version 2.4 PL23]
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7bit
Content-length: 972
Sender:
[email protected]
Precedence: bulk
Hello Alan:
> In particular we're seeing an order of magnitude excess being
> given as a traffic figure on long flows such as IRC.
> Additionally I'm getting strange figures on Iphone (UDP, 22555:22555)
> and http traffic.
1) Which version of the NeTraMet software are you using?
I've put a 3.3 alpha version on
ftp://ftp.auckland.ac.nz/pub/iawg/NeTraMet
as 33alpha.tar.gz - this fixes some nasty SNMP problems; I'd be
interested to know whether it helps in your case.
2) If you'll send me a copy of your rule file, I'll see whether I can
see anything odd about it.
Cheers, Nevil
+-----------------------------------------------------------------------+
| Nevil Brownlee Director, Technology Development |
| Phone: +64 9 373 7599 x8941 ITSS, The University of Auckland |
| FAX: +64 9 373 7425 Private Bag 92019, Auckland, New Zealand |
+-----------------------------------------------------------------------C
