From netramet-owner Wed Oct 1 14:28:22 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id OAA14677 for netramet-outgoing; Wed, 1 Oct 1997 14:24:10 +1200 (NZST)
Received: from mail.telstra.com.au (mail.telstra.com.au [192.148.160.15]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id OAA14613 for <
[email protected]>; Wed, 1 Oct 1997 14:23:30 +1200 (NZST)
Received: (from uucp@localhost) by mail.telstra.com.au (8.8.2/8.6.9) id MAA20823 for <
[email protected]>; Wed, 1 Oct 1997 12:22:31 +1000 (EST)
Received: from mail-gw.fwall.telstra.com.au(192.148.147.15)
via SMTP by mail.telstra.com.au, id smtpd010364; Wed Oct 1 11:36:52 1997
Received: (from uucp@localhost) by mail-gw.fwall.telstra.com.au (8.8.2/8.6.9) id LAA08840 for <
[email protected]>; Wed, 1 Oct 1997 11:36:39 +1000 (EST)
Received: from cdn-mail.dn.itg.telecom.com.au(144.135.109.134) by mail-gw via smap (V1.3)
id sma008700; Wed Oct 1 11:35:49 1997
Received: from cygnus.dn.itg.telecom.com.au (cygnus.dn.itg.telecom.com.au [144.136.188.138]) by cdn-mail.telecom.com.au (8.8.2/8.6.9) with ESMTP id LAA27050 for <
[email protected]>; Wed, 1 Oct 1997 11:35:43 +1000 (EST)
Received: from cygnus (localhost [127.0.0.1]) by cygnus.dn.itg.telecom.com.au (8.8.2/8.6.9) with SMTP id LAA29059 for <
[email protected]>; Wed, 1 Oct 1997 11:40:52 +1000 (EST)
Message-ID: <
[email protected]>
Date: Wed, 01 Oct 1997 11:40:52 +1000
From: Brian Miller <
[email protected]>
Organization: Telstra
X-Mailer: Mozilla 3.01 (X11; I; SunOS 5.5.1 sun4m)
MIME-Version: 1.0
To:
[email protected]
Subject: Re: 'Endia' bug fixed in NeTraMet 4.1b13
References: <
[email protected]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender:
[email protected]
Precedence: bulk
Nevil Brownlee wrote:
>
> Hello all:
>
> Several people posted notes to the list recently reporting that NeMaC
> had little-endian problems, giving incorrect (very high) counts when
> run on linux systems.
>
> This has been fixed in beta14, available now from the ftp site.
>
> Thanks very much for the bug reports and feedback in general - please
> keep it coming!
>
> Cheers, Nevil
>
NeTraMetters,
I am currently trialing NeTraMet/NeMac for our FDDI network. We are
currently using FreeBSD on a Pentium II 266 machine to sit on the FDDI
ring (NeTraMet), and a Sun Sparc5 to collect the results (NeMaC).
Things are looking good, except for the 'lsp' field in the #Stats
line in the flows output file.
I read about the Endian problems with 4.1b13, so I upgraded to 4.1b15
to see if that was a fix; but it wasn't.
Here is a couple of the #Stats lines from the flows file output;
starting
with the first observation:
#Stats: aps=7080 apb=0 mps=7277 mpb=0 lsp=0 avi=93.8 mni=90.7 fiu=195
frc=0 gci=10 rpp=1.9 tpp=0.9 cpt=1.0 tts=16384 tsu=144
#Stats: aps=7297 apb=0 mps=9079 mpb=0 lsp=4294965866 avi=89.3 mni=87.5
fiu=867 frc=0 gci=10 rpp=3.8 tpp=1.5 cpt=1.7 tts=16384 tsu=415
#Stats: aps=7546 apb=0 mps=10666 mpb=0 lsp=4294964656 avi=88.5 mni=86.0
fiu=940 frc=0 gci=10 rpp=3.9 tpp=1.5 cpt=1.9 tts=16384 tsu=431
#Stats: aps=7398 apb=0 mps=9841 mpb=0 lsp=4294963446 avi=89.4 mni=88.3
fiu=940 frc=0 gci=10 rpp=4.0 tpp=1.5 cpt=1.9 tts=16384 tsu=431
#Stats: aps=7356 apb=0 mps=8941 mpb=0 lsp=4294962225 avi=88.2 mni=83.6
fiu=940 frc=0 gci=10 rpp=4.0 tpp=1.6 cpt=2.0 tts=16384 tsu=431
#Stats: aps=7210 apb=0 mps=7771 mpb=0 lsp=4294960881 avi=88.9 mni=86.0
fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.4 cpt=1.9 tts=16384 tsu=431
#Stats: aps=7867 apb=0 mps=14120 mpb=0 lsp=4294959649 avi=88.9 mni=87.5
fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.4 cpt=1.9 tts=16384 tsu=431
#Stats: aps=7852 apb=0 mps=13540 mpb=0 lsp=4294958417 avi=88.8 mni=87.5
fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.5 cpt=1.9 tts=16384 tsu=431
I also get the same sort of error if I run both NeTraMet and NeMac
on the same FreeBSD host.
Does anyone know what the problem is? It doesn't look like
an endian problem as the upper 1/2 of the number doesn't change
as much as the lower 1/2. If I leave this going, the value
for lsp keeps dropping. It looks more like a negative number
being printed as unsigned. (Hint: 4,294.967,296 = 2^16)
Brian
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Brian Miller Telstra
CDN Product Group 30/242 Exhibition Street
ITG Communication Network Platforms Melbourne, VIC 3000
[email protected] Australia
Tel: +61-3-9632-3883 FAX: +61-3-9632-3884
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
From netramet-owner Thu Oct 2 19:35:12 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id TAA27449 for netramet-outgoing; Thu, 2 Oct 1997 19:25:27 +1200 (NZST)
Received: from mail.telstra.com.au (mail.telstra.com.au [192.148.160.15]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id TAA27438; Thu, 2 Oct 1997 19:25:18 +1200 (NZST)
Received: (from uucp@localhost) by mail.telstra.com.au (8.8.2/8.6.9) id RAA17490; Thu, 2 Oct 1997 17:24:26 +1000 (EST)
Received: from mail-gw.fwall.telstra.com.au(192.148.147.15)
via SMTP by mail.telstra.com.au, id smtpd009597; Thu Oct 2 16:49:16 1997
Received: (from uucp@localhost) by mail-gw.fwall.telstra.com.au (8.8.2/8.6.9) id QAA02560; Thu, 2 Oct 1997 16:49:01 +1000 (EST)
Received: from cdn-mail.dn.itg.telecom.com.au(144.135.109.134) by mail-gw via smap (V1.3)
id sma002219; Thu Oct 2 16:47:13 1997
Received: from cygnus.dn.itg.telecom.com.au (cygnus.dn.itg.telecom.com.au [144.136.188.138]) by cdn-mail.telecom.com.au (8.8.2/8.6.9) with ESMTP id QAA27875; Thu, 2 Oct 1997 16:47:09 +1000 (EST)
Received: from cygnus (localhost [127.0.0.1]) by cygnus.dn.itg.telecom.com.au (8.8.2/8.6.9) with SMTP id QAA06071; Thu, 2 Oct 1997 16:52:16 +1000 (EST)
Message-ID: <
[email protected]>
Date: Thu, 02 Oct 1997 16:52:16 +1000
From: Brian Miller <
[email protected]>
Organization: Telstra
X-Mailer: Mozilla 3.01 (X11; I; SunOS 5.5.1 sun4m)
MIME-Version: 1.0
To:
[email protected],
[email protected]
Subject: Strange & huge numbers in the lsp field of the #Stats line
References: <
[email protected]> <
[email protected]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender:
[email protected]
Precedence: bulk
Brian Miller wrote:
>
> NeTraMetters,
>
> I am currently trialing NeTraMet/NeMac for our FDDI network. We are
> currently using FreeBSD on a Pentium II 266 machine to sit on the FDDI
> ring (NeTraMet), and a Sun Sparc5 to collect the results (NeMaC).
>
> Things are looking good, except for the 'lsp' field in the #Stats
> line in the flows output file.
>
> I read about the Endian problems with 4.1b13, so I upgraded to 4.1b15
> to see if that was a fix; but it wasn't.
>
> Here is a couple of the #Stats lines from the flows file output;
> starting
> with the first observation:
>
> #Stats: aps=7080 apb=0 mps=7277 mpb=0 lsp=0 avi=93.8 mni=90.7 fiu=195
> frc=0 gci=10 rpp=1.9 tpp=0.9 cpt=1.0 tts=16384 tsu=144
> #Stats: aps=7297 apb=0 mps=9079 mpb=0 lsp=4294965866 avi=89.3 mni=87.5
> fiu=867 frc=0 gci=10 rpp=3.8 tpp=1.5 cpt=1.7 tts=16384 tsu=415
> #Stats: aps=7546 apb=0 mps=10666 mpb=0 lsp=4294964656 avi=88.5 mni=86.0
> fiu=940 frc=0 gci=10 rpp=3.9 tpp=1.5 cpt=1.9 tts=16384 tsu=431
> #Stats: aps=7398 apb=0 mps=9841 mpb=0 lsp=4294963446 avi=89.4 mni=88.3
> fiu=940 frc=0 gci=10 rpp=4.0 tpp=1.5 cpt=1.9 tts=16384 tsu=431
> #Stats: aps=7356 apb=0 mps=8941 mpb=0 lsp=4294962225 avi=88.2 mni=83.6
> fiu=940 frc=0 gci=10 rpp=4.0 tpp=1.6 cpt=2.0 tts=16384 tsu=431
> #Stats: aps=7210 apb=0 mps=7771 mpb=0 lsp=4294960881 avi=88.9 mni=86.0
> fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.4 cpt=1.9 tts=16384 tsu=431
> #Stats: aps=7867 apb=0 mps=14120 mpb=0 lsp=4294959649 avi=88.9 mni=87.5
> fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.4 cpt=1.9 tts=16384 tsu=431
> #Stats: aps=7852 apb=0 mps=13540 mpb=0 lsp=4294958417 avi=88.8 mni=87.5
> fiu=940 frc=0 gci=10 rpp=3.7 tpp=1.5 cpt=1.9 tts=16384 tsu=431
>
> I also get the same sort of error if I run both NeTraMet and NeMac
> on the same FreeBSD host.
>
> Does anyone know what the problem is? It doesn't look like
> an endian problem as the upper 1/2 of the number doesn't change
> as much as the lower 1/2. If I leave this going, the value
> for lsp keeps dropping. It looks more like a negative number
> being printed as unsigned. (Hint: 4,294.967,296 = 2^16)
>
> Brian
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Brian Miller Telstra
> CDN Product Group 30/242 Exhibition Street
> ITG Communication Network Platforms Melbourne, VIC 3000
>
[email protected] Australia
> Tel: +61-3-9632-3883 FAX: +61-3-9632-3884
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
I think we have fixed this problem...
In .../src/meter/meter_ux.c there is a function:
unsigned int pkt_counts(int reset)
Which has a line:
lostpackets = lostpackets - lostpackets_org;
where 'lostpackets_org' is a copy of the number of packets dropped
in total by the pcap routines up until the last observation, so
'lostpackets' was always going to be a negative number.
We changed this to:
lostpackets = drops - lostpackets_org;
where 'drops' is the most recent total number of packets dropped.
This then produces much better looking numbers in the 'lsp' field of the
#Stats line; the number of packets dropped since the previous
observation.
Maybe this is something for NeTraMet 4.1b16?
Brian
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Brian Miller Telstra
CDN Product Group 30/242 Exhibition Street
ITG Communication Network Platforms Melbourne, VIC 3000
[email protected] Australia
Tel: +61-3-9632-3883 FAX: +61-3-9632-3884
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
From netramet-owner Mon Oct 20 23:00:22 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id WAA14658 for netramet-outgoing; Mon, 20 Oct 1997 22:56:13 +1300 (NZDT)
Received: from ctkhost.ctk.co.kr (
[email protected] [203.248.94.1]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id WAA14653 for <
[email protected]>; Mon, 20 Oct 1997 22:56:07 +1300 (NZDT)
Received: from mjhuh.elim.net ([203.239.131.188])
by ctkhost.ctk.co.kr (8.8.5/8.8.5) with SMTP id SAA14057
for <
[email protected]>; Mon, 20 Oct 1997 18:49:20 +0900
Message-Id: <
[email protected]>
X-Sender:
[email protected] (Unverified)
X-Mailer: Windows Eudora Pro Version 3.0 (32)
Date: Mon, 20 Oct 1997 18:55:25 +0900
To:
[email protected]
From: Huh Myoung Joo <
[email protected]>
Subject: [Q] NeMaC execution error
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender:
[email protected]
Precedence: bulk
Hi..
I'm korea.
We want to use NeTraMet and analyze network traffic (LAN & WAN).
But when execute NeMaC, some error happen..
Our error message and execution script is following..
=========================================================================
NeTraMet: Network Traffic Meter V3.4
Running on dino, interface le0
NeMaC: NeTraMet Manager & Controller V3.3
Using MIB file: /disk1/netramet/mib/mib.txt
Error in packet, reason = There is no such variable name in this MIB.
This name does not exist:
iso.org.dod.internet.mgmt.mib.acctMIB.acctControl.acctLastCollectTime.0
Couldn't get meter info from 203.248.94.10!
Does community private have read or write access to the meter?
Error in packet, reason = There is no such variable name in this MIB.
This name does not exist:
iso.org.dod.internet.mgmt.mib.acctMIB.acctControl.acctLastCollectTime.0
=========================================================================
#!/sbin/bash
export MIBTXT=/disk1/netramet/mib/mib.txt
/disk1/netramet/solaris/meter/NeTraMet -i le0 -w private &
/disk1/netramet/solaris/manager/NeMaC -c120 -r
/disk1/netramet/mjhuh/rules.lan 203.248.94.10 private
=========================================================================
We use cisco 2501 router for test and have set snmp config.
OS is solaris 2.5.1.
Please give me problem-solving..
regards.
From netramet-owner Tue Oct 21 23:12:59 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id XAA05476 for netramet-outgoing; Tue, 21 Oct 1997 23:08:10 +1300 (NZDT)
Received: from ctkhost.ctk.co.kr (
[email protected] [203.248.94.1]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id XAA05471 for <
[email protected]>; Tue, 21 Oct 1997 23:08:05 +1300 (NZDT)
Received: from mjhuh.elim.net ([203.239.131.188])
by ctkhost.ctk.co.kr (8.8.5/8.8.5) with SMTP id TAA31463
for <
[email protected]>; Tue, 21 Oct 1997 19:01:11 +0900
Message-Id: <
[email protected]>
X-Sender:
[email protected]
X-Mailer: Windows Eudora Pro Version 3.0 (32)
Date: Tue, 21 Oct 1997 19:07:54 +0900
To:
[email protected]
From: Huh Myoung Joo <
[email protected]>
Subject: Re: [Q] NeMaC execution error
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Sender:
[email protected]
Precedence: bulk
Hi..
At 10:52 ���� 97-10-20 -0400, Chongeun Lee wrote:
>What are you using the router for?
>I would suggest you check your SNMP config.
We have used "cisco 2501" router for test using of netramet..
Originally, we will use "cisco 7513, catalyst 5000, etc" for analysys
In cisco 2501, is it special snmp config?
I added snmp-server enable, snmp-server community, snmp-server host..
Is it another?
Well, is it libpcap library? or following script? or interface le0?
I want to use netramet, then want to feel good day.
Please tell me this problem
Thanks in advance.
regards
>
>Chongeun
>
>>Hi..
>>
>>I'm korea.
>>We want to use NeTraMet and analyze network traffic (LAN & WAN).
>>But when execute NeMaC, some error happen..
>>Our error message and execution script is following..
>>
>>=========================================================================
>>
>>NeTraMet: Network Traffic Meter V3.4
>>Running on dino, interface le0
>>NeMaC: NeTraMet Manager & Controller V3.3
>>Using MIB file: /disk1/netramet/mib/mib.txt
>>Error in packet, reason = There is no such variable name in this MIB.
>>This name does not exist:
>>.iso.org.dod.internet.mgmt.mib.acctMIB.acctControl.acctLastCollectTime.0
>>
>>Couldn't get meter info from 203.248.94.10!
>> Does community private have read or write access to the meter?
>>Error in packet, reason = There is no such variable name in this MIB.
>>This name does not exist:
>>.iso.org.dod.internet.mgmt.mib.acctMIB.acctControl.acctLastCollectTime.0
>>
>>=========================================================================
>>
>>#!/sbin/bash
>>export MIBTXT=/disk1/netramet/mib/mib.txt
>>/disk1/netramet/solaris/meter/NeTraMet -i le0 -w private &
>>/disk1/netramet/solaris/manager/NeMaC -c120 -r
>>/disk1/netramet/mjhuh/rules.lan 203.248.94.10 private
>>
>>=========================================================================
>>
>>We use cisco 2501 router for test and have set snmp config.
>>OS is solaris 2.5.1.
>>
>>Please give me problem-solving..
>>
>>regards.
>>
>>
>
>
From netramet-owner Thu Oct 30 02:27:40 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id CAA25075 for netramet-outgoing; Thu, 30 Oct 1997 02:24:21 +1300 (NZDT)
Received: from saturn.hrz.tu-chemnitz.de (saturn.hrz.tu-chemnitz.de [134.109.132.51]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id CAA25068 for <
[email protected]>; Thu, 30 Oct 1997 02:24:16 +1300 (NZDT)
Received: from sunnyboy.informatik.tu-chemnitz.de by saturn.hrz.tu-chemnitz.de
with Local SMTP (PP); Wed, 29 Oct 1997 14:23:00 +0100
Received: from fred.csn.tu-chemnitz.de (fred.csn.tu-chemnitz.de [134.109.88.1])
by sunnyboy.informatik.tu-chemnitz.de (8.8.4/8.7.3) with SMTP
id OAA29285; Wed, 29 Oct 1997 14:22:55 +0100 (MET)
Date: Wed, 29 Oct 1997 14:23:00 +0100 (MET)
From: Torsten Naumann <
[email protected]>
X-Sender:
[email protected]
To: Brian Miller <
[email protected]>
cc:
[email protected]
Subject: Re: NeTraMet dropping packets, but not showing up in the #Stats line
In-Reply-To: <
[email protected]>
Message-ID: <Pine.LNX.3.95L01at.971029140830.585F-100000@fred.csn.tu-chemnitz.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender:
[email protected]
Precedence: bulk
On Tue, 9 Sep 1997, Brian Miller wrote:
> First thing I guess is a bit of a background and what we're doing.
>
> We have a PentiunII/266 box running Linux (2.0.30), a DEC FDDI card, and
> a 3Com 3C509 Ethernet card for the meter (running NeTraMet). This will
> be monitoring an FDDI ring. The FDDI interface has a bogus IP address
> on it (1.2.3.4), and the Ethernet interface is used for IP access to
> the host. This box is called 'snafu'.
My environment:
Pentium/133 running Linux 2.0.30, a PCI Ethernetcard with DEC-Chip
21040 (cogent_em96x (DEC 21040 Tulip)) and an othher box running also
2.0.30 on a 486/66 with a 3C509 ISA card.
> The Version of NeTraMet we are running is 4.1b13.
NeTraMet: Network Meter v4.1b15
I have the same problem. ifconfig or netstat -i show me that there
were errors on that interface but the lsp in the #Stat line says =0.
Any ideas or solutions ?
--
bye Torsten
# Torsten Naumann *
[email protected] *
# Computer Science - TU Chemnitz - FRG *
http://www.tu-chemnitz.de/~tna
# PGP-public-key available via finger on email-address
# Phone : +49-371-5614295 * Mobile: +49-177-2382319
#
# Das Schlimme an falschen Annahmen ist,
# da"s sie jedem Schwachkopf einleuchten. -- Leitzinger