Interface utilization over 100%

[johnnynoc]

johnnynoc [http://community.zenoss.org/people/johnnynoc] created the discussion

"Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63318#63318

--------------------------------------------------------------
Hello Zenoss-Users,

I regularly see high utilization alerts over 100% on some interfaces and haven't been able to determine why.   I'm hoping someone here could help me figure it out.

The device in question is using the ethernetCsmacd_64 template and is running CentOS 5.5.

1000000000

Here is the message in the alert:  threshold of high utilization exceeded: current value 148319948.38

Here is the summary of the alert:  High Utilization: Currently (1.19 Gbps) or 118.66% is being used.

import re
fs_id = device.prepId(evt.component)
   if f.id != fs_id: continue
   # Extract the percent and utilization from the summary
   m = re.search("threshold of [^:]+: current value ([\d\.]+)", evt.message)
   if not m: continue
   currentusage = (float(m.groups()[0])) * 8
   if f.speed == 0: continue
   p = (currentusage / f.speed) * 100
   evtKey = evt.eventKey
   evtNewKey = ""
   # Whether Input or Output Traffic
       evtNewKey = "Input"
       evtNewKey = "Output"
   # Check the speed to determine the appropriate conversion
   # Gbps utilization
       Usage = currentusage / 1000000000
       evt.summary = "High " + evtNewKey + " Utilization: Currently (%3.2f Gbps) or %3.2f%% is being used." %  (Usage, p)
   # Mbps utilization
       Usage = currentusage / 1000000
       evt.summary = "High " + evtNewKey + " Utilization: Currently (%3.2f Mbps) or %3.2f%%  is being used." %  (Usage, p)
   # Kbps utilization
       Usage = currentusage / 1000
       evt.summary = "High " + evtNewKey + " Utilization: Currently (%3.2f Kbps) or %3.2f%%  is being used." %  (Usage, p)
   # bps  utilization
       Usage = currentusage
       evt.summary = "High " + evtNewKey + " Utilization: Currently (%3.2f bps) or %3.2f%%  is being used." %  (Usage, p)
   break

Any suggestions on what to look into?  I'm assuming the problem exists with the value I'm getting as this transform seems to be standard.

As always, thanks in advance!

John
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63318#63318]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63319#63319

--------------------------------------------------------------
Johnny:

What type of device is this interface in? What type of interface is it?

Best,
--Shane (Hackman238)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63319#63319]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[johnnynoc]

johnnynoc [http://community.zenoss.org/people/johnnynoc] created the discussion

"Re: Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63328#63328

--------------------------------------------------------------
This is an HP Bl460c blade server.

The interface is:

eth0: Broadcom NetXtreme II BCM5708 1000Base-SX (B2) PCI-X 64-bit 133MHz found at mem f6000000, IRQ 169, node addr 00215af38fc2

[***@hostname: ~]  $ uname -a
Linux hostname 2.6.18-194.el5 #1 SMP Fri Apr 2 14:58:14 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63328#63328]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63336#63336

--------------------------------------------------------------
Johnny:

In Zenoss under the interface under the Details panel what type of interface is it considered?

--Shane (Hacknan238)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63336#63336]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[johnnynoc]

johnnynoc [http://community.zenoss.org/people/johnnynoc] created the discussion

"Re: Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63344#63344

--------------------------------------------------------------
Shane,

Type:
ethernetCsmacd_64
Speed:
1000000000
Duplex Mode:
fullDuplex
MTU:
1500
Seems rather curious I really only seem to see this on 2-3 servers but I'd still really love to understand why.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63344#63344]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: Interface utilization over 100%"

To view the discussion, visit: http://community.zenoss.org/message/63427#63427

--------------------------------------------------------------
Johnny:

Does it happen all the time or just occasionally? Sometimes snmp hiccups can cause really bizarre deltas and cause alerts where mathematically impossible. :)

Happy holiday!

Best,
--Shane (Hackman238)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63427#63427]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]