How do You See Bursty Traffic

Unanswered Question
Oct 15th, 2009
User Badges:


We saw a lot of output drop from show interface command - Total Output Drop. We also understand that it is caused by bursty traffic that overwhelmes the output queue. However, does anyone know how to monitor or see these bursty traffic? Even with changing the load-interval to 30 seconds, the output bandwidth utilization for that 30 second is well below 5% utilized. Yet at the same time I saw output drop keep on increasing.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading. Thu, 10/15/2009 - 09:34
User Badges:

Nope, I just want to see bursty traffic on a graph as proof to the management that the interface needs to be upgraded from 1 GigE to 10 GigE.

Anyone else has any idea on how to see bursty traffic?

Lucien Avramov Thu, 10/15/2009 - 09:36
User Badges:
  • Red, 2250 points or more

What type of traffic is your bursty traffic?

You can enable NBAR on the interface to classify it by protocols.

Joseph W. Doherty Thu, 10/15/2009 - 11:44
User Badges:
  • Super Bronze, 10000 points or more

You could poll current queue depth. If you're seeing drops, you should occasionally also see the queue with many packets.

However, from what you've described, if average utilization is so low, and the issue is traffic bursts, rather than upgrading from gig to 10 gig, have you considered increasing your queue depth?


This Discussion