How do You See Bursty Traffic

Unanswered Question
Oct 15th, 2009


We saw a lot of output drop from show interface command - Total Output Drop. We also understand that it is caused by bursty traffic that overwhelmes the output queue. However, does anyone know how to monitor or see these bursty traffic? Even with changing the load-interval to 30 seconds, the output bandwidth utilization for that 30 second is well below 5% utilized. Yet at the same time I saw output drop keep on increasing.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading. Thu, 10/15/2009 - 09:34

Nope, I just want to see bursty traffic on a graph as proof to the management that the interface needs to be upgraded from 1 GigE to 10 GigE.

Anyone else has any idea on how to see bursty traffic?

Lucien Avramov Thu, 10/15/2009 - 09:36

What type of traffic is your bursty traffic?

You can enable NBAR on the interface to classify it by protocols.

Joseph W. Doherty Thu, 10/15/2009 - 11:44

You could poll current queue depth. If you're seeing drops, you should occasionally also see the queue with many packets.

However, from what you've described, if average utilization is so low, and the issue is traffic bursts, rather than upgrading from gig to 10 gig, have you considered increasing your queue depth?


This Discussion