Interpreting show interfaces output / determining link usage
What's the best way to interpret the show interfaces output, specifically the reliability, txload and rxload statistics.
In my situation I'm trying to get an accurate picture of link utilization but I keep getting very disparate results. I've noticed that on the web dashboard on one of my switches, a few of the ports are always showing 100% utilized on either tx or rx. When I look at the 'show interfaces' output I see the txload/rxload hovering in the low percentages, but occasionally spikes to 255/255 for a brief moment. My SNMP management tool never sees the traffic going over 4-8% of the link speed.
Re: Interpreting show interfaces output / determining link usage
Any SNMP management tools, will have a periodic polling cycle to gather the statistics on the switch. For traffic related statistics, snmp uses a counter value to record the utilisation. The snmp tool will calculate the traffic statistics as follows.
X = Value gathered from the switch, during the previous polling.
Y = Value gathered from the switch for current polling
Z = Polling interval in Seconds.
Traffic Rate/second => (Y - X) / Z.
As you can see from the above formula, the snmp tool will provide only the average rate of the traffic statistics.
This might not give you an idea about the sudden traffic bursts from the snmp tool.
Occasional spikes are OK, if they are really due to any legitimate traffic from the attached devices on those switch ports.
If they are recurring frequently, you might have to examine what kind of traffic is flowing and investigate the details of devices connected on those switch ports.
Establishing a SPAN session for those ports and capturing the traffic using a ethernet packet capture tool ( like sniffer/ ethereal) will assist you to investigate those sudden traffic bursts and nodes which are creating such traffic.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...