Re: [Os-sim-support] Urgent ... ntop RRD Anomaly

[DK <dk...@os...>]

Hi Guillaume,

the fact we only detect anomalies by excess is to avoid a high number 
of false positives. Since using ntop we're measuring network data, any 
network outage or failure would raise plenty of anomalies and mislead 
the whole system.

If you want to use anomalies that are below the prediction just comment 
line 175 at rrd_plugin.pl:

     return 0 unless ($max > ($hwpredict + (2 * $devpredict)));

Greetings,

Dominique

Am 27.04.2004 um 07:33 schrieb Guillaume Andreys:

> Hi,
>
> I've got an urgent probleme with ntop RRD Anomaly. Ntop is patched with
> rrd_plugin to detect anomalies.
> If I go to the network monitor, I can have ntop informations. In the
> historical data, I can see rrd graph, with anomaly plugin, there is the
> upper and lower prediction.
> When for exemple there is a network probleme and one of the graph is 
> at 0,
> we can see an alert on the graph (yellow line, alert data in RRD 
> files).
> It is not detecte by rrd_plugin.pl has anomaly because it only detect
> anomalies highter than prediction.
>
> But if, for exemple, my bandwith is highter than the prediction ... No
> alert on RRD graph ...
>
> I don't understand, please, can you help me ?
>
> --------------------
> Guillaume Andreys
> gui...@cs...
>
> Indian Institute of Technologie
> Computer Science Department, Network Lab.
>
> Hostel 12 Room Number B-101
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
> For a limited time only, get FREE Ground shipping on all orders of $35
> or more. Hurry up and shop folks, this offer expires April 30th!
> http://www.thinkgeek.com/freeshipping/?cpg=12297
> _______________________________________________
> Os-sim-support mailing list
> Os-...@li...
> https://lists.sourceforge.net/lists/listinfo/os-sim-support
>