I don't remember the actual formulas and what not used, and I will concede that often the upper and lower bounds don't make much sense. It's supposed to help visually represent anomalous data points. I would suspect the more data you have in your rrd history the more accurate this feature would be.
For the most part I don't even pay attention to it. You can turn it off within rrd, I even think there's a radio button to do so in nTop - but don't recall 100%. It would likely be in the rrd plugin config page. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Tony Nelson Sent: Tuesday, September 07, 2010 4:50 PM To: [email protected] Subject: Re: [Ntop] Upper Value on Network Load Graphs Thanks for your help Gary. Have a great week. Tony On Sep 7, 2010, at 5:44 PM, Gary Gatten wrote: > I don't think it has anything to do with how long it was down - purely on > data collected and some standard deviation calcs. Yes, you'll find more info > than you care to in the rrd docs and/or by googling rrd upper lower > deviation, etc. As noted it's a feature of rrd, so ntop devs rely on the rrd > docs vs. duplicating their efforts. Perhaps a footnote or embedded link to > the rrd info on this feature would be a good idea! > > G > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Tony Nelson > Sent: Tuesday, September 07, 2010 3:48 PM > To: [email protected] > Subject: Re: [Ntop] Upper Value on Network Load Graphs > > I've used ntop, exactly as I've had it in the past.. > > Is this possibly because I had the ntop server shut down for quite a long > time and just started it back up? > > I'd be happy to google it if I knew what exactly I was looking for... I did > spend about a half an hour reading through ntop docs.. I'll google RRD stuff > now too. > > Thanks > Tony > > On Sep 7, 2010, at 4:41 PM, Gary Gatten wrote: > >> Google this. It's a standard deviation thing - check rrd docs for more >> info, it's not specific to ntop. >> >> G >> >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Tony Nelson >> Sent: Tuesday, September 07, 2010 3:25 PM >> To: [email protected] >> Subject: [Ntop] Upper Value on Network Load Graphs >> >> Hi All, >> >> I recently started monitoring part of my network again and I'm seeing a >> graph I can't explain. Basically the "upper" line is significantly higher >> than any throughput I'm seeing. >> >> I think I may have a node on my network that is misbehaving, but I'm not >> sure how to figure out what to look at next. >> >> The graphs that I'm seeing can be found here: >> >> http://borneo.starpoint.com/~tnelson/ntop.html >> >> When I look at the Network Load Statistics Matrix, the Average Throughput of >> the top nodes doesn't come close to matching the "upper" bandwidth. >> >> Can anyone suggest what I should look for next in my network? >> >> Thanks in advance >> Tony Nelson >> >> >> >> >> >> >> <font size="1"> >> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in >> 0in 1.0pt 0in'> >> </div> >> "This email is intended to be reviewed by only the intended recipient >> and may contain information that is privileged and/or confidential. >> If you are not the intended recipient, you are hereby notified that >> any review, use, dissemination, disclosure or copying of this email >> and its attachments, if any, is strictly prohibited. If you have >> received this email in error, please immediately notify the sender by >> return email and delete this email from your system." >> </font> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> > > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in > 0in 1.0pt 0in'> > </div> > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
