Difference of traffic graphs
Hello Guys,
I'm using NetFlow Analyzer for monitoring a cisco router. Everything is working fine, no problem at all.
But .... i have noticed a slight difference on traffic graph generated by NFA and other one generated using normal SNMP monitoring tools. In my case, i'm using cacti for monitoring the same router and graphing Serial traffic.
I know there's a basic difference between generic SNMP monitoring tools and NFA. Most all generic SNMP monitoring tools, just like cacti i use and mrtg and several others uses to collect data in 5 minutes intervals. NFA uses 1 minute interval according to it's own graphic informations.
I know this 5 minutes x 1 minute can give huges differences when we're dealing with spikes of traffic. Cacti wouldnt get a small spike (1 minute for example), and that spike would be pretty visible on NFA and other tools that uses a lower pooling interval.
Anyway ..... i know that traffic flowing on this router is basically constant. At the moment i took the attached screenshots, traffic was flowing in a constant way for hours. Graphs shouldnt, in my opinion, be THAT different on this situation of constant traffic, no matter 1-5-10 minutes pooling interval.
I have screenshoted graphs generated by cacti and NFA on the same hour interval. It's pretty easy to note that output traffic is higher on NFA than it's on cacti. It's pretty easy to see that output on NFA graphic is constant at 1Mbit/s, and cacti graphs shows output traffic a little lower than 1Mbit/s, but again going constant.
Question is .... should graphs, on my current situation of constant traffic, look pretty similar to each other ???
I have attached 2 screenshots, one from NFA and other from cacti generated for the same router and same serial port.
I'm using NetFlow Analyzer for monitoring a cisco router. Everything is working fine, no problem at all.
But .... i have noticed a slight difference on traffic graph generated by NFA and other one generated using normal SNMP monitoring tools. In my case, i'm using cacti for monitoring the same router and graphing Serial traffic.
I know there's a basic difference between generic SNMP monitoring tools and NFA. Most all generic SNMP monitoring tools, just like cacti i use and mrtg and several others uses to collect data in 5 minutes intervals. NFA uses 1 minute interval according to it's own graphic informations.
I know this 5 minutes x 1 minute can give huges differences when we're dealing with spikes of traffic. Cacti wouldnt get a small spike (1 minute for example), and that spike would be pretty visible on NFA and other tools that uses a lower pooling interval.
Anyway ..... i know that traffic flowing on this router is basically constant. At the moment i took the attached screenshots, traffic was flowing in a constant way for hours. Graphs shouldnt, in my opinion, be THAT different on this situation of constant traffic, no matter 1-5-10 minutes pooling interval.
I have screenshoted graphs generated by cacti and NFA on the same hour interval. It's pretty easy to note that output traffic is higher on NFA than it's on cacti. It's pretty easy to see that output on NFA graphic is constant at 1Mbit/s, and cacti graphs shows output traffic a little lower than 1Mbit/s, but again going constant.
Question is .... should graphs, on my current situation of constant traffic, look pretty similar to each other ???
I have attached 2 screenshots, one from NFA and other from cacti generated for the same router and same serial port.