{"action":"created","issue":{"url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/11","repository_url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates","labels_url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/11/labels{/name}","comments_url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/11/comments","events_url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/11/events","html_url":"https://github.com/B4ckF0rw4rd/Zabbix-Templates/issues/11","id":241015825,"number":11,"title":"Interface counter data stored as-is when should be stored as delta","user":{"login":"BigTexun","id":3650656,"avatar_url":"https://avatars0.githubusercontent.com/u/3650656?v=3","gravatar_id":"","url":"https://api.github.com/users/BigTexun","html_url":"https://github.com/BigTexun","followers_url":"https://api.github.com/users/BigTexun/followers","following_url":"https://api.github.com/users/BigTexun/following{/other_user}","gists_url":"https://api.github.com/users/BigTexun/gists{/gist_id}","starred_url":"https://api.github.com/users/BigTexun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BigTexun/subscriptions","organizations_url":"https://api.github.com/users/BigTexun/orgs","repos_url":"https://api.github.com/users/BigTexun/repos","events_url":"https://api.github.com/users/BigTexun/events{/privacy}","received_events_url":"https://api.github.com/users/BigTexun/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-07-06T16:34:11Z","updated_at":"2017-07-12T12:01:12Z","closed_at":null,"body":"In reviewing the results of your ASA Discovery template, I was pleased with the results, however I noted that several of the graphs were indicating odd activity on ports with nearly zero traffic.  For example, my OutUcastPkts graph for an unused VLAN was showing 19.5Mpps, but when I looked at the ASA's interface counter it was running between 2 and 8 pps.  I noticed the counter was showing  19832823 packets output, 562431516 bytes, and I realized you were graphing the counter, rather than the actual rate.  Changing the setting to store the value as a delta corrected the issue.\r\n\r\nIn the ASA template these prototypes were needing correction:\r\nOutUcastPkts, OutMulticastPkts, OutBroadcastPkts, InUcastPkts, InMulticastPkts, InBroadcastPkts.\r\n\r\nI saw the same issue in the Cisco Switch Discovery template, the issue there was in the following:\r\nInbound BroadcastPkts, MulticastPkts and UnicastPkts\r\nOutbound BroadcastPkts, Errors, and UnicastPkts.\r\n\r\nMy notes may be incomplete, so you might take a look at all of your prototypes.  Interestingly the inbound errors were set as a delta, while the outbound errors were as-is.  So it seems clear that this is simply an oversight, and not by design.  Of course the other clue this is not by design is the reporting of a 2pps rate as 19.5Mpps.  When I saw the flat graph with 19 million packets per second on an unused vlan port, my first reaction was we were under attack.  It didn't take too long to figure out it was a template error."},"comment":{"url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/comments/314748033","html_url":"https://github.com/B4ckF0rw4rd/Zabbix-Templates/issues/11#issuecomment-314748033","issue_url":"https://api.github.com/repos/B4ckF0rw4rd/Zabbix-Templates/issues/11","id":314748033,"user":{"login":"B4ckF0rw4rd","id":11295419,"avatar_url":"https://avatars1.githubusercontent.com/u/11295419?v=3","gravatar_id":"","url":"https://api.github.com/users/B4ckF0rw4rd","html_url":"https://github.com/B4ckF0rw4rd","followers_url":"https://api.github.com/users/B4ckF0rw4rd/followers","following_url":"https://api.github.com/users/B4ckF0rw4rd/following{/other_user}","gists_url":"https://api.github.com/users/B4ckF0rw4rd/gists{/gist_id}","starred_url":"https://api.github.com/users/B4ckF0rw4rd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/B4ckF0rw4rd/subscriptions","organizations_url":"https://api.github.com/users/B4ckF0rw4rd/orgs","repos_url":"https://api.github.com/users/B4ckF0rw4rd/repos","events_url":"https://api.github.com/users/B4ckF0rw4rd/events{/privacy}","received_events_url":"https://api.github.com/users/B4ckF0rw4rd/received_events","type":"User","site_admin":false},"created_at":"2017-07-12T12:01:12Z","updated_at":"2017-07-12T12:01:12Z","body":"Hi BigTexun,\n\nSorry for the late reply, i'm on vacation right now.\n\nMany many thanks for the analysis, as soon as i return i'll update the\ntemplates.\n\nBest regards,\nManuel Mannello\n"}}
{"actor":{"display_login":"B4ckF0rw4rd"}}