1 # -----------------------------------------------------------------------------
2 # make sure we collect values for each interface
4 template: interface_last_collected_secs
7 calc: $now - $last_collected_t
10 warn: $this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
11 crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
12 delay: down 5m multiplier 1.5 max 1h
13 info: number of seconds since the last successful data collection
17 # -----------------------------------------------------------------------------
20 # check if an interface is dropping packets
21 # the alarm is checked every 1 minute
22 # and examines the last 10 minutes of data
24 template: inbound_packets_dropped
27 lookup: sum -10m unaligned absolute of inbound
31 delay: down 1h multiplier 1.5 max 2h
32 info: interface inbound dropped packets in the last 10 minutes
35 template: outbound_packets_dropped
38 lookup: sum -10m unaligned absolute of outbound
42 delay: down 1h multiplier 1.5 max 2h
43 info: interface outbound dropped packets in the last 10 minutes
46 template: inbound_packets_dropped_ratio
49 lookup: sum -10m unaligned absolute of received
50 calc: (($inbound_packets_dropped != nan AND $this > 0) ? ($inbound_packets_dropped * 100 / $this) : (0))
55 delay: down 1h multiplier 1.5 max 2h
56 info: the ratio of inbound dropped packets vs the total number of received packets of the network interface, during the last 10 minutes
59 template: outbound_packets_dropped_ratio
62 lookup: sum -10m unaligned absolute of sent
63 calc: (($outbound_packets_dropped != nan AND $this > 0) ? ($outbound_packets_dropped * 100 / $this) : (0))
68 delay: down 1h multiplier 1.5 max 2h
69 info: the ratio of outbound dropped packets vs the total number of sent packets of the network interface, during the last 10 minutes
73 # -----------------------------------------------------------------------------
76 # check if an interface is having FIFO
78 # the alarm is checked every 1 minute
79 # and examines the last 10 minutes of data
81 template: 10min_fifo_errors
84 lookup: sum -10m unaligned absolute
88 delay: down 1h multiplier 1.5 max 2h
89 info: interface fifo errors in the last 10 minutes
93 # -----------------------------------------------------------------------------
94 # check for packet storms
96 # 1. calculate the rate packets are received in 1m: 1m_received_packets_rate
97 # 2. do the same for the last 10s
98 # 3. raise an alarm if the later is 10x or 20x the first
99 # we assume the minimum packet storm should at least have
100 # 10000 packets/s, average of the last 10 seconds
102 template: 1m_received_packets_rate
105 lookup: average -1m of received
108 info: the average number of packets received during the last minute
110 template: 10s_received_packets_storm
113 lookup: average -10s of received
114 calc: $this * 100 / (($1m_received_packets_rate < 1000)?(1000):($1m_received_packets_rate))
117 warn: $this > (($status >= $WARNING)?(200):(1000))
118 crit: $this > (($status >= $WARNING)?(1000):(2000))
119 options: no-clear-notification
120 info: the % of the rate of received packets in the last 10 seconds, compared to the rate of the last minute