[lug] Interface stats getting zeroed

[Lee Woodworth]

> On 01/29/2015 07:37 PM, David L. Anselmi wrote:
> Is the byte counter 32 bits?  Could it be rolling over?  You might be right but the two
> data points you gave don't give us any way to verify your statement.
>
> Can you graph the counters and see if there's a time or value pattern to the reset?

I see no pattern in the dates or time between resets. I will be looking to see if
the fw logs any consistent ips around the resets.

Here is a vnstat plot from the interface for the preceding 24hrs. It was
the intermittent glitch in the vnstat totals that made start looking into
this:

 eth0                                                                     11:56
  ^                                                t
  |                                                t
  |                                                t
  |                                                t
  |      t                                         t    r
  |      t                         r               t    r
  |  r   t    r     r     r  r     r  r     r     rt    r     r  r  r  r  r
  |  r  rt r  r  r  r  r  r  r  r  r  r  r  r  r  rt r  r  r  r  r  r  r  r
  |  r  rt r  r  r  r  r  r  r  r  r  r  r  r  r  rt rt r  r  r  r  r  r  r
  |  r  rt r  rt r  r  r  r  r  r  r  r  r  r  r  rt rt rt r  r  r  rt r  r
 -+--------------------------------------------------------------------------->
  |  12 13 14 15 16 17 18 19 20 21 22 23 00 01 02 03 04 05 06 07 08 09 10 11

 h  rx (KiB)   tx (KiB)      h  rx (KiB)   tx (KiB)      h  rx (KiB)   tx (KiB)
12       1458        137    20       1395         43    04       1232        685
13       1231       2194    21       1190         59    05       2174        520
14       1059         51    22       1845        340    06       1128        107
15       1367        346    23       1650         89    07       1427        130
16       1252         42    00       1334         94    08       1424        148
17       1685         79    01       1412         43    09       1615        367
18       1176         79    02       1347        118    10       1622        273
19       1529         40    03       1603       3417    11       1561        223

I have ifconfig reports for the interface at 6 hour intervals for the preceding
30 days. These are some the totals for the 4 previous reports. Another reset happened
in the past which is why the totals are low:

1/28 12:01  RX packets 3666519  bytes 255749896 (243.9 MiB)
            RX errors 0  dropped 371  overruns 0  frame 0
            TX packets 152072  bytes 99726384 (95.1 MiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

1/27 18:01  RX packets 3530693  bytes 246774937 (235.3 MiB)
            RX errors 0  dropped 371  overruns 0  frame 0
            TX packets 149040  bytes 99060061 (94.4 MiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

1/27 12:01  RX packets 3406901  bytes 238506489 (227.4 MiB)
            RX errors 0  dropped 371  overruns 0  frame 0
            TX packets 143804  bytes 96143745 (91.6 MiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

1/27 06:01  RX packets 3223142  bytes 226262445 (215.7 MiB)
            RX errors 0  dropped 371  overruns 0  frame 0
            TX packets 139820  bytes 94855612 (90.4 MiB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

> Lee Woodworth wrote:
>> Hi All,
>> On a 3.17.7 kernel, the packet stats for only the
>> internet connected interface are intermittently
>> getting zeroed. This is well before a possible
>> 32-bit counter rollover:
> 
> Is the byte counter 32 bits?  Could it be rolling over?  You might be right but the two
> data points you gave don't give us any way to verify your statement.
> 
> Can you graph the counters and see if there's a time or value pattern to the reset?
> 
> Dave
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety