Hey guys and girls, I’ve got a question concerning the traffic monitoring on a Cisco switch (or other ethernet interfaces). I’m configuring a network for a lighting sculpture using lighting protocols (artnet, sacn) so my cause is quite unique I’d reckon…
The thing is that I’d like to monitor traffic in a quite realistic manner like I could with wireshark and port mirroring, the monitoring intervall being a second or less. Is this principially achievable with SNMP? I don’t need it for longterm installation, just for a testing environment to gather the to be expected traffic extent from a couple of samples, more or less 3 ports that need monitoring.
My problem is, that the traffic source (a lighting software) is causing spikey traffic (1s 60Mbit/s, 1s 20Mbit/s, 1s 60Mbit/s, etc.). I could monitor this in the windows task manager and also with wireshark + port mirroring. But the dude displays the traffic as quite constant 30ish Mbit/s, which is somehow the average of what is happening.
After investigating the SNMP polling I saw in the device settings (Device_xy → SNMP → Interfaces → gigabitethernet1/1/11 (59)) that the polling intervall seems to be 15 seconds, though my map settings default polling would suggest 2 seconds (the device being on default plling values).
Mathematically I’d say it’s absolutely logical to have something like mean value over 15 seconds for my traffic. But I want to be more specific.
Any suggestions?
I tried to be thorough while searching this forum but didn’t find anything. So for a first time poster, don’t be too harsh if this question has been answered before.
Cheers & thanks for reading!