Screenshot (26).png
Thanks for you replyThe input traffic is higher because there's some housekeeping stuff happening.
Thanks for your helpJust packet drop, (very normal in IP, even in a single UDP or TCP stream) ? (queue full or packet reached end-of-life/TTL value, device cannot handle volume, congestion, ...)
RX packets number is off screen capture. But you actually hide almost everything. (What MT ? SFP speed, ether4 speed, routed/bridged?, NAT or any other firewall rules?, what is after ether4?, HW offloaded? , error counters SFP and ether4?, CPU load? , protocol used? ..... ??????)
On thing common in every post i read on MikroTik forum is that i person who believes he/she knows all will make a comment that is actually not in anyway helpful or contributiveAsk your network administrator.
Or the one with the networking skills.
Thanks for your replyPlease do not quote unnecessarily.
Use "Post Reply",
thanks.
Can simply your device under attack and the firewall block packets,
or simply your interface receiving some packet from other vlans, etc.
Can be anything without more details.
Thank you/export hide-sensitive file=anynameyouwish
May point to other config issues...........
After 9 years never know the /export functionEven if you feel im a newbie i dont think not knowing how to post a reply after 9years in this forum makes any logical sense
Slow reader! ;-PAfter 9 years never know the /export functionEven if you feel im a newbie i dont think not knowing how to post a reply after 9years in this forum makes any logical sense
I'm sorry, my magic crystal ball sometimes is unreliable and I can't use it in mystery problem solving.As a network admin sometimes when we are stuck we reach out to colleagues for ideas or advice.Ask your network administrator.
Or the one with the networking skills.
Thanks for your postSince you talk about "customers", chances are high that you've got some bandwidth shaping rules (using queues) in place. If so, it's what @bpwl suggests - that client has attracted (willingly or unwillingly) a traffic volume his contract doesn't allow. So that traffic arrives via the uplink (sfp) interface, but only part of it is actually forwarded to the client. Not all types of traffic adjust the transmit speed to a feedback provided by the recipient.
Regarding the harsh comments - nobody has been born a network administrator, but the same information can be presented in multiple forms, and some people perceive some forms better than others. Your augmented screenshot does illustrate what you ask about, but whereas some people may understand it at first glance, other people (like me) have to study it longer - not to find what is actually wrong but to find out what you deem wrong.
It would have been easy for you to describe your concern also in plain words, like "why the Rx bandwidth on the uplink interface is much higher than the sum of Tx bandwidths on downlink interfaces".
Funny mr know it allI'm sorry, my magic crystal ball sometimes is unreliable and I can't use it in mystery problem solving.
As a network admin sometimes when we are stuck we reach out to colleagues for ideas or advice.
But I see that you recently found the export function, after 9 years "of forum". PS: spending time on a forum doesn't make you a network administrator.
PS2: Ever saw Tool/Torch? It's like a magic crystal ball of some sorts.
It is an image made by someone who wants answers without giving information.