Hi,

At exactly midnight last night (when it changed from January to February) there is a huge spike on my incoming network graph. The spike is 43.55MB/s, which is huge. Oddly the outgoing graph is normal.

Unfortunately this now means I can't see anything on my graph as the spike is so large.

In this spike a bug, or was I hit by a momentary DDOS attack?

Cheers,
Andrew
www.indiegigs.co.uk (on host 42)

Not a DOS, it's a known issue. The data comes from a counter that is reset at midnight on the first causing a spike.

I guess it was something like that.

Cheers,
Andrew

RRDTool has the ability to specify limits on possible incoming values to counters, primarily for this very reason (to eliminate spikes from counter resets).

If you would like to post the code responsible for creating the ".rrd" file I would be happy to have a look at a means of eliminating this spike.

We have limits in place (100Mbit) which eliminates the spike for some people but not all. So, unfortunatly, since the spike is a sane amout of traffic, it can't be filtered this way. We have alternative methods to deal with this and it is on the TODO list but other things have taken priority.