Info: Interface bps_percentage reports over 100%

How to get the most out of your CySight software.

Info: Interface bps_percentage reports over 100%

bps_percentage calculations are correlated against the bandwidth on an interface and thus correctly reflect a total percentage value being greater than 100% when the Bandwidth setting on the router/switch is incorrect or active and/or inactive timeouts are incorrectly set.

Solution:

1. Check and update Bandwidth on each interface of the router/switch.

Note: If the bandwidth cannot be set on the router/switch update manually using Device/Interface screens in CySight. The SNMP community string will need to be set to an invalid string so that automatic updates do not overwrite manual configurations.

2. Set inactive timeout to 15 and active timeout to 1
* ip flow-cache timeout inactive 15
* ip flow-cache timeout active 1

Another reason Interfaces can report over 100% is due to an anomaly with NetFlow. Flows that expired in the previous minutes get exported in the current minutes and cause false peaks. This was more prominently seen with older Cisco ASA where the flow was only exported at teardown of the flow.