What kind of traffic?

[Mark T. Ganzer]

On Mon, 13 Aug 2001, John Oliver wrote:
>
> This isn't something that's occurring at a given time every day... it's
> a single incident.  Now, I know there's almost certainly no way to find
> out what that spike was.  But what I do want is to have some way to, in
> the future, if there's another incident, look back and get some sort of
> idea of what was happening at that time.  Logging raw packets is the
> only thing that jumps to mind.  But a front-end to sort through them
> would be very nice... :-)

Is there any possibility you had a wrap-around on the counter you were
measuring? You should be able to tell looking at the raw log file for that
time period. MRTG usually handles these properly, but there occasionally
may be cases that it doesn't...

-Mark Ganzer