Alert Analysis of TLAYTCP data
The data being analyzed here is the tlaytcp values of the tlaytcp data sets.
The algorithm is a simplified and modifed version of the
anomalous event analysis uses a modified "plateau" algorithm (
ppt,
pdf) developed from
Automated Event Detection for Active
Measurement Systems McGregor A. J and Braun H-W.
Connie Logg and Les Cottrell
Program Logic Manual |
Perl pseudo code |
Examples of alerts and
code
This page was created from the tlaytcp data on Sun Oct 12 14:30:49 2008 for iepm on iepm-bw
by: /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/runperiod
The data includes 122 remote hosts.
EVENT SUMMARY
node = iepm-bw.caltech.ul-org
Analyzed at Sun Oct 12 14:30:50 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/iepm-bw.caltech.ul-org
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = iepm-bw.cern.ch
Analyzed at Sun Oct 12 14:30:54 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/iepm-bw.cern.ch
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.desy.de
Analyzed at Sun Oct 12 14:30:59 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.desy.de
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 97 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.22 mins; history_buffer_length=97( 120.0 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.fzk.de
Analyzed at Sun Oct 12 14:31:04 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.fzk.de
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 97 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.22 mins; history_buffer_length=97( 120.0 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.in2p3.fr
Analyzed at Sun Oct 12 14:31:08 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.in2p3.fr
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.sdsc.edu
Analyzed at Sun Oct 12 14:31:14 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.sdsc.edu
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.switch.ch
Analyzed at Sun Oct 12 14:31:18 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.switch.ch
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 97 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.22 mins; history_buffer_length=97( 120.0 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.triumf.ca
Analyzed at Sun Oct 12 14:31:23 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.triumf.ca
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.umich.ul-org
Analyzed at Sun Oct 12 14:31:28 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.umich.ul-org
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 96 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
| node1.umich.ul-org | 621.01 | 127.3262 | 328.55 |
32.855 | 47.0942 | 0 | 10/02/2008 16:56:15 | 10/02/2008 11:59:13 | 297 | (282.375,311.517,340.567,342.822,365.48) |
| node1.umich.ul-org | 599.5 | 140.6378 | 186.75 |
94.0925 | 68.8490 | 43.16 | 10/03/2008 14:29:39 | 10/03/2008 05:05:55 | 563 | (256.957,21.468,225.458,208.626,221.24) |
triggers = 2; aborted triggers = 0; alerts = 2; avg. data separation= 74.23 mins; history_buffer_length=96( 118.8 hours); trigger_buffer_length=4( 4.9 hours)
node = node1.utoronto.ca
Analyzed at Sun Oct 12 14:31:34 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node1.utoronto.ca
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 97 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
| node1.utoronto.ca | 18.53 | 5.8353 | 1.27 |
1.6873 | 93.1462 | 0 | 09/29/2008 03:40:21 | 09/28/2008 20:38:43 | 421 | (1.252,0.832,4.14,0.079,0.029) |
triggers = 1; aborted triggers = 0; alerts = 1; avg. data separation= 74.22 mins; history_buffer_length=97( 120.0 hours); trigger_buffer_length=4( 4.9 hours)
node = node7.slac.stanford.edu
Analyzed at Sun Oct 12 14:31:39 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/tlaytcp/node7.slac.stanford.edu
User selected change threshold = 33, data_column=tlaytcp
(tlaytcp)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 97 (7200 mins) entries,
size of trigger buffer = 4 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change
last-trig | %change
lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 74.22 mins; history_buffer_length=97( 120.0 hours); trigger_buffer_length=4( 4.9 hours)
