received packets storm - net_packets

[Jerami1981]

Can anyone direct me towards a way to disable, or adjust this warning/alert, or the threshold parameters? Every time I move data to my server, i end up with an email alert. I am running v11.2 and have enabled netdata.

 

[Chris Moore]

Can anyone direct me towards a way to disable, or adjust this warning/alert, or the threshold parameters? Every time I move data to my server, i end up with an email alert. I am running v11.2 and have enabled netdata.

You must have something configured wrong. Do you have two network interfaces connected to the same network?

 

[Chris Moore]

Please follow this guide and give detailed system description:

https://forums.freenas.org/index.php?threads/updated-forum-rules-12-5-18.45124/

 

[Jerami1981]

Motherboard is from a Dell R510
Intel Xeon E5620
64 GB ECC Ram
12 HDDs. WD Red 8TB, Raid-Z2
Dell H300 disk controller
Mellanox MNPA19-XTR 10G

Only one network interface is connected, and configured.

 

[Redcoat]

Can anyone direct me towards a way to disable, or adjust this warning/alert, or the threshold parameters? Every time I move data to my server, i end up with an email alert. I am running v11.2 and have enabled netdata.

An email I received - a "netdata notification" - about disk utilization contained the following information:

"The source of this alarm is line 131@/usr/local/etc/netdata/health.d/disks.conf (alarms are configurable, edit this file to adapt the alarm to your needs)".

Did your alert email perhaps have somersetting similar relating to the source of yoiur alarm?

 

[Jerami1981]

10s received packets storm = 10970%
the % of the rate of received packets in the last 10 seconds, compared to the rate of the last minute (clear notification for this alarm will not be sent) Alarm
mlxen0 Family
CRITICAL Severity

I hadn't noticed this fine print at the bottom before. Looks I can edit this file possibly.
The source of this alarm is line 109@/usr/local/etc/netdata/health.d/net.conf

 

[VolumeTank]

10s received packets storm = 10970%
the % of the rate of received packets in the last 10 seconds, compared to the rate of the last minute (clear notification for this alarm will not be sent) Alarm
mlxen0 Family
CRITICAL Severity

I hadn't noticed this fine print at the bottom before. Looks I can edit this file possibly.
The source of this alarm is line 109@/usr/local/etc/netdata/health.d/net.conf

Was you able to fix this issue. I'm having the same alert. I did when into net.conf using nano. I'm not sure which one I have to edit in.

Code:

# -----------------------------------------------------------------------------
# check for packet storms

# 1. calculate the rate packets are received in 1m: 1m_received_packets_rate
# 2. do the same for the last 10s
# 3. raise an alarm if the later is 10x or 20x the first
# we assume the minimum packet storm should at least have
# 10000 packets/s, average of the last 10 seconds

template: 1m_received_packets_rate
      on: net.packets
      os: linux freebsd
   hosts: *
families: *
  lookup: average -1m of received
   units: packets
   every: 10s
    info: the average number of packets received during the last minute

template: 10s_received_packets_storm
      on: net.packets
      os: linux freebsd
   hosts: *
families: *
  lookup: average -10s of received
    calc: $this * 100 / (($1m_received_packets_rate < 1000)?(1000):($1m_received_packets_rate))
   every: 10s
   units: %
   warn: $this > (($status >= $WARNING)?(200):(5000))
   crit: $this > (($status >= $WARNING)?(5000):(6000))
options: no-clear-notification
   info: the % of the rate of received packets in the last 10 seconds, compared to the rate of the last minute (clear notification for this alarm will not be sent)
     to: sysadmin

I know is this part but which line? I'm n not sure, maybe this one:

calc: $this * 100 / (($1m_received_packets_rate < 1000)?(1000):$1m_received_packets_rate))

Change to do the calc to 200 instead of 100.