.\" Automatically generated by Pod::Man version 1.15 .\" Tue Jun 5 13:09:32 2001 .\" .\" Standard preamble: .\" ====================================================================== .de Sh \" Subsection heading .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Ip \" List item .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. | will give a .\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used .\" to do unbreakable dashes and therefore won't be available. \*(C` and .\" \*(C' expand to `' in nroff, nothing in troff, for use with C<> .tr \(*W-|\(bv\*(Tr .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' 'br\} .\" .\" If the F register is turned on, we'll generate index entries on stderr .\" for titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and .\" index entries marked with X<> in POD. Of course, you'll have to process .\" the output yourself in some meaningful fashion. .if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . nr % 0 . rr F .\} .\" .\" For nroff, turn off justification. Always turn off hyphenation; it .\" makes way too many mistakes in technical documents. .hy 0 .if n .na .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. .bd B 3 . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ====================================================================== .\" .IX Title "LOGFILE 1" .TH LOGFILE 1 "2.9.17" "2001-06-05" "mrtg" .UC .SH "NAME" logfile \- description of the mrtg-2 logfile format .SH "SYNOPSIS" .IX Header "SYNOPSIS" This document provides a description of the contents of the mrtg-2 logfile. .SH "OVERVIEW" .IX Header "OVERVIEW" The logfile consists of two main sections. A very short one at the beginning: .Ip "The first Line" 4 .IX Item "The first Line" It stores the traffic counters from the most recent run of mrtg .Ip "The rest of the File" 4 .IX Item "The rest of the File" Stores past traffic rate averates and maxima at increassing intervals .PP The first number on each line is a unix time stamp. It represents the number of seconds since 1970. .SH "DETAILS" .IX Header "DETAILS" .Sh "The first Line" .IX Subsection "The first Line" The first line has 3 numbers which are: .Ip "A (1st column)" 4 .IX Item "A (1st column)" A timestamp of when \s-1MRTG\s0 last ran for this interface. The timestamp is the number of non-skip seconds passed since the standard \s-1UNIX\s0 \*(L"epoch\*(R" of midnight on 1st of January 1970 \s-1GMT\s0. .Ip "B (2nd column)" 4 .IX Item "B (2nd column)" The \*(L"incoming bytes counter\*(R" value. .Ip "C (3rd column)" 4 .IX Item "C (3rd column)" The \*(L"outgoing bytes counter\*(R" value. .Sh "The rest of the File" .IX Subsection "The rest of the File" The second and remaining lines of the file 5 numbers which are: .Ip "A (1st column)" 4 .IX Item "A (1st column)" The Unix timestamp for the point in time the data on this line is relevant. Note that the interval between timestamps increases as you prograss through the file. At first it is 5 minutes and at the end it is one day between two lines. .Sp This timestamp may be converted in \s-1EXCEL\s0 by using the following formula: .Sp .Vb 1 \& =(x+y)/86400+DATE(1970,1,1) .Ve you can also ask perl to help by typing .Sp .Vb 1 \& perl -e 'print scalar localtime(x),"\en"' .Ve \&\fBx\fR is the unix timestamp and \fBy\fR is the offset in seconds from \s-1UTC\s0. (Perl knows \fBy\fR). .Ip "B (2nd column)" 4 .IX Item "B (2nd column)" The average incoming transfer rate in bytes per second. This is valid for the time between the A value of the current line and the A value of the previous line. .Ip "C (3rd column)" 4 .IX Item "C (3rd column)" The average outgoing transfer rate in bytes per second since the previous measurement. .Ip "D (4th column)" 4 .IX Item "D (4th column)" The maximum incoming transfer rate in bytes per second for the current interval. This is calculated from all the updates which have occured in the current interval. If the current interval is 1 hour, and updates have occured every 5 minutes, it will be the biggest 5 minute transferrate seen during the hour. .Ip "E (5th column)" 4 .IX Item "E (5th column)" The maximum outgoing transfer rate in bytes per second for the current interval. .SH "AUTHOR" .IX Header "AUTHOR" Butch Kemper <kemper@bihs.net> and Tobias Oetiker <oetiker@ee.ethz.ch>