On a Cisco CAT6513 running IOS, we recently enabled monitoring on a port-group running at 4Gbps. This is connected to a backup server running some heavy duty network traffic. Orion, sampling stats at 10 minute intervals, reports peak bps at 35Mbps in the min/max graphs (both console and webui) with averages running between 20-30Mbps. However, if we launch the Real Time gauges from the Engineer's Toolkit, we see sustained rates of well over 100Mbps and typically 500Mbps+. Monitoring the network interface directly on the host confirms these bit rates ... and whereas Orion reports last-24 hour max as 35Mbps, the team has confirmed a peak of 3.25Gbps on the port-channel during a nightly backup. We initially thought this might be a counter rollover problem but changing counter rollover behavior didn't alter Orion's reporting. Is Orion reading different buckets than the real-time gauges? Is the Cat IOS not recording some snmp stats correctly? Has anyone else run into this issue before I run it through support? This brings into serious question the validity of much of the statistical reporting in Orion so we're hoping for some rational explanation.
cheers ... 
gn
