We have a device in Performance Manager whose subinterface shows more traffic than its physical interface, and this should not be the case.
Release : any
Calculations are made based on the data we receive from the device;
If we receive wrong data we will present it in dashboards.
Run a snmpwalk or collect dcdebug and verify if the raw data seems good;
In the example below the physical interface shows around 412 Mbit/sec:
Dec 05 16:45:58.458: 1.3.6.1.2.1.31.1.1.1.6.2 = 412937962065451
where the subinterface show around 715 Mbit/sec:
Dec 05 16:45:58.385: 1.3.6.1.2.1.31.1.1.1.6.18 = 715869199433953
This needs to be addressed by the device vendor.