This is called spike protection. Spike protection happens when IRIS sees a count of more than 4x the bandwidth statement on the interface. This could be due to a device’s SNMP counters wrap/reset, or an incorrect bandwidth statement. IRIS “masks this data” on the graph so that the spike doesn’t skew the remaining data on the graph that would typically become just a line at the bottom of the graph.