Re: Cacti not graphing on hosts acting as SNMP server devices - version 0.8.8a

>>
>> The other machine that I have which is CentOS 6.2 x64 based running
>> net-snmp from the EPEL repos.... is still not working:
>>
>> Output from snmpget:
>>
>> snmpget -c 4622b8ba -v 2c 172.31.8.16 1.3.6.1.2.1.25.1.1.0
>> HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (75939008) 8 days, 18:56:30.08
>>
>>
>> Uptime if I understand correctly is 8 days +.....
>>
>>
>> So why doesn't Cacti then see this?
> There are two uptimes
> - hrSystemUptime == uptime of the system (but this is an OPTIONAL MIB)
> - sysUptime == uptime of the snmpd on target system (and there have been restart
> scripts to restart snmpd each week since long ...)
> so both may differ. We refer to the last one.
>
>
>>
>> The web-ui shows this:
>>
>> SNMP Information
>> System:Linux uk-lon-nag-1.rjis.co.uk 2.6.32-220.13.1.el6.x86_64 #1 SMP Tue
>> Apr 17 23:56:34 BST 2012 x86_64
>> Uptime: 9411 (0 days, 0 hours, 1 minutes)
>
> That's sysUptime!
>
>> Hostname: uk-lon-nag-1.rjis.co.uk
>> Location: Monitoring Cluster
>> Contact: Master Kaya Saman
>>
>>
>> But under Console it shows as down:?
> That is indeed strange.
>
>>
>> What information could I provide for this host to be useful?
>>
>>
>> The log shows that SNMP is querying the system:
>>
>> May  9 11:59:08 uk-lon-nag-1 snmpd[12567]: Connection from UDP:
>> [172.31.8.17]:16996->[172.31.8.16]
> Please have a look, which request and which response is exchanged. Is it a
> sysUptime request and is there any response? A tcpdump/wireshark trace may help.
> Are you running spine or cmd.php?
>

I am running cmd.php


This is output of tcpdump:


uk-lon-cacti-1# tcpdump -vv host 172.31.8.16
tcpdump: listening on bce0, link-type EN10MB (Ethernet), capture size 96 bytes
13:23:42.642670 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.32 tell 172.31.8.16, length 46
13:23:42.752671 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.33 tell 172.31.8.16, length 46
13:23:47.600015 IP (tos 0x0, ttl 64, id 15613, offset 0, flags [none],
proto UDP (17), length 74)
    uk-lon-cacti-1.rjis.co.uk.38206 > 172.31.8.16.snmp: [bad udp cksum
f679!]  { SNMPv2c C=4622b8ba { GetRequest(29) R=1773774262  25.1.1.0 }
}
13:23:47.600474 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 77)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.38206: [udp sum ok]
{ SNMPv2c C=4622b8ba { GetResponse(32) R=1773774262  25.1.1.0=458469 }
}
13:24:15.744950 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
ICMP (1), length 66)
    172.31.8.16 > uk-lon-cacti-1.rjis.co.uk: ICMP echo request, id
54278, seq 0, length 46
13:24:15.744967 IP (tos 0x0, ttl 64, id 16504, offset 0, flags [DF],
proto ICMP (1), length 66)
    uk-lon-cacti-1.rjis.co.uk > 172.31.8.16: ICMP echo reply, id
54278, seq 0, length 46
13:24:15.747132 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 (03:05:01:02:01:04 (oui Unknown)) tell 172.31.8.34, length
46
13:24:20.794271 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 tell 172.31.8.31, length 46
13:25:15.749049 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
ICMP (1), length 66)
    172.31.8.16 > uk-lon-cacti-1.rjis.co.uk: ICMP echo request, id
54278, seq 0, length 46
13:25:15.749065 IP (tos 0x0, ttl 64, id 18499, offset 0, flags [DF],
proto ICMP (1), length 66)
    uk-lon-cacti-1.rjis.co.uk > 172.31.8.16: ICMP echo reply, id
54278, seq 0, length 46
13:25:15.751105 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 (03:05:01:02:01:04 (oui Unknown)) tell 172.31.8.34, length
46
13:25:15.751892 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.32 tell 172.31.8.16, length 46
13:25:15.751899 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.33 tell 172.31.8.16, length 46
13:25:15.751903 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
km43854f.rjis.co.uk tell 172.31.8.16, length 46
13:25:20.748959 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
uk-lon-cacti-1.rjis.co.uk tell 172.31.8.16, length 46
13:25:20.748970 ARP, Ethernet (len 6), IPv4 (len 4), Reply
uk-lon-cacti-1.rjis.co.uk is-at 00:26:b9:5a:4e:25 (oui Unknown),
length 28
13:25:20.792476 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 tell 172.31.8.31, length 46
13:26:15.753130 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
ICMP (1), length 66)
    172.31.8.16 > uk-lon-cacti-1.rjis.co.uk: ICMP echo request, id
54278, seq 0, length 46
13:26:15.753149 IP (tos 0x0, ttl 64, id 20052, offset 0, flags [DF],
proto ICMP (1), length 66)
    uk-lon-cacti-1.rjis.co.uk > 172.31.8.16: ICMP echo reply, id
54278, seq 0, length 46
13:26:15.755330 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 (03:05:01:02:01:04 (oui Unknown)) tell 172.31.8.34, length
46
13:26:15.773801 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
uk-lon-sql-p1.rjis.co.uk tell 172.31.8.16, length 46
13:26:16.951762 IP (tos 0x0, ttl 64, id 20101, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.14121 > 172.31.8.16.snmp: [bad udp cksum
5273!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554740
system.sysDescr.0 } }
13:26:16.952179 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 173)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.14121:  { SNMPv2c
C=4622b8ba { GetResponse(127) R=1476554740  system.sysDescr.0=[|snmp]
} }
13:26:16.952569 IP (tos 0x0, ttl 64, id 20102, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.64175 > 172.31.8.16.snmp: [bad udp cksum
c9ae!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554741
system.sysUpTime.0 } }
13:26:16.952901 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 76)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.64175: [udp sum ok]
{ SNMPv2c C=4622b8ba { GetResponse(31) R=1476554741
system.sysUpTime.0=471599 } }
13:26:16.953139 IP (tos 0x0, ttl 64, id 20103, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.45672 > 172.31.8.16.snmp: [bad udp cksum
ef6!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554742
system.sysName.0 } }
13:26:16.953417 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 96)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.45672:  { SNMPv2c
C=4622b8ba { GetResponse(51) R=1476554742  system.sysName.0=[|snmp] }
}
13:26:16.953623 IP (tos 0x0, ttl 64, id 20104, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.61119 > 172.31.8.16.snmp: [bad udp cksum
b6b8!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554743
system.sysLocation.0 } }
13:26:16.953881 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 91)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.61119:  { SNMPv2c
C=4622b8ba { GetResponse(46) R=1476554743
system.sysLocation.0=[|snmp] } }
13:26:16.954077 IP (tos 0x0, ttl 64, id 20105, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.10151 > 172.31.8.16.snmp: [bad udp cksum
d17e!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554744
system.sysContact.0 } }
13:26:16.954352 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 90)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.10151:  { SNMPv2c
C=4622b8ba { GetResponse(45) R=1476554744  system.sysContact.0=[|snmp]
} }
13:26:16.956665 IP (tos 0x0, ttl 64, id 20106, offset 0, flags [none],
proto ICMP (1), length 84)
    uk-lon-cacti-1.rjis.co.uk > 172.31.8.16: ICMP echo request, id
52080, seq 0, length 64
13:26:16.956732 IP (tos 0x0, ttl 64, id 40738, offset 0, flags [none],
proto ICMP (1), length 84)
    172.31.8.16 > uk-lon-cacti-1.rjis.co.uk: ICMP echo reply, id
52080, seq 0, length 64
13:26:16.957043 IP (tos 0x0, ttl 64, id 20107, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.14990 > 172.31.8.16.snmp: [bad udp cksum
eb6a!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554745
system.sysUpTime.0 } }
13:26:16.957334 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 76)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.14990: [udp sum ok]
{ SNMPv2c C=4622b8ba { GetResponse(31) R=1476554745
system.sysUpTime.0=471600 } }
13:26:20.790692 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
172.31.8.16 tell 172.31.8.31, length 46
13:26:50.115074 IP (tos 0x0, ttl 64, id 21148, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.17589 > 172.31.8.16.snmp: [bad udp cksum
c682!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554711
system.sysDescr.0 } }
13:26:50.115431 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 173)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.17589:  { SNMPv2c
C=4622b8ba { GetResponse(127) R=1476554711  system.sysDescr.0=[|snmp]
} }
13:26:50.116743 IP (tos 0x0, ttl 64, id 21149, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.18673 > 172.31.8.16.snmp: [bad udp cksum
887d!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554712
system.sysUpTime.0 } }
13:26:50.117024 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 76)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.18673: [udp sum ok]
{ SNMPv2c C=4622b8ba { GetResponse(31) R=1476554712
system.sysUpTime.0=474915 } }
13:26:50.117316 IP (tos 0x0, ttl 64, id 21150, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.48895 > 172.31.8.16.snmp: [bad udp cksum
7806!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554713
system.sysName.0 } }
13:26:50.117590 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 96)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.48895:  { SNMPv2c
C=4622b8ba { GetResponse(51) R=1476554713  system.sysName.0=[|snmp] }
}
13:26:50.117793 IP (tos 0x0, ttl 64, id 21151, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.47720 > 172.31.8.16.snmp: [bad udp cksum
e0a!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554714
system.sysLocation.0 } }
13:26:50.118059 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 91)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.47720:  { SNMPv2c
C=4622b8ba { GetResponse(46) R=1476554714
system.sysLocation.0=[|snmp] } }
13:26:50.118251 IP (tos 0x0, ttl 64, id 21152, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.42384 > 172.31.8.16.snmp: [bad udp cksum
e81d!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554715
system.sysContact.0 } }
13:26:50.118518 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 90)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.42384:  { SNMPv2c
C=4622b8ba { GetResponse(45) R=1476554715  system.sysContact.0=[|snmp]
} }
13:26:50.120827 IP (tos 0x0, ttl 64, id 21153, offset 0, flags [none],
proto ICMP (1), length 84)
    uk-lon-cacti-1.rjis.co.uk > 172.31.8.16: ICMP echo request, id
2673, seq 0, length 64
13:26:50.120922 IP (tos 0x0, ttl 64, id 40739, offset 0, flags [none],
proto ICMP (1), length 84)
    172.31.8.16 > uk-lon-cacti-1.rjis.co.uk: ICMP echo reply, id 2673,
seq 0, length 64
13:26:50.121236 IP (tos 0x0, ttl 64, id 21154, offset 0, flags [none],
proto UDP (17), length 73)
    uk-lon-cacti-1.rjis.co.uk.19739 > 172.31.8.16.snmp: [bad udp cksum
5e75!]  { SNMPv2c C=4622b8ba { GetRequest(28) R=1476554716
system.sysUpTime.0 } }
13:26:50.121524 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 76)
    172.31.8.16.snmp > uk-lon-cacti-1.rjis.co.uk.19739: [udp sum ok]
{ SNMPv2c C=4622b8ba { GetResponse(31) R=1476554716
system.sysUpTime.0=474915 } }


I do see some "Bad UDP checksum" statements....


Could this be the issue?


Regards,


Kaya

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/