Re: net-snmp issue

Interesting......when you say it dies......do you get anything back
from "truss" ?

Is this "other system" sending massive amounst of snmptraps to ecweb02?

>From my limited knowledge of networking, snmp is UDP which doesn't get
affected by FIN_WAIT/CLOSE_WAIT etc

Try running snmpd via under (remember to also trace any forks)



On Thu, Aug 18, 2011 at 1:53 PM, Sergey Prilutsky
<[email protected]> wrote:
> Hi there,
>
> We are having a very strange issue with net-snmp on Solaris 10 server.
>
> snmpd dies all of the sudden, and then we try to disable the service, it
> goes into maintenance mode, I have to run another disable to bring snmpd
> into disabled mode, then I enable it back. It runs ok for 30 sec or so, you
> can see on snoop that it is receiving UDP traffic from another hoist sent
> via snmpd, then it dies. Have you guys seen behavior like that from any
> other user?
>
> Also I noticed that there are 4K BOUND and 5K CLOSE_WAIT ports on netstat
> -an. I also heard about the MOB cache table limitation to 1000 of those.
>
> When it is working, i can snmpget to myself (same server)
> ecweb02 [/] # /usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02 sysUpTime.0
> DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (259458) 0:43:14.58
>
> When it is not, it timesout:
> ecweb02 [/]  #/usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02  sysUpTime.0
> Timeout: No Response from ecweb02.
>
>
> You help much appreciated.
>
> Here is some more data:
>
> sxp49@ecweb02 [/home/sysadmin/sxp49] #uname -a
> SunOS ecweb02 5.10 Generic_125100-10 sun4v sparc SUNW,Sun-Fire-T200
>
> bash-3.00# snmpd -v
> NET-SNMP version:  5.4.2.1
> Web:               http://www.net-snmp.org/
> Email:             [email protected]
>
>
> bash-3.00# snoop |grep UDP
> Using device /dev/e1000g0 (promiscuous mode)
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2691 LEN=53
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2691 S=161 LEN=95
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2728 LEN=55
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2728 S=161 LEN=281
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2729 LEN=56
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2729 S=161 LEN=264
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2730 LEN=57
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2730 S=161 LEN=268
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2856 LEN=57
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2856 S=161 LEN=271
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2857 LEN=57
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2857 S=161 LEN=279
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2859 LEN=57
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2859 S=161 LEN=281
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2490 LEN=107
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2490 LEN=109
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2490 LEN=109
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2490 S=161 LEN=223
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2491 LEN=54
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2491 S=161 LEN=398
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2491 LEN=54
>      ecweb02 -> it-s3mp-3smrts.walgreens.com UDP D=2491 S=161 LEN=413
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2491 LEN=54
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2490 LEN=107
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2490 LEN=109
> it-s3mp-3smrts.walgreens.com -> ecweb02      UDP D=161 S=2491 LEN=54
>
> Thanks
>       Sergey Prilutsky
>
>> Subject: Welcome to the "Net-snmp-users" mailing list
>> From: [email protected]
>> To: [email protected]
>> Date: Wed, 17 Aug 2011 20:31:41 +0000
>>
>> Welcome to the [email protected] mailing list!
>>
>> To post to this list, send your email to:
>>
>> [email protected]
>>
>> General information about the mailing list is at:
>>
>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>
>> If you ever want to unsubscribe or change your options (eg, switch to
>> or from digest mode, change your password, etc.), visit your
>> subscription page at:
>>
>>
>> https://lists.sourceforge.net/lists/options/net-snmp-users/sprilutsky%40hotmail.com
>>
>>
>> You can also make such adjustments via email by sending a message to:
>>
>> [email protected]
>>
>> with the word `help' in the subject or body (don't include the
>> quotes), and you will get back a message with instructions.
>>
>> You must know your password to change your options (including changing
>> the password, itself) or to unsubscribe. It is:
>>
>> talia10
>>
>> Normally, Mailman will remind you of your lists.sourceforge.net
>> mailing list passwords once every month, although you can disable this
>> if you prefer. This reminder will also include instructions on how to
>> unsubscribe or change your account options. There is also a button on
>> your options page that will email your current password to you.
>
> ------------------------------------------------------------------------------
> Get a FREE DOWNLOAD! and learn more about uberSVN rich system,
> user administration capabilities and model configuration. Take
> the hassle out of deploying and managing Subversion and the
> tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
>

------------------------------------------------------------------------------
Get a FREE DOWNLOAD! and learn more about uberSVN rich system, 
user administration capabilities and model configuration. Take 
the hassle out of deploying and managing Subversion and the 
tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users