SNMP flood

[A Cline]

A resolution submitted here for reference.  The problem ended up being a
conflict between an Oracle SNMP agent and the Linux SNMP agent.  My
resolution was to stop both SNMP agents, then start the Oracle agent, and
finally to start the Linux agent.  I'm still working on more specifics, but
the above worked to stop the spamming of smux messages.

Thanks,

Aaron



On 5/30/06, A Cline <aaron.cline at gmail.com> wrote:
>
> Taking Samuel's advice, I started looking at syslog.conf as the problem.
> I did some cleanup and tried again, this time the output changed.
>
> May 30 19:11:47 172.24.220.189 snmpd[3917]: [smux_accept] accepted fd 12
> from 172.24.220.189:55215
> May 30 19:11:47 172.24.220.189 snmpd[3917]: refused smux peer: oid
> SNMPv2-SMI::zeroDotZero, password , descr dbsnmp
> May 30 19:11:47 172.24.220.189 snmpd[3917]: [smux_accept] accepted fd 12
> from 172.24.220.189:55217
> May 30 19:11:47 172.24.220.189 snmpd[3917]: refused smux peer: oid
> SNMPv2-SMI::zeroDotZero, password , descr dbsnmp
>
> So now it looks like I'm continually having some kind of smux error that
> isn't related to syslog.  Am I missing something?
>
> Aaron
>
>
>
>
> On 5/30/06, Samuel J Stanaitis <sstanaitis at dpsource.com> wrote:
> >
> >   Sounds like you need to change the level of the errors it will
> > output.  Those are likely informational and not anything you really need to
> > see.  Critical, Warnings, etc… are ones that you should look at.
> >
> >
> >
> > Thanks,
> >
> > Sam
> >
> >
> >
> > Samuel J Stanaitis, Network Administrator
> >
> > Decorative Product Source, Inc.
> >
> >
> >   ------------------------------
> >
> > *From:* linux-poweredge-bounces at dell.com [mailto:linux-poweredge-bounces at dell.com]
> > *On Behalf Of *A Cline
> > *Sent:* Tuesday, May 30, 2006 2:04 PM
> > *To:* linux-poweredge at dell.com
> > *Subject:* SNMP flood
> >
> >
> >
> > Can anyone help me out here?  I have a Dell server running Oracle server
> > on RHEL AS 3 update 3 that has open manage installed.  It is currently
> > flooding syslog with output like:
> >
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62151
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62156
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62161
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62167
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62172
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62177
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62183
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62189
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62197
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62204
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62209
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62213
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62219
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62226
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62230
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62234
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62238
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62246
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62250
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62254
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62259
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: refused smux peer: oid
> > SNMPv2-SMI::zeroDotZero, password , descr dbsnmp
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62276
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62284
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62293
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62297
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62303
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62307
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62314
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62318
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: refused smux peer: oid
> > SNMPv2-SMI::zeroDotZero, password , descr dbsnmp
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: refused smux peer: oid
> > SNMPv2-SMI::zeroDotZero, password , descr dbsnmp
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62336
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62342
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62346
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62356
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62362
> > May 30 17:59:16 172.24.220.189 snmpd[3815]: [smux_accept] accepted fd 12
> > from 172.24.220.189:62368
> >
> >
> > This is just a small sample.  I do have the line "smuxpeer
> > .1.3.6.1.4.1.674.10892.1" at the end of my snmpd.conf file and snmpd has
> > been restarted.  Can anyone shed some light?
> >
> > Thanks,
> >
> > Aaron
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.us.dell.com/pipermail/linux-poweredge/attachments/20060602/6a22d926/attachment-0001.htm