Hi Fabrice,

My traffic is encrypted using SNMP v3
So listening to it would not be useful as this. I should first use SNMPv1 or 2.

Anyway, I suspect my switch ( ESW-540-48 ) to have a bug, as I also have /_another_/ problem: I can't see in ARP table (directly on the switch web admin interface) the MAC address of some laptops directly plugged in this switch.
     And reboot solved this problem.

I'll come back with SNMPv1 or 2 capture when switch bug above is fixed.
Thanks for your answer anyway

Regards,

Alex

*From:* Alex <[email protected]>
*Sent:* Tue 15 Jul 2014 - 16:49
*To:* [email protected]
*Subject:* WARN: couldn't get MAC

Hi all,

I have a problem for some equipment: their MAC address cannot be retrieved by packet fence.
This is what I have in the packetfence.log :

    Jul 15 14:26:15 pfsetvlan(14) INFO: nb of items in queue: 1; nb of
    threads running: 0 (main::startTrapHandlers)
    Jul 15 14:26:16 pfsetvlan(14) INFO: up trap received on 10.19.1.29
    ifIndex 35 (main::handleTrap)
    Jul 15 14:26:16 pfsetvlan(14) INFO: setting 10.19.1.29 port 35 to
    MAC detection VLAN (main::handleTrap)
    Jul 15 14:26:16 pfsetvlan(14) INFO: Should set 10.19.1.29 ifIndex
    35 to VLAN 2469 but it is already in this VLAN -> Do nothing
    (pf::Switch::setVlan)
    Jul 15 14:26:16 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:18 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:20 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:22 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:24 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:26 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:29 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:31 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:33 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:35 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:37 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:39 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:41 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:44 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:46 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:48 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:50 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:52 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:54 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:56 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:26:59 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:01 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:03 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:05 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:07 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:09 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:11 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:14 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:16 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:18 pfsetvlan(14) WARN: couldn't get MAC at ifIndex
    35. This is a problem. (pf::Switch::_getMacAtIfIndex)
    Jul 15 14:27:18 pfsetvlan(14) WARN: Tried to grab MAC address at
    ifIndex 35 on switch 10.19.1.29 30 times and failed (main::handleTrap)
    Jul 15 14:27:18 pfsetvlan(14) INFO: cannot find MAC (maybe we
    found a VoIP, but they don't count here). Do nothing
    (main::handleTrap)
    Jul 15 14:27:18 pfsetvlan(14) INFO: finished
    (main::cleanupAfterThread)

This problem appears only on some equipments / ports.
If I try manually to get the MAC address with pfcmd_vlan , I can get it with no problem, whatever the VLAN of the port is:

    root /usr/local/pf #./bin/pfcmd_vlan -switch 10.19.1.29 -ifIndex
    35 -setVlan -vlan 2469
    new VLAN: 2469
    root /usr/local/pf #./bin/pfcmd_vlan -switch 10.19.1.29 -ifIndex
    35 -getMAC
    00:00:CC:11:00:00

    root /usr/local/pf #./bin/pfcmd_vlan -switch 10.19.1.29 -ifIndex
    35 -setVlan -vlan 1
    new VLAN: 1
    root /usr/local/pf #./bin/pfcmd_vlan -switch 10.19.1.29 -ifIndex
    35 -getMAC
    00:00:CC:11:00:00


This equipment is plugged in, and works nicely (if I put it in the correct VLAN manually).
Note that this equipment is not a computer, but a sensor.

How can I know why I have all the "couldn't get MAC " messages in packetfence.log (and avoid the consequence that is the equipment is not put in correct VLAN).
Thanks !
--
Alex

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to