net-snmp issue

2011-08-18 Thread Sergey Prilutsky



Hi there,



We are having a very strange issue with net-snmp on Solaris 10 server.



snmpd dies all of the sudden, and then we try to disable the service, it goes
into maintenance mode, I have to run another disable to bring snmpd into
disabled mode, then I enable it back. It runs ok for 30 sec or so, you can see
on snoop that it is receiving UDP traffic from another hoist sent via snmpd,
then it dies. Have you guys seen behavior like that from any other user?


Also I noticed that there are 4K BOUND and 5K CLOSE_WAIT ports on netstat -an. 
I also heard about the MOB cache table limitation to 1000 of those.


When it is working, i can snmpget to myself (same server)

ecweb02 [/] # /usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02 sysUpTime.0

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (259458) 0:43:14.58



When it is not, it timesout:

ecweb02 [/]  #/usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02 
sysUpTime.0

Timeout: No Response from ecweb02.





You help much appreciated. 



Here is some more data:



sxp49@ecweb02 [/home/sysadmin/sxp49] #uname -a

SunOS ecweb02 5.10 Generic_125100-10 sun4v sparc SUNW,Sun-Fire-T200



bash-3.00# snmpd -v

NET-SNMP version:  5.4.2.1

Web:  
http://www.net-snmp.org/

Email:
net-snmp-coders@lists.sourceforge.net





bash-3.00# snoop |grep UDP

Using device /dev/e1000g0 (promiscuous mode)

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2691 LEN=53

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2691
S=161 LEN=95

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2728 LEN=55

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2728
S=161 LEN=281

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2729 LEN=56

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2729
S=161 LEN=264

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2730 LEN=57

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2730
S=161 LEN=268

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2856 LEN=57

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2856
S=161 LEN=271

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2857 LEN=57

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2857
S=161 LEN=279

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2859 LEN=57

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2859
S=161 LEN=281

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2490 LEN=107

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2490 LEN=109

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2490 LEN=109

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2490
S=161 LEN=223

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2491 LEN=54

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2491
S=161 LEN=398

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2491 LEN=54

 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2491
S=161 LEN=413

it-s3mp-3smrts.walgreens.com -
ecweb02  UDP D=161 S=2491 LEN=54

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2490 LEN=107

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2490 LEN=109

it-s3mp-3smrts.walgreens.com - ecweb02  UDP
D=161 S=2491 LEN=54



Thanks

  Sergey Prilutsky--
Get a FREE DOWNLOAD! and learn more about uberSVN rich system, 
user administration capabilities and model configuration. Take 
the hassle out of deploying and managing Subversion and the 
tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


RE: Very weird net-snmp issue on Solaris 10 server

2011-08-18 Thread Sergey Prilutsky

No, we did not compile it on our own, it came with Solaris

Thanks

  Sergey Prilutsky 

 From: harda...@users.sourceforge.net
 To: sprilut...@hotmail.com
 CC: harda...@users.sourceforge.net; net-snmp-coders@lists.sourceforge.net
 Subject: Re: Very weird net-snmp issue on Solaris 10 server
 Date: Thu, 18 Aug 2011 09:52:49 -0700
 
  On Thu, 18 Aug 2011 10:07:19 -0500, Sergey Prilutsky 
  sprilut...@hotmail.com said:
 
 SP it is not Solaris snmp, it is net-snmp
 
 Yes, but I mean did it come with the solaris OS (which redistributes our
 agent), or did you compile your own?  Sounds like you compiled your own.
 
 -- 
 Wes Hardaker
 Please mail all replies to net-snmp-coders@lists.sourceforge.net
  --
Get a FREE DOWNLOAD! and learn more about uberSVN rich system, 
user administration capabilities and model configuration. Take 
the hassle out of deploying and managing Subversion and the 
tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


RE: Very weird net-snmp issue on Solaris 10 server

2011-08-18 Thread Sergey Prilutsky

it is not Solaris snmp, it is net-snmp

snmpd is online and enabled (SMF) and there are no messages. It just stops to 
process requests, like you saw in higlighted (red) packets. 

Plus when I do snmpget, it gives me timeout 

Does someone know about the MIB cache table and it's limitations/configuration?


Thanks

  Sergey Prilutsky 

 From: harda...@users.sourceforge.net
 To: sprilut...@hotmail.com
 CC: net-snmp-coders@lists.sourceforge.net
 Subject: Re: Very weird net-snmp issue on Solaris 10 server
 Date: Thu, 18 Aug 2011 07:34:01 -0700
 
  On Wed, 17 Aug 2011 13:35:43 -0500, Sergey Prilutsky 
  sprilut...@hotmail.com said:
 
 SP We are having a very strange issue with net-snmp on Solaris 10
 SP server.
 
 Is this the snmpd that comes with solaris, or a self-built one?
 
 You might consider building a newer copy to see if that fixes the
 problem.
 
 SP snmpd dies all of the sudden
 
 When you say dies, is the process still around?  Your note made it a
 bit unclear.
 
 
 SP When it is not, it timesout:
 SP ecweb02 [/]  #/usr/local/bin/snmpget -v 2c -c XX ecweb02  sysUpTime.0
 SP Timeout: No Response from ecweb02.
 
 Have you tried a very long timeout (try -t 60 as an option, for example).
 
 SP Using device /dev/e1000g0 (promiscuous mode)
 SP it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2691 LEN=53
 SP ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2691 S=161 LEN=95
 
 I hope those hosts are yours?  If not, you should always be blocking
 SNMP at your border unless you need it to go across.  And certainly you
 shouldn't be using community names that have been advertised publicly
 (and that includes using any you might have just sent to a public
 mailing list like this one).
 -- 
 Wes Hardaker
 Please mail all replies to net-snmp-coders@lists.sourceforge.net
  --
Get a FREE DOWNLOAD! and learn more about uberSVN rich system, 
user administration capabilities and model configuration. Take 
the hassle out of deploying and managing Subversion and the 
tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Very weird net-snmp issue on Solaris 10 server

2011-08-17 Thread Sergey Prilutsky

Hi there,

We are having a very strange issue with net-snmp on Solaris 10 server.

snmpd dies all of the sudden, and then we try to disable the service, it goes 
into maintenance mode, I have to run another disable to bring snmpd into 
disabled mode, then I enable it back. It runs ok for 30 sec or so, you can see 
on snoop that it is receiving UDP traffic from another hoist sent via snmpd, 
then it dies. Have you guys seen behavior like that from any other user?

When it is working, i can snmpget to myself (same server)
ecweb02 [/] # /usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02 sysUpTime.0
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (259458) 0:43:14.58

When it is not, it timesout:
ecweb02 [/]  #/usr/local/bin/snmpget -v 2c -c Dk2twmP$ ecweb02  sysUpTime.0
Timeout: No Response from ecweb02.


You help much appreciated. 

Here is some more data:

sxp49@ecweb02 [/home/sysadmin/sxp49] #uname -a
SunOS ecweb02 5.10 Generic_125100-10 sun4v sparc SUNW,Sun-Fire-T200

bash-3.00# snmpd -v
NET-SNMP version:  5.4.2.1
Web:   http://www.net-snmp.org/
Email: net-snmp-coders@lists.sourceforge.net


bash-3.00# snoop |grep UDP
Using device /dev/e1000g0 (promiscuous mode)
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2691 LEN=53
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2691 S=161 LEN=95
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2728 LEN=55
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2728 S=161 LEN=281
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2729 LEN=56
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2729 S=161 LEN=264
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2730 LEN=57
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2730 S=161 LEN=268
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2856 LEN=57
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2856 S=161 LEN=271
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2857 LEN=57
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2857 S=161 LEN=279
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2859 LEN=57
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2859 S=161 LEN=281
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2490 LEN=107
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2490 LEN=109
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2490 LEN=109
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2490 S=161 LEN=223
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2491 LEN=54
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2491 S=161 LEN=398
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2491 LEN=54
 ecweb02 - it-s3mp-3smrts.walgreens.com UDP D=2491 S=161 LEN=413
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2491 LEN=54
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2490 LEN=107
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2490 LEN=109
it-s3mp-3smrts.walgreens.com - ecweb02  UDP D=161 S=2491 LEN=54





Thanks

  Sergey Prilutsky--
Get a FREE DOWNLOAD! and learn more about uberSVN rich system, 
user administration capabilities and model configuration. Take 
the hassle out of deploying and managing Subversion and the 
tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders