Discussion:
snmptrapd processing traps from only one agent
Vinayagar Karpagam
2017-04-21 15:58:09 UTC
Permalink
Hi all,



I’m facing an issue with the snmptrapd (in RHEL 7), in which the traps sent
from only one of the agents is being logged/processed by snmptrapd. I’m
using snmp v5.7.2 and using snmptrapgen.exe to generate the test trap. I’m
using the exact command to generate the test trap in both the agents, but
only one is processed by snmptrapd.


snmptrapd log file show as below:


2017-04-21 16:27:27 <UNKNOWN> [UDP: [<agent 1 IP>]:58536->[<trapreceiver
IP>]:162]:

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (248138918) 28 days,
17:16:29.18 SNMPv2-MIB::snmpTrapOID.0 = OID:
SNMPv2-MIB::authenticationFailure


TCPDUMP output is as below:


16:27:27.318421 IP (tos 0x0, ttl 127, id 10139, offset 0, flags [none],
proto UDP (17), length 110)

<agent1 IP>.58536 > XXXX.snmptrap: [udp sum ok] { SNMPv2c
C=XSdfd32094fj0ff22f { V2Trap(55) R=22914 system.sysUpTime.0=248138918
S:1.1.4.1.0=S:1.1.5.5 } }

16:27:32.999962 IP (tos 0x0, ttl 127, id 20782, offset 0, flags [none],
proto UDP (17), length 110)

<agent2 IP>.52391 > XXXX.snmptrap: [udp sum ok] { SNMPv2c
C=XSdfd32094fj0ff22f { V2Trap(55) R=22679 system.sysUpTime.0=248131712
S:1.1.4.1.0=S:1.1.5.5 } }



However, a tcpdump on port 162 shows that the packets are reaching the
snmptrapd receiver and they are exactly the same.



Any help or suggestions would be much appreciated.



Thanks.



Regards,

Vinayagar

Loading...