snmpwalk oddity

[CFT6Server]

I am trying to figure out why some servers are have service checks issues and I came across a weird problem.

We have an XI server with 3 mod gearman workers. When I perform snmpwalk from the XI box, it is timing out (which causes issue when trying to run the network wizard). Now moving over to the mod gearman workers and they are able to do full snmpwalk on the server. There is no firewall and they are on the same subnet. The snmp configuration looks to be fine and allows for all IPs involved. Really not sure why it just won't work from the XI server.

From the XI box...

Code: Select all

# snmpwalk -v 1 -c nagios 10.242.74.51 -d
No log handling enabled - turning on stderr logging

Sending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Resending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Resending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Resending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Resending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Resending 40 bytes to UDP: [10.242.74.51]:161->[0.0.0.0]
0000: 30 26 02 01  00 04 06 6E  61 67 69 6F  73 A1 19 02    0&.....nagios...
0016: 04 4A 83 FC  8E 02 01 00  02 01 00 30  0B 30 09 06    .J.........0.0..
0032: 05 2B 06 01  02 01 05 00                              .+......

Snippet of the SNMP conf on the client side

Code: Select all

COMMUNITY nagios nagios noAuthNoPriv 127.0.0.1    255.255.255.255  -
COMMUNITY nagios nagios noAuthNoPriv 10.242.102.100    255.255.255.255  -
COMMUNITY nagios nagios noAuthNoPriv 10.242.102.101    255.255.255.255  -
COMMUNITY nagios nagios noAuthNoPriv 10.242.102.102    255.255.255.255  -
COMMUNITY nagios nagios noAuthNoPriv 10.242.102.103    255.255.255.255  -

.100 is the XI box and the others are the mod gearman boxes.

[CFT6Server]

Think I might've answered my own question here. Looks like XI has a default IPTables rule of reject-with icmp-host-prohibited. Once this was removed, snmpwalk is working fine on the servers I previously had issues with.

[hsmith]

Think I might've answered my own question here. Looks like XI has a default IPTables rule of reject-with icmp-host-prohibited. Once this was removed, snmpwalk is working fine on the servers I previously had issues with.

Was there anything else we can help with on this one, or are we free to close?