snmptt service seems to crash and snmp trap files build up

[wjoyner]

snmptt service seems to crash and snmp trap files build up

This will happen every couple of days where the snmptt service seems to crash, I will restart the service and it will start and clear up the backlog.

Current version of Nagios XI is Installed Version: 5.5.2

Any help is appreciated.

[tgriep]

Do you see any errors in the snmptt log files when the traps stop getting processed?
Take a look at these log files for any errors.

Code: Select all

/var/log/snmptt/snmptt.log
/var/log/snmptt/snmpttsystem.log

[wjoyner]

I am not seeing anything out of the ordinary.

[tgriep]

Lets enable debugging for the snmptt daemon by editing the /etc/snmp/snmptt.ini file and changing the following settings fom

Code: Select all

DEBUGGING = 0
DEBUGGING_FILE =
DEBUGGING_FILE_HANDLER =

to

Code: Select all

DEBUGGING = 1
DEBUGGING_FILE = /var/log/snmptt/snmptt.debug
DEBUGGING_FILE_HANDLER = /var/log/snmptt/snmptthandler.debug

Save the changes and restart the snmptt daemon.

Then the next time it happens, check those 2 log files to see if there are any errors.

By your estimation, how many systems are sending Traps to the Nagios server and how many traps each?

[wjoyner]

I turned on debug and will check it when it fails.
Estimate is a few 100 an hour.

[tgriep]

OK. that is not very many Traps but let us know what you find in the debug logs.

[wjoyner]

so the service failed again and looking through the logs on two things stand out. The version, but this is from the OVF file Nagios releases for installation. I keep the server updated when new releases of Nagios come out. And the debug file could not be opened, here are the settings for that file -rw-rw-r-- 1 snmptt snmptt .



Wed Nov 7 14:48:53 2018 SNMPTT v1.4beta2 shutdown
Wed Nov 7 14:48:53 2018 Total traps received=51929,Total traps translated=58894,Total traps ignored=0,Total unknown traps=0
Wed Nov 7 14:48:55 2018 SNMPTT v1.4beta2 started
Wed Nov 7 14:48:55 2018 Could not open debug output file!

[tgriep]

The issues with the debug file not getting created is a but that was fixed in the latest release of the snmptt daemon.

Let's just update it just in case it didn't get installed.

Make a backup of the files in the /etc/snmp folder and run the following to reinstall the daemon.

Code: Select all

yum reinstall snmptt net-snmp-perl -y

Then restart the snmptt daemon and see if the debug file is created and gets updated.

[wjoyner]

I did the reinstall and it is logging now.

[tgriep]

That is good that it is logging. Now we can hopefully see what is happening when it stops running.