Using IP Tables to control SNMP trap rate

[arnab.roy]

Hi All,

I am having strange issue with one of our remote XI server the site which it monitors is sending huge amount of SNMP Traps into the system regarding various which we really do not need to do anything..However as these traps are getting processed at realtime its taking a hit on the system performance...I am wondering if we can use ip tables to somehow smooth out the bursty snmp trap traffic or atleast the processing of it..any thoughts would be welcome....


Cheers
Arnab

[scottwilkerson]

You may be able to do something like this

Code: Select all

iptables -A INPUT -p tcp --dport 162 -m limit --limit 6/hour -j ACCEPT

[arnab.roy]

HI Scott,

Thanks, I think its sort of working will have to leave it on and see if that actually causes the important stuff to get dropped ....

Cheers
Arnab

[scottwilkerson]

This is going to set a limit period, it doesn't know the difference of what is important and what is not....