Syslog filling up with snmpd messages

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Post Reply
naggyohs
Posts: 14
Joined: Thu Apr 25, 2024 11:48 am

Syslog filling up with snmpd messages

Post by naggyohs »

I'm running 2024R1.1.4 on Ubuntu 22.04.4 LTS (x86_64). I logged into my XI server today and noticed the root partition was at 100% disk usage...Perhaps I forgot to monitor the monitor :roll:

Anyway, I'm seeing the syslog fill very rapidly with these messages:
Jul 17 10:12:34 nagios snmpd[3042683]: -- HOST-RESOURCES-MIB::hrSystemUptime.0
Jul 17 10:12:34 nagios snmpd[3042683]: send response: Failure in sendto
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysDescr.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysObjectID.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- DISMAN-EVENT-MIB::sysUpTimeInstance
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysContact.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysName.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysLocation.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORLastChange.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- HOST-RESOURCES-MIB::hrSystemUptime.0
It's the same thing over and over again.
send response: Failure in sendto
is rather vague so I'm not sure what the actual issue is here. I was doing some work with the firewall (UFW) recently so that was my first suspect but I have it set to 'inactive' currently and have rebooted the server and the logs keep rolling in. Does anyone have any tips on how I can troubleshoot this or get more relevant info? At this rate I've set up a cron job to periodically truncate the syslog but obviously that's not ideal :lol:

I haven't noticed any issues yet, hosts and services are still being monitored.
Last edited by naggyohs on Wed Jul 17, 2024 2:08 pm, edited 2 times in total.
Top
naggyohs
Posts: 14
Joined: Thu Apr 25, 2024 11:48 am

Re: Syslog filling up with snmpd messages

Post by naggyohs »

Seeing a lot of this in the syslog too but I'm not sure if it is related:

Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 3.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 3.
Top
cnorell
Developer
Posts: 141
Joined: Mon Nov 27, 2017 3:08 pm

Re: Syslog filling up with snmpd messages

Post by cnorell »

naggyohs,

In the case of the first set of logs, those are presumably coming from snmpd/snmptrapd whenever an SNMP trap hits the system. We are supposed to set the config so as not to dump the trap intake to the syslog. You didn't happen to touch the config file did you? I don't know exactly which file is relevant on Ubuntu 22.04.4 LTS, but here are some candidates until I can spin up a server and check:

Code: Select all

/etc/default/snmptrapd
/etc/default/snmpd
/etc/init.d/snmptrapd
/etc/init.d/snmpd
Best Regards,

Cory Norell
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Top
kg2857
Posts: 491
Joined: Wed Apr 12, 2023 5:48 pm

Re: Syslog filling up with snmpd messages

Post by kg2857 »

Sorry if ubuntu is different. On Redhat snmptrapd processes traps and snmpd isn't used. If snmptrapd is running maybe snmpd isn't needed and can be disabled.
Top
Post Reply

Return to “Nagios XI”