Page 1 of 1

48 UDP Connections used for a maximum of 9 Monitors

Posted: Fri Feb 14, 2020 11:38 am
by jfarnsworth
This might be more of a SNMP question, but we have about 9 checks per node in Nagios that use SNMP. When looking at the logs, I see this:

Code: Select all

info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:11 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:40318->[<remote-node-IP>]:161
info daemon May 10 16:41:39 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:41334->[<remote-node-IP>]:161
info daemon May 10 16:41:39 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:41334->[<remote-node-IP>]:161
info daemon May 10 16:42:28 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:51734->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:35541->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161
info daemon May 10 16:43:45 <remote-node> snmpd[32187]:Connection from UDP: [<nagios-IP>]:45279->[<remote-node-IP>]:161 
Our SNMP checks occur every 5 minutes, so we have close to 5 UDP connections per monitor in this 3 minute window, assuming all 9 ran. Why is it making so many connections? Shouldn't it only require one?
From what I understand, these SNMP checks come from the nagios plugins tar file, if not, let me know.

Re: 48 UDP Connections used for a maximum of 9 Monitors

Posted: Mon Feb 17, 2020 10:39 am
by scottwilkerson
Many plugins have to make numerous SNMP calls to get multiple items to order to perform the calculations to give you the final results.

Re: 48 UDP Connections used for a maximum of 9 Monitors

Posted: Fri Feb 21, 2020 10:49 am
by jfarnsworth
Thanks, just wanted to make sure I wasn't crazy on this.

Re: 48 UDP Connections used for a maximum of 9 Monitors

Posted: Fri Feb 21, 2020 10:55 am
by scottwilkerson
jfarnsworth wrote:Thanks, just wanted to make sure I wasn't crazy on this.
No problem