Nagios Support Forum

Support for Nagios products and services
https://support.nagios.com/forum/

Syslog filling up with snmpd messages

https://support.nagios.com/forum/viewtopic.php?t=75485

Page 1 of 1

Syslog filling up with snmpd messages

Posted: Wed Jul 17, 2024 10:51 am
by naggyohs
I'm running 2024R1.1.4 on Ubuntu 22.04.4 LTS (x86_64). I logged into my XI server today and noticed the root partition was at 100% disk usage...Perhaps I forgot to monitor the monitor :roll:

Anyway, I'm seeing the syslog fill very rapidly with these messages:
Jul 17 10:12:34 nagios snmpd[3042683]: -- HOST-RESOURCES-MIB::hrSystemUptime.0
Jul 17 10:12:34 nagios snmpd[3042683]: send response: Failure in sendto
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysDescr.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysObjectID.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- DISMAN-EVENT-MIB::sysUpTimeInstance
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysContact.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysName.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysLocation.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORLastChange.0
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORID.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORDescr.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.1
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.2
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.3
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.4
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.5
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.6
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.7
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.8
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.9
Jul 17 10:12:34 nagios snmpd[3042683]: -- SNMPv2-MIB::sysORUpTime.10
Jul 17 10:12:34 nagios snmpd[3042683]: -- HOST-RESOURCES-MIB::hrSystemUptime.0
It's the same thing over and over again.
send response: Failure in sendto
is rather vague so I'm not sure what the actual issue is here. I was doing some work with the firewall (UFW) recently so that was my first suspect but I have it set to 'inactive' currently and have rebooted the server and the logs keep rolling in. Does anyone have any tips on how I can troubleshoot this or get more relevant info? At this rate I've set up a cron job to periodically truncate the syslog but obviously that's not ideal :lol:

I haven't noticed any issues yet, hosts and services are still being monitored.

Re: Syslog filling up with snmpd messages

Posted: Wed Jul 17, 2024 2:06 pm
by naggyohs
Seeing a lot of this in the syslog too but I'm not sure if it is related:

Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 1.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $string in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 699, <PDFILE> line 3.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122716]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in printf at /usr/local/nagios/libexec/process_perfdata.pl line 466, <PDFILE> line 2.
Jul 17 14:05:03 nagios npcd[122711]: Use of uninitialized value $NAGIOS{"MULTI_PARENT"} in substitution (s///) at /usr/local/nagios/libexec/process_perfdata.pl line 465, <PDFILE> line 3.

Re: Syslog filling up with snmpd messages

Posted: Wed Jul 17, 2024 4:43 pm
by cnorell
naggyohs,

In the case of the first set of logs, those are presumably coming from snmpd/snmptrapd whenever an SNMP trap hits the system. We are supposed to set the config so as not to dump the trap intake to the syslog. You didn't happen to touch the config file did you? I don't know exactly which file is relevant on Ubuntu 22.04.4 LTS, but here are some candidates until I can spin up a server and check:

Code: Select all

/etc/default/snmptrapd
/etc/default/snmpd
/etc/init.d/snmptrapd
/etc/init.d/snmpd
Best Regards,

Cory Norell

Re: Syslog filling up with snmpd messages

Posted: Wed Jul 17, 2024 9:43 pm
by kg2857
Sorry if ubuntu is different. On Redhat snmptrapd processes traps and snmpd isn't used. If snmptrapd is running maybe snmpd isn't needed and can be disabled.
All times are UTC-05:00
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited