Hi Dave,
As you say, there was a problem with Names Resolution.
With the option -n (Do not attempt to translate source addresses of incoming
packets into hostnames) in the /etc/init.d/snmptrapd the delay between all the
traps is reduced to 1 second.
But now, i have another problem, nagios don´t receive the origin IP address in
the format they need. nagios.log:************* Without option -n in snmptrapd
--> A lot of delay but the trap is managed OK for all the
applications*********************[1268674091] EXTERNAL COMMAND:
PROCESS_SERVICE_CHECK_RESULT;172.31.0.3;TRAP;1;generic trap notifying something
changed in the chassis 66 3 1 26 Power supply is OK
************* With option -n in snmptrapd --> No delay but nagios don´t
understand the IP origin of the trap *********************[1271088228] EXTERNAL
COMMAND: PROCESS_SERVICE_CHECK_RESULT;UDP:;[172.31.0.3]:161-;TRAP;1[1271088228]
Warning: Passive check result was received for service '[172.31.0.3]:161-' on
host 'UDP:', but the host could not be found!
So, is there other way to turn off the names resolution of snmptrapd to
maintain the same format of the traps used by the snmtthandler????
Thanks a lot for your help Dave.
--- El lun, 12/4/10, Dave Shield <[email protected]> escribió:
De: Dave Shield <[email protected]>
Asunto: Re: delay in trap management
Para: "Javier González Lázaro" <[email protected]>
CC: [email protected]
Fecha: lunes, 12 de abril, 2010 11:15
2010/4/12 Javier González Lázaro <[email protected]>
> I want to say the traps are logged with a delay of 40 seconds when
> simultaneous traps are received.
> As you can see, the timestamps being recorded are not based on the time at
> which the traps arrive.
> *********************************************
> 2010-03-17 09:35:14 <UNKNOWN> [UDP: [172.31.0.3]:161->[192.168.0.5]]:
> .1.3.6.1.2.1.1.3.0 = Timeticks: (3200) 0:00:32.00
> 2010-03-17 09:35:54 <UNKNOWN> [UDP: [172.31.0.3]:161->[192.168.0.5]]:
> .1.3.6.1.2.1.1.3.0 = Timeticks: (3700) 0:00:37.00
That looks suspiciously like delays in attempting DNS name lookup.
(<UNKNOWN>)
> all the configuration and log files are In the attached rar file
It looks from the snmptrapd.conf file that you are using "snmptthandler"
to handle all of the processing. So presumably it's snmptt that's
generating these log messages.
You didn't include any information about how snmptt is configured
(and such questions are best directed at the 'snmptt-users' list anyway).
But it might be worth checking whether you can log entries with numeric
IP addresses rather than trying to translate them.
Dave
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
