On Jan 15, 2009, at 8:08 PM, sergeymasushko wrote:
> I see a lot of events/alerts about 'ip bla-bla-bla down'.
> I know that these devices are UP and i can ping them via zencommand
> 'Command: ping -c2 ${device/manageIp}'. I've tried to restart
> zenping daemon but it does not help.
> What can be the cause of the problem?
I've seen occurrences where firewalls that are capable of deep packet
inspection specifically drop the ICMP echo request packets sent by
zenping because they don't contain the same kind of payloads seen in
ordinary ICMP echo requests sent by the ping command line utilities in
common operating systems.
The best thing to do if you think Zenoss is incorrectly marking
devices as ping down when you know that they are not would be to
capture the packets with tcpdump or wire shark or whatever sniffer
you're accustomed to using. Typically you will see that Zenoss sends
the ICMP echo request, but never gets the ICMP echo reply. Normally
this is due to a firewall trying to be too smart.
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
