-
Problem report
-
Resolution: Commercial support required
-
Minor
-
None
-
4.0.9
-
None
Steps to reproduce:
- In Zabbix frontend snmptrap.fallback item is always empty and never gets updated.
- However, item with key: snmptrap[General] - works fine. It gets updated with the value of test trap sent by snmptrap command:
snmptrap -v 2c -c public 192.168.111.10 '' 1.3.6.1.4.1.8072.2.3.0.1 1.3.6.1.4.1.8072.2.3.2.1 i 123456
- I tried already everything. Followed official manual: https://www.zabbix.org/wiki/Start_with_SNMP_traps_in_Zabbix
- , which is outdated and doesn't work. I saw a lot of forum posts, where people reported snmptrap.fallback never worked for them by following official manual, which is incorrect and must be updated.
- My configuration is:
# /etc/snmp/snmptt.conf: EVENT general .* "General event" Normal FORMAT ZBXTRAP $aR $N "$+*"
# /etc/snmp/snmptrapd.conf: authCommunity log,execute,net public perl do "/usr/sbin/snmptthandler-embedded";
# /etc/snmp/snmp.conf: clientaddr 192.168.175.10 mibs +ALL showMibErrors yes mibAllowUnderline yes commentToEOL no
# /etc/snmp/snmptt.ini: mode = daemon resolve_value_ip_addresses = 0 net_snmp_perl_enable = 1 net_snmp_perl_cache_enable = 1 time_format = %H:%M:%S date_time_format = %d.%m.%Y %H:%M:%S daemon_uid = snmptt spool_directory = /var/spool/snmptt/ log_enable = 1 log_file = /var/log/snmptt/snmptt.log log_system_enable = 1 log_system_file = /var/log/snmptt/snmpttsystem.log unknown_trap_log_enable = 1 unknown_trap_log_file = /var/log/snmptt/snmpttunknown.log syslog_enable = 0
# /srv/zabbix/etc/zabbix_server.conf:
SNMPTrapperFile=/var/log/snmptt/snmptt.log
StartSNMPTrapper=1
4. Info from log files:
# /var/log/snmptt/snmptt.log: 12.07.2019 12:32:28 .1.3.6.1.4.1.8072.2.3.0.1 Normal "General event" 192.168.111.10 - ZBXTRAP 192.168.111.10 general "netSnmpExampleHeartbeatRate:123456"
# /var/log/snmptt/snmpttsystem.log:
12.07.2019 12:43:47 Total traps received=22,Total traps translated=22,Total traps ignored=0,Total unknown traps=0
12.07.2019 12:43:49 SNMPTT v1.4 started
12.07.2019 12:43:49 Loading /etc/snmp/snmptt.conf
12.07.2019 12:43:49 Finished loading 3 lines from /etc/snmp/snmptt.conf
12.07.2019 12:43:49 Changing to UID: snmptt (994)
Log file "/tmp/zabbix_server.log" shows "unmatched trap received" only from other network devices. When I send locally snmptrap on zabbix server then log file does not have any entry for that event. BUT snmptrap[Regex] item gets updated just fine. So this seems to be a Zabbix bug.
5. Processes:
# ps -ef | grep snmp zbxsrv 7322 7299 0 11:04 ? 00:00:00 /srv/zabbix/sbin/zabbix_server: snmp trapper [processed data in 0.000030 sec, idle 1 sec] root 25491 1 0 12:43 ? 00:00:00 /usr/sbin/snmpd -LS0-6d -f root 25496 1 0 12:43 ? 00:00:00 /usr/sbin/snmptrapd -On -LS0-5d -f root 25507 1 0 12:43 ? 00:00:00 /usr/bin/perl /usr/sbin/snmptt --daemon snmptt 25508 25507 0 12:43 ? 00:00:00 /usr/bin/perl /usr/sbin/snmptt --daemon
6. Ports:
# netstat -tulpn | grep snmp tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 25491/snmpd udp 0 0 0.0.0.0:161 0.0.0.0:* 25491/snmpd udp 0 0 0.0.0.0:162 0.0.0.0:* 25496/snmptrapd
7. Permissions:
# ls -l /etc/snmp/ -r--r--r-- 1 snmptt snmptt 268 Jul 4 14:56 snmp.conf -rw------- 1 root root 18861 Oct 31 2018 snmpd.conf -r--r--r-- 1 snmptt snmptt 376 Jul 12 11:41 snmptrapd.conf -r--r--r-- 1 snmptt snmptt 69 Jul 12 11:42 snmptt.conf -r--r--r-- 1 snmptt snmptt 26307 Mar 26 13:40 snmptt.ini # ls -l /var/log/snmptt/ -rw-r--r-- 1 snmptt snmptt 6157896 Jul 12 12:46 snmptt.log -rw-r--r-- 1 snmptt snmptt 130266 Jul 12 12:43 snmpttsystem.log -rw-r--r-- 1 snmptt snmptt 0 Mar 26 18:35 snmpttunknown.log # ls -l /var/log/ | grep snmptt drwxr-xr-x 2 snmptt snmptt 4096 Jul 5 17:23 snmptt # ls -l /var/spool | grep snmptt drwxrwxrwx 2 snmptt snmp 12288 Jul 12 12:46 snmptt
Any help would be much appreciated. Stuck with this already for a week. Nothing works. Not obvious why it doesn't work, no any clue in log files.
Expected:
Zabbix snmptrap.fallback item should work with SNMPTT + Perl Embedded
