Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-18876

SNMPv3 unstable use of snmpEngineTime results in usmStatsNotInTimeWindows

    XMLWordPrintable

    Details

    • Type: Problem report
    • Status: Reopened
    • Priority: Trivial
    • Resolution: Unresolved
    • Affects Version/s: 5.0.6
    • Fix Version/s: None
    • Component/s: Proxy (P)
    • Labels:
    • Environment:

      Description

      Hi,

      we are monitoring a lot of snmpv3 devices with this zabbix proxy and have some issues with flapping snmp availability. After some troubleshooting I discovered that zabbix seams to switch the snmpEngineTime to unknown/unpredictable/wrong values, which causes the devices to be not stable.

      I monitored all our traffic with wireshark on this poxy and I am sure there are no duplicate snmpEngineIDs. (Doublechecked)

      Steps to reproduce:

      1. Monitor a lot of different snmpv3 devices from a zabbix proxy.
      2. Make sure to use more than 1 Poller. Our StartPollers value is 75.
      3. Make sure to have unique snmp engineIDs in the whole network. I checked this with wireshark.
      4. Wait for flapping snmp connectivity triggers
      5. Create a tcpdump of all snmp traffic on the proxy and analyze snmp communication.

      Result:

      Flapping snmp availability of the devices, because Zabbix uses the wrong snmpEngineTime Values as you can see in the screenshots. If you have a look in the "snmp_usmStatsNotInTimeWindows_allpackets.png" you will see, that there is no communication to other devices happening in the exact moment zabbix switches to the wrong snmpEngineTime. The "allpackets" screenshot shows you all snmp traffic on this machine. It seem zabbix switches to the wrong snmpEngineTime without reason and communication starts to get worse. The monitored device correctly reports usmStatsNotInTimeWindows, but zabbix seems not to care about. Further it seems that requests happen in parallel with correct and wrong snmpEngineTime. I guess this is because zabbix uses several poller to request the device, but only one poller uses the correct snmpEngineTime.

      Expected:
      No flapping snmp availability and zabbix proxy is using the correct snmpEngineTime for communication.

        Attachments

          Activity

            People

            Assignee:
            zabbix.support Zabbix Support Team
            Reporter:
            h.l. H.L.
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated: