[ZBX-15215] Zabbix Abnormal traffic flow (Emergency help) Created: 2018 Nov 27  Updated: 2019 Jan 11  Resolved: 2019 Jan 11

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Proxy (P), Server (S)
Affects Version/s: None
Fix Version/s: None

Type: Incident report Priority: Major
Reporter: pony Assignee: Aigars Kadikis
Resolution: Cannot Reproduce Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

zabbix_server (Zabbix) 3.4.14
zabbix_proxy (Zabbix) 3.4.14


Attachments: JPEG File 1542630381031.jpg     JPEG File 1542630454950.jpg     PNG File image.png    

 Description   

Zabbix deployment structure:
Switch(snmpv2) → proxy → Internet
Switch(snmpv2) → proxy → Internet → Server
Switch(snmpv2) → proxy → Internet
 
When the fault occurs:
zabbix server network has experienced serious packet loss.
 
phenomenon:
1、proxy log
13995:20181114:005331.315 cannot send heartbeat message to server at "syszabbix.qiniu.io": ZBX_TCP_READ() timed out
13995:20181114:005531.034 cannot send heartbeat message to server at "syszabbix.qiniu.io": ZBX_TCP_READ() timed out
13995:20181114:005731.281 cannot send heartbeat message to server at "syszabbix.qiniu.io": ZBX_TCP_READ() timed out
2、server log
12389:20181114:005629.457 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12389:20181114:005629.457 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12389:20181114:005629.457 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.497 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.498 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.498 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.498 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.498 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
12386:20181114:005747.498 failed to accept an incoming connection: connection rejected, getpeername() failed: [107] Transport endpoint is not connected
3、the same clock time appears twice the value.(as shown)
4、the flow chart shows that the flow is too high.(as shown)
 
 
Summary of related issues (the following are unresolved issues)
1、https://support.zabbix.com/browse/ZBX-14318
2、https://support.zabbix.com/browse/ZBX-14322
 
Doubt:
When the zabbix proxy and the zabbix server transmit data, the network has packet loss, and the packet retransmission causes the multiple values to be repeated and accumulated due to some reason.
 
Remarks:
When the zabbix server network loses packets, not all monitoring items have traffic bursts. The same switch may have a problem with the A port, and the B port is ok.

 



 Comments   
Comment by Edgars Melveris [ 2018 Dec 06 ]

Hello pony!

Is "Use bulk requests" enabled for this host? Can you also add the details of preprocessing steps for this item?

Comment by pony [ 2018 Dec 21 ]

Thank you @Edgars Melveris. Look at the following issue saying zabbix4.0 fix, I have upgraded to zabbix4.0. Try to observe for a while.

https://support.zabbix.com/browse/ZBX-12957

Comment by Aigars Kadikis [ 2018 Dec 28 ]

Greetings pony from Zabbix!

Are you satisfied while using versions 4.0?

Comment by Aigars Kadikis [ 2019 Jan 11 ]

Closing as cannot reproduce.

Generated at Fri Apr 26 09:32:43 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.