Excessive snmp connections?

[larry10]

larry10 [http://community.zenoss.org/people/larry10] created the discussion

"Excessive snmp connections?"

To view the discussion, visit: http://community.zenoss.org/message/68136#68136

--------------------------------------------------------------
Zenoss 3.2.1 running on a fully patched CentOS 5.8 x86_64 machine.

I find that a lot of the monitored machines, and I guess it may be all, are subject to an excessive amount of snmp connections from the zenoss server. Each client logs tens of thousands of lines like these every day

Aug 23 09:31:32 client snmpd[2447]: Received SNMP packet(s) from UDP: [10.1.2.3]:37772
Aug 23 09:31:33 client snmpd[2447]: Connection from UDP: [10.1.2.3]:37772
Aug 23 09:32:35 client snmpd[2447]: Connection from UDP: [10.1.2.3]:37772
Aug 23 09:32:35 client snmpd[2447]: Connection from UDP: [10.1.2.3]:37772
Aug 23 09:32:36 client snmpd[2447]: Connection from UDP: [10.1.2.3]:37772
Aug 23 09:34:50 client snmpd[2447]: Connection from UDP: [10.1.2.3]:56272

and oftern there are dozens such connections logged every second for a period of several minutes. 10.1.2.3 is the zenoss server's IP.

What's going on here?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/68136#68136]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: Excessive snmp connections?"

To view the discussion, visit: http://community.zenoss.org/message/68121#68121

--------------------------------------------------------------
It's going to depend on what they are pulling for monitoring, but Zenoss has MaxOIDs per request set to 40 by default, so you'd have to break your number of OIDs polled by your templates down by groups of 40 and that's the number of SNMP requests you're going to get.

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/68121#68121]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[larry10]

larry10 [http://community.zenoss.org/people/larry10] created the discussion

"Re: Excessive snmp connections?"

To view the discussion, visit: http://community.zenoss.org/message/68148#68148

--------------------------------------------------------------
I'm not sure that's all there is to it.

E.g. I have five machines here that have identical hardware, identical software, and provide the same services. If I grep /var/log/messages and count the number of snmpd connections from the zenoss server, I get a wide variation, from around 8100 on one machines up to 58000 on another. All these machines were added at the same time by the same method ("add multiple machines").
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/68148#68148]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]