<html><body><div style="font-family: Arial; font-size: 12pt; color: #000000"><div><b>From: </b>"David L. Anselmi" <anselmi@anselmi.us><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>To: </b>"CLUE's mailing list" <clue@cluedenver.org><br><b>Sent: </b>Wednesday, July 15, 2015 11:11:05 AM<br><b>Subject: </b>Re: [clue] (Slightly OT) - This SNMP issue has me baffled<br><div><br></div>foo7775@comcast.net wrote:<br>><br>> Now I'm not an expert with snoop or WireShark (yet!) but from what I can see, I have 34 packets<br>> that arrived at the 'B' interface of the Solaris server, each of which contains an SNMP<br>> 'get-request' for the same OID. When I remove the filter that shows only packets addressed to the<br>> 'B' interface, I can see that interface A receives packets with 'get-next-request'& OIDs that<br>> are incrementing. I do *not* see any responses from the Solaris server to the monitoring server<br>> (for any interface) - the snoop command that I used is below:<br><div><br></div>Sorry to hear that you're stuck using Solaris.<br><div><br></div>You might want to figure out why you're not seeing the responses. If you can get them it might help.<br><div><br></div>So since you're not seeing get-next-request to B, is there a chance that its responses aren't <br>getting to the monitoring server? I guess snmpwalk from the local network would show them if it <br>works. But maybe something is losing the replies along that path.<br><div><br></div>HTH,<br>Dave<br>_______________________________________________</div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">Thanks Dave, the sympathy helps a little bit... <span style="font-size: small;"><em>(heh)</em></span><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">That's the big question that I have right now - since I can see that the packets are getting to the server, is the server just not responding, or is something dropping/blocking the return traffic?? I can think of three potential courses of action right now - <br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">1st, a coworker has apparently found other systems that aren't able to complete an snmpwalk connection to this host - so, note all of the systems that can't complete an snmpwalk connection to this server & run a traceroute from this server to each of those, then check to see if there are any common nodes in the traceroute output. The network & firewall teams swear up & down that everything's working as it should, so that option has the potential to cause a bit of heartburn...<br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">2nd, fire up another snoop session using the same command line, *this time* capture output from a successful connection attempt - that *should* confirm whether or not I should also be able to see the outgoing packets. <em>(I'm going to be doing that in the next few minutes.)</em><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">3rd, remove & reinstall the sma/snmp packages, in case one or more of the files has gotten corrupted. I'm treating this as a last resort, because it feels like a 'cop-out' to me...<br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">FWIW, I've already compared the snmp.conf & snmpd.conf files to another server that's working as it should - the snmp.conf file had one extra line (that I commented out, then restarted the services), the snmpd.conf file matched the one from the server that's working.<br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">Thanks again,<br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><br></div><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">T.<br></div></div></body></html>