Red Hat Bugzilla – Bug 396141
snmpd spams syslog with _access_interface_entry_save_name and _check_interface_entry_for_updates
Last modified: 2018-10-19 19:38:25 EDT
Description of problem:
In /var/log/messages, I saw heaps of lines like this:
Nov 22 16:34:02 xen1 snmpd: netsnmp_assert index == tmp failed
Nov 22 16:34:02 xen1 snmpd: netsnmp_assert rc == 0 failed
The lines were sent every 30 seconds.
Version-Release number of selected component (if applicable): 5.3.1-19.el5
Steps to Reproduce:
1. Activate the snmpd service.
It may be related to xen. Dell OpenManage has also been installed on the server,
but I doubt that it's related.
I googled around and found this:
I tried patching the net-snmp package, adding the mentioned patch (needs to use
-p1 (not -p0) when patching). The patch works. I've seen no bad side effects of
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release. Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products. This request is not yet committed for inclusion in an Update
It's not so simple to fix this assert. It raises when an interface with some
name gets new ifIndex. I.e. when ppp0 gets disconnected (ppp0 goes down) and
user reconnects (ppp0 gets up again, with another ifindex). Net-snmp cannot
distinguish if the new ppp0 is the same interface as old ppp0 (and map
internally the new ifIndex to old ifIndex) or it's new interface, not related to
previous ppp0 (and delete old ppp0 and instantiate new, with new ifIndex).
Both options are valid, it depends on network configuration by admin. The patch
always deletes old interface. Applying the patch could confuse some tools like
MRTG, which do not expect that an interface with certain name gets new ifIndex.
Correct is to make new configuration option, which allows network admin to
configure this behavior - replace old interface or reuse it. Such change is
quite big, please contact your Red Hat support at http://support.redhat.com and
consult with them new RFE.
I agree that the long message is quite annoying and does not say anything
useful, so I will replace it with more meaningful message and display it only
once during net-snmp start.
*** Bug 431064 has been marked as a duplicate of this bug. ***
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.