SNMP traps do not have the expected agent address in the SNMP header on multi-homed systems

Solution In Progress - Updated -

Issue

SNMP traps are send from one interface (10.0.0.200) but the IP address in the "agent address" field in the SNMP header is from another interface (10.0.100.1)

# tshark -i eth1 -R "udp.port == 162" -z proto,colinfo,snmp.agent_addr,snmp.agent_addr
Capturing on eth1
2.147745181 10.0.0.200 -> 10.0.0.11  86 SNMP    trap iso.3.6.1.4.1.8072.3.2.10  snmp.agent_addr == 10.0.100.1

Environment

  • Red Hat Enterprise Linux 5

    • net-snmp-5.3
    • net-snmp-libs-5.3
    • net-snmp-libs-5.3

  • Red Hat Enterprise Linux 6

    • net-snmp-5.5
    • net-snmp-utils-5.5
    • net-snmp-libs-5.5

  • Red Hat Enterprise Linux 7

    • net-snmp-5.7
    • net-snmp-libs-5.7
    • net-snmp-agent-libs-5.7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.