SNMP traps do not have the expected agent address in the SNMP header on multi-homed systems
Issue
SNMP traps are send from one interface (10.0.0.200) but the IP address in the "agent address" field in the SNMP header is from another interface (10.0.100.1)
# tshark -i eth1 -R "udp.port == 162" -z proto,colinfo,snmp.agent_addr,snmp.agent_addr
Capturing on eth1
2.147745181 10.0.0.200 -> 10.0.0.11 86 SNMP trap iso.3.6.1.4.1.8072.3.2.10 snmp.agent_addr == 10.0.100.1
Environment
-
Red Hat Enterprise Linux 5
- net-snmp-5.3
- net-snmp-libs-5.3
- net-snmp-libs-5.3
-
Red Hat Enterprise Linux 6
- net-snmp-5.5
- net-snmp-utils-5.5
- net-snmp-libs-5.5
-
Red Hat Enterprise Linux 7
- net-snmp-5.7
- net-snmp-libs-5.7
- net-snmp-agent-libs-5.7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
