Bug 33423 - snmp spams syslog
Summary: snmp spams syslog
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2024-07-23 12:46 CEST by Marc Krämer
Modified: 2024-08-01 08:01 CEST (History)
2 users (show)

See Also:
Source RPM: net-snmp-5.9.3-2.mga9.x86_64.rpm
CVE:
Status comment:


Attachments

Description Marc Krämer 2024-07-23 12:46:52 CEST
snmp keeps logging:
systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224

Looks like a patch is available:
https://github.com/net-snmp/net-snmp/issues/829
=> https://github.com/net-snmp/net-snmp/pull/785
Comment 1 Lewis Smith 2024-07-28 21:12:15 CEST
Thank you Marc for the report, and the pointer to the fix.

And DavidG for already having applied it in Cauldron. Needs doing for Mageia 9 also, and Marc to then test.
Assigning to you David because you applied the patch for this bug; but re-assign it globally if you wish, for somebody else to do (wishful thinking).

Assignee: bugsquad => geiger.david68210

Marc Krämer 2024-07-31 10:50:27 CEST

Assignee: geiger.david68210 => mageia

Comment 2 Marc Krämer 2024-07-31 10:57:15 CEST
Suggested advisory:
========================
The current version of net-snmp logs the string "unexpected header length in /proc/net/snmp. 237 != 224" in system logs. This update removes this behaviour, since both lenghts are correct.

========================

Updated packages in core/updates_testing:
========================
net-snmp-mibs-5.9.3-2.1.mga9
libnet-snmp-devel-5.9.3-2.1.mga9
libnet-snmp40-5.9.3-2.1.mga9
net-snmp-5.9.3-2.1.mga9
net-snmp-utils-5.9.3-2.1.mga9
net-snmp-utils-debuginfo-5.9.3-2.1.mga9
libnet-snmp40-debuginfo-5.9.3-2.1.mga9
net-snmp-debuginfo-5.9.3-2.1.mga9
perl-NetSNMP-5.9.3-2.1.mga9
perl-NetSNMP-debuginfo-5.9.3-2.1.mga9
python3-netsnmp-debuginfo-5.9.3-2.1.mga9
python3-netsnmp-5.9.3-2.1.mga9
net-snmp-trapd-5.9.3-2.1.mga9
net-snmp-trapd-debuginfo-5.9.3-2.1.mga9
net-snmp-tkmib-5.9.3-2.1.mga9
net-snmp-debugsource-5.9.3-2.1.mga9



SRPM:
net-snmp-5.9.3-2.1.mga9.src.rpm

Assignee: mageia => qa-bugs

katnatek 2024-07-31 19:43:04 CEST

Keywords: (none) => advisory

Comment 3 katnatek 2024-07-31 20:10:37 CEST
RH mageia 9 x86_64

LC_ALL=C urpmi --auto --auto-update 
medium "QA Testing (32-bit)" is up-to-date
medium "QA Testing (64-bit)" is up-to-date
medium "Core Release (distrib1)" is up-to-date
medium "Core Updates (distrib3)" is up-to-date
medium "Nonfree Release (distrib11)" is up-to-date
medium "Nonfree Updates (distrib13)" is up-to-date
medium "Tainted Release (distrib21)" is up-to-date
medium "Tainted Updates (distrib23)" is up-to-date
medium "Core 32bit Release (distrib31)" is up-to-date
medium "Core 32bit Updates (distrib32)" is up-to-date
medium "Nonfree 32bit Release (distrib36)" is up-to-date
medium "Tainted 32bit Release (distrib41)" is up-to-date
medium "Tainted 32bit Updates (distrib42)" is up-to-date

installing lib64net-snmp40-5.9.3-2.1.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
      1/1: lib64net-snmp40       ##################################################################################################
      1/1: removing lib64net-snmp40-5.9.3-2.mga9.x86_64
                                 ##################################################################################################

LC_ALL=C urpmi net-snmp net-snmp-utils
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "QA Testing (64-bit)")
  net-snmp                       5.9.3        2.1.mga9      x86_64  
  net-snmp-mibs                  5.9.3        2.1.mga9      x86_64  
  net-snmp-utils                 5.9.3        2.1.mga9      x86_64  
  perl-NetSNMP                   5.9.3        2.1.mga9      x86_64  
(medium "Core Release (distrib1)")
  perl-Mail-Sender               0.903.0      4.mga9        noarch  
5.2MB of additional disk space will be used.
1.9MB of packages will be retrieved.
Proceed with the installation of the 5 packages? (Y/n) Y


    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/perl-Mail-Sender-0.903.0-4.mga9.noarch.rpm
installing //home/katnatek/qa-testing/x86_64/perl-NetSNMP-5.9.3-2.1.mga9.x86_64.rpm                                                 
//home/katnatek/qa-testing/x86_64/net-snmp-utils-5.9.3-2.1.mga9.x86_64.rpm
//home/katnatek/qa-testing/x86_64/net-snmp-5.9.3-2.1.mga9.x86_64.rpm
//home/katnatek/qa-testing/x86_64/net-snmp-mibs-5.9.3-2.1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/perl-Mail-Sender-0.903.0-4.mga9.noarch.rpm
Preparing...                     ##################################################################################################
      1/5: net-snmp-mibs         ##################################################################################################
      2/5: perl-NetSNMP          ##################################################################################################
      3/5: perl-Mail-Sender      ##################################################################################################
      4/5: net-snmp-utils        ##################################################################################################
      5/5: net-snmp              ##################################################################################################

Reference bug#31388 comment#2

systemctl start snmpd
systemctl -l status snmpd
● snmpd.service - Simple Network Management Protocol (SNMP) Daemon.
     Loaded: loaded (/usr/lib/systemd/system/snmpd.service; disabled; preset: disabled)
     Active: active (running) since Wed 2024-07-31 12:06:26 CST; 12s ago
   Main PID: 239957 (snmpd)
      Tasks: 1 (limit: 6880)
     Memory: 3.9M
        CPU: 41ms
     CGroup: /system.slice/snmpd.service
             └─239957 /usr/sbin/snmpd -LS0-4d -f

jul 31 12:06:25 jgrey.phoenix systemd[1]: Starting snmpd.service...
jul 31 12:06:26 jgrey.phoenix systemd[1]: Started snmpd.service.

snmpget -v2c -c public localhost system.sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: Linux jgrey.phoenix 6.6.43-server-1.mga9 #1 SMP PREEMPT_DYNAMIC Sat Jul 27 20:00:23 UTC 2024 x86_64

snmpwalk -v2c -c public localhost
SNMPv2-MIB::sysDescr.0 = STRING: Linux jgrey.phoenix 6.6.43-server-1.mga9 #1 SMP PREEMPT_DYNAMIC Sat Jul 27 20:00:23 UTC 2024 x86_64
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (11032) 0:01:50.32
SNMPv2-MIB::sysContact.0 = STRING: Root <root@localhost> (configure /etc/snmp/snmp.local.conf)
SNMPv2-MIB::sysName.0 = STRING: jgrey.phoenix
SNMPv2-MIB::sysLocation.0 = STRING: Unknown (edit /etc/snmp/snmpd.conf)
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.2 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.3 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORID.4 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.5 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.6 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.7 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.8 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.9 = OID: SNMP-NOTIFICATION-MIB::snmpNotifyFullCompliance
SNMPv2-MIB::sysORID.10 = OID: NOTIFICATION-LOG-MIB::notificationLogMIB
SNMPv2-MIB::sysORDescr.1 = STRING: The SNMP Management Architecture MIB.
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB for Message Processing and Dispatching.
SNMPv2-MIB::sysORDescr.3 = STRING: The management information definitions for the SNMP User-based Security Model.
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.5 = STRING: View-based Access Control Model for SNMP.
SNMPv2-MIB::sysORDescr.6 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.7 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.8 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.9 = STRING: The MIB modules for managing SNMP Notification, plus filtering.
SNMPv2-MIB::sysORDescr.10 = STRING: The MIB module for logging SNMP Notifications.
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.7 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.8 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.9 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.10 = Timeticks: (0) 0:00:00.00
HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (715433) 1:59:14.33
HOST-RESOURCES-MIB::hrSystemUptime.0 = No more variables left in this MIB View (It is past the end of the MIB tree)

Looks consistent with the reference
As I not use before this service I trust the bug is fixed

Whiteboard: (none) => MGA9-64-OK
CC: (none) => andrewsfarm

Comment 4 Thomas Andrews 2024-08-01 03:49:17 CEST
Validating.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2024-08-01 08:01:25 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2024-0176.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.