Node Discovery
-
hi victor,
something really strange is happening.
i have enabled snmp on a hyper-v server {this is the last change that i can remember enabling} and when i came this morning the server have discovered ip's that are not assigned to anything and are not even in the dhcp scope. my subnet consist of no vlans and i use 172.16.0.0 255.255.0.0 for all the ip address.
all the unassigned ip that the server discovered are presented as nodes in critical statewhat seems to be the problem ?
Lindeamon -
-
Hi!
Currently there are no way to find how particular IP address was discovered, except for looking at debug log, level 6 at least. I agree that discovery source information should be available. Added to my todo list.
Best regards,
Victor -
-
hi victor,
i have configured the server to run in debug 9 and could not find the source from which the server collect the nodes to insert.
i am attaching the log and screenshots so you could try and look for the reason.if i have a mistake in the network discovery configuration then just remember that i did not do any change in the discovery config and the server suddenly added the nodes.Best Regards,
Lindeamon -
hi victor,
i have tried clearing all the config from the network discovery and let it run and the problem is still there.
btw i am using 1.2.2 but the problem occurred in 1.2.1 too.
i do not remember what i have changed or which snmp agent i have opened that caused this problem.waiting for your help,
Lindeamon -
Hi!
From the logs looks like a lot of IP addresses coming from node ormanage.orion.local (172.16.0.7). Log is wrapped, so I don't see beginning of the poll, but there are a lot of IPs from 172.16.47.xxx for example, almost each IP address. All these addresses coming from ARP cache. Check what this node really reports as it's ARP cache. To prevent this from happening you can disable discovery polling for that problematic node.
Best regards,
Victor -
hi victor,
i have searched the file before posting it and i haven't saw this.
i will check the node's arp table.
i wonder what application could have done it
i have mcafee epo and windows deployment services and wsus.thanks for the lead in the solution,
Best Regards,
Lindeamon
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login