E! [inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0, source=w.x.y.z.: not found

nsipos · June 5, 2024, 10:19am

Hi
I am running a Telegraf (version: 1.30.3) with snmp_trap input plugin to receive traps from a Nokia application.

[[inputs.snmp_trap]]
  auth_password = "xxxxxxxxxxxxx"
  auth_protocol = "MD5"
  path = [
    "/usr/share/snmp/mibs",
    "/nokia"
  ]
  priv_password = "xxxxxxxxxxxxx"
  priv_protocol = "DES"
  sec_level = "authNoPriv"
  sec_name = "telegraf-fm"
  service_address = "udp://:1162"
  version = "3"

The Telegraf is configured with 2 output plugins:

[[outputs.kafka]]
  brokers = [
    "kafka.fqdn:9092"
  ]
  data_format = "json"
  insecure_skip_verify = true
  tagdrop = "output_cdi = \"internal_metrics\""
  tls_cert = "/var/local/cert.pem"
  tls_key = "/var/local/key.pem"
  topic = "kafka.topic.json.in.1.1.app"
[[outputs.file]]
  data_format = "prometheus"
  files = [
    "/tmp/telegraf.out"
  ]
  rotation_max_archives = 0
  rotation_max_size = "2MB

My problem is that the Telegraf produces no output. I can see many incoming traps received by the plugin but no output (neither in the file nor in the kafka topic).
The only error I can see in the logs is:
2024-06-05T09:32:38Z E! [inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0, source=w.x.y.z: not found

I could see many issues were reported with the same problem, but based on those descriptions the problem should have been resolved in an earlier version.

telegraf@telegraf-fm-676f4db546-h92ck:/$ snmptranslate -M /nokia/:/usr/share/snmp/mibs/ -m ALL 1.3.6.1.2.1.1.3.0
SNMPv2-MIB::sysUpTime.0
telegraf@telegraf-fm-676f4db546-h92ck:/$

Could you please help me figure out whether this error blocks the Telegraf to produce output?

Thanks
Norbert

nsipos · June 5, 2024, 10:28am

This is a snippet of the logs.

2024-06-05T09:32:31Z I! Loading config: /etc/telegraf/telegraf.conf
2024-06-05T09:32:31Z W! DeprecationWarning: Option "timeout" of plugin "inputs.snmp_trap" deprecated since version 1.20.0 and will be removed in 2.0.0: unused option
2024-06-05T09:32:31Z I! Starting Telegraf 1.30.3 brought to you by InfluxData the makers of InfluxDB
2024-06-05T09:32:31Z I! Available plugins: 233 inputs, 9 aggregators, 31 processors, 24 parsers, 60 outputs, 6 secret-stores
2024-06-05T09:32:31Z I! Loaded inputs: snmp_trap
2024-06-05T09:32:31Z I! Loaded aggregators: 
2024-06-05T09:32:31Z I! Loaded processors: enum
2024-06-05T09:32:31Z I! Loaded secretstores: 
2024-06-05T09:32:31Z I! Loaded outputs: file kafka
2024-06-05T09:32:31Z I! Tags enabled: host=telegraf-service ....
2024-06-05T09:32:31Z W! Deprecated inputs: 0 and 1 options
2024-06-05T09:32:31Z I! [agent] Config: Interval:2m0s, Quiet:false, Hostname:"telegraf-service", Flush Interval:10s
2024-06-05T09:32:31Z D! [agent] Initializing plugins
2024-06-05T09:32:31Z D! [agent] Connecting outputs
2024-06-05T09:32:31Z D! [agent] Attempting connection to [outputs.kafka]
2024-06-05T09:32:31Z D! [sarama] Initializing new client
2024-06-05T09:32:31Z D! [sarama] client/metadata fetching metadata for all topics from broker kafka.fqdn:9092
2024-06-05T09:32:36Z D! [sarama] Connected to broker at kafka.fqdn:9092 (unregistered)
2024-06-05T09:32:37Z D! [sarama] client/brokers registered new broker #1546333874 at cdi-nue-wrkr01.kafka.fqdn:9092
2024-06-05T09:32:37Z D! [sarama] client/brokers registered new broker #1546333886 at cdi-nue-wrkr03.kafka.fqdn:9092
2024-06-05T09:32:37Z D! [sarama] client/brokers registered new broker #1546333868 at cdi-nue-wrkr00.kafka.fqdn:9092
2024-06-05T09:32:37Z D! [sarama] client/brokers registered new broker #1546333880 at cdi-nue-wrkr02.kafka.fqdn:9092
2024-06-05T09:32:37Z D! [sarama] Successfully initialized new client
2024-06-05T09:32:37Z D! [agent] Successfully connected to outputs.kafka
2024-06-05T09:32:37Z D! [agent] Attempting connection to [outputs.file]
2024-06-05T09:32:37Z D! [agent] Successfully connected to outputs.file
2024-06-05T09:32:37Z D! [agent] Starting service inputs
2024-06-05T09:32:37Z I! [inputs.snmp_trap] Listening on udp://:1162
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Packet sanity verified, we got all the bytes (1264)
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: version
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed version 3
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed message ID 586321
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgMaxSize
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed message max size 65535
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgFlags
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parsed msg flags 
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgSecurityModel
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed security model 3
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgAuthoritativeEngineID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed authoritativeEngineID 00006f2a046965326d34356b633537676c37626b6c
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgAuthoritativeEngineBoots
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed authoritativeEngineBoots 0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgAuthoritativeEngineTime
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed authoritativeEngineTime 671591
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgUserName
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed userName telegraf-fm
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgAuthenticationParameters
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed authenticationParameters ïùœ/üÝÿp,ÿWÏ
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: msgPrivacyParameters
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed privacyParameters 
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed Security Parameters. now offset=89,
2024-06-05T09:32:38Z D! [inputs.snmp_trap] UnmarshalV3Header done. [with SecurityParameters]. Header Size 82. Last 4 Bytes=[[0 0 4 0]]
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: contextEngineID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed contextEngineID   o*ie2m45kc57gl7bkl
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: contextName
2024-06-05T09:32:38Z D! [inputs.snmp_trap] Parsed contextName 
2024-06-05T09:32:38Z D! [inputs.snmp_trap] UnmarshalPayload Meet PDUType 0x534e4d50763254726170. Offset 118
2024-06-05T09:32:38Z D! [inputs.snmp_trap] getResponseLength: 1146
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: request id
2024-06-05T09:32:38Z D! [inputs.snmp_trap] requestID: 1028438526
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: error-status
2024-06-05T09:32:38Z D! [inputs.snmp_trap] errorStatus: 0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: error index
2024-06-05T09:32:38Z D! [inputs.snmp_trap] error-index: 0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] vblLength: 1130
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.2.1.1.3.0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is TimeTicks
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is 0x37e1057
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.6.3.1.1.4.1.0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is ObjectIdentifier
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is ".1.3.6.1.4.1.94.7.1.3.0.5"
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.2.1.1.1.0
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is OctetString
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is []byte{0x53, 0x44, 0x4c}
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.4.1.94.7.1.4.2.1.1.968785
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is Integer
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is 968785

....

2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.4.1.94.7.1.4.2.1.19.968785
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is OctetString
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is []byte{0x52, 0x65, 0x67, 0x69, 0x6f, 0x6e, 0x3d, 0x72, 0x65, 0x67, 0x69, 0x6f, 0x6e, 0x4f, 0x6e, 0x65, 0x2c, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x69, 0x6c, 0x69, 0x74, 0x79, 0x5a, 0x6f, 0x6e, 0x65, 0x3d, 0x7a, 0x6f, 0x6e, 0x65, 0x31, 0x2c, 0x56, 0x6d, 0x49, 0x44, 0x3d, 0x37, 0x36, 0x37, 0x34, 0x64, 0x31, 0x33, 0x63, 0x2d, 0x38, 0x36, 0x32, 0x61, 0x2d, 0x34, 0x66, 0x38, 0x39, 0x2d, 0x61, 0x33, 0x37, 0x37, 0x2d, 0x38, 0x32, 0x39, 0x30, 0x62, 0x36, 0x32, 0x63, 0x66, 0x33, 0x39, 0x39, 0x2c, 0x48, 0x6f, 0x73, 0x74, 0x4e, 0x61, 0x6d, 0x65, 0x3d, 0x73, 0x64, 0x6c, 0x74, 0x31, 0x32, 0x2d, 0x70, 0x6d, 0x2d, 0x70, 0x72, 0x6f, 0x63, 0x65, 0x73, 0x73, 0x6f, 0x72, 0x2d, 0x35, 0x62, 0x36, 0x35, 0x66, 0x64, 0x35, 0x63, 0x38, 0x63, 0x2d, 0x72, 0x64, 0x7a, 0x67, 0x67}
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.4.1.94.7.1.4.2.1.20.968785
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is OctetString
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is []byte{0x53, 0x44, 0x4e, 0x20, 0x6f, 0x66, 0x20, 0x52, 0x65, 0x70, 0x6f, 0x72, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x4d, 0x4f, 0x3d, 0x43, 0x53, 0x44, 0x4c, 0x2d, 0x73, 0x64, 0x6c, 0x74, 0x31, 0x32, 0x2f, 0x54, 0x4c, 0x4d, 0x53, 0x52, 0x56, 0x2d, 0x31, 0x2f, 0x54, 0x4c, 0x4d, 0x4e, 0x2d, 0x73, 0x64, 0x6c, 0x74, 0x31, 0x32, 0x2d, 0x66, 0x6d, 0x2d, 0x70, 0x72, 0x6f, 0x63, 0x65, 0x73, 0x73, 0x6f, 0x72, 0x2d, 0x35, 0x37, 0x62, 0x66, 0x37, 0x66, 0x38, 0x35, 0x37, 0x62, 0x2d, 0x6c, 0x6b, 0x68, 0x73, 0x6a}
2024-06-05T09:32:38Z D! [inputs.snmp_trap] parseRawField: OID
2024-06-05T09:32:38Z D! [inputs.snmp_trap] OID: .1.3.6.1.4.1.94.7.1.4.2.1.22.968785
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: type is Integer
2024-06-05T09:32:38Z D! [inputs.snmp_trap] decodeValue: value is 10
2024-06-05T09:32:38Z E! [inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0, source=w.x.y.z: not found

nsipos · June 5, 2024, 3:58pm

The problem was that the MIBDIRS environment variable was not set.
I set only the path attribute in the config used only by the gosmi translator.

Anaisdg · June 5, 2024, 4:39pm

@nsipos
Thank you for sharing the solution! Ps what are you doing with InfluxDB I like learning about use cases.

Hipska · June 5, 2024, 5:51pm

@Anaisdg Doesn’t seem like he’s using InfluxDB…

nsipos · June 5, 2024, 6:16pm

I do not use influxDB. I use only the Telegraf to convert the old fashioned SNMP trap alarm messages into a Kafka topic.

nsipos · June 5, 2024, 6:24pm

I still find it strange that such an error could block the whole output chain. I believe it should be a bit more clear or descriptive the error message about the missing MIB definitions.

Topic		Replies	Views
[inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0 Telegraf snmp	3	536	November 28, 2023
SNMP_TRAP : Error resolving OID Telegraf	3	942	August 8, 2022
[inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0, source=192.168.1.19: not found Telegraf	9	713	February 27, 2024
Telegraf 1.20.4 some SNMP traps failing whilst no issues with 1.18 Telegraf telegraf , smnp	16	1518	May 20, 2022
Telegraf v1.22.0 , translating traps with netsnmp not working Telegraf	3	975	April 14, 2022

E! [inputs.snmp_trap] Error resolving OID oid=.1.3.6.1.2.1.1.3.0, source=w.x.y.z.: not found

Related topics