<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Pablo Endres's Blog &#187; CentOS</title>
	<atom:link href="http://www.pabloendres.com/tag/centos/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pabloendres.com</link>
	<description></description>
	<lastBuildDate>Tue, 18 May 2010 21:16:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>snmp errors in syslog</title>
		<link>http://www.pabloendres.com/2009/04/19/snmp-errors-in-syslog/</link>
		<comments>http://www.pabloendres.com/2009/04/19/snmp-errors-in-syslog/#comments</comments>
		<pubDate>Sun, 19 Apr 2009 19:12:22 +0000</pubDate>
		<dc:creator>Pablo Endres</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[CentOS]]></category>
		<category><![CDATA[fedora]]></category>
		<category><![CDATA[REL]]></category>
		<category><![CDATA[snmp]]></category>

		<guid isPermaLink="false">http://www.pabloendres.com/?p=79</guid>
		<description><![CDATA[I finally got fed up of these messages in my log files (/var/log/messages) and decided to do something about them: Apr 19 04:14:47 hostname snmpd[3458]: Connection from UDP: [127.0.0.1]:42482 Apr 19 04:14:47 hostname snmpd[3458]: Received SNMP packet(s) from UDP: [127.0.0.1]:42482 After reading, googling around and testing for a while I rounded it the following solution, [...]]]></description>
			<content:encoded><![CDATA[<p>I finally got fed up of these messages in my log files (/var/log/messages) and decided to do something about them:</p>
<p><strong>Apr 19 04:14:47 hostname snmpd[3458]: Connection from UDP: [127.0.0.1]:42482<br />
Apr 19 04:14:47 hostname snmpd[3458]: Received SNMP packet(s) from UDP: [127.0.0.1]:42482</strong></p>
<p>After reading, googling around and testing for a while I rounded it the following solution, it should work in any Linux system with net-snmp after some tweaks but out of the box on CentOS, REL, Fedora or any of its relatives:</p>
<p>1. Remove the -a from the snmpd start options or write this in the /etc/sysconfig/snmpd.options file:</p>
<blockquote><p>OPTIONS=&#8221;-Lsd -Lf /dev/null -p /var/run/snmpd.pid&#8221;</p></blockquote>
<p>This should take care of the &#8220;Received SNMP&#8221; packets line (2nd one).</p>
<p>2. Add dontLogTCPWrappersConnects true at the end of your /etc/snmp/snmpd.conf file, that takes care of the other line:</p>
<p>Apr 19 04:13:47 dcf-is1p snmpd[3458]: Connection from UDP: [127.0.0.1]:48911</p>
<p>According to the <a href="http://www.net-snmp.org/docs/man/snmpd.conf.html">man</a> page: This setting       disables the log messages for accepted connections. Denied connections will still be logged.&#8221;</p>
<p>The problem is that the default settings are to log every connection / request, so what we did was leave the log work only for failed and authenticated attempts</p>
<p>Enjoy readable logs!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pabloendres.com/2009/04/19/snmp-errors-in-syslog/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
