Operational Defect Database
BugZero updated this defect 56 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
VMware | 366707
Smarts SAM: Trap Adapter (sm_trapd) is not processing traps that have a negative Timeticks value (OID .1.3.6.1.2.1.1.3.0)
Last update date:
3/25/2024
Affected products:
Smart Assurance - SMARTS
Affected releases:
No affected releases provided.
Fixed releases:
No fixed releases provided.
Description:
Symptoms
Smarts SAM Trap Adapter (sm_trapd) is not processing traps that have a negative Timeticks valueNegative value is returned for OID .1.3.6.1.2.1.1.3.0 (Timeticks) using packet capture or --traceSNMP
Cause
Smarts code does not accept negative TimeTicks values as valid. Valid Timeticks values are one of the following: Case 1: A value with type smiTimeTicks Case 2: In SNMP_BUG_COMPATIBLE mode, the value is of type Unsigned Integer 32-bit Case 3: In SNMP_BUG_COMPATIBLE mode, the value is of type Integer 32-bit, and the value is >= 0. By default, Smarts code is shipped in SNMP_BUG_COMPATIBLE mode, so only cases 2 and 3 above are applicable for whether Smarts determines that a Timeticks value is valid. If a device is sending traps with a negative Timeticks value, Smarts will not accept it as a valid Timeticks value.
Resolution
The Smarts parser will throw an exception when it hits a negative Timeticks value. To see this exception and troubleshoot this issue, you will need to start sm_trapd using --logLevel=Debug.
Related Information
The log level required for the error messages with bad packets is Debug. This is below the default level of Error which Smarts is set by default.
