search cancel

Spectrum SDC "Trap forwarder has detected a possible trap overrun" in sdmLog.log file

book

Article ID: 253046

calendar_today

Updated On:

Products

DX NetOps

Issue/Introduction


On one of our SDCs we noticed the following output in the sdmLog.log file

Mon Oct 24 03:00:46 2022: WARNING: Trap forwarder has detected a possible trap overrun.  5240 traps received during this 15 second delivery period.




What exactly happens during a "trap overrun"?      Is there a way to check whether traps are being dropped? 



Environment

Release : 21.2.x  Spectrum Secure Domain Manager (SDM)

Cause

Traps are being received at a higher rate then 300 traps per second

Resolution

This is informational only and will not cause loss of traps to be received.

 

However if the trap rate is more serious you may see additional messages like

 

Mon Jul 04 03:02:57 2022: WARNING: Trap forwarder has removed 15661 traps as they are older than the 120 second limit.  Consider increasing the max traps/sec value or research why so many traps are being received.

 

Which does indicate traps have been lost.  If you have a busy trap environment you may consider changing the values in the sdc.rc to a slightly higher value.

 

[[email protected] bin]$ cat sdc.rc
icmp_listen_ip=
snmp_comm_ip=
snmp_comm_port=
snmp_trap_ip=
snmp_trap_port=
snmp_trap_port_enabled=
snmp_trap_max_time_to_live_sec=120
max_snmp_traps_per_sec=300
snmpv3_default_auth_protocol=md5
snmpv3_default_priv_protocol=des
ssl_enabled=false
ssl_trust_cert_collection_filepath=cert/sdc_ncm_ca.crt
ssl_client_cert_chain_filepath=cert/sdc_ncm_client.crt
ssl_client_private_key_filepath=cert/sdc_ncm_client.key
snmpv3_engine_id=0080104aa1af

Additional Information

Doc Link

 

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/22-2/managing-network/secure-domain-manager-sdm/installing-and-configuring-secure-domain-manager-processes/install-the-sdconnector-process.html