Spectrum polls a device which no longer exists in the SpectroSERVER database (SSDB)

Products

• CA Spectrum

Issue/Introduction

In rare cases you may observe Spectrum sending SNMP get requests to a device which no longer exists in the SpectroSERVER database. This can be seen using a packet capture tool such as Wireshark, tcpdump or snoop.

Cause

This rare situation can happen when a model is destroyed from within Spectrum but it's application models are not destroyed. If you run a device/model/port search with the deleted IP or name, the results do not return any models. You will need to run the below search to see if there are any application models still left in the database for the destroyed device:

Environment

Release: Any
Component: SPCCSS

Resolution

On the SpectroSERVER machine, log into a bash shell (On Windows, go to Start->Run and type: bash -login) in the SPECROOT area:

1. Change directory to the CLI vnmsh directory and connect to the local SpectroSERVER:
   
   cd vnmsh
   ./connect
   
   
2. Now, show a list of models that have the deleted model name:
   
   ./show models | grep <deleted model name>
   
   The results may show application models and port models indicating that these models still exist for the deleted device model. This may cause Spectrum to send the snmp requests to this model. When you do a locator search on the application model we see these models in suppressed state in OneClick. In order to stop Spectrum from sending SNMP requests to these models, they will have to be manually destroyed so they will then be removed from the Spectrum modeling database.

This can be done in the OneClick UI or by using the CLI destroy command.

On the SpectroSERVER machine, log into a bash shell (On Windows, go to Start->Run and type: bash -login) in the SPECROOT area:

1. Change directory to the CLI vnmsh directory and connect to the local SpectroSERVER:
   
   cd vnmsh
   ./connect
   
   
2. Show a list of models that have the deleted model name:
   
   ./show models | grep <deleted model> will give the model handles of the existing child models for this deleted parent model.
   
   
3. Issue the destroy command using the model handles of the application models you want to remove from the database:
   
   ./destroy mh=<model handle of the model to be destroyed>

Deleting these existing models will stop the SpectroSERVER from sending SNMP requests to the deleted model IP address.