Guest

Preview Tool

Cisco Bug: CSCvt34973 - SFNotificationd may cause excessive logging in 'messages' files

Last Modified

Oct 03, 2020

Products (35)

  • Sourcefire Defense Center
  • Cisco FirePOWER Appliance 8120
  • Cisco FirePOWER Appliance 8260
  • Cisco Firepower Management Center 2500
  • Cisco FirePOWER Appliance 8360
  • Cisco FirePOWER Appliance 7050
  • Cisco Firepower Management Center 4600
  • Cisco AMP 7150
  • Cisco AMP 8150
  • Cisco FirePOWER Appliance 8350
View all products in Bug Search Tool Login Required

Known Affected Releases

6.2.3.14 6.2.3.4 6.3.0 6.4.0 6.5.0 6.6.0 6.7.0

Description (partial)

Symptom:
Files /var/log/messages have the following entries:

net-snmp[22639]: [22654] SFNotificationd:NotifySNMPTrap [ERROR] NotificationSNMPTrap.c:356:AddSNMPVar(): Couldn't Add sfURL

net-snmp[22639]: [22654] SFNotificationd:NotifySNMPTrap [ERROR] NotificationSNMPTrap.c:501:CreateSNMP_PDU(): Error Adding SNMP Varbindlist to the snmp_pdu

net-snmp[22639]: [22654] SFNotificationd:NotifySNMPTrap [ERROR] NotificationSNMPTrap.c:1183:NotifySNMPTrapAllVersions(): Could not create SNMP PDU

# grep -i 'SFNotificationd:NotifySNMPTrap \[ERROR\] NotificationSNMPTrap' messages* | wc -l
614643 <== this is the number of lines with the error message.

Conditions:
1. Firepower NGIPS devices, such as FP82xx or FP83xx.
2. SNMP notification is enabled in access control rules.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.