Has anyone seen this with the 4006 switch?

lchance · ‎05-20-2008

when i try to SNMP monitor this switch, even with two very different Network Management systems (CA Unicenter & Solarwinds) i get this same Syslog Message event flood:

2008 May 20 10:30:12 CDT -05:00 %IP-6-UDP_SOCKOVFL:UDP socket overflow from Source IP: 10.10.10.10, Destination port: 161

has anyone seen this event also?

and if so any ideas how to prevent it?

thanks,

larry

Joe Clarke · ‎05-20-2008

This is almost always a case of overly aggressive polling from the SNMP manager. Try backing down the polling rate, and staggering multiple pollers so that they do not hit the switch at the same time.

lchance · ‎05-20-2008

isn't it strange that out of all our switches being monitored it is only this model doing this?

Joe Clarke · ‎05-20-2008

Maybe not. This switch might be getting polled more aggressively than the others, or it might be more heavily loaded and less able to pull SNMP packets out of the input queue.