%IP-3-UDP_SOCKOVFL : UDP Socket 161 Overflow

[ciscotac]

Following is error and solution suggested on Cisco Works. What I have to do, As I have only NMS is running on this network ?

Explanation : This message indicates that all buffers for a UDP socket on the NMP have been consumed due to excessive UDP traffic on the administrative VLAN. The system may be under attack or an application might be out of control;[dec] is the UDP socket number.

Recommended Action : You should remove or block the source of the UDP packets to prevent further UDP packet loss.

[Gilles Dufour]

find out the source of the SNMP traffic.

Then use an ACL to block it.

Either on the router itself or at the boundary of your network.

If you're not already aware of this, most Networking Vendor are affected by an SNMP bug that could be source of potential hacking.

[lhill]

This is caused more than likely by a NMS trying to poll the device with a incorrect community string. Try and track down the configuration on the NMS which is polling the affected device and change it to the correct one.