topic Re: snmpd restarting every 2 hours in Firewall and Security Management

snmpd restarting every 2 hours

boyuum — Wed, 21 May 2025 07:24:38 GMT

Hello

I have an issue with one of my HA device (R80.40) which keep restarting snmpd every 2 hours, i know it by looking at my network monitor like cacti and then check /var/log/message which shows /usr/sbin/snmpd restart every 2 hours

And coincidentally at the same time, there is an error with the ips

I attached /var/log/message full capture and grepped snmpd

TIA

Re: snmpd restarting every 2 hours

_Val_ — Wed, 21 May 2025 07:07:09 GMT

It looks like the SNMP daemon crashes regularly, leaving a core dump. Unfortunately, you are running an old version that is out of support now.

Did you consider upgrading it to one of the supported versions yet?

Re: snmpd restarting every 2 hours

Chris_Atkinson — Wed, 21 May 2025 07:25:54 GMT

Further to what @_Val_ has suggested, it would be helpful to at least understand which Jumbo (JHF) take is used with the system but ultimately you should consider upgrading.

Re: snmpd restarting every 2 hours

Lesley — Wed, 21 May 2025 08:39:15 GMT

Yes Jumbo is important detail. CTRL + F and search SNMP here on this page: https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.40/R80.40/R80.40-List-of-all-Resolved-Issues.htm?tocpath=_____4

You will see many open bugs / issues solved regarding SNMP. Before you do major upgrade to R81.20 you could consider to bring R80.40 to the latest Jumbo take 221

Final, run a hcp -r all on relevant gateway. There you can spot issues, I would expect coredumps for SNMP and maybe more (IPS issue).

Re: snmpd restarting every 2 hours

G_W_Albrecht — Wed, 21 May 2025 11:37:10 GMT

Interesting issue, but what is the problem with it ? Although restarting every 2h is not good behaviour. this happens only to the monitor daemon and does not cause any network issues (?). As this version is out of any support since one year, posting this here will only provoke suggestions to upgrade to a supported version 😉

Re: snmpd restarting every 2 hours

the_rock — Wed, 21 May 2025 12:10:12 GMT

I would upgrade to R81.20 if you can.

Andy

Re: snmpd restarting every 2 hours

boyuum — Thu, 22 May 2025 00:37:07 GMT

Yes, along with renewing the box on this year.

Re: snmpd restarting every 2 hours

boyuum — Thu, 22 May 2025 00:53:19 GMT

Technically it does not cause any real network issue like you said, but the user dont like to see any yellow warning icon at the dashboard 😅, and they will have an audit/inspection soon too

Re: snmpd restarting every 2 hours

the_rock — Thu, 22 May 2025 01:05:56 GMT

I get that totally, Im the same way :). Btw, maybe open old school sv monitor from c/program files x86/checkpoint/smartconsole/R81.xx folder and see if it gives more info about it.

Andy

Re: snmpd restarting every 2 hours

G_W_Albrecht — Thu, 22 May 2025 07:35:00 GMT

You are kidding, are you ? Audit for an unsupported firewall version ? The yellow warning is the least issue here.... Or does the customer have a special deal with CP so he has support ?

Re: snmpd restarting every 2 hours

boyuum — Fri, 23 May 2025 07:57:49 GMT

Im not kidding, its not just an audit for firewall but a whole security device in the department.

Its true the yellow warning is the least issue, but it will raise some questions from auditors

Re: snmpd restarting every 2 hours

Chris_Atkinson — Fri, 23 May 2025 09:04:59 GMT

So which JHF is deployed ?

Re: snmpd restarting every 2 hours

boyuum — Mon, 26 May 2025 10:21:25 GMT

Looks like there is no JHF deployed at the moment

Re: snmpd restarting every 2 hours

boyuum — Mon, 26 May 2025 10:33:35 GMT

I run hcp -r all command and as you said, there are coredumps for snmpd. As for ips issue, there is no issue can be found

Re: snmpd restarting every 2 hours

Chris_Atkinson — Mon, 26 May 2025 11:31:36 GMT

I hope this isn't true but if it is then seems we most probably found the solution.