[Pkg-net-snmp-devel] Bug#468260: snmpd: ioctl failure on non-existant interface, excessive logging

[Jonathan Steinert]

Package: snmpd
Version: 5.4.1~dfsg-6
Severity: normal

>From my syslog:

Feb 27 22:45:09 rosa snmpd[6082]: ioctl 35123 returned -1 
Feb 27 22:45:39 rosa last message repeated 15 times
Feb 27 22:46:39 rosa last message repeated 24 times

running an strace shows what (roughly) is causing this:

select(9, [5 8], [], [], {2, 915208})   = 0 (Timeout)
gettimeofday({1204152519, 432363}, NULL) = 0
gettimeofday({1204152519, 432417}, NULL) = 0
gettimeofday({1204152519, 432461}, NULL) = 0
open("/proc/net/dev", O_RDONLY|O_LARGEFILE) = 9
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 10
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 11
ioctl(11, SIOCGIFCONF, {64, {{"lo", {AF_INET, inet_addr("127.0.0.1")}}, {"internal1", {AF_INET, inet_addr("10.8.0.200")}}}}) = 0
ioctl(11, SIOCGIFCONF, {64, {{"lo", {AF_INET, inet_addr("127.0.0.1")}}, {"internal1", {AF_INET, inet_addr("10.8.0.200")}}}}) = 0
ioctl(11, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(11, SIOCGIFNETMASK, {ifr_name="lo", ifr_netmask={AF_INET, inet_addr("255.0.0.0")}}) = 0
ioctl(11, SIOCGIFFLAGS, {ifr_name="lo", ifr_flags=IFF_UP|IFF_LOOPBACK|IFF_RUNNING}) = 0
ioctl(11, SIOCGIFINDEX, {ifr_name="internal1", ifr_index=5}) = 0
ioctl(11, SIOCGIFNETMASK, {ifr_name="internal1", ifr_netmask={AF_INET, inet_addr("255.255.255.0")}}) = 0
ioctl(11, SIOCGIFFLAGS, {ifr_name="internal1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_RUNNING|IFF_MASTER|IFF_MULTICAST}) = 0
close(11)                               = 0
open("/proc/net/if_inet6", O_RDONLY|O_LARGEFILE) = 11
fstat64(11, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9b000
read(11, "00000000000000000000000000000001"..., 1024) = 276
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 12
ioctl(12, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
close(12)                               = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 12
ioctl(12, SIOCGIFINDEX, {ifr_name="internal", ???}) = -1 ENODEV (No such device)
write(3, "ioctl 35123 returned -1\n", 24) = 24

There is no inbound data on the listening socket (select timed out), so the interface name 'internal' isn't entering that way. An
even longer strace from startup of snmpd shows that the string 'internal' is not read from any config file or other FD input.
When snmpd starts the poll of devices as you can see in this trace, there is no device named 'internal'.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (900, 'testing'), (500, 'stable'), (101, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-3-686 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages snmpd depends on:
ii  adduser                     3.105        add and remove users and groups
ii  debconf                     1.5.19       Debian configuration management sy
ii  libc6                       2.7-6        GNU C Library: Shared libraries
ii  libsnmp15                   5.4.1~dfsg-6 SNMP (Simple Network Management Pr
ii  libwrap0                    7.6.dbs-14   Wietse Venema's TCP wrappers libra

snmpd recommends no packages.

-- debconf information:
  snmpd/upgradefrom36:
* snmpd/upgradefrom521: