Ad Widget

Collapse

Issues getting Zabbix 4.4 talking with pfSense agents

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • lukeskyscraper
    Junior Member
    • Jan 2020
    • 2

    #1

    Issues getting Zabbix 4.4 talking with pfSense agents

    Hello, I have a Zabbix 4.4 server, set up on an Ubuntu 18.04 server, using Apache2 and MySQL. I have set up an agent on a pfsense firewall which I'm using to test, and get to know Zabbix with. The Zabbix server just won't talk to it, no matter what I try.

    I have confirmed that both the server host and agent host can talk to each other, by telnetting from one to the other and vice versa... that works fine. The hostnames are also the same. I'm really baffled at why this agent is not communicating with the server. Does the hostname actually have to be a DNS name thats resolvable by a DNS server? Or does it just need to match on both the server and agent sides?

    Anyways, here's some diagnostic info. Please help!

    Agent config file - pfsense firewall, 10.10.9.1:

    Server=10.10.9.75
    ServerActive=10.10.9.75:10051
    Hostname=GS-KL-pfs34.gsit.ca
    ListenIP=0.0.0.0
    ListenPort=10050
    RefreshActiveChecks=120
    DebugLevel=3
    PidFile=/var/run/zabbix-agent/zabbix_agentd.pid
    LogFile=/var/log/zabbix-agent/zabbix_agentd.log
    LogFileSize=1
    Timeout=3
    BufferSend=5
    BufferSize=100
    StartAgents=3
    TLSConnect=unencrypted
    TLSAccept=unencrypted


    Agent log:

    67801:20200115:200308.555 Starting Zabbix Agent [GS-KL-pfs34.gsit.ca]. Zabbix 4.4.0 (revision cfac660b25).
    67801:20200115:200308.555 **** Enabled features ****
    67801:20200115:200308.555 IPv6 support: YES
    67801:20200115:200308.555 TLS support: YES
    67801:20200115:200308.555 **************************
    67801:20200115:200308.555 using configuration file: /usr/local/etc/zabbix44/zabbix_agentd.conf
    67801:20200115:200308.555 agent #0 started [main process]
    67877:20200115:200308.556 agent #1 started [collector]
    68431:20200115:200308.557 agent #3 started[listener #2]
    68953:20200115:200308.559 agent #5 started [active checks #1]
    68113:20200115:200308.561 agent #2 started[listener #1]
    68738:20200115:200308.563 agent #4 started[listener #3]
    68738:20200115:200600.140 Message from 10.10.9.75 is missing header. Message ignored.
    68738:20200115:201606.592 Message from 10.10.9.75 is missing header. Message ignored.


    Zabbix server - 10.10.9.75, same subnet:

    1545:20200115:195850.882 Message from 10.10.9.1 is missing header. Message ignored.
    1545:20200115:200017.821 cannot send list of active checks to "10.10.9.1": host [10.10.9.75] not found
    1547:20200115:200126.177 cannot send list of active checks to "10.10.9.1": host [GS-KL-pfs34.gsit.ca] not found
    1552:20200115:200137.094 cannot send list of active checks to "10.10.9.1": host [GS-KL-pfs34.gsit.ca] not found
    1544:20200115:200238.063 cannot send list of active checks to "10.10.9.1": host [GS-KL-pfs34.gsit.ca] not found

    The server also has a ton of this in its log... I'm not sure if its related or not:
    Unlinked OID in NET-SNMP-EXTEND-MIB: netSnmpExtendMIB ::= { nsExtensions 1 }
    Undefined identifier: nsExtensions near line 19 of /usr/share/snmp/mibs/NET-SNMP-EXTEND-MIB.txt
    Cannot find module (SNMP-NOTIFICATION-MIB): At line 1 in (none)
    Cannot find module (SNMPv2-TM): At line 1 in (none)
    Cannot find module (SNMP-FRAMEWORK-MIB): At line 9 in /usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt
    Cannot find module (SNMP-VIEW-BASED-ACM-MIB): At line 16 in /usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt
    Cannot find module (SNMPv2-TC): At line 25 in /usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt
    Did not find 'SnmpAdminString' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'netSnmpObjects' in module NET-SNMP-MIB (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'netSnmpGroups' in module NET-SNMP-MIB (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'vacmGroupName' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'vacmAccessContextPrefix' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'vacmAccessSecurityModel' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'vacmAccessSecurityLevel' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'DisplayString' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'RowStatus' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Did not find 'StorageType' in module #-1 (/usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt)
    Unlinked OID in NET-SNMP-VACM-MIB: netSnmpVacmMIB ::= { netSnmpObjects 9 }
    Undefined identifier: netSnmpObjects near line 28 of /usr/share/snmp/mibs/NET-SNMP-VACM-MIB.txt
    Cannot adopt OID in UCD-SNMP-MIB: logMatchRegExCompilation ::= { logMatchEntry 101 }
    Cannot adopt OID in UCD-SNMP-MIB: logMatchErrorFlag ::= { logMatchEntry 100 }
    Cannot adopt OID in UCD-SNMP-MIB: logMatchCycle ::= { logMatchEntry 11 }
    Cannot adopt OID in UCD-SNMP-MIB: logMatchCount ::= { logMatchEntry 10 }
    Cannot adopt OID in UCD-SNMP-MIB: logMatchCounter ::= { logMatchEntry 9 }


    Any advice anyone can give me would be much appreciated.
  • Hamardaban
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • May 2019
    • 2713

    #2
    On the server, the host is specified via ip, and in the agent config - by name (Hostname=GS-KL-pfs34.gsit.ca).
    IMHO Messages about SNMP indicate an incorrect snmpd configuration.

    Comment

    • lukeskyscraper
      Junior Member
      • Jan 2020
      • 2

      #3
      Turns out my communication issue was due to the lack of templates attached to the host. Rookie mistake, oops.
      The SNMP issues were simply because the snmp packages wasn't installed.

      Comment

      • stevefxp
        Senior Member
        • Aug 2020
        • 168

        #4
        Originally posted by lukeskyscraper
        Turns out my communication issue was due to the lack of templates attached to the host. Rookie mistake, oops.
        The SNMP issues were simply because the snmp packages wasn't installed.
        What templates did you need to attach to the host to get it to work? I am having same problem with active checks. I have the FreeBSD template attached.

        Comment

        Working...