SNMP traps and trigers

[ayfaar]

Help to understand. I have zabbix server version 3.0.5, triggers are configured on it, which are triggered on certain traps, when the traps dose not come from thу device a certain time, the trigger gets the OK state. I use snmptrapd to handle the traps. There is a UPS APC 5000 device, when the device is physically disconnected from the network, the traps stop coming and the triggers go OK, everything is logical. This UPS model failed and we replaced it with the APC 6000 model. And the magic began, when the device was physically disconnected from the network, the zabbix server somehow magically continues to receive traps. Help understand why?

[ingus.vilnis]

I'd say there is another device with the same IP sending the traps to Zabbix and they get matched to the host you think is disconnected.

Have a look at the trap contents and if you see the origin. Then trace that over your network.

[ayfaar]

I have no any PC with the the same IP. I look et th trap content: example:

08.11.2018 17:21:20

17:21:19 2018/11/08 .1.3.6.1.4.1.318.0.80 Normal "General event" 192.168.100.138 - UPS: The battery is not installed properly.

At with time UPS with IP 192.168.100.138 was turned off and disconnect from network. I have no any other devices in my network with the same IP. then I plugged a broken ups(apc 5000) back into the network, the false traps stopped coming

[ayfaar]

at the same time a strange trap came:

08.11.2018 15:55:24

15:55:23 2018/11/08 .1.3.6.1.2.1.33.2.0.3 Normal "General event" 192.168.100.138 - 1