snmpdx error in /var/adm/messages

[Kegnut]

I'm getting this error in /var/adm/messages:

Jan 30 18:08:57 hostname snmpdx: community check() : bad community from IP.add.res.s
Jan 30 18:08:57 hostname snmpdx: session_open() failed for a pdu received from IP.add.res.s.45687

The IP stays the same. Usually repeats about 5-6 more times. Always happens during the same time every day. Anyone familiar with this? Is someone trying to do naughty things with my server?

Thanks in advance,
Josh

 

[badco]

Did you try pinging the IP address and/or doing a trace on it? Assuming the bad IP is listed in your messages.

 

[Kegnut]

Yeah I can ping it. I have no idea what that IP is, but I can ping it.

Searching through the net, I found the same errors in some other forums. Something about a Solaris Vulnerability...

http://www.sunmanagers.org/pipermail/summaries/2001-May/000660.html

The only problem is, what is on that link isn't in plain enough English for me to understand. It also seems that there are a lot of avenues to take to correct it. Didn't know if anyone here has had the problem, and corrected it.

NOTE: Running Solaris 7, getting errors on both Enterprise 5500 and 4500.

Thanks for response,
Josh

 

[mikeclark]

Use ping -s to see the IP address or nslookup.