snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224

tlex

Member
Mar 9, 2021
103
14
23
43
I know there is a bug at this time with snmp but I was wondering if there was a workaround or a way to patch this temporarly in order to avoid floodind syslog ?

https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/2056257

pveversion
pve-manager/8.2.2/9355359cd7afbae4 (running kernel: 6.8.4-3-pve)

Code:
May 13 14:01:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:02:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:03:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:04:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:05:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:06:07 pve kernel: usb 4-1: reset SuperSpeed USB device number 2 using xhci_hcd
May 13 14:06:07 pve kernel: usb 4-1: LPM exit latency is zeroed, disabling LPM.
May 13 14:06:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:07:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:08:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:09:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:10:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:11:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:12:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:13:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:14:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:15:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:16:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:17:01 pve CRON[343918]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
May 13 14:17:01 pve CRON[343919]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
May 13 14:17:01 pve CRON[343918]: pam_unix(cron:session): session closed for user root
May 13 14:17:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:18:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:19:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:20:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:21:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:22:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:23:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:24:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:25:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:26:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:27:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:28:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:28:20 pve smartd[2315]: Device: /dev/sdd [SAT], SMART Usage Attribute: 194 Temperature_Celsius changed from 110 to 111
May 13 14:28:20 pve smartd[2315]: Device: /dev/sdg [SAT], 1 Currently unreadable (pending) sectors
May 13 14:28:20 pve smartd[2315]: Device: /dev/sdg [SAT], SMART Usage Attribute: 194 Temperature_Celsius changed from 106 to 105
May 13 14:29:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:30:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:31:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:32:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:33:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:34:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:35:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:36:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
May 13 14:36:20 pve pvedaemon[56212]: <root@pam> successful auth for user 'root@pam'
May 13 14:37:19 pve snmpd[2644]: systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224
 
I tried this in /etc/snmp/snmpd.conf and it didn't work:

dontLogTCPWrappersConnects yes

So now I guess we wait for Debian or the Proxmox VE teams to evaluate the latest SNMP service updates, and decide if it's worth including this bugfixed version given the risks, if any.
 
I believe its beeing fixed in this patch : https://github.com/net-snmp/net-snmp/pull/785

a workaround to get these logs ignored :

Code:
// run
sudo nano /etc/rsyslog.d/ignore_systemstats_header.conf

// copy & paste & save
:msg, contains, "systemstats_linux: unexpected header length in /proc/net/snmp" ~


// restart daemon
sudo systemctl restart rsyslog
Thanks for the workaround! Unfortunately it doesn't prevent systemd-journald logging. Any ideas how to fix it?
 
Hi guys,

Here's a suggestion how to stop the spam logging and reduce the SNMP Daemon's logging level.
We can achieve this by adding the following line:
Code:
LogLevelMax=notice
to the
Code:
/lib/systemd/system/snmpd.service
file.
The entire file should then look like this:
cat /lib/systemd/system/snmpd.service
[Unit]
Description=Simple Network Management Protocol (SNMP) Daemon.
After=network-online.target
ConditionPathExists=/etc/snmp/snmpd.conf

[Service]
LogLevelMax=notice
Type=notify
RuntimeDirectory=agentx
ExecStart=/usr/sbin/snmpd -LOw -u Debian-snmp -g Debian-snmp -I -smux,mteTrigger,mteTriggerConf -f
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target
After making these changes, simply run the following commands:
Code:
$ sudo systemctl daemon-reload
$ sudo systemctl restart snmpd
Finally, check the snmpd logs using journalctl after restarting it:
Code:
$ journalctl -u snmpd
This should eliminate the spam logging related to "systemstats_linux: unexpected header length in /proc/net/snmp. 237 != 224".
 
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!