snmp log, "Connection from UDP:" deaktivieren

[Exxter]

Hallo,

der snmpd spamt meine Logdatei zu:

Code: Alles auswählen

[...]
May  7 07:41:20 server snmpd[4099]: Connection from UDP: [192.168.199.4]:48973->[192.168.199.9]:161
May  7 07:41:20 server snmpd[4099]: Connection from UDP: [192.168.199.4]:34638->[192.168.199.9]:161
May  7 07:41:20 server snmpd[4099]: Connection from UDP: [192.168.199.4]:34638->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:46990->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:46990->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:49392->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:49392->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:57866->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:57866->[192.168.199.9]:161
May  7 07:41:21 server snmpd[4099]: Connection from UDP: [192.168.199.4]:46451->[192.168.199.9]:161
[...]

Vor Debian Stretch konnte man das in der /etc/defaults/snmpd abstellen indem man:

Code: Alles auswählen

SNMPDOPTS='-Lsd -Lf /dev/null -u Debian-snmp -g Debian-snmp -I -smux,mteTrigger,mteTriggerConf -p /run/snmpd.pid'

ändert in:

Code: Alles auswählen

SNMPDOPTS='-Ls0-5d -Lf /dev/null -u Debian-snmp -g Debian-snmp -I -smux,mteTrigger,mteTriggerConf -p /run/snmpd.pid'

doch das bringt jetzt nichts mehr, er spamt weiter.

Ich habe es auch schon in der /lib/systemd/system/snmpd.service geändert

Code: Alles auswählen

ExecStart=/usr/sbin/snmpd -Ls0-5d -Lf /dev/null -u Debian-snmp -g Debian-snmp -I -smux,mteTrigger,mteTriggerConf -f

ändert aber auch nichts.

Code: Alles auswählen

root@server:~$ ps ax|grep snmp
 5682 ?        Ss     0:02 /usr/sbin/snmpd -Ls0-5d -Lf /dev/null -u Debian-snmp -g Debian-snmp -I -smux mteTrigger mteTriggerConf -f
12243 pts/5    S+     0:00 grep snmp
root@server:~$

Wo ändert man das jetzt so dass es greift?

Links:
https://serverfault.com/questions/31064 ... -verbosity
https://www.rainingpackets.com/2011/08/ ... -messages/