Start a Conversation

Unsolved

This post is more than 5 years old

7471

February 15th, 2012 10:00

HIT/VE snapshots and replication tasks make VM send 'Powered On' traps

Hi there,

We have an environment with ESXi5, vCenter, PS6000x SAN groups and using HIT/VE to tie it all together with smart copies and replications.

What I've noticed is that the scheduled smart copies and replication tasks cause our virtual machines to send SNMP traps indicating that the VM has powered on.

Example: Normal 02/15/2012 13:11:54 Web01 (172.31.70.225) VM Powered On - VM Name: Web01 ([1] vmID.0 (Integer): 17 [2] vmConfigFile.0 (DisplayString): /vmfs/volumes/4ec41812-1810e322-4945-5cf3fc4effa8/Web01/Web01.vmx [3] vmwVmDisplayName.17 (DisplayString): Web01 [4] snmpTrapEnterprise.0 (Object ID): vmwESX )

The VM is always on so I'm not sure why its sending a trap saying it's been Powered On as it remains completely accessible during the smart copy or replication task. This isnt really a problem but when we have hundreds of virtual machines that participate in smart copies and replications it begins to send far too many traps to our network monitoring station.

Has anyone else observed the same behaviour? Does anyone know if this is a bug or by design?

Thanks!

7 Technologist

 • 

729 Posts

February 16th, 2012 09:00

I'm looking into this a little further, can you provide the following information:

What PS Array firmware version are you running?

What version of HIT/VE?

What is the OS of the VM's sending the SNMP traps?

What tool/utility you are using to capture the SNMP traps?

Judging by the output example you provided, the messages appears to be coming from the VMware tools snapshot manager, can you confirm?

-joe

18 Posts

February 16th, 2012 10:00

Hi Joe, thanks for the response.

I've answered your questions to the best of my abilities.

What PS Array firmware version are you running?

  - v5.1.2 (R197668)

What version of HIT/VE?

  - 3.1.1.32 2011.Sep.08

What is the OS of the VM's sending the SNMP traps?

  - Windows Server 2008 R2

What tool/utility you are using to capture the SNMP traps?

  - Castlerock SNMPc, but I believe this would observed on any NMS.

Judging by the output example you provided, the messages appears to be coming from the VMware tools snapshot manager, can you confirm?

  - We know the alerts correlate directly with snapshot/smart copy events and that the traps originate/sourced from the ESXi host that the virtual machine is currently assigned to/running on.

7 Technologist

 • 

729 Posts

February 16th, 2012 13:00

The ASM/VE calls the VMware snapshot manager.  At this point VMware snapshot manager generates the event.  You can test this by just creating a snapshot using VMware’s snapshot manager, which will create the event.

In the VMware 4.0 release notes: www.vmware.com/.../vsp_esx40_vc40_rel_notes.html, there is a section as follows:

SNMP PowerOn traps generated during vmware_hostd restart

When you restart vmware_hostd, only the Warm Start trap message should be generated by default. However, for all virtual machines running on your host, the PowerOn trap messages are also generated.

Workaround: You can ignore the PowerOn trap messages

 

I would venture a guess that that this hasn’t changed in v5.0

So, it appears you may have to suppress the messages in the Castlerock program, and configure the Agent to Filter the events/Traps.

There may be a way to filter the messages in the Create and Modify Alarm Actions and Alarm Triggers on vSphere

www.vmware.com/.../vsphere-esxi-vcenter-server-pubs.html, on this page is a link to “vSphere Monitoring and Performance Guide”.  You may need to check with VMware to see if this is even possible.

-joe

No Events found!

Top