W2k high CPU load (snmp.exe)

[Alexander Demmer]

Running Win2000 Adv. Server SP4. snmp.exe regularly takes up to 100% of
CPU-time. After restarting the snmp-service CPU-usage goes down to a normal
rate but then rises again to 100%.

This happens on different servers (all W2k Adv. Server) with different
hardware and different applications running.

HP ITO (OpenView) Agents (v7.20) and Symantec Antivirus Corp. Ed. Client (v
8.0) are installed on all of the servers.

Has anybody observed such behavior?

TIA
Alexander

 

[Danny Slye - [MSFT}]

This is usually caused by third-party extension agents. Most often
ilansnmp.dll installed by Dell Open Manage software and Intel Proset
software. To remove:

In general, check registry values from
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ExtensionAgents to
see if there are some Extension Agents from 3rd party vendors. You can
isolate the problem by:

1. Net stop snmp
2. Delete suspected values under the ExtensionAgents subkey which will
effectively uninstall those Extension Agents
ie:REG_SZ:Software\Intel\ILanSNMP\CurrentVersion (you might want to
export the key first)
3. net start snmp
4. try to repro the problem again.

Later versions of the extension agents might have the handle leak fixed.
Check with your vendor

--------------------

Running Win2000 Adv. Server SP4. snmp.exe regularly takes up to 100% of
CPU-time. After restarting the snmp-service CPU-usage goes down to a normal
rate but then rises again to 100%.

This happens on different servers (all W2k Adv. Server) with different
hardware and different applications running.

HP ITO (OpenView) Agents (v7.20) and Symantec Antivirus Corp. Ed. Client (v
8.0) are installed on all of the servers.

Has anybody observed such behavior?

TIA
Alexander

__
Danny Slye
Microsoft Support Professional
MCSE

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!

 

[Alexander Demmer]

Thank you for your answer.
Before deleting any of the installed agents without a clue, maybe you can
help us out....

We observed the problem on Fujitsu Siemens Primergy servers with Fujitsu
Siemens monitoring agents (SNMP) installed on them. Here's a list of
extension agents used:

"2"="SOFTWARE\\Microsoft\\RFC1156Agent\\CurrentVersion"
"3"="SOFTWARE\\Microsoft\\HostMIB\\CurrentVersion"
"4"="SOFTWARE\\Microsoft\\SNMPMIB\\CurrentVersion"
"5"="SOFTWARE\\Microsoft\\SNMP_EVENTS\\CurrentVersion"
"6"="SOFTWARE\\Microsoft\\ACS\\CurrentVersion"
"7"="SOFTWARE\\Microsoft\\IGMPMibAgent\\CurrentVersion"
"8"="SOFTWARE\\Microsoft\\IPMulticastMibAgent\\CurrentVersion"
"9"="SOFTWARE\\Microsoft\\RIPMibAgent\\CurrentVersion"
"10"="SOFTWARE\\Microsoft\\OSPFMibAgent\\CurrentVersion"
"11"="SOFTWARE\\Microsoft\\BOOTPMibAgent\\CurrentVersion"
"12"="SOFTWARE\\Microsoft\\IPXMibAgent\\CurrentVersion"
"dptscsi"="SOFTWARE\\DPT\\SNMP\\SCSI_SYSTEM_AGENT\\CurrentVersion"
"INV_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\INV_MIB\\CurrentVersion"
"BIOS_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP
Agents\\BIOS_MIB\\CurrentVersion"
"BUS_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\BUS_MIB\\CurrentVersion"
"HD_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\HD_MIB\\CurrentVersion"
"NT_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\NT_MIB\\CurrentVersion"
"SC_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\SC_MIB\\CurrentVersion"
"1398_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP
Agents\\1398_MIB\\CurrentVersion"
"TRAP_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP
Agents\\TRAP_MIB\\CurrentVersion"
"SEC_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\SEC_MIB\\CurrentVersion"
"VV_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP Agents\\VV_MIB\\CurrentVersion"
"STATUS_MIB"="SOFTWARE\\Fujitsu Siemens\\SNMP
Agents\\STATUS_MIB\\CurrentVersion"

As you can see there are many 3rd party agents installed. Are any of these
agents known for causing such problems?

TIA
Alexander Demmer

This is usually caused by third-party extension agents. Most often
ilansnmp.dll installed by Dell Open Manage software and Intel Proset
software. To remove:

In general, check registry values from
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ExtensionAgents to
see if there are some Extension Agents from 3rd party vendors. You can
isolate the problem by:

1. Net stop snmp
2. Delete suspected values under the ExtensionAgents subkey which will
effectively uninstall those Extension Agents
ie:REG_SZ:Software\Intel\ILanSNMP\CurrentVersion (you might want to
export the key first)
3. net start snmp
4. try to repro the problem again.

Later versions of the extension agents might have the handle leak fixed.
Check with your vendor

--------------------

Running Win2000 Adv. Server SP4. snmp.exe regularly takes up to 100% of
CPU-time. After restarting the snmp-service CPU-usage goes down to a normal
rate but then rises again to 100%.

This happens on different servers (all W2k Adv. Server) with different
hardware and different applications running.

HP ITO (OpenView) Agents (v7.20) and Symantec Antivirus Corp. Ed. Client (v
8.0) are installed on all of the servers.

Has anybody observed such behavior?

TIA
Alexander

__
Danny Slye
Microsoft Support Professional
MCSE

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!

 

[Danny Slye - [MSFT}]

The ones that I have seen specific issues with are from Dell Open Manage
and Intel ProSet. I believe these vendors have patched their extension
agents. You might want to check with Fujitsu ( and DPT) to see if they
have newer agents.