Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.
To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?
I have restarted the SNMP services on the FGT as well as disabled/enabled the SNMP agent and the events continue every polling cycle. Many of the ports are not even in use. If you think this is a Fortigate Issue I will contact support.
2017-12-28 09:29:24 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:24 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:29:23 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 cmf-fw1.challenger.com Features changed: 'build1167' -> 'build1547' 2017-12-28 09:09:27 cmf-fw1.challenger.com Version changed: 'v5.4.7' -> 'v5.6.3' 2017-12-28 09:09:27 cmf-fw1.challenger.com Device rebooted: after 20h 59m 24s
On Wed, Jan 31, 2018 at 9:13 AM, Adam Armstrong adama@memetic.org wrote:
This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.
Adam.
Sent from BlueMail http://www.bluemail.me/r?b=11870 On 31 Jan 2018, at 14:12, Scott Benninger sbenninger@gmail.com wrote:
The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?
Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)
OB version 17.6.8672
2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759'
Thanks!
Scott
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium