I see, this idiot device is returning an abnormally large number for ifHighSpeed, the first I've seen return the max unsigned value ( our db table is expecting the signed version to be max).

This is probably a vendor bug, you can report it to them but they will ignore you because none of them care.

I've changed the field to be UNSIGNED, the next commit will fix it, or you can run:

ALTER TABLE `ports` CHANGE `ifHighSpeed` `ifHighSpeed` INT UNSIGNED NULL DEFAULT NULL;

adam.

On 2018-01-31 15:25:44, Scott Benninger <sbenninger@gmail.com> wrote:
Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.

To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?

I have restarted the SNMP services on the FGT as well as disabled/enabled the SNMP agent and the events continue every polling cycle. Many of the ports are not even in use. If you think this is a Fortigate Issue I will contact support.

2017-12-28 09:29:24 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:24 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:29:23 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:29:23 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:24:25 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:24:25 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:24:25 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:19:34 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295'
2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'
2017-12-28 09:09:27 cmf-fw1.challenger.com Features changed: 'build1167' -> 'build1547'
2017-12-28 09:09:27 cmf-fw1.challenger.com Version changed: 'v5.4.7' -> 'v5.6.3'
2017-12-28 09:09:27 cmf-fw1.challenger.com Device rebooted: after 20h 59m 24s
On Wed, Jan 31, 2018 at 9:13 AM, Adam Armstrong <adama@memetic.org> wrote:
This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

Sent from BlueMail
On 31 Jan 2018, at 14:12, Scott Benninger <sbenninger@gmail.com> wrote:
The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D
Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'
2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'

Thanks!

Scott
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium