Log full of Interface Speed change messages for Fortigate 600D cluster

older
Device randomly now taking longer...

Scott Benninger

31 Jan 2018 31 Jan '18

3:12 p.m.

The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'

Thanks!

Scott

Attachments:

attachment.html (text/html — 1.4 KB)

Show replies by date

Adam Armstrong

31 Jan 31 Jan

3:13 p.m.

New subject: Log full of Interface Speed change messages for Fortigate 600D cluster

This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

⁣Sent from BlueMail

On 31 Jan 2018, 14:12, at 14:12, Scott Benninger sbenninger@gmail.com wrote:

...

The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'

Thanks!

Scott

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Scott Benninger

4:25 p.m.

New subject: Log full of Interface Speed change messages for Fortigate 600D cluster

Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.

To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?

I have restarted the SNMP services on the FGT as well as disabled/enabled the SNMP agent and the events continue every polling cycle. Many of the ports are not even in use. If you think this is a Fortigate Issue I will contact support.

2017-12-28 09:29:24 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:24 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:29:23 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 cmf-fw1.challenger.com Features changed: 'build1167' -> 'build1547' 2017-12-28 09:09:27 cmf-fw1.challenger.com Version changed: 'v5.4.7' -> 'v5.6.3' 2017-12-28 09:09:27 cmf-fw1.challenger.com Device rebooted: after 20h 59m 24s

On Wed, Jan 31, 2018 at 9:13 AM, Adam Armstrong adama@memetic.org wrote:

...

This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

Sent from BlueMail http://www.bluemail.me/r?b=11870 On 31 Jan 2018, at 14:12, Scott Benninger sbenninger@gmail.com wrote:

...
The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759'

Thanks!

Scott

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Adam Armstrong

4:35 p.m.

New subject: Log full of Interface Speed change messages for Fortigate 600D cluster

I see, this idiot device is returning an abnormally large number for ifHighSpeed, the first I've seen return the max unsigned value ( our db table is expecting the signed version to be max).

This is probably a vendor bug, you can report it to them but they will ignore you because none of them care.

I've changed the field to be UNSIGNED, the next commit will fix it, or you can run:

ALTER TABLE `ports` CHANGE `ifHighSpeed` `ifHighSpeed` INT UNSIGNED NULL DEFAULT NULL;

adam. On 2018-01-31 15:25:44, Scott Benninger sbenninger@gmail.com wrote: Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.

To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?

2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56'

2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 cmf-fw1.challenger.com [http://cmf-fw1.challenger.com] Features changed: 'build1167' -> 'build1547' 2017-12-28 09:09:27 cmf-fw1.challenger.com [http://cmf-fw1.challenger.com] Version changed: 'v5.4.7' -> 'v5.6.3' 2017-12-28 09:09:27 cmf-fw1.challenger.com [http://cmf-fw1.challenger.com] Device rebooted: after 20h 59m 24s

On Wed, Jan 31, 2018 at 9:13 AM, Adam Armstrong <adama@memetic.org [mailto:adama@memetic.org]> wrote:

This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

Sent from BlueMail [http://www.bluemail.me/r?b=11870] On 31 Jan 2018, at 14:12, Scott Benninger <sbenninger@gmail.com [mailto:sbenninger@gmail.com]> wrote: The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647 [tel:(214)%20748-3647]' -> '4294901759'

Thanks!

Scott

observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]

_______________________________________________ observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]

_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Scott Benninger

5:01 p.m.

New subject: Log full of Interface Speed change messages for Fortigate 600D cluster

Thanks Adam! That did the trick.

I will report to Fortigate but as you mention it will most likely not change anything.

On Wed, Jan 31, 2018 at 10:35 AM, Adam Armstrong adama@observium.org wrote:

...

I see, this idiot device is returning an abnormally large number for ifHighSpeed, the first I've seen return the max unsigned value ( our db table is expecting the signed version to be max).

This is probably a vendor bug, you can report it to them but they will ignore you because none of them care.

I've changed the field to be UNSIGNED, the next commit will fix it, or you can run:

ALTER TABLE `ports` CHANGE `ifHighSpeed` `ifHighSpeed` INT UNSIGNED NULL DEFAULT NULL;

adam.

On 2018-01-31 15:25:44, Scott Benninger sbenninger@gmail.com wrote: Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.

To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?

I have restarted the SNMP services on the FGT as well as disabled/enabled the SNMP agent and the events continue every polling cycle. Many of the ports are not even in use. If you think this is a Fortigate Issue I will contact support.

2017-12-28 09:29:24 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:24 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port8 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port7 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port6 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port5 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port4 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port3 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 port2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:29:23 mgmt2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:29:23 mgmt1 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:24:25 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port8 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port7 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port6 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port5 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port4 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port3 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 port2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:24:25 mgmt2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:24:25 mgmt1 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:19:34 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294967295' 2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 cmf-fw1.challenger.com Features changed: 'build1167' -> 'build1547' 2017-12-28 09:09:27 cmf-fw1.challenger.com Version changed: 'v5.4.7' -> 'v5.6.3' 2017-12-28 09:09:27 cmf-fw1.challenger.com Device rebooted: after 20h 59m 24s

On Wed, Jan 31, 2018 at 9:13 AM, Adam Armstrong adama@memetic.org wrote:

...
This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

Sent from BlueMail http://www.bluemail.me/r?b=11870 On 31 Jan 2018, at 14:12, Scott Benninger sbenninger@gmail.com wrote:

...
The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647 <(214)%20748-3647>' -> '4294901759'

Thanks!

Scott

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/ cgi-bin/mailman/listinfo/observium

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Mike Stupalov

5:35 p.m.

New subject: Log full of Interface Speed change messages for Fortigate 600D cluster

Hi Scott,

anyway you should write to vendor support about incorrect reported speed on interfaces.

ifHighSpeed == ifSpeed / 1000

Seems as here write ifSpeed into ifHighSpeed directly (without dividing by 1000).

In you case 4294967295 mean 4Tbit/s, which impossible at 2018 year ;)

...

Scott Benninger mailto:sbenninger@gmail.com 31 January 2018 at 19:01 Thanks Adam! That did the trick.

I will report to Fortigate but as you mention it will most likely not change anything.

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium Adam Armstrong mailto:adama@observium.org 31 January 2018 at 18:35 I see, this idiot device is returning an abnormally large number for ifHighSpeed, the first I've seen return the max unsigned value ( our db table is expecting the signed version to be max).

This is probably a vendor bug, you can report it to them but they will ignore you because none of them care.

I've changed the field to be UNSIGNED, the next commit will fix it, or you can run:

ALTER TABLE `ports` CHANGE `ifHighSpeed` `ifHighSpeed` INT UNSIGNED NULL DEFAULT NULL;

adam. _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium Scott Benninger mailto:sbenninger@gmail.com 31 January 2018 at 18:25 Not sure what info you would like from me. I went back in the log and the same messages posted have been repeated ~157K times. Every poll there is an event for each interface on the FGT (18 interfaces total). They started right after the upgrade to 5.6.3 on the cluster on Dec 28th and have not stopped flooding the logs. I would like to prevent them from continuing.

To prevent these logs or correct the issue would it be a fix on the Fortigate side or the Observium side? Any more diagnostic info that I can provide?

I have restarted the SNMP services on the FGT as well as disabled/enabled the SNMP agent and the events continue every polling cycle. Many of the ports are not even in use. If you think this is a Fortigate Issue I will contact support.

2017-12-28 09:29:24 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:24 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:29:23 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:29:23 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:24:25 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:24:25 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:19:34 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:19:34 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port8 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port7 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port6 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port5 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port4 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port3 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 port2 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2017-12-28 09:14:36 mgmt2 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:14:36 mgmt1 Interface changed: [ifHighSpeed] '2147483647' -> '4294967295' 2017-12-28 09:09:27 port18 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port17 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port14 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port13 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port12 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port11 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port10 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port8 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port7 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port6 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port5 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port4 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port3 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 port2 Interface changed: [ifSpeed] '0' -> '4294901759000000'; [ifHighSpeed] '0' -> '4294901759'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt2 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 mgmt1 Interface changed: [ifSpeed] '0' -> '4294967295000000'; [ifHighSpeed] '0' -> '4294967295'; [ifLastChange] '2017-12-27 12:05:13' -> '2017-12-28 09:07:56' 2017-12-28 09:09:27 cmf-fw1.challenger.com http://cmf-fw1.challenger.com Features changed: 'build1167' -> 'build1547' 2017-12-28 09:09:27 cmf-fw1.challenger.com http://cmf-fw1.challenger.com Version changed: 'v5.4.7' -> 'v5.6.3' 2017-12-28 09:09:27 cmf-fw1.challenger.com http://cmf-fw1.challenger.com Device rebooted: after 20h 59m 24s

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium Adam Armstrong mailto:adama@memetic.org 31 January 2018 at 17:13 This log entry isn't actually all that useful. Useful would be the changes made to a single port over a period of time.

Adam.

Sent from BlueMail http://www.bluemail.me/r?b=11870 _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium Scott Benninger mailto:sbenninger@gmail.com 31 January 2018 at 17:12 The event log for our FGT600D is full of many thousands of messages like below. All the same speeds etc but for each port over and over. I have several FGT60E's as well on the same level of OS but they do not have the same events. The 600D is in a A/P cluster. Not sure what I need to do to prevent the messages? Any suggestions?

Hardware FortiGate 600D Operating system Fortinet Fortigate v5.6.3 (build1547)

OB version 17.6.8672

2018-01-31 08:59:35 port18 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port17 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port14 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port13 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port12 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port11 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759' 2018-01-31 08:59:35 port10 Interface changed: [ifHighSpeed] '2147483647' -> '4294901759'

Thanks!

Scott _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

-- Mike Stupalov Observium Limited, http://observium.org

2644

Age (days ago)

2644

Last active (days ago)

List overview

Download

5 comments

4 participants

tags (0)

participants (4)

Adam Armstrong
Adam Armstrong
Mike Stupalov
Scott Benninger