Repeated MAC change entries in event log

Help
1

I am seeing repeated messages in the eventlog for one of my servers concerning MAC address changes for a virtual bridge. vmbr1 in that case, connects to some virtual machines running on that host. The strange thing is, that it the values are always the same (old & new address).

vmbr1 MAC change: 78.46.xxx.xxx : f2:56:42:d2:aa:aa -> 8a:7b:4f:46:bb:bb

Looking at the timestamps I guess it is connected with device discovery, which runs from the following cronjob:
33 */6 * * * librenms /opt/librenms/discovery.php -h all >> /dev/null 2>&1

  • 2017-07-12 00:35:18
  • 2017-07-12 06:35:07
  • 2017-07-12 12:35:10
  • 2017-07-12 18:35:05

SNMP port association mode is set to ifIndex.

2

@florianbeer You probably have a bad entry stuck in your database. You might need to delete it manually.

3

Oh no! Gotta get rid of those bad entries!

I will investigate. :face_with_monocle:
Thanks for the pointer!

4

Those values aren’t the same though as an FYI.

5

Both values stay the same each time the line is logged, that’s what I meant. It doesn’t change back and forth.

6

If you run a debug, look at the mysql query in it and try and run it (or check logs/librenms.log for mysql errors).