TWSD-1540:APV Squid logs are getting forwarded as SNMP traps |WBSDC|AS-28450
Review Request #1449 — Created March 18, 2026 and updated
| Information | |
|---|---|
| mmiriam | |
| APV10 | |
| rel_10_7 | |
| TWSD-1540 | |
| Reviewers | |
| ngurunathan, pradeep, tanya | |
TWSD-1540:APV Squid logs are getting forwarded as SNMP traps |WBSDC|AS-28450
testcase1:Warning for potential log flooding if log level is set higher than ERR
AN(config)#snmp traps loglevel info
Warning: Configuring SNMP trap loglevel other than err is not recommended and might impact performance
=========================================================================================
testcase2: Check for specific module IDs to prevent logging for non-system logs
AN#sh run snmpsnmp configuration
snmp community "public"
snmp contact ""
snmp location ""
snmp host 192.168.162.239 3 "snmptest"
snmp host 192.168.162.137 3 "snmptest1"
snmp auth 192.168.162.239 "123456" "XXXXXXXXX3MSAKA1KYEX5DPuknEYwNA==" authNopriv "" 162 "MD5"
snmp auth 192.168.162.137 "123456" "XXXXXXXXX3MSAKA1KYEX5DPuknEYwNA==" authNopriv "" 162 "MD5"
snmp enable traps
snmp traps loglevel info
snmp v3user "snmptest" "XXXXXXXXX3MSAKA1KYEX5DPuknEYwNA==" authNopriv "" "MD5"
snmp v3user "snmptest1" "XXXXXXXXX3MSAKA1KYEX5DPuknEYwNA==" authNopriv "" "MD5"
snmp ipcontrol off
snmp on defaultAN#sh log b b
start of buffer
INFO 2026 Mar 10 14:35:31 AN_SQUID_LOG 1773153331.791 1 192.168.162.239 TCP_MISS/200 1061 GET / - DIRECT/192.168.162.89 -
INFO 2026 Mar 10 14:35:30 AN_SQUID_LOG 1773153330.914 2 192.168.162.239 TCP_MISS/200 1061 GET / - DIRECT/192.168.162.89 -
INFO 2026 Mar 10 14:25:07 user array CLI level change: CONFIG-->ENABLE by CLI.
INFO 2026 Mar 10 14:19:24 AN_SQUID_LOG 1773152364.642 3 192.168.162.239 TCP_MISS/200 1061 GET / - DIRECT/192.168.162.89 -
INFO 2026 Mar 10 14:19:15 user array CLI level change: ENABLE-->CONFIG by CLI.
INFO 2026 Mar 10 14:16:05 user login from webui level change: ENABLE-->LOG.
INFO 2026 Mar 10 14:16:05 user login from webui level change: CONFIG-->ENABLE.
INFO 2026 Mar 10 14:16:04 user login from webui level change: ENABLE-->CONFIG.
INFO 2026 Mar 10 14:16:04 user login from webui level change: USER-->ENABLE.
INFO 2026 Mar 10 14:16:04 user login from webui level change: LOG-->USER.
INFO 2026 Mar 10 14:15:44 user login from webui level change: ENABLE-->LOG.
INFO 2026 Mar 10 14:15:44 user login from webui level change: CONFIG-->ENABLE.
INFO 2026 Mar 10 14:15:44 user login from webui level change: ENABLE-->CONFIG.
==========================================================================================
In vAPV 162.137 which is the host : After fix it is not showing squid logsAN(config)#debug trace live tcp port2 "port 162"
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on dpdk1, link-type EN10MB (Ethernet), capture size 50000 bytes11:56:43.567154 IP 192.168.162.201.162 > 192.168.162.137.162: F=a U=snmptest1 E = 0x120x340x56 C= V2Trap(198) .1.3.6.1.2.1.1.3.0=1666083 .1.3.6.1.6.3.1.1.4.1.0 =.1.3.6.1.4.1.7564.24.3.1 .1.3.6.1.6.3.1.1.4.3.0=.1.3.6.1.4.1.7564.24.3.1 .1.3.6 .1.4.1.7564.24.2.2.1.2=6 .1.3.6.1.4.1.7564.24.2.2.1.3="2026 Mar 09 08:46:31 user login from webui level change: LOG-->USER."
12:02:59.872515 IP 192.168.162.201.162 > 192.168.162.137.162: F=a U=snmptest1 E = 0x120x340x56 C= V2Trap(201) .1.3.6.1.2.1.1.3.0=1666922 .1.3.6.1.6.3.1.1.4.1.0 =.1.3.6.1.4.1.7564.24.3.1 .1.3.6.1.6.3.1.1.4.3.0=.1.3.6.1.4.1.7564.24.3.1 .1.3.6 .1.4.1.7564.24.2.2.1.2=6 .1.3.6.1.4.1.7564.24.2.2.1.3="2026 Mar 09 08:46:40 user login from webui level change: USER-->ENABLE."
=====================================================================================================
With bug we were able to see squid logs in host device:
AN(config)#debug trace live tcp port2 "port 162"
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on dpdk1, link-type EN10MB (Ethernet), capture size 50000 bytes
11:00:00.253748 IP 192.168.162.201.162 > 192.168.162.137.162: F=a U=snmptest1 E= 0x120x340x56 C= V2Trap(249) .1.3.6.1.2.1.1.3.0=17821520 .1.3.6.1.6.3.1.1.4.1.0=.1.3.6.1.4.1.7564.24.3.3 .1.3.6.1.6.3.1.1.4.3.0=.1.3.6.1.4.1.7564.24.3.3 .1.3.6.1.4.1.7564.24.2.2.1.2=6 .1.3.6.1.4.1.7564.24.2.2.1.3="2026 Feb 20 07:56:09 AN_SQUID_LOG 1771574169.413 189 192.168.162.239 TCP_MISS/200 983 GET / - DIRECT/192.168.162.156 -"