We have a server running 2k3 with two NICs, one with 1 IP and the other with 3. 80-90% of the time, SNMP works fine between our monitor server and this server. However, every so often this server will randomly respond to SNMP requests with the wrong IP address.
An example Wireshark log might show:
SNMP request sent to x.x.x.200, reply from x.x.x.200
SNMP request sent to x.x.x.200, reply from x.x.x.200
SNMP request sent to x.x.x.200, reply from x.x.x.200
SNMP request sent to x.x.x.200, reply from x.x.x.201
SNMP request sent to x.x.x.200, reply from x.x.x.201
SNMP request sent to x.x.x.200, reply from x.x.x.200
This leads to false positives and alerts on our server monitor. I have monitored both interfaces on the server in question and correlated the erroneous responses with our down alerts in our monitor.
This issue is similar to these other forum threads I've found:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/f93f4ac1-1d6e-456d-8469-412d4866b61a/snmp-replies-are-sent-from-wrong-ip-address?forum=winserverNIS
http://thwack.solarwinds.com/thread/36009
This appears to be an instance of a known bug in later versions of Windows, for which there is a hotfix ( http://support.microsoft.com/kb/2786454 ). However, the hotfix does not apply to Server 2003.
Does anyone know of a hotfix or update for Server 2003 that addresses this issue? Or is there a way to reconfigure the system to overcome this issue?
Thanks!