I've tracked down a problem with SNMP status polling to a point where I find outbound data packets are diagnosed by TCPDUMP to have bad UDP checksums.  TCPDUMP gives me "ChicagOps-doenet.snmp: bad udp cksum 9aa1!] ". 

The question is where the checksum is originated.  Assuming the following path for the packet:

NIC Card ß tcpdump ß IP Layer ß UDP Layer ß SNMP manager ß netmon

I would expect the checksum to originate before it hits the UDP layer.  Can anyone identify if it's Netmon or the net-SNMP code which creates that checksum. 

The result is that we get a false failure for the total ChicagOps-doenet node and cannot recover the node unless we do a demand poll.  Quicktest does not work.  Pinging the interfaces will work but the node will fail on the next poll. 

The system is NetView 7.1.4 FP02 executing on SUSE Linux 9.   It does not happen on a Solaris 2.8 with NetView 7.1.3. 

My gratitude to anyone who can answer this one. 

Bill Evans

Tivoli NetView Support for DOE

301-903-0057