Skip to content

docs: stop claiming neo has never answered SNMP - #24

Merged
Gerrrt merged 1 commit into
mainfrom
fix/neo-diagnosis-correction
Aug 19, 2026
Merged

docs: stop claiming neo has never answered SNMP#24
Gerrrt merged 1 commit into
mainfrom
fix/neo-diagnosis-correction

Conversation

@Gerrrt

@Gerrrt Gerrrt commented Aug 19, 2026

Copy link
Copy Markdown
Owner

Corrects an overstatement introduced in #23.

What changed

#23 asserted neo "has never answered an SNMP poll at all" in SECURITY.md,
docs/security.md, docs/roadmap.md and README.md. The evidence behind it
was max_over_time(up{job="snmp",instance="10.7.7.2"}[30d]) == 0.

That measured retention, not the device. All four SNMP targets carry ~23,127
samples and their series begin together — the TSDB has no SNMP data from before
the current stack was built, so a zero across the window says nothing about
what the switch did earlier. It in fact last polled successfully in November
2025, under a hand-tuned minimal module.

The corrected claim is narrower and still supports keeping #9 open: neo is not
answering now, and has not for the entire span of available data. Whether it
still accepts the leaked community remains unknown.

Blast radius

None — documentation only.

  • No change to network segmentation or firewall rules
  • No new port published to a VLAN that could not already reach the service
  • No credential added outside secrets/*.sops.yaml

Verification

./scripts/validate.sh — all checks pass. markdownlint-cli2 via npx, 0 issues.

  • make validate passes
  • Deployed to the lab and confirmed working — n/a, docs only
  • Docs updated

Refs #9, #22

It has. #23 wrote "never answered an SNMP poll at all" into four files on the
strength of max_over_time(up{instance="10.7.7.2"}[30d]) == 0. That measured
Prometheus retention, not the device: all four SNMP series carry ~23,127
samples and begin together when the current stack was built, so the TSDB holds
no SNMP data from before that point and the window cannot speak to it.

The switch last polled successfully in November 2025, under a hand-tuned
minimal module. What is true is narrower and still enough to keep #9 open:
neo is not answering now, and has not for the whole span of available data.

Also records the sharper reading of the ICMP/TCP-pass, UDP-fail split — that
is what a wedged SNMP agent looks like, not a dead device.

Refs #9, #22

Co-Authored-By: Claude Opus 5 <[email protected]>
@Gerrrt
Gerrrt merged commit ae335b6 into main Aug 19, 2026
3 checks passed
@Gerrrt
Gerrrt deleted the fix/neo-diagnosis-correction branch August 19, 2026 01:45
Gerrrt added a commit that referenced this pull request Aug 19, 2026
docs: stop claiming neo has never answered SNMP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant