fix(snmp): close SnmpEngine after each poll to stop fd leak

A fresh SnmpEngine() was created on every poll_device() call and never
closed. pysnmp opens a UDP transport socket per engine and doesn't release
it on GC, so each scheduler tick (default 60s, per device) leaked a file
descriptor. Over hours of polling the process hit its fd ceiling and the
listening socket could no longer accept connections — OSError: [Errno 24]
Too many open files on socket.accept(), locking up the app.

Wrap the engine in try/finally and release its transport socket via a new
_close_engine() helper that probes both pysnmp API shapes (6.2.x lextudio
camelCase, canonical 7.x snake_case); all close paths are best-effort so a
failed close never breaks the poll loop. Regression tests cover both shapes
and the never-raises contract.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

plugins/snmp/poller.py

@@ -28,6 +28,44 @@ def _mp_model(version: str) -> int:
     return 0 if version == "1" else 1
 
 
+def _close_engine(engine) -> None:
+    """Release the engine's UDP transport socket.
+
+    pysnmp opens a UDP socket per ``SnmpEngine`` and never closes it on its own.
+    Since we build a fresh engine for every poll, an unclosed engine leaks one
+    file descriptor each scheduler tick; over hours of polling that exhausts the
+    process fd limit (``OSError: [Errno 24] Too many open files``), which also
+    takes down the app's listening socket. So close it explicitly here.
+
+    The close method/attribute names differ across pysnmp majors (6.2.x lextudio
+    is camelCase, canonical 7.x is snake_case), so probe for whatever exists.
+    All paths are best-effort — a failed close must never break the poll loop.
+    """
+    # 7.x exposes a convenience close directly on the engine.
+    for meth in ("close_dispatcher", "closeDispatcher"):
+        fn = getattr(engine, meth, None)
+        if callable(fn):
+            try:
+                fn()
+            except Exception:
+                pass
+            return
+    # 6.2.x: go through the transport dispatcher.
+    for attr in ("transport_dispatcher", "transportDispatcher"):
+        dispatcher = getattr(engine, attr, None)
+        if dispatcher is None:
+            continue
+        for meth in ("close_dispatcher", "closeDispatcher"):
+            fn = getattr(dispatcher, meth, None)
+            if callable(fn):
+                try:
+                    fn()
+                except Exception:
+                    pass
+                return
+        return
+
+
 async def poll_device(
     host: str,
     port: int,
@@ -81,49 +119,53 @@ async def poll_device(
 
     engine = SnmpEngine()
 
-    # Same host/port for every OID on this device, so build the transport once.
+    # Always release the engine's UDP socket — see _close_engine for why.
     try:
-        if _transport_is_async:
-            transport = await UdpTransportTarget.create((host, port), timeout=5, retries=1)
-        else:
-            transport = UdpTransportTarget((host, port), timeout=5, retries=1)
-    except Exception as exc:
-        logger.debug("SNMP transport setup failed for %s:%s: %s", host, port, exc)
-        return {}
-
-    results: dict[str, float] = {}
-
-    for oid_cfg in oids:
-        oid = oid_cfg["oid"]
-        label = oid_cfg.get("label") or oid
-        scale = float(oid_cfg.get("scale", 1.0))
-
+        # Same host/port for every OID on this device, so build the transport once.
         try:
-            error_indication, error_status, error_index, var_binds = await _get_cmd(
-                engine,
-                CommunityData(community, mpModel=_mp_model(version)),
-                transport,
-                ContextData(),
-                ObjectType(ObjectIdentity(oid)),
-            )
+            if _transport_is_async:
+                transport = await UdpTransportTarget.create((host, port), timeout=5, retries=1)
+            else:
+                transport = UdpTransportTarget((host, port), timeout=5, retries=1)
         except Exception as exc:
-            logger.debug("SNMP GET %s@%s OID %s failed: %s", host, port, oid, exc)
-            continue
+            logger.debug("SNMP transport setup failed for %s:%s: %s", host, port, exc)
+            return {}
 
-        if error_indication:
-            logger.debug("SNMP error %s@%s OID %s: %s", host, port, oid, error_indication)
-            continue
-        if error_status:
-            logger.debug("SNMP status %s@%s OID %s: %s at %s",
-                         host, port, oid, error_status.prettyPrint(),
-                         error_index and var_binds[int(error_index) - 1][0] or "?")
-            continue
+        results: dict[str, float] = {}
+
+        for oid_cfg in oids:
+            oid = oid_cfg["oid"]
+            label = oid_cfg.get("label") or oid
+            scale = float(oid_cfg.get("scale", 1.0))
 
-        for _, val in var_binds:
             try:
-                results[label] = float(val) * scale
-            except (TypeError, ValueError):
-                # Non-numeric type (e.g. OctetString description) — skip.
-                logger.debug("SNMP non-numeric value for %s label=%s: %r", oid, label, val)
+                error_indication, error_status, error_index, var_binds = await _get_cmd(
+                    engine,
+                    CommunityData(community, mpModel=_mp_model(version)),
+                    transport,
+                    ContextData(),
+                    ObjectType(ObjectIdentity(oid)),
+                )
+            except Exception as exc:
+                logger.debug("SNMP GET %s@%s OID %s failed: %s", host, port, oid, exc)
+                continue
 
-    return results
+            if error_indication:
+                logger.debug("SNMP error %s@%s OID %s: %s", host, port, oid, error_indication)
+                continue
+            if error_status:
+                logger.debug("SNMP status %s@%s OID %s: %s at %s",
+                             host, port, oid, error_status.prettyPrint(),
+                             error_index and var_binds[int(error_index) - 1][0] or "?")
+                continue
+
+            for _, val in var_binds:
+                try:
+                    results[label] = float(val) * scale
+                except (TypeError, ValueError):
+                    # Non-numeric type (e.g. OctetString description) — skip.
+                    logger.debug("SNMP non-numeric value for %s label=%s: %r", oid, label, val)
+
+        return results
+    finally:
+        _close_engine(engine)