SNMP Traps in Nagios

Ton Voon ton.voon at altinity.com
Fri Mar 24 12:25:26 CET 2006


Sorin,

Snmptt doesn't understand the Cisco MIBs. I think when snmptt is  
first installed, it imports all the default mibs, but if you add any  
new ones into /usr/share/snmp/mibs, you need to load it into SNMPTT  
as well.

We evaluated Snmptt and this was our major issue with it. We've  
decided on a different approach where we leave snmptrapd to do the  
mib translations and have provided a CPAN module to help. You can  
read about our design here: http://altinity.blogs.com/dotorg/2006/03/ 
lessons_in_snmp.html

Ton


On 14 Mar 2006, at 16:10, Sorin VALCU wrote:

> Hello
>
>
>
> I’m trying to use SNMP Traps in Nagios.
>
>
>
> The SNMP Traps are collected by snmptrapd that passes them to  
> snmptthandler and then to snmptt.
>
> Snmptt (via an EXEC command) writes a service status notification  
> in the nagios.cmd file.
>
>
>
> The problem is that snmptt can not translate the traps received  
> from a cisco catalyst.
>
>
>
> All OID’s in the snmptt.conf file are all numeric values.
>
> All the cisco mibs (snmp v1) are present in the /usr/share/snmp/ 
> mibs/ directory.
>
> There is no snmp.conf file.
>
>
>
> Here is the output from the snmptt.debug file.
>
>
>
> Thank you for your help
>
>
>
>
>
> Sorin V
>
>
>
>
>
>
>
>
>
>
>
> Processing file: #snmptt-trap-1142269412443608
>
> Reading trap.  Current time: Mon Mar 12 11:00:00 2006
>
> Symbolic trap variable name detected (SNMPv2-MIB::sysUpTime.0).   
> Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-MIB::snmpTrapOID.0).   
> Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.2.9.3.1.1.4.1).  Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (TCP-MIB::tcpConnState. 
> 172.18.36.31.80.172.18.36.50.3399).  Will attempt to translate to a  
> numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399).  Will attempt to  
> translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399).  Will attempt to  
> translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399).  Will attempt to  
> translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.2.9.2.1.18.4).  Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMP-COMMUNITY- 
> MIB::snmpTrapAddress.0).  Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMP-COMMUNITY- 
> MIB::snmpTrapCommunity.0).  Will attempt to translate to a  
> numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2- 
> MIB::snmpTrapEnterprise.0).  Will attempt to translate to a  
> numerical OID
>
>   Could not translate - will leave as-is
>
>
>
>
>
> Items passed from snmptrapd:
>
> value 0: testcisco
>
>
>
> value 1: 123.123.123.123
>
>
>
> value 2: SNMPv2-MIB::sysUpTime.0
>
>
>
> value 3: 0:5:49:22.74
>
>
>
> value 4: SNMPv2-MIB::snmpTrapOID.0
>
>
>
> value 5: SNMPv2-SMI::enterprises.9.0.1
>
>
>
> value 6: SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1
>
>
>
> value 7: 5
>
>
>
> value 8: TCP-MIB::tcpConnState.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 9: established
>
>
>
> value 10: SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 11: 0:0:00:01.48
>
>
>
> value 12: SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 13: 470
>
>
>
> value 14: SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 15: 5343
>
>
>
> value 16: SNMPv2-SMI::enterprises.9.2.9.2.1.18.4
>
>
>
> value 17:
>
>
>
> value 18: SNMP-COMMUNITY-MIB::snmpTrapAddress.0
>
>
>
> value 19: 123.123.123.123
>
>
>
> value 20: SNMP-COMMUNITY-MIB::snmpTrapCommunity.0
>
>
>
> value 21: public
>
>
>
> value 22: SNMPv2-MIB::snmpTrapEnterprise.0
>
>
>
> value 23: SNMPv2-SMI::enterprises.9
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises. 
> 9.0.1).  Will attempt to translate to a numerical OID
>
>   Could not translate - will leave as-is
>
>
>
> Agent IP address was blank, so setting to the same as the host IP  
> address of 123.123.123.123
>
>
>
> Agent IP address (123.123.123.123) is the same as the host IP, so  
> copying the host name: testcisco
>
>
>
> Trap received from comm4e-droite.lotsys.corp: SNMPv2- 
> SMI::enterprises.9.0.1
>
> 0:          hostname
>
> 1:          ip address
>
> 2:          uptime
>
> 3:          trapname / OID
>
> 4:          ip address from trap agent
>
> 5:          trap community string
>
> 6:          enterprise
>
> 0+:         passed variables
>
>
>
> Value 0: testcisco
>
>
>
> Value 1: 123.123.123.123
>
>
>
> Value 2: 0:5:49:22.74
>
>
>
> Value 3: SNMPv2-SMI::enterprises.9.0.1
>
>
>
> Value 4: 123.123.123.123
>
>
>
> Value 5:
>
>
>
> Value 6:
>
>
>
> Agent dns name: testcisco
>
>
>
> Ent Value 0 ($1): SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1=5
>
>
>
> Ent Value 1 ($2): TCP-MIB::tcpConnState. 
> 172.18.36.31.80.172.18.36.50.3399=established
>
>
>
> Ent Value 2 ($3): SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399=0:0:00:01.48
>
>
>
> Ent Value 3 ($4): SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399=470
>
>
>
> Ent Value 4 ($5): SNMPv2-SMI::enterprises. 
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399=5343
>
>
>
> Ent Value 5 ($6): SNMPv2-SMI::enterprises.9.2.9.2.1.18.4=
>
>
>
> Ent Value 6 ($7): SNMP-COMMUNITY-MIB::snmpTrapAddress. 
> 0=123.123.123.123
>
>
>
> Ent Value 7 ($8): SNMP-COMMUNITY-MIB::snmpTrapCommunity.0=public
>
>
>
> Ent Value 8 ($9): SNMPv2-MIB::snmpTrapEnterprise.0=SNMPv2- 
> SMI::enterprises.9
>
>
>
> Exact match of trap NOT found in EVENT hash table
>
>
>
> Looking for wildcards in the EVENT hash table
>
> Drilling down looking for wildcards in the EVENT hash table
>
> SNMPv2-SMI::enterprises.9.0.*
>
>
>
> Drilling down looking for wildcards in the EVENT hash table
>
> SNMPv2-SMI::enterprises.9.*
>
>
>
> Trap not defined...
>
>
>
>
>
> This message has been scanned for viruses by MailController.
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060324/228c0115/attachment.html>


More information about the Users mailing list