SNMP Traps in Nagios
Ton Voon
ton.voon at altinity.com
Fri Mar 24 12:25:26 CET 2006
Sorin,
Snmptt doesn't understand the Cisco MIBs. I think when snmptt is
first installed, it imports all the default mibs, but if you add any
new ones into /usr/share/snmp/mibs, you need to load it into SNMPTT
as well.
We evaluated Snmptt and this was our major issue with it. We've
decided on a different approach where we leave snmptrapd to do the
mib translations and have provided a CPAN module to help. You can
read about our design here: http://altinity.blogs.com/dotorg/2006/03/
lessons_in_snmp.html
Ton
On 14 Mar 2006, at 16:10, Sorin VALCU wrote:
> Hello
>
>
>
> I’m trying to use SNMP Traps in Nagios.
>
>
>
> The SNMP Traps are collected by snmptrapd that passes them to
> snmptthandler and then to snmptt.
>
> Snmptt (via an EXEC command) writes a service status notification
> in the nagios.cmd file.
>
>
>
> The problem is that snmptt can not translate the traps received
> from a cisco catalyst.
>
>
>
> All OID’s in the snmptt.conf file are all numeric values.
>
> All the cisco mibs (snmp v1) are present in the /usr/share/snmp/
> mibs/ directory.
>
> There is no snmp.conf file.
>
>
>
> Here is the output from the snmptt.debug file.
>
>
>
> Thank you for your help
>
>
>
>
>
> Sorin V
>
>
>
>
>
>
>
>
>
>
>
> Processing file: #snmptt-trap-1142269412443608
>
> Reading trap. Current time: Mon Mar 12 11:00:00 2006
>
> Symbolic trap variable name detected (SNMPv2-MIB::sysUpTime.0).
> Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-MIB::snmpTrapOID.0).
> Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.2.9.3.1.1.4.1). Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (TCP-MIB::tcpConnState.
> 172.18.36.31.80.172.18.36.50.3399). Will attempt to translate to a
> numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399). Will attempt to
> translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399). Will attempt to
> translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399). Will attempt to
> translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.2.9.2.1.18.4). Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMP-COMMUNITY-
> MIB::snmpTrapAddress.0). Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMP-COMMUNITY-
> MIB::snmpTrapCommunity.0). Will attempt to translate to a
> numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Symbolic trap variable name detected (SNMPv2-
> MIB::snmpTrapEnterprise.0). Will attempt to translate to a
> numerical OID
>
> Could not translate - will leave as-is
>
>
>
>
>
> Items passed from snmptrapd:
>
> value 0: testcisco
>
>
>
> value 1: 123.123.123.123
>
>
>
> value 2: SNMPv2-MIB::sysUpTime.0
>
>
>
> value 3: 0:5:49:22.74
>
>
>
> value 4: SNMPv2-MIB::snmpTrapOID.0
>
>
>
> value 5: SNMPv2-SMI::enterprises.9.0.1
>
>
>
> value 6: SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1
>
>
>
> value 7: 5
>
>
>
> value 8: TCP-MIB::tcpConnState.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 9: established
>
>
>
> value 10: SNMPv2-SMI::enterprises.
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 11: 0:0:00:01.48
>
>
>
> value 12: SNMPv2-SMI::enterprises.
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 13: 470
>
>
>
> value 14: SNMPv2-SMI::enterprises.
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399
>
>
>
> value 15: 5343
>
>
>
> value 16: SNMPv2-SMI::enterprises.9.2.9.2.1.18.4
>
>
>
> value 17:
>
>
>
> value 18: SNMP-COMMUNITY-MIB::snmpTrapAddress.0
>
>
>
> value 19: 123.123.123.123
>
>
>
> value 20: SNMP-COMMUNITY-MIB::snmpTrapCommunity.0
>
>
>
> value 21: public
>
>
>
> value 22: SNMPv2-MIB::snmpTrapEnterprise.0
>
>
>
> value 23: SNMPv2-SMI::enterprises.9
>
>
>
> Symbolic trap variable name detected (SNMPv2-SMI::enterprises.
> 9.0.1). Will attempt to translate to a numerical OID
>
> Could not translate - will leave as-is
>
>
>
> Agent IP address was blank, so setting to the same as the host IP
> address of 123.123.123.123
>
>
>
> Agent IP address (123.123.123.123) is the same as the host IP, so
> copying the host name: testcisco
>
>
>
> Trap received from comm4e-droite.lotsys.corp: SNMPv2-
> SMI::enterprises.9.0.1
>
> 0: hostname
>
> 1: ip address
>
> 2: uptime
>
> 3: trapname / OID
>
> 4: ip address from trap agent
>
> 5: trap community string
>
> 6: enterprise
>
> 0+: passed variables
>
>
>
> Value 0: testcisco
>
>
>
> Value 1: 123.123.123.123
>
>
>
> Value 2: 0:5:49:22.74
>
>
>
> Value 3: SNMPv2-SMI::enterprises.9.0.1
>
>
>
> Value 4: 123.123.123.123
>
>
>
> Value 5:
>
>
>
> Value 6:
>
>
>
> Agent dns name: testcisco
>
>
>
> Ent Value 0 ($1): SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1=5
>
>
>
> Ent Value 1 ($2): TCP-MIB::tcpConnState.
> 172.18.36.31.80.172.18.36.50.3399=established
>
>
>
> Ent Value 2 ($3): SNMPv2-SMI::enterprises.
> 9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399=0:0:00:01.48
>
>
>
> Ent Value 3 ($4): SNMPv2-SMI::enterprises.
> 9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399=470
>
>
>
> Ent Value 4 ($5): SNMPv2-SMI::enterprises.
> 9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399=5343
>
>
>
> Ent Value 5 ($6): SNMPv2-SMI::enterprises.9.2.9.2.1.18.4=
>
>
>
> Ent Value 6 ($7): SNMP-COMMUNITY-MIB::snmpTrapAddress.
> 0=123.123.123.123
>
>
>
> Ent Value 7 ($8): SNMP-COMMUNITY-MIB::snmpTrapCommunity.0=public
>
>
>
> Ent Value 8 ($9): SNMPv2-MIB::snmpTrapEnterprise.0=SNMPv2-
> SMI::enterprises.9
>
>
>
> Exact match of trap NOT found in EVENT hash table
>
>
>
> Looking for wildcards in the EVENT hash table
>
> Drilling down looking for wildcards in the EVENT hash table
>
> SNMPv2-SMI::enterprises.9.0.*
>
>
>
> Drilling down looking for wildcards in the EVENT hash table
>
> SNMPv2-SMI::enterprises.9.*
>
>
>
> Trap not defined...
>
>
>
>
>
> This message has been scanned for viruses by MailController.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060324/228c0115/attachment.html>
More information about the Users
mailing list