This is standard format (that is, verbose) for traps that have not been defined
to Netview. The source is an internal netview notion, as in which component of
netview generated the trap. If configured, the source would be A, for Agent, as
in
it came from an snmp agent on a device, as oposed to n for netmon. The
Generic/Specific numbers should be enough to let you find it in the Cisco
documentation, although this one is well known by the name tcpconnectclose.
Most cisco devices are very flexible about which events they send, and you
should be able to configure that one to be off. UNLESS you are getting lots and
lots of them, in which case they may be a symptom of a problem, which you will
want to fix. For instance, I saved this helpful response:
>I've had this problem before when migrating from rsrb to dlsw. The source of
>the problem was a leftover source-bridge remote-peer statement in the cisco
>config (with no matching peer statement on the remote router).
>If you query the mib2 tcpConnTable for the routers in question, you should see
>the ip addresses that are the source of the trouble. (You may need to issue
>the query several times to see which connections keep opening and closing.)
>Hope that helps...
>Mike Flood
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Thanks,
I am new to the Cisco side of things. Is this the standard format for a
Cisco trap, it seems like something is wrong?? Why is the source unknown?
What information can I get from the six variable bindings to turn it off at
the source or is the Specific # all need?
Any info appreciated.
Gord.
>From: "Owens, Blaine C" <bowens@EASTMAN.COM>
>Reply-To: Discussion of IBM NetView and POLYCENTER Manager on NetView
> <NV-L@UCSBVM.ucsb.edu>
>To: NV-L@UCSBVM.ucsb.edu
>Subject: Re: Trap help....
>Date: Wed, 19 May 1999 15:28:52 -0400
>
>This is Cisco specific trap #1 - TCP Connection Closed. Somebody did a
>telnet to d2d5.gov.bc.ca and then logged off.
>
>Blaine Owens
>Eastman Chemical Company
>Phone - (423)-229-3579
>Fax - (423)-229-1188
>bowens@eastman.com
>
> > -----Original Message-----
> > From: Gord Michaels [SMTP:gord_michaels@HOTMAIL.COM]
> > Sent: Wednesday, May 19, 1999 12:20 PM
> > To: NV-L@UCSBVM.ucsb.edu
> > Subject: Trap help....
> >
> > Hello All.
> >
> > I am receiving a trap from a Cisco router which has "Source not known
>(u).
> > As a result, it does not look like a normal trap and I do not really
>know
> > how to interpret it. Basically, I want to turn this trap off at the
> > source,
> > but what info can I extract from this trap and provide to my Cisco gut
>in
> > order for him to do this ??
> >
> > Here is the trap...
> >
> > DESCRIPTION: Tue May 19 09:38:41 1999 d2d5.gov.bc.ca u Trap: generic 6
> > specific 1 args (6) :
> > [1] private.enterprises.9.2.9.3.1.1.2.1 (Integer) : 5
> > [2] tcpConnState.162.25.254.21.27138.162.26.254.22.23 (Integer) : 8
> > [3] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Ticks) : 4101
> > [4] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Integer) : 2779
> > [5] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Integer) : 106
> > [6] private.enterprises.9.2.9.2.1.18.2 (OctetString) :
> > NOTES :
> > INFO :
> > HOSTNAME : d2d5.gov.bc.ca
> > ENTERPRISE : cisco 1.3.6.1.4.1.9
> > GENERIC : 6
> > SPECIFIC : 1
> > LOGGEDTIME : 05/19/99 09:38:41
> > SEVERITY : Indeterminate
> > CATEGORY : Status Events
> > SOURCE : Source not known (u)
> >
> > Any help/info interpreting this trap appreciated.
> >
> > Sincerely,
> >
> > Gord Michaels.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > ______________________________________________________
> > Get Your Private, Free Email at http://www.hotmail.com
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
|