Hello, I don'd think you can selectively turn off this particular trap at
the source without turning off all traps, which you probably don't want to
do. What you might want to do is go to the Cisco web site a look for
"traps.script" (I think thats the name) which will add all the Cisco trap
definitions to trapd.conf for you. You may then configure for "log only" or
whatever. Leslie has already explained the "unknown source". Finally, the 6
varbinds for this particular trap are:
1) tsLineSesType
2) tcpConnState
3) loctcpConnElapsed
4) loctcpConnInBytes
5) loctcpConnOutBytes
6) tsLineUser
Blaine Owens
Eastman Chemical Company
Phone - (423)-229-3579
Fax - (423)-229-1188
bowens@eastman.com
> -----Original Message-----
> From: Gord Michaels [SMTP:gord_michaels@HOTMAIL.COM]
> Sent: Wednesday, May 19, 1999 5:58 PM
> To: NV-L@UCSBVM.ucsb.edu
> Subject: Re: Trap help....
>
> Thanks,
>
> I am new to the Cisco side of things. Is this the standard format for a
> Cisco trap, it seems like something is wrong?? Why is the source unknown?
> What information can I get from the six variable bindings to turn it off
> at
> the source or is the Specific # all need?
>
> Any info appreciated.
>
> Gord.
>
> >From: "Owens, Blaine C" <bowens@EASTMAN.COM>
> >Reply-To: Discussion of IBM NetView and POLYCENTER Manager on NetView
> > <NV-L@UCSBVM.ucsb.edu>
> >To: NV-L@UCSBVM.ucsb.edu
> >Subject: Re: Trap help....
> >Date: Wed, 19 May 1999 15:28:52 -0400
> >
> >This is Cisco specific trap #1 - TCP Connection Closed. Somebody did a
> >telnet to d2d5.gov.bc.ca and then logged off.
> >
> >Blaine Owens
> >Eastman Chemical Company
> >Phone - (423)-229-3579
> >Fax - (423)-229-1188
> >bowens@eastman.com
> >
> > > -----Original Message-----
> > > From: Gord Michaels [SMTP:gord_michaels@HOTMAIL.COM]
> > > Sent: Wednesday, May 19, 1999 12:20 PM
> > > To: NV-L@UCSBVM.ucsb.edu
> > > Subject: Trap help....
> > >
> > > Hello All.
> > >
> > > I am receiving a trap from a Cisco router which has "Source not known
> >(u).
> > > As a result, it does not look like a normal trap and I do not really
> >know
> > > how to interpret it. Basically, I want to turn this trap off at the
> > > source,
> > > but what info can I extract from this trap and provide to my Cisco gut
> >in
> > > order for him to do this ??
> > >
> > > Here is the trap...
> > >
> > > DESCRIPTION: Tue May 19 09:38:41 1999 d2d5.gov.bc.ca u Trap: generic 6
> > > specific 1 args (6) :
> > > [1] private.enterprises.9.2.9.3.1.1.2.1 (Integer) : 5
> > > [2] tcpConnState.162.25.254.21.27138.162.26.254.22.23 (Integer) : 8
> > > [3] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Ticks) : 4101
> > > [4] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Integer) : 2779
> > > [5] 9.2.6.1.1.5.162.25.254.21.27138.162.26.254.22.23 (Integer) : 106
> > > [6] private.enterprises.9.2.9.2.1.18.2 (OctetString) :
> > > NOTES :
> > > INFO :
> > > HOSTNAME : d2d5.gov.bc.ca
> > > ENTERPRISE : cisco 1.3.6.1.4.1.9
> > > GENERIC : 6
> > > SPECIFIC : 1
> > > LOGGEDTIME : 05/19/99 09:38:41
> > > SEVERITY : Indeterminate
> > > CATEGORY : Status Events
> > > SOURCE : Source not known (u)
> > >
> > > Any help/info interpreting this trap appreciated.
> > >
> > > Sincerely,
> > >
> > > Gord Michaels.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ______________________________________________________
> > > Get Your Private, Free Email at http://www.hotmail.com
>
>
> ______________________________________________________
> Get Your Private, Free Email at http://www.hotmail.com
|