I had that trap at lat week's customer, but only periodically, maybe
at new node discovery time, and only for 4 workstations that were
dhcp and whose names did not resolve properly - that is, one
of the addresses resolved and the other did not, and the name
did not resolve at all. I excluded them from discovery. Also, I
did not have to format the trap. It was already in there.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
I did use the GUI to add the event. I didn't have any trouble
decifering the trap. These traps are not generated by the devices
which are lexmark printers. It's generated by Netview, I actually
unmanaged the printers, but the error is still showing up on my box. I
thought if they are unmanaged, these traps shouldn't event pop on the
event browser. I did look in the DNS, looks like there are two ip
address with the same DNS entry. Then I walked the system mib, and
they are clearly different printers.
What occurs to me seems like Netview or one of its processes (trapd,
snmpcollect, etc) is doing constant nslookup against all of the objects
(managed and unmanaged) in its database, and pop up a message when it
sees a duplicate name in the DNS. If this is the case, I may just put
them in the seed file not to discover and wait until the DNS gets
cleared up.
Xu He
--- James Shanks <James_Shanks@TIVOLI.COM> wrote:
> >> I looked in trapd.conf, there wasn't an
> entry for it, so I manually put one in there, and
> set to log only
>
> Did you edit trapd.conf or use the GUI to add this
> trap def? If you just
> edit (very risky anyway - if you mess it up, trapd
> won't restart) then you
> must stop and restart trapd to pick up the change,
> or issue this from the
> command line: event -e FMTCHG
> Ultimately, though you are going to have to fix the
> problem at its source -
> DNS -- unless you just want the logs to fill up too.
>
> James Shanks
> Tivoli (NetView for UNIX) L3 Support
>
>
>
> Xu He <xuhe@YAHOO.COM> on 05/21/99 09:34:09 AM
>
> Please respond to Discussion of IBM NetView and
> POLYCENTER Manager on
> NetView <NV-L@UCSBVM.UCSB.EDU>
>
> To: NV-L@UCSBVM.UCSB.EDU
> cc: (bcc: James Shanks/Tivoli Systems)
> Subject: Trap flooding event browser in NT 5.1
>
>
>
>
>
> Good day everyone,
>
> I have encountered a very weird problem with a
> particular event in the
> event browser. I am getting flooded with this trap,
> about 4 a second
> from five machines. My event log size is set to
> 15000 events, and it's
> getting filled up every few hours, and I am not seen
> any of the
> important events. I connected to the database, and
> the only events in
> there are these events. The trap is 58982415, the
> message is as:
>
> Nameserver returned duplicate name
> xxx.xx.xxx.xxx (172.25.67.237) for address
> 172.25.71.237; interface
> 172.25.71.237 will be deleted.
>
> I did a nslookup on the name, and it had two address
> assigned to it.
> These devices looks like printers, and have may have
> a loop back
> address assigned to them. I looked in trapd.conf,
> there wasn't an
> entry for it, so I manually put one in there, and
> set to log only, but
> it's still been stored in the event database and all
> the message are
> getting purged every few hours.
>
> Has anyone seen this problem? I am running NT 5.1
> version of netview.
> What can i do to the message ignoree completely.
>
> Thanks
> Xu He
> Network Solutions, Inc.
>
>
>
> _____________________________________________________________
> Do You Yahoo!?
> Free instant messaging and more at
> http://messenger.yahoo.com
>
_____________________________________________________________
Do You Yahoo!?
Free instant messaging and more at http://messenger.yahoo.com
|