NetView 5.1.0 for AIX 4.2.1.0
I would like to monitor whenever there is a configuration change done to a
Cisco router or switch.
A technician from Cisco System suggested that the following commands
"snmp-server enable traps config" and "snmp-server host <ip address>
<community string> " would generate and send a trap to the specified host
<ip address>.
After implementing the above commands, I tested a router and noticed the
syslog file had the following entries:
SNMP: Queuing packet to 10.1.39.137
SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 128.201.200.2, gentrap 6,
spectrap1
ccmHistoryEventEntry.3.148 = 1
ccmHistoryEventEntry.4.148 = 2
ccmHistoryEventEntry.5.148 = 3
SNMP: Packet sent via UDP to 10.1.39.137
SNMP: Packet received via UDP from 128.3.10.137 on Serial0
SNMP: Queuing packet to 10.1.39.137
SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 128.201.200.2, gentrap 6,
spectrap1
ccmHistoryEventEntry.3.149 = 2
ccmHistoryEventEntry.4.149 = 3
ccmHistoryEventEntry.5.149 = 6
SNMP: Response, reqid 11, errstat 0, erridx 0
lsystem.55.128.1.10.137 =
19990612032621-b184-dm-2511-1.network.mptn.org.cfg
NetView event workspace displayed the following traps from the router:
931809864 11 Mon Jul 12 16:04:24 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809892 11 Mon Jul 12 16:04:52 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809925 11 Mon Jul 12 16:05:25 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809951 11 Mon Jul 12 16:05:51 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
Any ideas why this is happening?
|