Tip for AIX-users.
There's a fine utility called tcpdump.
It's worth checking out (man tcpdump), e.g.
/usr/sbin/tcpdump -I port 162
gives a good picture on your trap situation
(and much more if you are interested...)
Regards, Ralph.
iT-AUSTRIA / OE2100 / WPNM
Tel (mobil) 0664 1908469
Tel (iT-A) 21717 58948
FAX (iT-A) 21717 58979
Mailto:Ralph.Schiffinger@erstebank.at
> -----Ursprüngliche Nachricht-----
> Von: James Shanks [SMTP:James_Shanks@TIVOLI.COM]
> Gesendet am: Dienstag, 14. Dezember 1999 14:54
> An: NV-L@UCSBVM.ucsb.edu
> Betreff: Re: NetView Daemons
>
> I recommend you call Support and open a problem.
>
>
> How many rulesets are you running? How fast are the traps arriving? You
> can
> get an idea of that from the trapd log, and then the nvcorrd logs will
> show how
> fast the traps are being processed. How far behind is the event display?
> Did
> you have a trap storm? A name resolution problem?
> These are all issues someone will need to look at.
>
> James Shanks
> Tivoli (NetView for UNIX) L3 Support
>
>
>
> John Severs <John.Severs@NESTLEGB.NESTLE.COM> on 12/14/99 04:49:29 AM
>
> Please respond to Discussion of IBM NetView and POLYCENTER Manager on
> NetView
> <NV-L@UCSBVM.UCSB.EDU>
>
> To: NV-L@UCSBVM.UCSB.EDU
> cc: (bcc: James Shanks/Tivoli Systems)
> Subject: Re: NetView Daemons
>
>
>
>
> We are having the same problem, i.e. netstat shows a large queue for
> nvcorrd
> but we aren't running any ese automation. I have started running nvcdebug
> to
> try and find out what is going on but the nvcorrd alog and blog keep
> switching every 30 seconds or so. Does anyone know how to increase the
> size
> of the nvcorrd log ?
>
> John Severs
>
> -----Original Message-----
> From: James Shanks [mailto:James_Shanks@TIVOLI.COM]
> Sent: Monday, December 13, 1999 4:07 PM
> To: NV-L@UCSBVM.ucsb.edu
> Subject: Re: NetView Daemons
>
>
>
>
> Then that is your problem. Putting the standard forwardall.rs in
> ESE.automation
> serves no purpose. Rulesets in ESE.automation are run by actionsvr in the
> background. But he has no display to display the traps that forwardall.rs
> is
> sending to him, so they just fill up his socket, until he can accept no
> more,
> and then nvcorrd's socket fills up because he cannot send any, and then
> they
> both hang.
>
> Remove forwardall.rs from ESE.automation and recycle nvcorrd and actionsvr
> and
> your problem will disappear.
> What are you attempting to do by putting forwardall.rs in ESE.automation
>
> James Shanks
> Tivoli (NetView for UNIX) L3 Support
>
>
>
> BAUDOUX BERNARD <bernard.baudoux@FORTISBANK.COM> on 12/13/99 10:59:40 AM
>
> Please respond to Discussion of IBM NetView and POLYCENTER Manager on
> NetView
> <NV-L@UCSBVM.UCSB.EDU>
>
> To: NV-L@UCSBVM.UCSB.EDU
> cc: (bcc: James Shanks/Tivoli Systems)
> Subject: Re: NetView Daemons
>
>
>
>
> Yes indeed, nvcorrd has more than 32000 Send-Q and Recv-Q
>
> I use the default ruleset (forwardall.rs)
>
> Bernard.
>
>
> > -----Original Message-----
> > From: James Shanks [SMTP:James_Shanks@TIVOLI.COM]
> > Sent: lundi 13 d
|