The problem is the standard "authentication trap" defined by SNMP, which is
perfectly valid to send in response to a bad community string, is defined
as generic type 4, specific 0, and has no variables. So most vendors do
not send their own trap but that one instead. Cisco has started sending
its own unique version of this trap, which includes variables, one of which
is the offending party's address. So all the vendors who don't are
following the standard, and Cisco, trying to be useful, "violates" it.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
"Les Dickert" <lesdickert@hotmail.com> on 09/27/2000 05:29:52 PM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
To: nv-l@tkg.com
cc: (bcc: James Shanks/Tivoli Systems)
Subject: Re: [NV-L] Authentication Problem
I think trapd truncates the message it puts
in trapd.log (at least on my system), so if
you look in trapd.log for these messages, you
miss a very important piece of information:
who is pounding the complaining device with
all those "Incorrect Community Names" ? If
you go to the Event Viewer screen, find the
event message, double click on it, you'll see
the full message, and at the tail end of it
should be the offending party's IP address or name.
Cisco routers report this info, NT servers don't.
Not sure about other devices, but try, maybe
you'll be lucky.
Have I been here before.....?
Les
>From: "Thomas Kunz" <t-kunz@admin.ndis.umn.edu>
>Reply-To: IBM NetView Discussion <nv-l@tkg.com>
>To: <nv-l@tkg.com>
>Subject: [NV-L] Authentication Problem
>Date: Wed, 27 Sep 2000 12:51:44 -0500
>
>Hello
>
>We have NetView 5.1.2, AIX 4.3.1 and Framework 3.6.1.
>Every day at 12:30 A.M. we get the following error message in trapd.log.
>How can I find out where it is coming from?
>Also what do the numbers at the front of the message mean?
>
>970032625 4 Wed Sep 27 00:30:25 2000 luminere.pts.umn.edu A IBM
>Incorrect Community Name (authenticationFailure Trap)
>
>Thanks in advance.
>
>
>Thanks and have a great day! :-)
>Tom Kunz
>OIT/PTS Network & AIX Systems Support
>University of Minnesota
>1300 S. 2nd St.
>Mpls., MN. 55454-1083
>Suite 660
>Phone: 612-624-8086
>Fax: 612-626-1332
>Email: t-kunz@cafe.tc.umn.edu
>
>
>
>**************************************************************************
>This e-mail and its attachments have been scanned for viruses.
>NDIS/ADCS University of Minnesota
>**************************************************************************
>_________________________________________________________________________
>NV-L List information and Archives: http://www.tkg.com/nv-l
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|