Well, you can basically ignore the "pid -1" because that would only be
valid or useful if the trapd were from a source on the same box as NetView.
The "source A" says this is an agent trap. See the man page for trapd.conf
for more source characters.
Basically this message by itself does not help you identify the trap which
is invalid. You would have to do more work to do for that. You can go to
63.167.43.254 and look there if it has some kind of a log which might tell
you, or you would have to do some tracing. You can set trapd to run with
the -x option (dump all packets in hex) and toggle the trace on with the
command "trapd -T" from the command line. This will give you a
trapd.trace file containing hex dumps of all traps received. You can match
that up with the time stamp and the agent address from trapd.log. ut you
are going to have to wait for this to occur again to get the data. Not a
very user-friendly process.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
Stephen Elliott <selliott@epicrealm.com> on 11/02/2000 11:42:52 AM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
To: "'nv-l@tkg.com'" <nv-l@tkg.com>
cc: (bcc: James Shanks/Tivoli Systems)
Subject: [NV-L] trapd.log Message
Config: NetView 6.0.1 on Solaris 2.6.
All,
I'm seeing the fiollowing message in trapd.log and can't interpret the end,
'source A pid 1. Anyone have an idea what it means?
T WARNING: invalid SNMPTrap packet from agent 63.167.43.254 source A pid -1
Regards,
Steve Elliott
Sr. Network Mgmt. Engineer
epicRealm, Inc.
214-570-4560
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|