Changing to Ignore does nothing to reduce the work load on trapd. It just
suppresses logging which is the last thing that is done. 90% of the work
still remains, and worse yet, trapd is not processing your important traps
while he is busy dealing with the trash, so everything is delayed.
Your only solution to this problem if you cannot reduce the flow is to
implement an MLM as a trap receiver, and have him forward to NetView only
what you deem important. Use him to filter what trapd gets. If you are
careful you can implement them both on the same box by changing the ports
trapd listens to.
Doesn't your management care about the wasted bandwidth and denial of
service to your real users that floods of worthless traps cause? That kind
of argument is usually more persuasive.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
"Gavin Newman" <NEWMANGJ@banksa.com.au>@tkg.com on 05/03/2001 03:27:06 AM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
Sent by: owner-nv-l@tkg.com
To: <nv-l@tkg.com>
cc:
Subject: [NV-L] Netview trap load
Hi again
Still chasing up why my Netview system is missing events due to excessive
traps coming in. I am trying to get the Netware "gurus" to stop sending me
non-important traps (120,000+ per day!) but its hard work getting it done
as there are so many servers out there.
I have a large number of traps defined in my trapd.conf file as "Ignore
Events" so I don't really know how many of these Netview is having to
process and was intending to set them to be "Log Only Events" to try and
get a handle on this, the question that arises is how much processing does
Netview have to do for and "Ignore Events" trap? Does it pass these by the
rules engine etc or are they dropped very early in the process?
Will I make my system even worse by logging thes traps?
Cheers - Gavin Newman
**********************************************************************
***** IMPORTANT INFORMATION *****
This document should be read only by those persons to whom
it is addressed and its content is not intended for use by
any other persons. If you have received this message in
error, please notify us immediately. Please also destroy and
delete the message from your computer. Any unauthorised form
of reproduction of this message is strictly prohibited.
Bank SA is not liable for the proper and complete transmission
of the information contained in this communication, nor for any
delay in its receipt.
**********************************************************************
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|