Ray -
fic_unix_12.fic.com is the name of the box that Steve used in the sample
event he posted.
It is not a web site. It is the name of host in his network. What I am
saying is that you turn on the snmpd trace in the host that is sending the
authentication failure traps and the trace on that box will tell you who is
doing it.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
"Westphal, Raymond" <RWestphal@erac.com>@tkg.com on 07/03/2001 07:25:08 AM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
Sent by: owner-nv-l@tkg.com
To: "NV List (E-mail)" <nv-l@tkg.com>
cc:
Subject: [NV-L] authentication failure traps
Hello James.
Can you clarify the message below? I cannot access the site you mention in
the note.
While we have determined the source of the error, we cannot determine the
cause.
TIA.
Ray Westphal.
----- Original Message -----
From: "James Shanks" <SHANKS@us.tivoli.com>
To: "IBM NetView Discussion" <nv-l@tkg.com>
Sent: Monday, July 02, 2001 12:12 PM
Subject: Re: [NV-L] Need MIB
> This is the standard AIX "authentication failure trap" You get this
every
> time some SNMP agent queries the box with an invalid community name.
> To find out more info you need to proceed to fic_unix_12.fic.com and
edit
> /etc/snmpd.conf and turn on the trace (logging level=3). When it happens
> again you can see who is doing it, and with what community string, in the
> trace file.
>
> I have never heard of an IBM Agent MIB. As far as I know, the snmpd
agent
> in AIX responds only to MIB-II.
>
>
> James Shanks
> Team Leader, Level 3 Support
> Tivoli NetView for UNIX and NT
>
>
> "Stamper, Steve" <Steve_Stamper@foremost.com>@tkg.com on 07/02/2001
> 12:55:37 PM
>
> Please respond to IBM NetView Discussion <nv-l@tkg.com>
>
> Sent by: owner-nv-l@tkg.com
>
>
> To: "'IBM NetView Discussion'" <nv-l@tkg.com>
> cc:
> Subject: [NV-L] Need MIB
>
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|