Hmm. Well, rulesets muddy the waters somewhat . You see they work
differently on NT. What nvcord does when an event would be forwarded by a
ruleset is re-issue it again, this time with a correlation id in var 1,
and all the other vars moved up one (the old var 1 becomes var 2, var 2
becomes var 3, and so on). But the example you showed, both the
correlated one, the one with 1000 as the first var, and the original one
are bad.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
Karl PrinelleElyzium <karl_prinelle_elyzium@yahoo.co.uk>
02/05/2003 10:14 AM
To: James Shanks/Raleigh/IBM@IBMUS
cc:
Subject: Re: [nv-l] unknown trap?
James,
Will do. It's not something that a ruleset could do to the trap is it?
I've got the forwardall.rs active while I initally set it up - the source
in the event shows the ruleset name as forwardall.rs, but from looking at
that rule I think I'm grasping at rather thin straws..
I've now re-installed 713 without the fixpack and it's doing the same
thing. Maybe it's the cabletron switches that are here - then again I'm
getting the same traps from the netview machine itself and a bunch of
printers.
Ta
K
James Shanks <jshanks@us.ibm.com> wrote:
Karl -
I think you need to contact Support about this.
I've not seen anything like it before, but it appears to be just what you
identified it as -- a NetView internal trap ( 50790400 or NodeMarginal)
which is somehow being sent with a bad enterprise id. That's why it is
unformatted -- because the enterprise id is wrong and trapd doesn't see
it as a NetView trap. You could, of course, just modify trapd.conf with
Trap Settings and add such a trap definition, but that just masks the
problem.
At this point I don't know what else to say, because based on what I know
about the how the code works, I don't see how this can happen and not have
the entire product messed up. All the NetView daemons use the same code
to generate events, so how one could have it wrong, and just for this
trap, baffles me. And NodeMarginal is sent by netmon, so ! you'd expect
he'd either have it right or have all his others wrong, too. That's why
I'd talk to Support.
Sorely puzzled.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
Karl PrinelleElyzium
02/05/2003 06:55 AM
To: nv-l
cc:
Subject: [nv-l] unknown trap?
Hi list,
nv 7.1.3 + fixpack1, w2k.
I've noticed that I'm getting the following trap from various devices. The
enterprise starts with 0 though & I didn't think this was possible. Is it
some form of internal netview trap? If so, then why is it unformatted? A
little confused by this one... It says it's netview6000 - but I can't see
what it's telling me?!
I think I'm having one of those days....;-)
K
EFAULT FMT: .0.3.6.1.4.1.2.6.3 (0.3.6.1.4.1.2.6.3) generic:6
specific:50790400 args(5):
[! 1] enterprises.ibm.ibmProd.netView6000.1.1.2.0 (Integer): 1000
[2] enterprises.ibm.ibmProd.netView6000.1.1.3.0 (OctetString): fqdn>
[3] enterprises.ibm.ibmProd.netView6000.1.1.4.0 (OctetString): DEFAULT
FMT: .0.3.6.1.4.1.2.6.3 (0.3.6.1.4.1.2.6.3) generic:6 specific:50790400
args(8):
[1] enterprises.ibm.ibmProd.netView6000.1.1.2.0 (Integer): 2
[2] enterprises.ibm.ibmProd.netView6000.1.1.3.0 (OctetString): fqdn>
[3] enterprises.ibm.ibmProd.netView6000.1.1.4.0 (OctetString): Node
marginal.
[4] enterprises.ibm.ibmProd.netView6000.1.1.5.0 (OctetString): 1044445494
388
[5] enterprises.ibm.ibmProd.netView6000.1.1.6.0 (OctetString): openview
[6] enterprises.ibm.ibmProd.netView6000.1.
[4] enterprises.ibm.ibmProd.netView6000.1.1.5.0 (OctetString):
[5] enterprises.ibm.ibmProd.netView6000.1.1.6.0 (OctetString):
With Yahoo! Mail you can get a bigger mailbox -- choose a s! ize that fits
your needs
!
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits
your needs
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|