nv-l
[Top] [All Lists]

Re: [nv-l] unknown trap?

To: Karl PrinelleElyzium <karl_prinelle_elyzium@yahoo.co.uk>
Subject: Re: [nv-l] unknown trap?
From: James Shanks <jshanks@us.ibm.com>
Date: Wed, 5 Feb 2003 10:51:13 -0500
Cc: nv-l@lists.tivoli.com
Delivered-to: mailing list nv-l@lists.tivoli.com
Delivery-date: Wed, 05 Feb 2003 16:28:04 +0000
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
List-help: <mailto:nv-l-help@lists.tivoli.com>
List-post: <mailto:nv-l@lists.tivoli.com>
List-subscribe: <mailto:nv-l-subscribe@lists.tivoli.com>
List-unsubscribe: <mailto:nv-l-unsubscribe@lists.tivoli.com>
Mailing-list: contact nv-l-help@lists.tivoli.com; run by ezmlm
Hmm.  Well, rulesets muddy the waters somewhat .  You see they work 
differently on NT.  What nvcord does when an event would be forwarded by a 
ruleset is re-issue it again, this time with a correlation id in var 1, 
and all the other vars moved up one (the old var 1 becomes var 2, var 2 
becomes var 3, and so on).  But the example you showed, both the 
correlated one, the one with 1000 as the first var, and the original one 
are bad. 

 

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group




Karl PrinelleElyzium <karl_prinelle_elyzium@yahoo.co.uk>
02/05/2003 10:14 AM

 
        To:     James Shanks/Raleigh/IBM@IBMUS
        cc: 
        Subject:        Re: [nv-l] unknown trap?



James, 
Will do.  It's not something that a ruleset could do to the trap is it? 
I've got the forwardall.rs active while I initally set it up - the source 
in the event shows the ruleset name as forwardall.rs, but from looking at 
that rule I think I'm grasping at rather thin straws.. 
I've now re-installed 713 without the fixpack and it's doing the same 
thing.  Maybe it's the cabletron switches that are here - then again I'm 
getting the same traps from the netview machine itself and a bunch of 
printers. 
Ta 
K 
 
 James Shanks <jshanks@us.ibm.com> wrote: 
Karl -
I think you need to contact Support about this.

I've not seen anything like it before, but it appears to be just what you 
identified it as -- a NetView internal trap ( 50790400 or NodeMarginal) 
which is somehow being sent with a bad enterprise id. That's why it is 
unformatted -- because the enterprise id is wrong and trapd doesn't see 
it as a NetView trap. You could, of course, just modify trapd.conf with 
Trap Settings and add such a trap definition, but that just masks the 
problem. 

At this point I don't know what else to say, because based on what I know 
about the how the code works, I don't see how this can happen and not have 

the entire product messed up. All the NetView daemons use the same code 
to generate events, so how one could have it wrong, and just for this 
trap, baffles me. And NodeMarginal is sent by netmon, so ! you'd expect 
he'd either have it right or have all his others wrong, too. That's why 
I'd talk to Support.

Sorely puzzled.


James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group




Karl PrinelleElyzium 
02/05/2003 06:55 AM


To: nv-l 
cc: 
Subject: [nv-l] unknown trap?



Hi list,
nv 7.1.3 + fixpack1, w2k.
I've noticed that I'm getting the following trap from various devices. The 

enterprise starts with 0 though & I didn't think this was possible. Is it 
some form of internal netview trap? If so, then why is it unformatted? A 
little confused by this one... It says it's netview6000 - but I can't see 
what it's telling me?!
I think I'm having one of those days....;-)
K

EFAULT FMT: .0.3.6.1.4.1.2.6.3 (0.3.6.1.4.1.2.6.3) generic:6 
specific:50790400 args(5):
[! 1] enterprises.ibm.ibmProd.netView6000.1.1.2.0 (Integer): 1000
[2] enterprises.ibm.ibmProd.netView6000.1.1.3.0 (OctetString): fqdn>
[3] enterprises.ibm.ibmProd.netView6000.1.1.4.0 (OctetString): DEFAULT 
FMT: .0.3.6.1.4.1.2.6.3 (0.3.6.1.4.1.2.6.3) generic:6 specific:50790400 
args(8):
[1] enterprises.ibm.ibmProd.netView6000.1.1.2.0 (Integer): 2
[2] enterprises.ibm.ibmProd.netView6000.1.1.3.0 (OctetString): fqdn>
[3] enterprises.ibm.ibmProd.netView6000.1.1.4.0 (OctetString): Node 
marginal.
[4] enterprises.ibm.ibmProd.netView6000.1.1.5.0 (OctetString): 1044445494 
388
[5] enterprises.ibm.ibmProd.netView6000.1.1.6.0 (OctetString): openview
[6] enterprises.ibm.ibmProd.netView6000.1.
[4] enterprises.ibm.ibmProd.netView6000.1.1.5.0 (OctetString): 
[5] enterprises.ibm.ibmProd.netView6000.1.1.6.0 (OctetString): 

With Yahoo! Mail you can get a bigger mailbox -- choose a s! ize that fits 

your needs
! 


---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)

With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits 
your needs



---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)


<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web