This is a very strange situation if it is true. Are you sure these are
real traps and not sent by some script?
Network devices cannot just send traps. They have to be configured to
send a trap specifically to a certain address. Somebody had to know that
the address of your NetView was the address of a trap receiver. How did
they come upon that information?
Furthermore, these devices have to be connected to your network somehow.
Do you not have a corporate firewall? Most of those prohibit SNMP
traffic both coming in and going out. And it is more interesting when you
say that you cannot ping them. traps are unsolicited udp datagrams. They
follow the same pathways as ICMP (ping). So if you cannot ping the
sender, then someone is blocking your pings somewhere. That would
indicate to me that you have a network/router group elsewhere which has
configured a router to block them. Is that the case here? I would
contact them and ask them to reconfigure the boxes not to send you traps.
That is the best solution. Then you don't waste time, energy, computer
cycles, and precious network bandwidth, dealing with traps you don't want
to see anyway.
Basically your options in NetView are limited. You can configure
trapd.conf so that trapd will just log the traps and that will get rid of
the message you see. You could also configure them so that trapd would
neither log nor display them, just throw them away, but that is dangerous
because you could wind up with a trap storm and never see any evidence but
poor performance. The only other thing you could do would be to install
and MLM and set it up so that he forwards all traps to NetView except
those you don't want to see.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"DePhillips, Frank" <fdephillips@McLeodUSA.com>
03/14/2003 12:15 PM
To: "'nv-l@lists.tivoli.com'" <nv-l@lists.tivoli.com>
cc:
Subject: [nv-l] unknown devices reporting to Netview
I have three devices not on are network space that are trying to send
traps to netview. I can not ping these devices but get many alarms
stating trap found with no known format in trap.conf. Any ideas on how to
best filter them from the alarms?
Thanks
Frank DePhillips
NOTICE: This electronic mail transmission may contain confidential
information and is intended only for the person(s) named. Any use,
copying or disclosure by any other person is strictly prohibited. If you
have received this transmission in error, please notify the sender via
e-mail.
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|