nv-l
[Top] [All Lists]

RE: [nv-l] Windows Server 2003 MIBS?

To: "Bursik, Scott {PBSG}" <Scott.Bursik@pbsg.com>, nv-l@lists.tivoli.com
Subject: RE: [nv-l] Windows Server 2003 MIBS?
From: "Stringfellow, William" <William.Stringfellow@bankofamerica.com>
Date: Wed, 02 Apr 2003 17:49:38 -0800
Delivered-to: mailing list nv-l@lists.tivoli.com
Delivery-date: Thu, 03 Apr 2003 13:20:07 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
List-help: <mailto:nv-l-help@lists.tivoli.com>
List-post: <mailto:nv-l@lists.tivoli.com>
List-subscribe: <mailto:nv-l-subscribe@lists.tivoli.com>
List-unsubscribe: <mailto:nv-l-unsubscribe@lists.tivoli.com>
Mailing-list: contact nv-l-help@lists.tivoli.com; run by ezmlm
Thread-index: AcL5SsJ5U+w4yNLwSBi1v5HtsyV6PwANb+Qg
Thread-topic: [nv-l] Windows Server 2003 MIBS?
Scott,
        The messages you are seeing are being created by the ENTERPRISES MIB 
entry in trapd.conf.
        Netview interprets as much as it can of an oid, and in this case, can 
not get beyond the ENTERPRISE definition, so he gives you the OID values.  

iso(1). org(3). dod(6). internet(1). private(4). enterprises(1). 
microsoft(311). software(1). systems(1). os(3). windowsNT(1). server(2)

        This would tell me that your system does not have a definition for 
Microsoft nor for any of its subsets.

        If you find and load the Microsoft MIB, or just create an entry for the 
1.3.6.1.4.1.311.1.1.3.1.2 entry it will start giving you meaningful output.
        You should have a couple of lines of data that look like the following:

1049151669 3  Mon Mar 31 23:01:09 2003 <ip address>            ? Trap found 
with no known format in trapd.conf(4)
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  Enterprise 
cabletron (1.3.6.1.4.1.52) community xxxxxx
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  generic 
trap:6 specific trap:548
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  Timestamp:1 
168787400 Agentaddr:<ip address> args(3):
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  [1] 
cabletron.mibs.ctron.ctPhysical.chassis.5.1.1.3 (Integer): 3
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  [2] 
tRingPortGrpEntry.tRingPortGrpId.3 (Integer): 1
1049151669 3  Mon Mar 31 23:01:09 2003  <ip address>            ?  [3] 
tRingPortMgmtEntry.tRingPortMgmtPortId.3.14 (Integer): 14

        This one has a definition for cabletron, but no definition for the 
specific 548 trap.  Notice the 4th line gives the source address of the trap 
and the number of arguments being sent (3) and then the next 3 lines give the 
arguments in order, marked with a [1], [2], [3].

        I would look up the definition for the 548 trap and create an entry 
that inserted the 3 arguments into a trap message that would make sense to a 
NOC operator.

        You need to do the same thing in your event/trap definitions for your 
Microsoft traps, starting with the Enterprise definition for Microsoft 
{Enterprise 311} and working down.

        Good luck,
        Bill 


Please update my e-mail address in your address book !

###################################################
Bill Stringfellow
EDS
Network Management Support

Office:     925.692.7283
Fax:        925.675.1763
Email:      william.stringfellow@eds.com
Pager:      877.647.8086
ePage:      8776478086@skytel.com
###################################################

-----Original Message-----
From: Bursik, Scott {PBSG} [mailto:Scott.Bursik@pbsg.com]
Sent: Wednesday, April 02, 2003 11:04 AM
To: Stringfellow, William; nv-l@lists.tivoli.com
Subject: RE: [nv-l] Windows Server 2003 MIBS?


I should have been more descriptive in my post. I am getting the following
message in my trapd.log:

? Agent Up with Possible Changes (coldStart Trap) enterprise:ENTERPRISES
(1.3.6.1.4.1.311.1.1.3.1.2) args(0):

And for 

? Agent Interface Up (linkUp Trap) enterprise:ENTERPRISES
(1.3.6.1.4.1.311.1.1.3.1.2) args(1): 



Scott Bursik
Pepsico Business Solutions Group
Event Systems Management
972-334-3757
scott.bursik@pbsg.com
 

-----Original Message-----
From: Stringfellow, William [mailto:William.Stringfellow@bankofamericacom] 
Sent: Wednesday, April 02, 2003 12:50 PM
To: Bursik, Scott {PBSG}; nv-l@lists.tivoli.com
Subject: RE: [nv-l] Windows Server 2003 MIBS?

Scott,
        This is the Microsoft server MIB, msft.mib.  For any information on
MIBS, go to MIB Central and you can search on the oid.

        http://www.mibdepot.com/index.shtml

                Hope this helps,
                        Bill

Please update my e-mail address in your address book !

###################################################
Bill Stringfellow
EDS
Network Management Support

Office:     925.692.7283
Fax:        925.675.1763
Email:      william.stringfellow@eds.com
Pager:      877.647.8086
ePage:      8776478086@skytel.com
###################################################

-----Original Message-----
From: Bursik, Scott {PBSG} [mailto:Scott.Bursik@pbsg.com]
Sent: Wednesday, April 02, 2003 9:50 AM
To: nv-l@lists.tivoli.com
Subject: [nv-l] Windows Server 2003 MIBS?


I have a Windows 2003 server up on the network and I have a question. I have
traps set to come in from the server to my AIX 4.3.3 NetView 6.0.3. Here is
the trap coming in.

.1.3.6.1.4.1.311.1.1.3.1.2

I know I am probably missing something easy here, but they come through as
not defined in trapd.conf and I am not sure what MIB I need here?

Scott Bursik
Pepsico Business Solutions Group
Event Systems Management
972-334-3757
scott.bursik@pbsg.com
 


---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)

---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)


<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web