nv-l
[Top] [All Lists]

Re: [nv-l] trapd.log

To: nv-l@lists.tivoli.com
Subject: Re: [nv-l] trapd.log
From: Leslie Clark <lclark@us.ibm.com>
Date: Sun, 20 Jul 2003 10:29:40 -0400
Delivered-to: mailing list nv-l@lists.tivoli.com
Delivery-date: Sun, 20 Jul 2003 15:31:24 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
List-help: <mailto:nv-l-help@lists.tivoli.com>
List-post: <mailto:nv-l@lists.tivoli.com>
List-subscribe: <mailto:nv-l-subscribe@lists.tivoli.com>
List-unsubscribe: <mailto:nv-l-unsubscribe@lists.tivoli.com>
Mailing-list: contact nv-l-help@lists.tivoli.com; run by ezmlm



I have a guess. That label  Vlanxxx is only a label. They may be different
interfaces. I usually go into trap configuration and add $4 to the format
for the interface events so I can see the address of the interface
involved. (This is especially helpful in finding the interfaces that get
moved from machine to machine every time netmon restarts or does a config
poll.)

Cordially,

Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Detroit



                                                                       
                      James                                            
                      Shanks/Raleigh/IB        To:       nv-l@lists.tivoli.com
                      M@IBMUS                  cc:                     
                                               Subject:  Re: [nv-l] trapd.log
                      07/19/2003 09:39                                 
                      AM                                               
                                                                       
                                                                       








Well, basically, there is no code in trapd which would allow him to log a
trap twice.  If you are seeing two, then you are getting two.  The question
is, why?  MLM traps do not have the same format as NetView ones and usually
you do not see them in an event window as they are "Log Only" by default.
If you do get a trap from MLM, it is usually suppressed and the
corresponding netmon trap is issues by netmon instead.  So these could be
the result of having two MLMs monitoring the same device.  That should not
happen if you have only one MLM  because netmon should not be issuing a
trap on his own if MLM is monitoring the interface. The timestamps are the
time the trap is received by trapd, and they resolve to seconds, so it is
entirely possible to have two the same.   So, could you have two MLMs
monitoring the same thing?  Could you have another NetView forwarding traps
to this one?

You might find it useful to get a trapd trace.  To get a full hex dump of
the incoming traps so you can see what they are, make sure trapd is running
with the -x option.  If he is not, then you'll have to add that and restart
him.  Then you can toggle the trace on and off again as you please with
"trapd -T" from the command line.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group



                      "Colson, Donna"

                      <Donna.Colson@ssa        To:
nv-l@lists.tivoli.com
                      .gov>                    cc:

                                               Subject:  [nv-l] trapd.log

                      07/18/03 03:57 PM







Netview 7.1.3 AIX 4.3.3





I am seeing duplicates of Interface traps coming into trapd.log at the
exact same time.  For example:


1058557645 3  Fri Jul 18 15:47:25 2003 routername N Interface Vlanxxx down.


1058557645 3  Fri Jul 18 15:47:25 2003 routername N Interface Vlanxxx down.





Does this mean that Netview is receiving the trap twice?  (Possibly once
from MLM and then directly from the device itself.)  However, if this is
the case why the exact same time stamp?


Any help is appreciated.







---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)





---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)


<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web