Re: [nv-l] origin=212.252.18.0

[James Shanks <jshanks@us.ibm.com>]

Lucian -

I am sorry to have misunderstood you.  What I missed was that you wanted the hostname field set when the event appeared over in TEC.  It was not before because the  NetView adapter was not sending it, and only those fields the adapter sends will be set on an Event (unless there are defaults in the baroc file).  A TEC Event has some 23 fields, and as you can see, NetView only cares about a few of them.  Those are the ones we send.  Any others you want, you have to add, which is what you did.  

Where I got confused was that I was thinking you were asking about nvhostname, which is a field we set and which usually depends upon DNS to be set correctly.  My apologies.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

tivoli <tivoli@bu.brauunion.ro> 09/05/2003 05:06 AM

To:        James Shanks/Raleigh/IBM@IBMUS, nv-l@lists.tivoli.com         cc:                 Subject:        Re: [nv-l] origin=212.252.18.0

Like I told you yesterday I changed back to the original cds file and 
now I see again events with empty hostname field ... so it's not DNS or 
hosts file... I' ll go back to modify the cds file

Regards,
Lucian


James Shanks wrote:

>
> My guess is that the system is expecting to resolve your hostname into 
> a fully-qualified domain name, xxx.abc.com, and it is unable to do so.
> Is the NetView box in DNS, with both forward and backward name 
> resolution?   Many Windows shops neglect DNS.
>
>
> Try changing the entry for your NetView box in 
> C:\Windows\system32\drivers\etc\hosts to contain one.  My guess is 
> that it looks like this:
> # The following entry was modified by NetView to keep consistent with 
> Registry.
> #
> 10.10.10.10        jshanks1        jshanks1
>
> Make it look like this:
>  10.10.10.10        jshanks1.ibm.com        jshanks1
>
>
> If this doesn't solve it, then lets continue this discussion via the 
> list, so that others may join.  
>
>
>
> James Shanks
> Level 3 Support  for Tivoli NetView for UNIX and Windows
> Tivoli Software / IBM Software Group
>
>
>
> *tivoli <tivoli@bu.brauunion.ro>*
>
> 09/04/2003 04:27 AM
>
>        
>         To:        James Shanks/Raleigh/IBM@IBMUS
>         cc:        
>         Subject:        Re: [nv-l] origin=212.252.18.0
>
>
>
>
> James
> I hope you could find few minutes to help me with this problem...
> it's about all tec_its_subnet_connectivity events ...they are with empty
> hostname field in TEC; until yesterday use to have that strange origin
> (212.252.18.0) and empty hostname but after changing
>
> MAP_DEFAULT
>   source = NV6K ;
>   sub_source = NET ;
>   origin = $SOURCE_ADDR ;       <<<<change to>>>>>   $AGENT_ADDR
>   adapter_host = $AGENT_ADDR ;
> END
>        
> I have in origin field the address of NetVIew.
> so, what about tec_its_subnet_connectivity?
> its definition is this:
>
> CLASS TEC_ITS_SUBNET_CONNECTIVITY
>  SELECT
>    1: ATTR(=,$ENTERPRISE) , VALUE(PREFIX, "1.3.6.1.4.1.2.6.3" ) ;
>    2: $SPECIFIC = 58916968 ;
>    3: ATTR(=, "nvObject" ) ;
>    4: ATTR(=, "nvEventDescr" ) ;
>    5: ATTR(=, "nvApplNbr" ) ;
>        6: ATTR(=, "VB_7") ;
>        7: ATTR(=, "VB_8") ;
>  FETCH
>        1: IPNAME($AGENT_ADAPTER);
>        2: IPADDR($ADAPTER_HOST);
>  MAP
>        adapter_host = $F1 ;
>    msg = $V4 ;
>    category = $V5 ;
>        reachability = 1 ; # UNREACHABLE
>        subnetaddr = $V6 ;
>        subnetmask = $V7 ;
>    nvhostname = $F2 ; # Required for ALL TEC_ITS events
> END
>
> should I put there a hostname field ?  Like this:
>
> MAP
>        adapter_host = $F1 ;
>        hostname = $V3 ;  
>        msg = $V4 ;
> (I'll give a try to see what's happening and I'll inform you ..ok?)
> thanks
> Lucian
>
> James Shanks wrote:
>
> >
> > Lucian -
> >
> > You really should be talking to Support about this, but as long as you
> > don't expect me to try to solve all your problems, I'll take what
> > little time I can.
> > And I need exact information from you if I am to help.
> >
> > What events have blank hostnames?  NetView events?  Or others? If they
> > were added by you to the CDS file, what do your entries look like?
> >
> > James Shanks
> > Level 3 Support  for Tivoli NetView for UNIX and Windows
> > Tivoli Software / IBM Software Group
> >
> >
> >
> > *tivoli <tivoli@bu.brauunion.ro>*
> >
> > 09/03/2003 10:07 AM
> >
> >        
> >         To:        James Shanks/Raleigh/IBM@IBMUS
> >         cc:        
> >         Subject:        Re: [nv-l] origin=212.252.18.0
> >
> >
> >
> >
> > sorry about being indiscrete... you're right about the new products
> > confidentiality
> >
> > back on source_addr problem...
> > here :
> >
> > MAP_DEFAULT
> >  source = NV6K ;
> >  sub_source = NET ;
> >  origin = $SOURCE_ADDR ;
> >  adapter_host = $AGENT_ADDR ;
> > END
> >
> > is the only place where I could found $SOURCE_ADDR variable.. so I
> > changed  it and now I'm expecting some messages
> > about customer... you know ..they always expect the unexpected and
> > always ask strange question or what you don't want to be asked
> > Anyway I have lots of things (most of all I'm afraid of TDS netview
> > reports) to explain to this client ... having one more is not such a big
> > deal :)
> > thank a lot,
> > Lucian
> >
> > PS
> > I just received some "messages" .. the origin is ok (NetView address)
> > but hostname is empty so I have some empty spaces in my TEC console on
> > hostname field (this exigent customer will ask why 's that ... :) )
> >
> > James Shanks wrote:
> >
> > >
> > > Apparently you did not read carefully enough.  I gave you a
> > > workaround, which will suffice for all NetView traps, and many others
> > > besides.
> > > In 7.1.3 and below all NetView traps should have an origin of
> > > $AGENT_ADDR, because NetView is the source or origin of that trap.  
> > >
> > >  If you are having a problem with a NetView trap then the solution is
> > > to change the entry for that trap in the tecad_nv6k.cds file to use
> > > $AGENT_ADDR and not $SOURCE_ADDR.   There are plenty of other examples
> > > of NetView traps in that file for you to see exactly how to do it.    
> > >
> > > Or you can just change the overall map defaults,
> > >
> > > MAP_DEFAULT
> > >   source = NV6K ;
> > >   sub_source = NET ;
> > >   origin = $SOURCE_ADDR ;
> > >   adapter_host = $AGENT_ADDR ;
> > > END
> > >        
> > > so that origin and adapter_host match.  Make them both say $AGENT_ADDR
> > > and most, if not all, cases of your problem will go away, for those
> > > that don't, you have to make your decision about whether to even send
> > > an origin or not.  
> > >
> > > I do not understand why you cannot tell your customers just that.
> > >
> > > James Shanks
> > > Level 3 Support  for Tivoli NetView for UNIX and Windows
> > > Tivoli Software / IBM Software Group
> > >
> > >
> > >
> > > *tivoli <tivoli@bu.brauunion.ro>*
> > >
> > > 09/03/2003 09:22 AM
> > >
> > >        
> > >         To:        
> > >         cc:        Brian Kraftchick <Brian.Kraftchick@odfl.com>,
> > > nv-l@lists.tivoli.com
> > >         Subject:        Re: [nv-l] origin=212.252.18.0
> > >
> > >
> > >
> > >
> > > bad news...
> > > just after I sent you previous email I receive again those 
> messages....
> > > :(  
> > > all are ITS_SUBNET_CONNECTIVITY
> > > ... and I'm just reading the James S message.. so we are not lucky ..
> > > but what I'm going to tell to my clients????
> > >
> > > by
> > >
> > > tivoli wrote:
> > >
> > > > ...hmmm
> > > > we have on netview machine 2 NIC's, one of them unconfigured (it's
> > > > windows 2k) and without cable. just after I sent this message to the
> > > > list I disabled that interface and since then the messages have
> > > > disappeared!! (now there could be another problem: where are these
> > > > messages now??  I thought  the origin field will change  to a real
> > > > address. )
> > > > do you have such a second NIC???
> > > >
> > > > I think there is a special address class for DHCP interfaces that
> > > > could not found a DHCP server..
> > > > I'll try to find out more... and I'll let you know if something new
> > > > appear..
> > > >
> > > > by
> > > > Lucian
> > > >
> > > > Brian Kraftchick wrote:
> > > >
> > > >> Lucian,
> > > >>
> > > >> I have had the exact same issue since our installation of Netview
> > > by IBM
> > > >> Global Services, and it has yet been resolved.  We have a
> > different IP
> > > >> address show up than yours, but still it has nothing to do with our
> > > >> network,
> > > >> nor any configured device on our network.  I have actually 
> taken this
> > > >> all
> > > >> the way to Level 3 with Tech Support, but still no solution. 
>  We were
> > > >> able
> > > >> to determine that it does come directly from NetView....when we 
> check
> > > >> the
> > > >> TEC reception log...the IP address is already there, so we know
> > > that TEC
> > > >> isn't generating it.  Something within TEC is....but as I said, we
> > > still
> > > >> don't have any solution whatsoever....please let me know if you 
> find
> > > >> anything out.
> > > >>
> > > >> Brian
> > > >>
> > > >> -----Original Message-----
> > > >> From: tivoli [mailto:tivoli@bu.brauunion.ro]
> > > >> Sent: Wednesday, September 03, 2003 6:01 AM
> > > >> Cc: Netview List
> > > >> Subject: [nv-l] origin=212.252.18.0
> > > >>
> > > >>
> > > >> hi there list!
> > > >>
> > > >> I have some events from NetView that appear in TEC with origin
> > > >> 212.252.18.0  what this could be? (I have a second NIC on netview
> > > >> server without an address... )
> > > >>
> > > >> thanks
> > > >> Lucian
> > > >>
> > > >>
> > > >>
> > > >>
> > > >> 
> ---------------------------------------------------------------------
> > > >> To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
> > > >> For additional commands, e-mail: nv-l-help@lists.tivoli.com
> > > >>
> > > >> *NOTE*
> > > >> This is not an Offical Tivoli Support forum. If you need immediate
> > > >> assistance from Tivoli please call the IBM Tivoli Software Group
> > > >> help line at 1-800-TIVOLI8(848-6548)
> > > >>
> > > >> 
> ---------------------------------------------------------------------
> > > >> To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
> > > >> For additional commands, e-mail: nv-l-help@lists.tivoli.com
> > > >>
> > > >> *NOTE*
> > > >> This is not an Offical Tivoli Support forum. If you need immediate
> > > >> assistance from Tivoli please call the IBM Tivoli Software Group
> > > >> help line at 1-800-TIVOLI8(848-6548)
> > > >>
> > > >>
> > > >>  
> > > >>
> > > >
> > > >
> > > >
> > >
> > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
> > > For additional commands, e-mail: nv-l-help@lists.tivoli.com
> > >
> > > *NOTE*
> > > This is not an Offical Tivoli Support forum. If you need immediate
> > > assistance from Tivoli please call the IBM Tivoli Software Group
> > > help line at 1-800-TIVOLI8(848-6548)
> > >
> > >
> > >
> >
> >
> >
> >
> >
>
>
>
>
>




---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)