Re: [nv-l] Cisco CSS + netview

[James Shanks <jshanks@us.ibm.com>]

(1) mib2trap does not put data into trapd.conf.  It produces a script of addtrap commands which you must then run to update trapd.conf.
Did you get output from mib2trap?  You have to specify a file for it, like this
        mib2trap <input_mib_file> <output_file>

(2)  You will only get data in the output file if the MIBs you are using as input contain either TRAP-TYPE or NOTIFICATION-TYPE statements.
Do they.  You can browse them with any editor or  use grep to find out:
        grep TRAP-TYPE <input_mib_file>   or  grep NOTIFICATION-TYPE <input_mib-file>

(3)  mib2trap will most likely  not tell you what 1.3.6.1.4.1.2467.1.15  means.  There are vendors, such as Tavve, for example, which provide additional formatting statements in their MIBs so that mib2trap can produce a much more defined addtrap script.  This formatting in defined in the mib2trap man page.  But most vendors do not do this.   Usually they give you nothing and so mib2trap produces just his default format, which I described last time:  enterprise id, generic and specific trap numbers, an a list of all variables which were sent paired with their MIB OIDs.   This simple output will not tell you anything at all about what the trap means.   You have to do that yourself.

First, you have to read the MIB which contains the TRAP-TYPE definition to find out what variables are being sent.  They are listed in the VARIABLES clause, in the order in which they will be sent.  Thus if the VARIABLES clause says, for example,  VARIABLES   { sysUpTime, sysDescr }
then this trap sends two variables,  sysUpTime and sysDescr,   and you can match that with the default format for the trap as it shows up in trapd.log.  The first variable will show up as [1] and the second as [2].    In this simple example, you probably already know what sysUpTime and  sysDescr  are.  But in a real-life case you might to look further into the MIB to see what the variables stand for.   If your information is spread over multiple MIBs then you should try loading them with one of the MIB loaders so you can match the OIDs better.   This remains a manual process.
There is no magic here.

Bottom line:  mib2trap will help you define a trap to trapd but it will not tell you what the trap means.  You have to find that out by looking at the MIB or the vendor documentation.  Then you will probably want to modify the mib2trap-provided definition so that it makes better sense.

Hope this helps.


James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

Tom Hallberg <gimli@hhcrew.tk> 09/16/2003 08:21 AM

To:        James Shanks/Raleigh/IBM@IBMUS         cc:        nv-l@lists.tivoli.com         Subject:        Re: [nv-l] Cisco CSS + netview

Hi

Well im running netview V7R1 on AIX 4.3.3.0.

The big problem is that I ofcourse get traps to netview but netview dont
know what to do with it.

The error I get is:
? Trap found with no known format in trapd.conf(4) Cisco-css
1.3.6.1.4.1.2467.1.15

Cisco-css was something that I put in trapd.conf, just to try if I could
write an own nice row that maybe could work, but no.

So what Im looking for is how the definition for 1.3.6.1.4.1.2467.1.15,
should look like so that netview can understand the traps that comes to
it.

Its why I tryed to use mib2trap with all mibs that come with CSS 11500 &
11056. But didnt get any data to put in trapd.conf.

So how can I define up that sort of info in trapd.conf.

/Tom


On Mon, 15 Sep 2003, James Shanks wrote:

> All the traps will arrive in NetView, whether you have configured them in
> trapd.conf or not, provided that the Cisco boxes have been configured to
> send them.  So you can still monitor them.
>
> All we are talking about here is giving trapd some guidelines about how
> you want the traps displayed.  If he has none, then he will issue a "trap
> found with no fmt" message which contains all the information about the
> trap itself.  It has the enterprise id, the generic and specific ids, the
> MIB OIDs of all the variables and the contents of each variable.  This is
> exactly the same information that you get by default with mib2trap.  It is
> just presented differently.  With mib2trap, the default format  says  -F
> "$E $G $S $# args: $*" , which is exactly the same, only without the "trap
> found with no fmt" clause in it.
>
> So even if mib2trap isn't working, you can still format each trap the way
> you would like when it comes in.  Most people don't care for the mib2trap
> default display and do this anyway even after running mib2trap.
>
> But if you are having trouble with mib2trap, and want to use it, why not
> describe the problems you had encountered and see whether someone can help
> you with it?  What MIBs did you use it on?  Do they have TTRAP-TYPE or
> NOTIFICATION-TYPE statements in them?  These define traps so they must be
> there or mib2trap has nothing to go on.  Did you get some error message
> about the input MIB?
>
> And please tell us what operating system and level of NetView you are
> using because these thing work differently on Windows versus UNIX, and
> perhaps differently with the maintenance level.
>
> James Shanks
> Level 3 Support  for Tivoli NetView for UNIX and Windows
> Tivoli Software / IBM Software Group
>
>
>
>
> Tom Hallberg <gimli@hhcrew.tk>
> 09/15/2003 10:06 AM
>
>
>         To:     nv-l@lists.tivoli.com
>         cc:
>         Subject:        [nv-l] Cisco CSS + netview
>
>
>
>
> Hi
>
> Im looking for some info about CSS + netview.
>
> I have downloaded all mibs from our css boxes and tryed to run mib2trap on
> them. But it didnt work as well I hoped :(
>
> So does anyone got info on how to get the trap definition on CSS 11500 and
> 11056 so that I can monitor all traps that comes from them to netview.
>
> Thank you
>
> /Tom
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
> For additional commands, e-mail: nv-l-help@lists.tivoli.com
>
> *NOTE*
> This is not an Offical Tivoli Support forum. If you need immediate
> assistance from Tivoli please call the IBM Tivoli Software Group
> help line at 1-800-TIVOLI8(848-6548)
>
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)