You neglected to say
what OS platform and what Level of code are you using. I know it
has to be UNIX, but . . .
There have
been recent small changes made in SNMP V2 trap processing. I would
suggest you call Support and get the latest fix if you cannot wait for
FixPack2.
In particular I have
seen issues where trapd was not able to parse the timestamp in the event, and
so it was rejected as invalid, even though everything else was OK. But
you will need the latest level of code so that you can get a meaningful
trapd.trace that will explain why the trap is being rejected.
7.1.3 FP1 and lower will not tell you. Though you can set the
"hex dump all packets" option for trapd (which makes him run with -x as an
option) and then toggle the trapd trace on with "trapd -T "and see what the
incoming packet actually looks like in hex. What you won't see is why we
think it is invalid. Support can help you decode the hex if you want,
though using the latest level might make that unnecessary.
As for the mib2trap insertion, that
only affects formatting, it has nothing to do with whether a trap is rejected
as invalid.
You would need to look
at your trapd.conf with xnmtrap and see whether indeed the addtrap scripts,
which you created with mib2trap and ran, actually put in an entry
for enterprise 1.3.6.1.4.1.2552.200.300.3, generic
trap 6, specific 4. If that was not added, then that is why you see "no
format found". That is the trap that trapd says he got. Is that
the enterprise id you were expecting? If not, then that is something
else you may want to discuss with Support.
James Shanks
Level 3 Support for Tivoli
NetView for UNIX and Windows
Tivoli Software / IBM Software Group
|
| "Edwards, JT - ESM"
<JEdwards3@wm.com>
Sent by: owner-nv-l@lists.us.ibm.com
11/21/2003 11:50 AM
Please respond to nv-l
|
To:
"'nv-l@lists.us.ibm.com'"
<nv-l@lists.us.ibm.com>
cc:
Subject: [nv-l] SNMP v2
|
Hiya
folks,
It appears that Netview is having problems with
processing SNMP v2 traps.
We get the
following from Netview when we receive our Siteminder traps arrive:
Here is what came from Netview when it
received the SNMP trap from Siteminder:
Mon Nov 17 10:22:55 2003 crpu117a.wm.com
? Trap found with no known format in trapd.conf(4)
Enterprise ENTERPRISES
(1.3.6.1.4.1.2552.200.300.3) community public
generic trap:6 specific trap:4
Timestamp:0 Agentaddr:crpu117a.wm.com
args(2):
[1] snmpV2.snmpModules.1.1.4.3
(ObjectIdentifier): private.enterprises.2552
[2]
private.enterprises.2552.200.300.3.1.2 (OctetString): smservauth
SPECIFIC : 4 (hex: 4)
GENERIC : 6
CATEGORY : Status Events
ENTERPRISE : ENTERPRISES
1.3.6.1.4.1.2552.200.300.3
SOURCE : Source not known (?)
HOSTNAME : crpu117a.wm.com
SEVERITY : Indeterminate
LOGGEDTIME : 11/17/03 10:22:55
--------------------------------------------------------------snip---------------------------------------
Here is the gobby gook from the event
log:
public<none>WARNING: invalid
SNMPTrap packet from agent 10.208.4.170 source
-------------------------------------------------------------snip------------------------------------------
From the trapd engine
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? Trap found with no known format in trapd.conf(4)
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? Enterprise ENTERPRISES (1.3.6.1.4.1.2552.200.300.3)
community public
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? generic trap:6 specific trap:4
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? Timestamp:0 Agentaddr:crpu117a.wm.com args(2):
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? [1] snmpV2.snmpModules.1.1.4.3 (ObjectIdentifier):
private.enterprises.2552
1069086174 3 Mon Nov 17 10:22:54 2003
crpu117a.wm.com ? [2] private.enterprises.2552.200.300.3.1.2 (OctetString):
smservauth
1069086190 2 Mon Nov 17 10:23:10 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086301 2 Mon Nov 17 10:25:01 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086304 2 Mon Nov 17 10:25:04 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086304 2 Mon Nov 17 10:25:04 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086305 2 Mon Nov 17 10:25:05 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086305 2 Mon Nov 17 10:25:05 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086306 2 Mon Nov 17 10:25:06 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086350 2 Mon Nov 17 10:25:50 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid -1
1069086351 2 Mon Nov 17 10:25:51 2003
<none> T WARNING: invalid SNMPTrap packet from agent 10.208.4.170 source
A pid
I have the traps properly inserted into
Netview via mib2trap and had no problems whatsoever.
J.T. Edwards
Sr. Systems Programmer
Enterprise
Systems Management
Waste
Management Incorporated
"Proud Sponsor of
NASCAR"
Office: (713)265-1294
Mobile: (832)457-5239