Re: [nv-l] Sending events to TEC - hostname missing (sometimes)

[James Shanks <jshanks@us.ibm.com>]

Right.  Hostnames from NetView events are never resolved.  netmon already did that.  We use whatever is in varbind 2.

But agent traps don't have hostnames in varbind 2.  They have to get resolved and into fully-qualified domain names or the field will be blank.  snmptrap will work with short names.

Like I said, I don't understand what is going on, but there is no code in nvserverd to prohibit any particular host name.  I thought you said this was working for some devices and not for others, which is why I think the source of the problem is local.     But that's all I can tell you.  



James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

"Bernard Disselborg" <BDisselborg@triple-p.nl> Sent by: owner-nv-l@lists.us.ibm.com 01/05/2004 09:18 AM Please respond to nv-l

To:        <nv-l@lists.us.ibm.com>         cc:                 Subject:        Re: [nv-l] Sending events to TEC - hostname missing        (sometimes)

James,

Did a test with a snmptrap of a Netview link down event.
Used hostname: pc-bernard in varbind 2.
This gets formatted correctly and sent to TEC.

The snmptrap of the arcServetrapHigh event is sent to TEC with the
hostname field empty.

I've noticed that whatever is put in varbind 2 of the NetView event is
sent to TEC.

Regards,

Bernard

>>> jshanks@us.ibm.com 22-12-2003 19:30:37 >>>
Well, you have confirmed my view of this, Jane.  nvserverd has no code
to 
prohibit any particular hostname. It should just be using whatever it 
found.  My suspicion is that it is having difficulty with the
resolution, 
though why I don't know.

As a test, I'd suggest using an snmptrap of a NetView event , with a 
failing "dashed" hostname in varbind 2.   I'll bet it gets formatted 
correctly and sent to TEC.
Then an snmptrap of the arcServetrapHigh with that same hostname as the
origin.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group




Jane Curry <jane.curry@skills-1st.co.uk>
Sent by: owner-nv-l@lists.us.ibm.com 
12/22/2003 11:53 AM
Please respond to nv-l

 
        To:     nv-l@lists.us.ibm.com 
        cc: 
        Subject:        Re: [nv-l] Sending events to TEC - hostname
missing     (sometimes)



That's strange. I have NV 7.1.4 and TEC 3.8 FP1 on AIX 5.1 ML03 and I
am 
getting hostname fields OK.  I have events from 
group-100-win.skills-1st.co.uk - hyphens in both the node part of the 
name and in the domain name......

My NetView and TEC are on the same box so definitely using the same 
DNS.....   TEC looks like the thing we have at very differnet
versions???

Cheers,
Jane

Bernard Disselborg wrote:

>Did some additional digging. The problem seems to be related to
hostname
>syntax. Hostnames containing only letters andigits are shown OK.
>Hostnames containing underscores are shown OK. Hostname containing
>dashes are not shown.
>
>host1.abc.nl            OK
>host_1.abc.nl           OK
>host-1.abc.nl           not shown
>
>According to standards (RFC1912) letters, digits and '-' are the only
>allowed characters, where the underscore is not.
>
>I will call support on this.
>
>Bernard
>
>
>
> 
>
>>>>BDisselborg@triple-p.nl 19-12-2003 17:41:08 >>>
>>>> 
>>>>
>Hello,
>
>Environment:
>NetView 7.1.4 on AIX 433, TEC 3.7.1 on AIX 433.
>
>NetView is configured to forward specific traps to TEC.
>
>I have the following problem:
>A trap coming from node A in the network is forwarded to TEC with the
>hostname field empty.
>The same trap coming from node B in the network is forwarded to TEC
>with the hostname field filled  as expected.
>
>The output of wtdumprl on the TEC server shows the following:
>
>hostname field empty:
>arcServetrapHigh;source=nvserverd;sub_source=A;origin=100.237.2.21;
>adapter_host=netview.abc.nl;hostname= ;category=1;date="12/19/03
>15:08:14";
>status=OPEN;msg="pc-bernard  ARCserve: just testing  "
>
>hostname field ok:
>arcServetrapHigh;source=nvserverd;sub_source=A;origin=100.240.1.2;
>adapter_host=netview.abc.nl;hostname=server.location.abc.nl;category=1;date="12/19/03
>15:05:53";
>status=OPEN;msg="pc-bernard  ARCserve: just testing  "
>
>Sniffer output shows that the NetView TEC adapter leaves the hostname
>field empty for the problem systems.
>
>The behaviour is consistent: there is a group of systems showing the
>problem and some other not.
>
>Name resolution is OK on NetView (configured as secondary server) and
>TEC system.
>
>On NetView hostnames are always shown correctly (event viewer and in
>trapd.log).
>
>Any thoughts on this ?
>
>Thanks in advance,
>
>Bernard
>
>
>
> 
>

-- 
Tivoli Certified Consultant & Instructor
Skills 1st Limited, 2 Cedar Chase, Taplow, Bucks, SL6 0EU, UK
Tel: +44 (0)1628 782565
Copyright (c) 2003 Jane Curry <jane.curry@skills-1st.co.uk>.  All
rights 
reserved.