James,
The problem occurs on all hostnames with dashes.
Name resolution itself seems to be OK, all hostnames (FQDN) are shown
correctly in trapd.log.
Problem seems to be introduced after upgrade from 7.1.3 to 7.1.4.
I've opened a PMR on this.
thanks,
Bernard
>>> jshanks@us.ibm.com 05-01-2004 15:33:19 >>>
Right. Hostnames from NetView events are never resolved. netmon
already
did that. We use whatever is in varbind 2.
But agent traps don't have hostnames in varbind 2. They have to get
resolved and into fully-qualified domain names or the field will be
blank.
snmptrap will work with short names.
Like I said, I don't understand what is going on, but there is no code
in
nvserverd to prohibit any particular host name. I thought you said
this
was working for some devices and not for others, which is why I think
the
source of the problem is local. But that's all I can tell you.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group
"Bernard Disselborg" <BDisselborg@triple-p.nl>
Sent by: owner-nv-l@lists.us.ibm.com
01/05/2004 09:18 AM
Please respond to nv-l
To: <nv-l@lists.us.ibm.com>
cc:
Subject: Re: [nv-l] Sending events to TEC - hostname
missing (sometimes)
James,
Did a test with a snmptrap of a Netview link down event.
Used hostname: pc-bernard in varbind 2.
This gets formatted correctly and sent to TEC.
The snmptrap of the arcServetrapHigh event is sent to TEC with the
hostname field empty.
I've noticed that whatever is put in varbind 2 of the NetView event is
sent to TEC.
Regards,
Bernard
>>> jshanks@us.ibm.com 22-12-2003 19:30:37 >>>
Well, you have confirmed my view of this, Jane. nvserverd has no code
to
prohibit any particular hostname. It should just be using whatever it
found. My suspicion is that it is having difficulty with the
resolution,
though why I don't know.
As a test, I'd suggest using an snmptrap of a NetView event , with a
failing "dashed" hostname in varbind 2. I'll bet it gets formatted
correctly and sent to TEC.
Then an snmptrap of the arcServetrapHigh with that same hostname as
the
origin.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group
Jane Curry <jane.curry@skills-1st.co.uk>
Sent by: owner-nv-l@lists.us.ibm.com
12/22/2003 11:53 AM
Please respond to nv-l
To: nv-l@lists.us.ibm.com
cc:
Subject: Re: [nv-l] Sending events to TEC - hostname
missing (sometimes)
That's strange. I have NV 7.1.4 and TEC 3.8 FP1 on AIX 5.1 ML03 and I
am
getting hostname fields OK. I have events from
group-100-win.skills-1st.co.uk - hyphens in both the node part of the
name and in the domain name......
My NetView and TEC are on the same box so definitely using the same
DNS..... TEC looks like the thing we have at very differnet
versions???
Cheers,
Jane
Bernard Disselborg wrote:
>Did some additional digging. The problem seems to be related to
hostname
>syntax. Hostnames containing only letters andigits are shown OK.
>Hostnames containing underscores are shown OK. Hostname containing
>dashes are not shown.
>
>host1.abc.nl OK
>host_1.abc.nl OK
>host-1.abc.nl not shown
>
>According to standards (RFC1912) letters, digits and '-' are the only
>allowed characters, where the underscore is not.
>
>I will call support on this.
>
>Bernard
>
>
>
>
>
>>>>BDisselborg@triple-p.nl 19-12-2003 17:41:08 >>>
>>>>
>>>>
>Hello,
>
>Environment:
>NetView 7.1.4 on AIX 433, TEC 3.7.1 on AIX 433.
>
>NetView is configured to forward specific traps to TEC.
>
>I have the following problem:
>A trap coming from node A in the network is forwarded to TEC with the
>hostname field empty.
>The same trap coming from node B in the network is forwarded to TEC
>with the hostname field filled as expected.
>
>The output of wtdumprl on the TEC server shows the following:
>
>hostname field empty:
>arcServetrapHigh;source=nvserverd;sub_source=A;origin=100.237.2.21;
>adapter_host=netview.abc.nl;hostname= ;category=1;date="12/19/03
>15:08:14";
>status=OPEN;msg="pc-bernard ARCserve: just testing "
>
>hostname field ok:
>arcServetrapHigh;source=nvserverd;sub_source=A;origin=100.240.1.2;
>adapter_host=netview.abc.nl;hostname=server.location.abc.nl;category=1;date="12/19/03
>15:05:53";
>status=OPEN;msg="pc-bernard ARCserve: just testing "
>
>Sniffer output shows that the NetView TEC adapter leaves the hostname
>field empty for the problem systems.
>
>The behaviour is consistent: there is a group of systems showing the
>problem and some other not.
>
>Name resolution is OK on NetView (configured as secondary server) and
>TEC system.
>
>On NetView hostnames are always shown correctly (event viewer and in
>trapd.log).
>
>Any thoughts on this ?
>
>Thanks in advance,
>
>Bernard
>
>
>
>
>
--
Tivoli Certified Consultant & Instructor
Skills 1st Limited, 2 Cedar Chase, Taplow, Bucks, SL6 0EU, UK
Tel: +44 (0)1628 782565
Copyright (c) 2003 Jane Curry <jane.curry@skills-1st.co.uk>. All
rights
reserved.
|