RE: [nv-l] vpxdTrap SOLVED

["Van Order, Drew \(US - Hermitage\)" <dvanorder@deloitte.com>]

James wins the Christmas turkey.....

 

VMWare is indeed sending trap 6876 under the ENTERPRISES OID. Adding this trap under that OID is ugly, but we now have TEC events until VMWare fixes the problem and sends it under their OID.

 

Thanks to everyone!

 

Drew

-----Original Message-----
From: owner-nv-l@lists.us.ibm.com [mailto:owner-nv-l@lists.us.ibm.com] On Behalf Of Stringfellow, William
Sent: Thursday, November 18, 2004 1:56 PM
To: nv-l@lists.us.ibm.com
Subject: RE: [nv-l] vpxdTrap

Drew,

    That first line after 'no known format' tells you what enterprise definition Netview is trying to use.  In this case it is the generic Enterprise definition itself.

 

One of 2 possible problems. 

 

1.  Your vendor is sending traps without putting their Enterprise ID number in the chain.  1.3.6.1.4.1 should be followed by 6876 (if 6876 is their Enterprise id) and then you should start seeing traps/notifications below that.

 

OR more likely

 

2.  1.3.6.1.4.1 is as far down as you have definitions in NetView for the string it was sent and it is trying to force the definition based on that entry.  You need to create a new entry for that enterprise with a 1.3.6.1.4.1.6876 entry and then make your enterprise specific trap definitions there

 

 

    Good luck,

    Bill

 

Bill Stringfellow
EDS - Network Management Support
CA4-704-02-03
2000 Clayton Road, Building D
Concord, CA 94520

Office:     925.692.7283
Fax:        925.675.1763
Email:     william.stringfellow@eds.com
Cell:       925.765.2648

-----Original Message-----
From: owner-nv-l@lists.us.ibm.com [mailto:owner-nv-l@lists.us.ibm.com]On Behalf Of Van Order, Drew (US - Hermitage)
Sent: Thursday, November 18, 2004 9:22 AM
To: nv-l@lists.us.ibm.com
Subject: RE: [nv-l] vpxdTrap

I'm back Don--

 

Looks like the change didn't quite get it. I deleted the previous vpxdTrap and created an Enterprise called VirtualCenter for 1.3.6.1.4.1.6876.201. Any thoughts are appreciated!

 

More info below:

 

 

trapd.conf:

 

vpxdTrap {1.3.6.1.4.1.6876.201} 6 6876 A 2 0 "Status Events"
$E $G $S S# args: $*
EVENT_CLASS vpxdTrap
SDESC
This trap is sent when entity status changed.
EDESC

 

trapd.log:

 

1100798091 7  Thu Nov 18 11:14:51 2004 usher0018                 ? Trap found with no known format in trapd.conf(4)
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  Enterprise ENTERPRISES (1.3.6.1.4.1) community public
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  generic trap:6 specific trap:6876
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  Timestamp:5452300 Agentaddr:usher0018 args(6):
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [1] snmpV2.snmpModules.1.1.4.1.0 (ObjectIdentifier): private.enterprises.vmware.201
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [2] private.enterprises.vmware.vmwTraps.301 (OctetString): hostMemUsage
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [3] private.enterprises.vmware.vmwTraps.302 (OctetString): /Dev QA/USHERESX090
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [4] private.enterprises.vmware.vmwTraps.304 (OctetString): green
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [5] private.enterprises.vmware.vmwTraps.305 (OctetString): yellow
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [6] private.enterprises.vmware.vmwTraps.306 (OctetString): Memory = 13.2%
1100798091 7  Thu Nov 18 11:14:51 2004 usher0018                 ? Trap found with no known format in trapd.conf(4)
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  Enterprise ENTERPRISES (1.3.6.1.4.1) community public
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  generic trap:6 specific trap:6876
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  Timestamp:5452298 Agentaddr:usher0018 args(6):
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [1] snmpV2.snmpModules.1.1.4.1.0 (ObjectIdentifier): private.enterprises.vmware.201
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [2] private.enterprises.vmware.vmwTraps.301 (OctetString): hostCpuUsage
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [3] private.enterprises.vmware.vmwTraps.302 (OctetString): /Dev QA/USHERESX090
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [4] private.enterprises.vmware.vmwTraps.304 (OctetString): green
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [5] private.enterprises.vmware.vmwTraps.305 (OctetString): yellow
1100798091 7  Thu Nov 18 11:14:51 2004  usher0018                 ?  [6] private.enterprises.vmware.vmwTraps.306 (OctetString): CPU = 45.9%

 

 

-----Original Message-----
From: owner-nv-l@lists.us.ibm.com [mailto:owner-nv-l@lists.us.ibm.com] On Behalf Of Davis, Donald
Sent: Tuesday, November 16, 2004 4:16 PM
To: 'nv-l@lists.us.ibm.com'
Cc: Van Order, Drew (US - Hermitage)
Subject: [nv-l] vpxdTrap

Drew,
Thinking about this a little more and re-looking at your trapd.log.... I don't think they were switched.
It sounds like they just really messed this definition up in the agent!!!
It actually looks like they appended the Specific Trap number to their OID for this trap and gave the trap a specific 6876.

These lines from your trapd.log indicate that the OID that was sent is "1.3.6.1.4.1.6876.201
And the Specific trap number is 6876.
1100537804 7 Mon Nov 15 10:56:44 2004 10.5.10.75 ? [1] snmpV2.snmpModules.1.1.4.1.0 (ObjectIdentifier): private.enterprises.vmware.201

1100537804 7 Mon Nov 15 10:56:44 2004 10.5.10.75 ? generic trap:6 specific trap:6876

I changed the Enterprise name to vmwareDrew so there would not be a conflict.
Copy/past this to the command line and run it.
Again, just delete this definition after VMware fixes their agent problem.

/usr/OV/bin/addtrap -l vpxdTrap -g 6 -s 6876 \
-n vmwareDrew -i 1.3.6.1.4.1.6876.201 \
-o A -c "LOGONLY" -t 0 \
-S 1 \
-D "This trap is sent when entity status changed." \
-e vpxdTrap \
-F '$E $G $S $# args: $*'

Don Davis
First Citizens Bank
Raleigh, NC.  27603-3526
 

------------------------------------------------------------------------------
This electronic mail and any files transmitted with it are confidential and are intended solely for the use of individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the electronic mail to the intended recipient, be advised that you have received this electronic mail in error and that any use, dissemination, forwarding, printing, or copying of this electronic mail is strictly prohibited. If you have received this electronic mail in error, please immediately notify the sender by return mail.
==============================================================================

This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.

This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.