Re: [nv-l] Authorization Failure - format Error

[James Shanks <jshanks@us.ibm.com>]

First, the trap failure message, FMT ERROR: accessing element #1, only 0
available, means that this trap is configured to show $1, but in fact, the
sender of the trap is not sending any variables at all.  So you will need
to change the trap settings (use trap.exe) message to not include any
variables.

Second, if the device sending you the trap does not identify the agent
which is committing the invalid authentication, then you will have to go to
the sending device itself and look at its logs there to find out.  I'm not
a Cisco network engineer, so you should ask your question of someone who
is, or get help from Cisco themselves.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group


                                                                           
             "Anvaj A B"                                                   
             <anvaj.aliyarukut                                             
             ty@ustri.com>                                              To 
             Sent by:                  <nv-l@lists.us.ibm.com>             
             owner-nv-l@lists.                                          cc 
             us.ibm.com                                                    
                                                                   Subject 
                                       [nv-l] Authorization Failure -      
             05/23/2005 01:22          format Error                        
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
                   nv-l                                                    
                                                                           
                                                                           





I am using Netview 7.1.4 FP03 on Win2K Server.  I am getting quite lot of
authorization failure from one of my Cisco PIX 515E firewall.  But from the
message I am not able to find out the IP address of the device which is
trying to access. I have checked the snmp configuration on NetView for this
device and found everything correct, and Polling the device with correct
string.

Below is the message. How will I identify the source IP?

authenticationFailure trap received from enterprise cisco with 0 arguments:
authAddr=FMT ERROR: accessing element #1, only 0 available



Best regards,

Anvaj Aliyarukutty
Global Network Operations Center (GNOC)
US Technology
Nila, Technopark
Phone : +91 471 233 5777 ext 8651
Mobile: +91 944 772 8103