Hi Larry,
Well, I've worked on trapd off and on for seven years now, but I'm as
confused as you are as to what's going on.
You didn't modify the entry for ENTERPRISESDEF in trapd.conf did you?
That's the one which determines how undefined traps are displayed.
You can do whatever you like -- make new definitions manually or with
mib2trap/addtrap -- and those should override any defaults you are taking.
But I am sorely puzzled as to how this is working the way that it is. So
perhaps Paul is right and a PMR is in order. You can follow whatever
course you choose.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group
Larry Fagan
<larrytechie@yaho
o.com> To
Sent by: nv-l@lists.us.ibm.com
owner-nv-l@lists. cc
us.ibm.com
Subject
Re: [nv-l] Events in trapd.log but
07/20/2005 09:33 not in Control desk!
AM
Please respond to
nv-l
James,
I'm 100% sure that is no entry for 1.3.6.1.4.1.3076 in
trapd.conf file. I also grep'ed and found nothing. Do
you want me to take a shot to add manually with this
oid and set "status events" instead of log only". But
there are so many different OID traps popping in. May
be best i sto get mibs and create trap defintions from
them.
Thanks as usual,
Larry
--- James Shanks <jshanks@us.ibm.com> wrote:
> Larry,
>
> You may indeed wish to open a PMR as Paul suggests
> and send them your
> trapd.conf and trapd.log
>
> But from the log entries you show, these traps are
> indeed being formatted
> by some entries or other in your trapd.conf.
> Are you certain that you have no entries fro an
> enterprise which begins
> 1.3.6.1.4.1.3076 ? Use xnmtrap and see. Or grep
> fro it in
> /usr/OV/conf/C/trapd.conf. I'm betting there is a
> LOG ONLY entry there.
>
> James Shanks
> Level 3 Support for Tivoli NetView for UNIX and
> Windows
> Tivoli Software / IBM Software Group
>
>
>
>
> Paul
>
> <pstroud@bellsout
>
> h.net>
> To
> Sent by:
> nv-l@lists.us.ibm.com
> owner-nv-l@lists.
> cc
> us.ibm.com
>
>
> Subject
> Re: [nv-l]
> Events in trapd.log but
> 07/19/2005 06:58 not in
> Control desk!
> PM
>
>
>
>
>
> Please respond to
>
> nv-l
>
>
>
>
>
>
>
>
>
> No idea, you'll have to open a PMR on that
> one....thats not right.
>
> Paul
>
> Larry Fagan wrote:
>
> >Paul,
> >Thanks for looking.. we have cisco concentrator
> >sending in traps as below:
> >1121808440 7 Tue Jul 19 17:27:20 2005 abcd.com ?
> >community:def
> enterprise:1.3.6.1.4.1.3076.1.2.1.1.1.2
> >
> >1121808440 7 Tue Jul 19 17:27:20 2005 abcd.com ?
> >AgentAddr:abcd.com generic-trap:6 time:76147227
> >
> >1121808440 7 Tue Jul 19 17:27:20 2005 abcd.com
> >198867296 07/19/2005 17:28:43.890 SEV=5 IKE/50
> >RPT=247851 XX.XXX.XXX.XX
> >
> >I'm sure that the oid said above is not in xnmtrap.
> >but somehow these events are not making to event
> >window neither they are coming in as no format in
> >trapd.conf. any ideas?
> >Many Thanks...
> >Larry
> >
> >
> >--- Paul <pstroud@bellsouth.net> wrote:
> >
> >
> >
> >>Larry,
> >>No, that's not likely. You are most likely
> receiving
> >>and
> >>displaying the events, but they are displayed as
> an
> >>"Event with no known format" and NetView simply
> >>dumps
> >>all the variables. If is it NOT defined in the
> >>trapd.log, this
> >>is most likely how it is being displayed.
> >>
> >>Paul
> >>
> >>Larry Fagan wrote:
> >>
> >>
> >>
> >>>Hi Guys,
> >>>I have gone through the archive's and everybody
> >>>
> >>>
> >>says
> >>
> >>
> >>>that i need to set from "log only" events to
> >>>
> >>>
> >>something
> >>
> >>
> >>>else. But the issue is, the events which are in
> >>>trapd.log file ,enterprise id for those trapd.log
> >>>events does not exist in my xnmtrap file. Somehow
> >>>these events are not displaying on console. Is it
> >>>possible that any other enterpise id is
> supressing
> >>>these events?
> >>>Many Thanks,
> >>>Larry
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
>
>>____________________________________________________
> >>
> >>
> >>>Start your day with Yahoo! - make it your home
> page
> >>>
> >>>
> >>>http://www.yahoo.com/r/hs
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >__________________________________________________
> >Do You Yahoo!?
> >Tired of spam? Yahoo! Mail has the best spam
> protection around
> >http://mail.yahoo.com
> >
> >
> >
>
>
>
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
|