nv-l
[Top] [All Lists]

Re: [NV-L] Cisco ASA (firewall / VPN)

To: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Subject: Re: [NV-L] Cisco ASA (firewall / VPN)
From: Leslie Clark <lclark@us.ibm.com>
Date: Thu, 28 Dec 2006 16:03:36 -0500
Delivery-date: Thu, 28 Dec 2006 21:11:05 +0000
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
In-reply-to: <OFF01620FE.C9202C70-ON8525724C.005DC54B-8525724C.005F6CE9@ca.ibm.com>
List-help: <mailto:nv-l-request@lists.ca.ibm.com?subject=help>
List-id: Tivoli NetView Discussions <nv-l.lists.ca.ibm.com>
List-post: <mailto:nv-l@lists.ca.ibm.com>
List-subscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=subscribe>
List-unsubscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=unsubscribe>
Reply-to: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Sender: nv-l-bounces@lists.ca.ibm.com

It does that in response to certain conditions in the SNMP agent on the device that usually mean there is a problem with the agent.
This text in in apar IY34602 :

A fix has been made to check whether the Objid (request name)
of a GetNext SNMP request is the same as the previous one.  If
so, then netmon will now abort the Table request.


I would check with a normal walk of the ifInterface table, or use the mib appl or rnetstat -ix to see if there is anything funny with the index numbers.
Possibly that device changed something during the time the poll was happening, and a subsequent poll will be ok. I have seen these in the past and generally ignored them unless they interfered with the discovery of the device.

Cordially,

Leslie A. Clark
IT Services Specialist, Network Mgmt
Information Technology Services Americas
IBM Global Services
(248) 552-4968 Voicemail, Fax, Pager



Francois Le Hir <flehir@ca.ibm.com>
Sent by: nv-l-bounces@lists.ca.ibm.com

12/22/2006 12:22 PM
Please respond to
Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>

To
"Tivoli NetView Discussions" <nv-l@lists.ca.ibm.com>
cc
Subject
[NV-L] Cisco ASA (firewall / VPN)





Hi everyone and season greetings,

Anybody ever seen a nmdemandpoll acting like this ?
the device is a "Cisco Adaptive Security Appliance Version 7.2(2)"
doing a snmpwalk on ifTable doesn't show anything out of the ordinary ....

16:49:57 ***** Starting demand poll of node xxxxx.xxxx.ca *****
16:49:57 Interface xxxxxxx(xxxxxx) (currently up)
16:49:57 Current polling parameters
16:49:57 scheduled SNMP status check at 12/11/06 16:52:07
16:49:57 scheduled configuration check at 12/12/06 05:16:41
16:49:57 auto-adjusted polling interval is 900 seconds
16:49:57 Get system identifier
16:49:57 Get system description
16:49:57 Get system name
16:49:57 Get IP forwarding status
16:49:57 Get IP address table
16:49:58 Get number of interfaces
16:49:58 Get interfaces table
16:49:58 interface Adaptive does not have an IP address

16:49:58 Agent in distress: spinning in ifTable on xxxxxxxxx.xxxxxxx.ca:
Aborting request!

16:49:58 Get ARP table for discovering secondary interfaces
16:49:59 Get CDP Cache entry
16:49:59 Get default routing entry
16:49:59 Get extended interfaces table
16:49:59 Get PIX Failover state
16:49:59 Active IP addresses now residing on PRIMARY
16:49:59 Get SNMP status
16:50:00 Interface xxxxxxxx(Adaptive) is Up: Admin Status=Up Oper Status=Up
16:50:00 Interface xxxxxxxx(Adaptive) is Up: Admin Status=Up Oper Status=Up
16:50:00 Interface xxxxxxxxxxxxxx(Adaptive) is Admin Down: Admin Status=Down Oper Status=Down
16:50:00 Get system location
16:50:00 Get system contact
16:50:00 Get MPLS MIB
16:50:00 Get IpNetToMedia table
16:50:00 Get ARP table
16:50:00 Get Middle Level Manager
16:50:00 SNMP error: no such name
16:50:00 Get System Information Agent
16:50:00 SNMP error: no such name
16:50:00 Get Manager Product Name
16:50:00 SNMP error: no such name
16:50:00 Get SIA OS/2
16:50:00 SNMP error: no such name
16:50:00 Verify node name
16:50:00 node name verified to be xxxxxxxxxxxxxx.xxxxxx.ca
16:50:00 ***** End of demand poll for node xxxxxxxx.xxxxxxxxxx.ca


Salutations, / Regards,

Francois Le Hir
Network Projects & Consulting Services
IBM Global Technology Services
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to internal IBM'ers only)

_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)
<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web