nv-l
[Top] [All Lists]

RE: [NV-L] Trapd Events 1.3.6.1.6.3.1.1.5

To: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Subject: RE: [NV-L] Trapd Events 1.3.6.1.6.3.1.1.5
From: Denis Peuziat <dpeuziat@amadeus.com>
Date: Thu, 12 Jul 2007 14:55:08 +0200
Delivery-date: Thu, 12 Jul 2007 14:00:27 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
In-reply-to: <9920C0EB89D1F94DB1FB7DEEE66D9F5C02D21761@CENEXCHANGEBE01.oxfordshire.gov.uk>
List-help: <mailto:nv-l-request@lists.ca.ibm.com?subject=help>
List-id: Tivoli NetView Discussions <nv-l.lists.ca.ibm.com>
List-post: <mailto:nv-l@lists.ca.ibm.com>
List-subscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=subscribe>
List-unsubscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=unsubscribe>
Reply-to: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Sender: nv-l-bounces@lists.ca.ibm.com

Hi,

This is SNMP V2 Authentication Failure event, meaning that the device sending them is being polled by some snmp manager with a wrong community. This is the source of your problem.
Getting rid of the traps by defining them as "don't log or display" within Netview won't do any good as the load for trapd will still be the same, even though your event console will look cleaner.

To get the correct event definition added to Netview, you might want to use mib2trap command: mib2trap snmpv2-mib-v1 snmpv2-mib-v1.sh (cd /usr/OV/snmp_mibs first)
This will create an executable file which contains addtrap commands (command to add the events format to trapd.conf). You might want to have a look at snmpv2-mib-v1.sh content to see if it fits your need before executing it....

If you're using Netview on AIX, I would also recommend using MLMs, that's how I use to get rid of all the garbage traps by setting filters. It prevents too many unwanted events to come into Netview.

You can also modify the conf of your SAN switch so that they don't send Authentication Failures or to check (and modify?) the SNMP community names (command is snmpConfig if I remember well...)

Hope it helps

Denis


"Amir, Mohammed - Corporate Core - ICT Services" <Mohammed.Amir@Oxfordshire.gov.uk>
To
"Tivoli NetView Discussions" <nv-l@lists.ca.ibm.com>
cc
bcc
Subject
RE: [NV-L] Trapd Events 1.3.6.1.6.3.1.1.5


"Amir, Mohammed - Corporate Core - ICT Services" <Mohammed.Amir@Oxfordshire.gov.uk>  

Please respond to : Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>

Sent by: nv-l-bounces@lists.ca.ibm.com  
12/07/2007 14:29




Hi,
 
Thanks for you reply...
 
The traps are coming from our IBM SAN environment are I believe are important but need to make some sense of what it is really as I cannot get rid of the NO FMT bit...thanks.
 
Regards,
 
 
Amir
-----Original Message-----
From:
nv-l-bounces@lists.ca.ibm.com [mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of Sean Lawrence
Sent:
12 July 2007 12:37
To:
Tivoli NetView Discussions
Subject:
RE: [NV-L] Trapd Events 1.3.6.1.6.3.1.1.5

Someone please correct me if I am wrong ( I am also new to Netview)
 
Your best bet is to remove them at the source. You only want traps coming into Netview that you wish to act upon.
 
Do you know what product/device is sending them?
 
Setting up a trap for them is only going to change the formatting of the information; you will still process them through trapd and still have the associated overhead.
 
Sean Lawrence
Systems Automation Technical Specialist
905-790-5728



From: nv-l-bounces@lists.ca.ibm.com [mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of Amir, Mohammed - Corporate Core - ICT Services
Sent:
July 12, 2007 5:27 AM
To:
nv-l@lists.ca.ibm.com
Subject:
[NV-L] Trapd Events 1.3.6.1.6.3.1.1.5
Importance:
High

 
Hi,
 
First question about netivew....I am new to Netview so people I apologise in advance for any stupid questions.
 
I have a situation where I'm receiving loads of traps in trapd.log and most of them are similar to the following:
 
? NO FMT IN TRAPD.CONF: Enterprise (1.3.6.1.6.3.1.1.5) generic:4 specific:0 args(0):
 
Now this is what I have done to try and get rid of this problem
 
I have started xnmtrap and added a new Enterprise Name called Enterprise and an Enterprise ID as 1.3.6.1.6.3.1.1.5 and then added an Event Name as Authentication_Error and under generic trap I left that as Enterprise Specific with the specific trap as 0. I reloaded the trapd.conf file with event -e  FMTCHG command and was hoping that this will get rid of the NO FMT bit but I'm still getting then and this whole saga has left in confusion hence my plea for help to you guys who have worked with this product for a while now.
 
Also is there a way to acknowledge these trap events so that they stop coming into the trapd.log file once you start to action on it or you are aware of the issue ....this is to stop the log file going into some kind of trap storm which inadvertently affects demand poll and quicktest.
 
 
All help appreciated.
 
 
Many thanks.
 
 
Amir
Senior Systems Engineer
Operations Team
Oxford County Council

Oxfordshire County Council - rated a four-star 'Excellent' council by the Audit Commission

The information in this e-mail, together with any attachments, is confidential. If you have received this message in error you must not print off, copy, use or disclose the contents. The information may be covered by legal and/or professional privilege. Please delete from your system and inform the sender of the error. As an e-mail can be an informal method of communication, the views expressed may be personal to the sender and should not be taken as necessarily representing the views of the Oxfordshire County Council. As e-mails are transmitted over a public network the Oxfordshire County Council cannot accept any responsibility for the accuracy or completeness of this message. It is your responsibility to carry out all necessary virus checks. You should be aware that all emails received and sent by this Council are subject to the Freedom of Information Act 2000 and therefore may be disclosed to other parties under that Act. www.oxfordshire.gov.uk


Oxfordshire County Council - rated a four-star 'Excellent' council by the Audit Commission

The information in this e-mail, together with any attachments, is confidential. If you have received this message in error you must not print off, copy, use or disclose the contents. The information may be covered by legal and/or professional privilege. Please delete from your system and inform the sender of the error. As an e-mail can be an informal method of communication, the views expressed may be personal to the sender and should not be taken as necessarily representing the views of the Oxfordshire County Council. As e-mails are transmitted over a public network the Oxfordshire County Council cannot accept any responsibility for the accuracy or completeness of this message. It is your responsibility to carry out all necessary virus checks. You should be aware that all emails received and sent by this Council are subject to the Freedom of Information Act 2000 and therefore may be disclosed to other parties under that Act. www.oxfordshire.gov.uk
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to internal IBM'ers only)

_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)
<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web