Certainly.
All events have to go from trapd to nvcorrd to nvserverd to be displayed.
When they come into trapd very fast, all he has time to do is queue them,
so that they don't fill up his socket and cause him to lose some.
When the incoming load slows down, then he can process traps, dequeing
them, and sending them to the connected applications, such as nvcorrd.
nvcorrd sees all traps, too, including the log only ones, and he processes
each of these, and sends them to nvserverd, as well. It is only at the
events window where the Log Only stuff is ignored. If not, you couldn't
automate on it. In any case, that trap storm will slow everything to a
crawl.
Trap storms need to fixed at the source. Your Cisco devices have to be
configured not to send so much junk. It eats up bandwidth and wastes
machine cycles you need to do real work. If you cannot get them to fix
it, then you can implement an MLM as trap filter. That will keep your
NetView happy, but it won't do anything for the lost bandwidth and network
degradation a trap storm causes. One customer I know of did a study and
found that they recovered 30% of their available bandwidth by eliminating
useless traps from their routers. They now have a policy which says that
if a trap gets sent to NetView their must be someone assigned to review
that trap and take action on it. If your shop isn't doing this, you might
want to ask, "Why not?"
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"Scott Bursik" <tivoliesm AT hotmail DOT com>
03/06/2002 11:57 AM
To: nv-l AT lists.tivoli DOT com
cc:
Subject: Re: [nv-l] No events displayed
I did a daemom refresh and I am getting the event display now, but it
appears to be responding rather slow. I am getting a event storm from some
Cisco switches and I have had to contact our network folks to find out
why. There have been almost 4000 traps in the last 2 1/2 hours. Can that
cause this?
Scott Bursik
Pepsico Business Solutions Group
scott.bursik AT pbsg DOT com
>From: "James Shanks"
>To: nv-l AT lists.tivoli DOT com
>Subject: Re: [nv-l] No events displayed
>Date: Wed, 6 Mar 2002 11:29:05 -0500
>
> Try "event -h test1" and see what you get. Does he get through?
>Is nvserverd active? Do ovstatus.
>Do netstat -a | more or redirect to file. Are here any backups on the
>Send or Receive queues? If so, are you running rulesets in
>ESE.automation?
>
>
>
>James Shanks
>Level 3 Support for Tivoli NetView for UNIX and NT
>Tivoli Software / IBM Software Group
>
>
>
>
>
>
>"Scott Bursik"
>03/06/2002 09:44 AM
>
>
> To: nv-l AT lists.tivoli DOT com
> cc:
> Subject: [nv-l] No events displayed
>
>
>
>NetView 6.0.2 AIX 4.3.3
>I am having an issue where no events are being displayed in the control
>desk. Traps are being received in the trapd.log. I am using the standard,
>out of the box forwardall.rs for the events display. Any ideas?
>
>Thanks!
>Scott Bursik
>Pepsico Business Solutions Group
>scott.bursik AT pbsg DOT com
>
>Get your FREE download of MSN Explorer at http://explorer.msn.com.
>--------------------------------------------------------------------- To
>unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com For additional
>commands, e-mail: nv-l-help AT lists.tivoli DOT com *NOTE* This is not an
Offical
>Tivoli Support forum. If you need immediate assistance from Tivoli please
>call the IBM Tivoli Software Group help line at 1-800-TIVOLI8(848-6548)
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
>For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
>
>*NOTE*
>This is not an Offical Tivoli Support forum. If you need immediate
>assistance from Tivoli please call the IBM Tivoli Software Group
>help line at 1-800-TIVOLI8(848-6548)
>
MSN Photos is the easiest way to share and print your photos: Click Here
--------------------------------------------------------------------- To
unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com For additional
commands, e-mail: nv-l-help AT lists.tivoli DOT com *NOTE* This is not an
Offical
Tivoli Support forum. If you need immediate assistance from Tivoli please
call the IBM Tivoli Software Group help line at 1-800-TIVOLI8(848-6548)
|
