nv-l

Re: [NV-L] Mcafee 'trap found with no known format' - NaiComplete.mib

2008-07-18 11:54:11
Subject: Re: [NV-L] Mcafee 'trap found with no known format' - NaiComplete.mib
From: James Shanks <jshanks AT us.ibm DOT com>
To: Tivoli NetView Discussions <nv-l AT lists.ca.ibm DOT com>
Date: Fri, 18 Jul 2008 11:52:31 -0400
I think you should open a problem to NetView Level 2 and send them the MIB.
Then you should enable packet hex dump in trapd and run the trapd.trace
while these traps are being sent in.   Then you need to send them the
trapd.log and trapd.trace., and probably your trapd.conf.

They should be able to help with  a trap format for this

Trap found with no known format in trapd.conf(4)
Enterprise mcafeeTVDTrap (1.3.6.1.4.1.3401.12))
generic trap: 6 specific trap: 1278.

But  this one is questionable
FMT Error (too large) occurred trying to format trap generic 6 specific
1059
That's what the trace is for


Hope this helps,

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Network Availability Management
Network Management - Development
Tivoli Software, IBM Corp


                                                                           
             Greg Chown                                                    
             <greg.chown AT uk DOT ib                                           
  
             m.com>                                                     To 
             Sent by:                  nv-l AT lists.ca.ibm DOT com             
  
             nv-l-bounces@list                                          cc 
             s.ca.ibm.com                                                  
                                                                   Subject 
                                       [NV-L] Mcafee 'trap found with no   
             07/18/2008 11:40          known format' - NaiComplete.mib     
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
              Tivoli NetView                                               
                Discussions                                                
             <nv-l AT lists.ca DOT ib                                           
  
                  m.com>                                                   
                                                                           
                                                                           





Hi Guys,

I've recently been 'given' Netview to look after and am finding parts of it
a very steep learning curve indeed!
This list has been extremely helpful so far, though, I must say!

I have a copy of mcafee NaiComplete.mib, against which I have run mib2trap.

I have run the resulting script and it adds everything successfully to the
trapd.conf file.
Everything looks just fine, until I send some alerts from the ePO Server
for which the MIB/traps are designed, at which point some of the traps go
into trapd.log with the following error headline (I can supply the rest of
the error if it helps):

FMT Error (too large) occurred trying to format trap generic 6 specific
1059


Alternatively, another test alert does generate an event in the dynamic
workspace, but cannot be interpreted, due to:

'Trap found with no known format in trapd.conf(4)
Enterprise mcafeeTVDTrap (1.3.6.1.4.1.3401.12)
generic trap: 6 specific trap: 1278.


I read on a NetCool board that the mcafee traps are known to not cover the
Enterprise OIDs in the proper way(?) but I don't know what to do to fix the
problem :(
I have looked for an updated version of the MIB but can find nothing.

If anyone has any idea how I should proceed, I'll be very grateful! Any
additional info can be provided.


Kind Regards,

Greg C
_________________________

Greg Chown
TP Developer / Infrastructure Specialist
RAF LITS

External: +44 (0) 1438 769 074
Internal: 449 074
email: greg.chown AT uk.ibm DOT com

I

_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to
internal IBM'ers only)




_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)