nv-l

Re: Proprietary MIB Traps

1999-11-30 12:26:31
Subject: Re: Proprietary MIB Traps
From: James Shanks <James_Shanks AT TIVOLI DOT COM>
To: nv-l AT lists.tivoli DOT com
Date: Tue, 30 Nov 1999 12:26:31 -0500
David -

I am not familiar with Fore's agent, but this sounds awfully flaky to me.   The
part about getting a trap with a specific id different than what you expected
from the doc doesn't surprise me.   Lots of agents don't do what their doc says
or actually do something not quite spelled out right in their MIB (are you sure
you have the right one?).  But the part about the specific trap id changing
every time the trap is issued has got to be something to do with the agent.  I
have been working on traps in NetView since 1996 and I have never seen trapd get
the specific id wrong.

There is a procedure to get a hex dump of the incoming trap (configure trapd to
run with the -x option, using the Framework or SMIT to set the "hex dump of all
packets" feature,  and then issue trapd -T from the command line to toggle on
the trace) but then you have to decode the trap structure to read what was sent.
A file is created, /usr/OV/log/trapd.trace, which you can match with the
trapd.log to see the incoming packet.  Not hard per se, but difficult enough if
you don't have the right SNMP book to guide you in decoding the trap, so I would
recommend you call Tivoli support if you want to go that route.

Perhaps there is another user with the Fore agent who understands what you are
seeing.  I don't.  Sorry.

James Shanks
Tivoli (NetView for UNIX) L3 Support



"Clay David (rti1dwc)" <rti1dwc AT ISMD.UPS DOT COM> on 11/30/99 11:58:29 AM

Please respond to Discussion of IBM NetView and POLYCENTER Manager on NetView
      <NV-L AT UCSBVM.UCSB DOT EDU>

To:   NV-L AT UCSBVM.UCSB DOT EDU
cc:    (bcc: James Shanks/Tivoli Systems)
Subject:  Re: Proprietary MIB Traps




James,

I actually did the your 3rd suggestion and added the -i value. Here's the
deal though, even though I defined the trap definitions I am still getting
the message about "no known format" but at least this time it specifies my
Enterprise name it's looking at. Taking a closer look I see that the
"specific trap value" being displayed in the event window does not match any
I have defined. Now is the problem with the manufacture or the trapd
interpreting the trap value. Here's the example I have defined a trap with a
specific trap value of 0 for a link down event according to the
manufacture's docs but when it gets displayed in the event window it shows
the specific trap value as 1027 AND always changes even though I am creating
the same event over and over. What do you think?

Dave

-----Original Message-----
From: James Shanks [mailto:James_Shanks AT TIVOLI DOT COM]
Sent: Tuesday, November 30, 1999 10:59 AM
To: NV-L AT UCSBVM.UCSB DOT EDU
Subject: Re: Proprietary MIB Traps




David -
I cannot take problems off the list to do any detail work on.  You have to
get
formal help from Tivoli support for that.

But, the deal is that the MIB you are using isn't complete.  It is relying
on
another MIB to provide the enterprise defintion.  A quick look at the
imports
section tells me that it is probably the Fore-Common-MIB.  The other imports
are
for standard stuff the MIB compiler already knows about.   Since mib2trap
reads
the MIB file you specify (and not the compiled MIB database) the addtrap
script
it builds doesn't know what enterprise id to use.  So you have three
choices.

(1)  you can make a new mib file, containing both the predecessor MIB
(first),
in this case the Fore-Common-MIB, I think, and the MIB with all the traps in
it
(second) so that the enterprise definition is included in the file.  Then
run
mib2trap against that and it should build the addtrap command with the
correct
value for the -i parameter.  If the Fore-Common-MIB is not the most basic
one,
then you would have to enlarge the file to include whatever that one depends
on.
(2) you can edit the MIB file with all the traps in it and add the missing
enterprise defintion.  This comes from the most basic Fore MIB and adds
their
enterprise id to the 1.3.6.1.4.1 string that all enterprises follow.   You
could
just copy this out of the other MIB and add it to the one you are using with
mib2trap, assuming you can find it, and that the second MIB picks up  from
there.  This requires that you have a little bit of experinec reading MIBs.
(3) you can edit the addtrap output and add the correct -i parameter to each
command.  After you have loaded the MIBs in the MIB browser, you can use the
browser to determine what that is.


Hope this helps
James Shanks
Tivoli (NetView for UNIX) L3 Support



"Clay David (rti1dwc)" <rti1dwc AT ISMD.UPS DOT COM> on 11/30/99 10:08:04 AM

Please respond to Discussion of IBM NetView and POLYCENTER Manager on
NetView
      <NV-L AT UCSBVM.UCSB DOT EDU>

To:   NV-L AT UCSBVM.UCSB DOT EDU
cc:    (bcc: James Shanks/Tivoli Systems)
Subject:  Re: Proprietary MIB Traps




James,

Thanks for the answer. I have used the mib2trap utility. It works fine for
some of my mibs but this one particular mib it seems to have a problem with.
The mib is named fore-switch.mib and has a statement in there for IMPORTS
RFC1215.....Now when I use the mib2trap utility it creates the script file
but gives me messages about "Enterprise object id not found for trap
xxxxxx". When looking at the script file I notice a difference from the one
that works verses the one that doesn't which is -i option is being used. The
big deal is that this mib file has about 100 trap definitions so adding them
manually will take a long time. I have enclosed the script file generated by
the mib2trap and the event created by me purposely to see what the event
shows as. Can you look at this info and tell me an easy way to accomplish
getting these trap definitions defined. Thanks very much.

Dave Clay

-----Original Message-----
From: James Shanks [mailto:James_Shanks AT TIVOLI DOT COM]
Sent: Tuesday, November 30, 1999 8:57 AM
To: NV-L AT UCSBVM.UCSB DOT EDU
Subject: Re: Proprietary MIB Traps


Trap definitions do not get added automatically in NetView.  You can use
mib2trap against a MIB containing trap definitions and it will build an
addtrap
script you can use to add definitions of traps to trapd.conf.  Or you can do
it
yourself with xnmtrap.
And you may want to use xnmtrap after you have added your definitions
because
the defaults provided by most vendors are minimal and often need
modification to
be truly valuable.

If you miss defining a trap, it is no big deal.  You will get a message in
the
trapd.log and on the event window which says "NO FMT FOUND" for that trap,
and
it will list the enterprise id, the generic and specific ids, and all the
variables, so you can easily use that information to define that trap for
the
next time.

There is a whole section on defining traps in the NetView Admin Guide.  That
should be available on-line if you installed the books.

James Shanks
Tivoli (NetView for UNIX) L3 Support



"Clay David (rti1dwc)" <rti1dwc AT ISMD.UPS DOT COM> on 11/30/99 07:54:20 AM

Please respond to Discussion of IBM NetView and POLYCENTER Manager on
NetView
      <NV-L AT UCSBVM.UCSB DOT EDU>

To:   NV-L AT UCSBVM.UCSB DOT EDU
cc:    (bcc: James Shanks/Tivoli Systems)
Subject:  Proprietary MIB Traps




I have several proprietary mibs from Fore Systems that I will be compiling
into Netview. My question is about the trap definitions in the mibs. Once I
compile the mibs will the traps defined in the mib be created within the
trapd.conf file automatically or will I have to do this manually? If I need
to do this manually what information will I need to specify in the
trapd.conf file. Thanks in advance.

Dave Clay        UPS


<Prev in Thread] Current Thread [Next in Thread>