The problem is that i would like to receive snmp trap from checkpoint
firewall, according to the mib, i should receive (if i understand) 11 traps
from the checkpoint server. but right now i reveive only 1 trap... can you
tell me if the MIB has 11 traps ? should i define 10 other traps (see the
mib below) ?
even i define 11 traps from the xnmptrap netview windows, it is possible
that the checkpoint server send to netview only one trap ? must he define
the traps also individualy (like netview) ? thank
a part of mib file :
--------------------
CHECKPOINT-MIB DEFINITIONS ::= BEGIN
-- SUBTREE: 1.3.6.1.4.1.2620.1.1
-- iso.org.dod.internet.private.enterprises.checkpoint.products.fw
IMPORTS
enterprises
FROM RFC1155-SMI
TRAP-TYPE
FROM RFC-1215
OBJECT-TYPE
FROM RFC-1212;
-- textual conventions
DisplayString ::=
OCTET STRING
-- This data type is used to model textual information taken
-- from the NVT ASCII character set. By convention, objects
-- with this syntax are declared as having
--
-- SIZE (0..255)
checkpoint OBJECT IDENTIFIER ::= { enterprises 2620 }
products OBJECT IDENTIFIER ::= { checkpoint 1 }
fw OBJECT IDENTIFIER ::= { products 1 }
-- the FW group
-- Overall statistics and state
-- To be added a table of statistics by interfaces.
fwModuleState OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The state of the fw module."
::= { fw 1 }
fwFilterName OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the loaded filter."
::= { fw 2 }
fwFilterDate OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"When was the filter installed (STRING!)"
::= { fw 3 }
fwAccepted OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of accepted packets."
::= { fw 4 }
fwRejected OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of rejected packets."
::= { fw 5 }
fwDropped OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of dropped packets."
::= { fw 6 }
fwLogged OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of logged packets."
::= { fw 7 }
fwMajor OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Major Version."
::= { fw 8 }
fwMinor OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Minor Version."
::= { fw 9 }
fwProduct OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Product."
::= { fw 10 }
fwEvent OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A string containing the last snmp trap sent via fw"
::= { fw 11 }
fwTrap TRAP-TYPE
ENTERPRISE fw
VARIABLES { fwEvent }
DESCRIPTION
"FireWall-1 SNMP trap"
::= 0
END
-----Message d'origine-----
De : Leslie Clark [mailto:lclark AT us.ibm DOT com]
Envoyé : 19 avril, 2002 06:54
À : nv-l AT lists.tivoli DOT com
Objet : Re: [nv-l] trace on what variables a specific trap send to
netview
When I'm trying to figure out what varbinds an agent is sending, I
just configure the trap format with '$*' so it will show however many
there actually are, right in the events display. This gets me by
Netview's insistance that I guess correctly about the number. Once
I know what the number is, I change the format to just show the
bindings I want.
I suspect that you are investigating a different problem, though.
If you tell us what it is, maybe someone can help.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Detroit
James
Shanks/Raleigh/IB To:
nv-l AT lists.tivoli DOT com
M@IBMUS cc:
Subject: Re: [nv-l] trace on
what variables a specific trap send to
04/18/2002 10:55 netview
AM
There is a trace function in trapd, which will show you the contents of
each trap received in hexadecimal. The parts that are ASCII characters
are shown also in an "eyecatcher" which is also printed with the trace. If
you want to understand the complete hexadecimal output, you would have to
get a book on SNMP formats and decode that trap. Otherwise you could
call Support and have them do it for you, if you require proof that trapd
is telling the truth about what he got.
If that's what you want to do, use serversetup to configure trapd to hex
dump all packets. This causes him to run with the -x option. Then when
he is up and running and you want to capture something in the trace, you
type "trapd -T" to toggle the trace on. Typing "trapd -T from the command
line turns it off again. Unless you change it, the name of the trace file
will be /usr/OV/log/trapd.trace.
But if trapd says it only got one variable, the fact is that it only got
one variable. He's never been wrong about that before in the 6 years I
have been working on this product. That's all your agent sent.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"D'Apice, Dominic" <D.D'Apice AT SAQ.qc DOT ca>
04/18/2002 10:39 AM
To: "'nv-l AT lists.tivoli DOT com'" <nv-l AT lists.tivoli DOT com>
cc:
Subject: [nv-l] trace on what variables a specific trap send
to netview
hi, nv7.1 and aix 4.3.3
There is a way to put a trace on what variables a specific trap send to
netview ?
one of my trap send to me only one variable ($1). i try to put $2 $3...
(in
option/snnmp trap custm...) and the result was than netview tell me that
he
receive only one variable
thank
> Dominic D'Apice
> Technicien informatique (OGEINF)
> Société des Alcools du Québec
> 2021 des futailles, Montréal Québec H1N 3M7
> * (514) 253-6015
> * D.D'Apice AT saq.qc DOT ca
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|
