yes, this is what i was thinking.
i think that checkpoint send me only one trap and the other variables did'nt
not be send
but just before i close the checkpoint subject :
can i put more than one variable in the mib trap ? i mean like that (or it's
no possible:
fwTrap TRAP-TYPE
ENTERPRISE fw
VARIABLES { fwEvent,fwxxx,fwrejected, }
DESCRIPTION
"FireWall-1 SNMP trap"
::= 0
other people of my cie will call checkpoint support
thank and i'M gonna let you know what was the problem or the misunderstood
thank again and have a good weekend
-----Message d'origine-----
De : James Shanks [mailto:jshanks AT us.ibm DOT com]
Envoyé : 19 avril, 2002 09:03
À : nv-l AT lists.tivoli DOT com
Objet : RE: [nv-l] trace on what variables a specific trap send to
netvie w
Dominic -
As the saying in the States goes, "you are barking up the wrong tree." You
are looking for an answer in NetView when it is in Checkpoint.
You cannot force the Checkpoint device to send you a trap by defining it
in NetView. That is completely up to the agent on the Checkpoint device.
If you believe it is not working correctly then you must either review the
Checkpoint documentation and see if there is some configuration parameter
which has been missed, or you must contact the support people at
Checkpoint and tell them about your problem.
But as far as the MIB goes, only one trap is defined (by the TRAP-TYPE)
statement and that construct says that the trap will be specific number
0, and that it will contain one variable, fwEvent. So it would appear
from your earlier posts that this is all you are supposed to get from this
MIB. I cannot tell you, of course, whether Checkpoint also supports other
MIBs as well, nor if so, whether they also have traps. Only Checkpoint
can tell you that.
fwTrap TRAP-TYPE
ENTERPRISE fw
VARIABLES { fwEvent }
DESCRIPTION
"FireWall-1 SNMP trap"
::= 0
Hope this helps
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"D'Apice, Dominic" <D.D'Apice AT SAQ.qc DOT ca>
04/19/2002 08:23 AM
To: Leslie Clark/Southfield/IBM@IBMUS, nv-l AT lists.tivoli DOT com
cc:
Subject: RE: [nv-l] trace on what variables a specific trap
send to netvie w
The problem is that i would like to receive snmp trap from checkpoint
firewall, according to the mib, i should receive (if i understand) 11
traps
from the checkpoint server. but right now i reveive only 1 trap... can you
tell me if the MIB has 11 traps ? should i define 10 other traps (see the
mib below) ?
even i define 11 traps from the xnmptrap netview windows, it is possible
that the checkpoint server send to netview only one trap ? must he define
the traps also individualy (like netview) ? thank
a part of mib file :
--------------------
CHECKPOINT-MIB DEFINITIONS ::= BEGIN
-- SUBTREE: 1.3.6.1.4.1.2620.1.1
-- iso.org.dod.internet.private.enterprises.checkpoint.products.fw
IMPORTS
enterprises
FROM RFC1155-SMI
TRAP-TYPE
FROM RFC-1215
OBJECT-TYPE
FROM RFC-1212;
-- textual conventions
DisplayString ::=
OCTET STRING
-- This data type is used to model textual information taken
-- from the NVT ASCII character set. By convention, objects
-- with this syntax are declared as having
--
-- SIZE (0..255)
checkpoint OBJECT IDENTIFIER ::= { enterprises 2620 }
products OBJECT IDENTIFIER ::= { checkpoint 1 }
fw OBJECT IDENTIFIER ::= { products 1 }
-- the FW group
-- Overall statistics and state
-- To be added a table of statistics by interfaces.
fwModuleState OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The state of the fw module."
::= { fw 1 }
fwFilterName OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The name of the loaded filter."
::= { fw 2 }
fwFilterDate OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"When was the filter installed (STRING!)"
::= { fw 3 }
fwAccepted OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of accepted packets."
::= { fw 4 }
fwRejected OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of rejected packets."
::= { fw 5 }
fwDropped OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of dropped packets."
::= { fw 6 }
fwLogged OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The number of logged packets."
::= { fw 7 }
fwMajor OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Major Version."
::= { fw 8 }
fwMinor OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Minor Version."
::= { fw 9 }
fwProduct OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTION
"FireWall-1 Product."
::= { fw 10 }
fwEvent OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A string containing the last snmp trap sent via fw"
::= { fw 11 }
fwTrap TRAP-TYPE
ENTERPRISE fw
VARIABLES { fwEvent }
DESCRIPTION
"FireWall-1 SNMP trap"
::= 0
END
-----Message d'origine-----
De : Leslie Clark [mailto:lclark AT us.ibm DOT com]
Envoyé : 19 avril, 2002 06:54
À : nv-l AT lists.tivoli DOT com
Objet : Re: [nv-l] trace on what variables a specific trap send to
netview
When I'm trying to figure out what varbinds an agent is sending, I
just configure the trap format with '$*' so it will show however many
there actually are, right in the events display. This gets me by
Netview's insistance that I guess correctly about the number. Once
I know what the number is, I change the format to just show the
bindings I want.
I suspect that you are investigating a different problem, though.
If you tell us what it is, maybe someone can help.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Detroit
James
Shanks/Raleigh/IB To:
nv-l AT lists.tivoli DOT com
M@IBMUS cc:
Subject: Re: [nv-l] trace
on
what variables a specific trap send to
04/18/2002 10:55 netview
AM
There is a trace function in trapd, which will show you the contents of
each trap received in hexadecimal. The parts that are ASCII characters
are shown also in an "eyecatcher" which is also printed with the trace. If
you want to understand the complete hexadecimal output, you would have to
get a book on SNMP formats and decode that trap. Otherwise you could
call Support and have them do it for you, if you require proof that trapd
is telling the truth about what he got.
If that's what you want to do, use serversetup to configure trapd to hex
dump all packets. This causes him to run with the -x option. Then when
he is up and running and you want to capture something in the trace, you
type "trapd -T" to toggle the trace on. Typing "trapd -T from the command
line turns it off again. Unless you change it, the name of the trace file
will be /usr/OV/log/trapd.trace.
But if trapd says it only got one variable, the fact is that it only got
one variable. He's never been wrong about that before in the 6 years I
have been working on this product. That's all your agent sent.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"D'Apice, Dominic" <D.D'Apice AT SAQ.qc DOT ca>
04/18/2002 10:39 AM
To: "'nv-l AT lists.tivoli DOT com'" <nv-l AT lists.tivoli DOT com>
cc:
Subject: [nv-l] trace on what variables a specific trap
send
to netview
hi, nv7.1 and aix 4.3.3
There is a way to put a trace on what variables a specific trap send to
netview ?
one of my trap send to me only one variable ($1). i try to put $2 $3...
(in
option/snnmp trap custm...) and the result was than netview tell me that
he
receive only one variable
thank
> Dominic D'Apice
> Technicien informatique (OGEINF)
> Société des Alcools du Québec
> 2021 des futailles, Montréal Québec H1N 3M7
> * (514) 253-6015
> * D.D'Apice AT saq.qc DOT ca
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|