It is rather hard to explain, but I will try.
trapd looks for the closest match in trapd.conf, and formats the incoming
trap according to that. You only get "no fmt found" when there is nothing
even close.
In this case, with a generic value of 6 with the specific value of 0, he
thinks that what you are trying to format is a version of the standard
generic trap zero, a coldstart trap, and he already has a definition for
that under ENTERPRISES, 1.3.6.1.4.1, (which is why it says in the log that
the enterprise id is ENTERPRISES).
This may or may not be clear, but don't worry about it. Why not just fix
it?
As root run xnmtrap, and when it starts click "Add" in the upper section
where the enterprises are defined and just add this one. Call it whatever
you like, (the vendor's name perhaps?), and give the enterprise id as
"1.3.6.1.41.2620.1.1" (don't start with a dot, that is assumed here) and
then click "OK" That will define the enterprise. Then the bottom half of
the page in xnmtrap will empty and the "Add" button will highlight. Click
it to add an entry for this trap. Call it whatever you like, but make
sure the Enterprise Specific box is shown below "Generic Trap" and type in
"0" for the "Specific Trap Number". If you just click "OK" at this
point, then the next time the trap comes it will format according to what
is shown under "Event Log Message". There is only one variable -- that
long ASCII string which you see in the log, so there isn't much point in
getting too fancy here.
Hope this helps
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"D'Apice, Dominic" <D.D'Apice AT SAQ.qc DOT ca>
04/08/2002 11:48 AM
To: "'nv-l AT lists.tivoli DOT com'" <nv-l AT lists.tivoli DOT com>
cc:
Subject: [nv-l] unformat trap question
When we don't provide any specific trap for a vendor, it is normal that i
even have a format event ?
I mean i was suppose to have "trap found with no format" in event windows
.
but instead of that i have formatted trap like this :
----------------------------------------------------------------------------
------------------------------------------------------------------------
Thu Apr 04 10:20:58 2002 sxpcmc0001.saq. ? Enterprise specific trap (0)
from
ENTERPRISES: args(1):
[1] private.enterprises.2620.1.1.11.0 (OctetString): 4Apr2002 10:20:47
drop SAQ1_EXT >eth-s1p1c0
snmptrap proto udp src MERLOT_COURRIER_INT dst 172.20.29.60 service
netbios-ns s_port netbios-ns
len 78 rule 18 xlatesrc MERLOT_COURRIER_INT xlatedst 172.20.29.60
xlatesport
netbios-ns xlatedport netbios-ns
community:public enterprise:1.3.6.1.4.1.2620.1.1
AgentAddr:sxpcmc0001.saq.qc.ca generic-trap:6 time:0
SPECIFIC : 0 (hex: 0)
GENERIC : 6
CATEGORY : Status Events
ENTERPRISE : ENTERPRISES 1.3.6.1.4.1.2620.1.1
SOURCE : Source not known (?)
HOSTNAME : sxpcmc0001.saq.qc.ca
SEVERITY : Indeterminate
LOGGEDTIME : 04/04/02 10:20:58
----------------------------------------------------------------------------
----------------------------------------------------------------------
also, i was thinking that a specific trap of "0" was not permit,
if we put this value on the snmptrap command no trap is display in the
event
windows
can someone explain to me ?
Thank in advance
> Dominic D'Apice
> * D.D'Apice AT saq.qc DOT ca
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|
