[nv-l] trapd dropping last digit from incoming snmpv2 traps?

2002-10-08 17:08:44
Subject: [nv-l] trapd dropping last digit from incoming snmpv2 traps?
From: "Jerald Jackson" <Jerald.Jackson AT bcbsnc DOT com>
To: "<"<nv-l AT lists.tivoli DOT com>
Date: Tue, 08 Oct 2002 17:08:44 -0400
Using: Netview 7.1.2 and AIX 4.3.3

I have seen quite a few posts that hint at this, but am just experiencing the 
pain for myself.

I am attempting to catch events generated from a veritas cluster server (VCS).  
product will only send traps in snmpv2 format.  

I formated addtrap lines using the mib2trap command on the vcs.mib file 
distributed by Veritas
and modified the result to forward to another NetView server, then ran the 
resulting addtrap

The /usr/OV/conf/C/trapd.conf file contains the following configuration for the 
trap I then sent
as a test:
clusterGUIUserLoginTrap {} 6 2 A 2 0 "Application 
Alert Events"
VCS user has logged in
EVENT_CLASS clusterGUIUserLoginTrap
 severityId $V1
 eventTime $V2
 entityName $V3
 entityType $V4
 entitySubType $V5
 entityState $V6
 trapOrigin $V7
 systemName $V8
 systemLocation $V9
 entityContainer $V10
 entityOwner $V11
 message $V12
The VCS GUI user log in.

The result of sending that trap displayed the following in the nvevents window.

? Trap found with no known format in trapd.conf(4)
 Enterprise Veritas-VCS ( community public
 generic trap:6 specific trap:2
 Timestamp:35540000 Agentaddr:svcah02 args(10):
 [1] private.enterprises.1302. (Integer): 0
 [2] private.enterprises.1302. (OctetString): Tue Oct  8 16:44:31 
 [3] private.enterprises.1302. (OctetString): hostname1
 [4] private.enterprises.1302. (OctetString): VCS
 [5] private.enterprises.1302. (OctetString): user1
  [6] private.enterprises.1302. (OctetString): User has logged into 
 [7] private.enterprises.1302. (OctetString): Veritas_Cluster_Server
 [8] private.enterprises.1302. (OctetString): hostname1
 [9] private.enterprises.1302. (OctetString): BFDBcluster1
 [10] private.enterprises.1302. (OctetString): VCS

SPECIFIC   : 2 (hex: 2)
GENERIC    : 6
CATEGORY   : Status Events
SOURCE     : Source not known (?)
HOSTNAME   : hostname1
SEVERITY   : Indeterminate
LOGGEDTIME : 10/08/02 16:43:47

It appears to me that the trapd for NetView is dropping the "6" from the end of 
the OID.
It should be with a specific of "2".

The VCS cluster is sending the correct trap info as seen below.  I basically 
used snmptrapd -P from the Net-SNMP 
open source package to verify the following:

Output from Net-SNMP snmptrapd -P
2002-10-08 16:48:43 2002-10-08 16:48:43 NET-SNMP version 5.0.5 Started.
2002-10-08 16:48:51 2002-10-08 16:48:51 svcah02 []:
        SNMPv2-MIB::sysUpTime.0 = Timeticks: (35580000) 4 days, 2:50:00.00      
SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1302.      
SNMPv2-SMI::enterprises.1302. = INTEGER: 0   
SNMPv2-SMI::enterprises.1302. = STRING: "Tue Oct  8 16:49:34 2002."  
SNMPv2-SMI::enterprises.1302. = STRING: "hostname1"     
SNMPv2-SMI::enterprises.1302. = STRING: "VCS" 
SNMPv2-SMI::enterprises.1302. = STRING: "user1"      
SNMPv2-SMI::enterprises.1302. = STRING: "User has logged into VCS"    
SNMPv2-SMI::enterprises.1302. = STRING: "Veritas_Cluster_Server"      
SNMPv2-SMI::enterprises.1302. = STRING: "hostname1"     
SNMPv2-SMI::enterprises.1302. = STRING: "BFDBcluster1"       
SNMPv2-SMI::enterprises.1302. = STRING: "VCS"
SNMPv2-MIB::sysUpTime.0 4:2:50:00.00
SNMPv2-MIB::snmpTrapOID.0 SNMPv2-SMI::enterprises.1302.
SNMPv2-SMI::enterprises.1302. 0
SNMPv2-SMI::enterprises.1302. "Tue Oct  8 16:49:34 2002."
"Tue Oct  8 16:49:34 2002."
SNMPv2-SMI::enterprises.1302. "hostname1"
SNMPv2-SMI::enterprises.1302. "VCS"
SNMPv2-SMI::enterprises.1302. "user1"
SNMPv2-SMI::enterprises.1302. "User has logged into VCS"
"User has logged into VCS"
SNMPv2-SMI::enterprises.1302. "Veritas_Cluster_Server"
SNMPv2-SMI::enterprises.1302. "hostname1"
SNMPv2-SMI::enterprises.1302. "BFDBcluster1"
SNMPv2-SMI::enterprises.1302. "VCS"

This isn't the only case where I have had this problem.  We also use an IBM 
3584 which is connected to our network and has the 
ability to send snmpv2 events to a console.  After I loaded its mib information 
(which I did by hand through the xnmtrap gui), I 
experienced the same result, though I haven't the output to show right now.

Am I loading these traps incorrectly?  I have noticed a few other posts with 
similar problems, but no one really stating that there
was a resolution.


Jerald Jackson

<Prev in Thread] Current Thread [Next in Thread>