James,
I'm sorry to put you into thinking on this..
Yes.. I modified ENTREPRISEDEF just to add a TEC class
slot value and nothing else. 
I'm puzzled as well on how to enable these from "log
onlY' since no OID in trapd.conf. Anyway i have asked
my VPN guys to get me the MIB. Will try doing mib2trap
and even will try just to manaully add as we are
interested only in couple trap messages as i know the
OID for that. So then will keep PMR as last option..
Many thanks as usual....
Larry
--- James Shanks <jshanks AT us.ibm DOT com> wrote:

> Hi Larry,
> 
> Well, I've worked on trapd off and on for seven
> years now, but  I'm as
> confused as you are as to what's going on.
> You didn't modify the entry for ENTERPRISESDEF  in
> trapd.conf did you?
> That's the one which determines how undefined traps
> are displayed.
> 
> You can do whatever you like -- make new definitions
> manually or with
> mib2trap/addtrap -- and those should override any
> defaults you are taking.
> But I am sorely puzzled as to how this is working
> the way that it is.  So
> perhaps Paul is right and a PMR is in order.  You
> can follow whatever
> course you choose.
> 
> James Shanks
> Level 3 Support  for Tivoli NetView for UNIX and
> Windows
> Tivoli Software / IBM Software Group
> 
> 
>                                                     
>                       
>              Larry Fagan                            
>                       
>              <larrytechie@yaho                      
>                       
>              o.com>                                 
>                    To 
>              Sent by:                 
> nv-l AT lists.us.ibm DOT com               
>              owner-nv-l@lists.                      
>                    cc 
>              us.ibm.com                             
>                       
>                                                     
>               Subject 
>                                        Re: [nv-l]
> Events in trapd.log but  
>              07/20/2005 09:33          not in
> Control desk!                
>              AM                                     
>                       
>                                                     
>                       
>                                                     
>                       
>              Please respond to                      
>                       
>                    nv-l                             
>                       
>                                                     
>                       
>                                                     
>                       
> 
> 
> 
> 
> James,
> I'm 100% sure that is no entry for 1.3.6.1.4.1.3076
> in
> trapd.conf file. I also grep'ed and found nothing.
> Do
> you want me to take a shot to add manually with this
> oid and set "status events" instead of log only".
> But
> there are so many different OID traps popping in.
> May
> be best i sto get mibs and create trap defintions
> from
> them.
> Thanks as usual,
> Larry
> 
> --- James Shanks <jshanks AT us.ibm DOT com> wrote:
> 
> > Larry,
> >
> > You may indeed wish to open a PMR as Paul suggests
> > and send them your
> > trapd.conf and trapd.log
> >
> > But from the log entries you show, these traps are
> > indeed being formatted
> > by some entries or other in your trapd.conf.
> > Are you certain that you have no entries fro an
> > enterprise which begins
> > 1.3.6.1.4.1.3076 ?  Use xnmtrap and see.  Or grep
> > fro it in
> > /usr/OV/conf/C/trapd.conf.  I'm betting there is a
> > LOG ONLY entry there.
> >
> > James Shanks
> > Level 3 Support  for Tivoli NetView for UNIX and
> > Windows
> > Tivoli Software / IBM Software Group
> >
> >
> >
> >
> >              Paul
> >
> >              <pstroud@bellsout
> >
> >              h.net>
> >                    To
> >              Sent by:
> > nv-l AT lists.us.ibm DOT com
> >              owner-nv-l@lists.
> >                    cc
> >              us.ibm.com
> >
> >
> >               Subject
> >                                        Re: [nv-l]
> > Events in trapd.log but
> >              07/19/2005 06:58          not in
> > Control desk!
> >              PM
> >
> >
> >
> >
> >
> >              Please respond to
> >
> >                    nv-l
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > No idea, you'll have to open a PMR on that
> > one....thats not right.
> >
> > Paul
> >
> > Larry Fagan wrote:
> >
> > >Paul,
> > >Thanks for looking.. we have cisco concentrator
> > >sending in traps as below:
> > >1121808440 7  Tue Jul 19 17:27:20 2005 abcd.com ?
> > >community:def
> > enterprise:1.3.6.1.4.1.3076.1.2.1.1.1.2
> > >
> > >1121808440 7  Tue Jul 19 17:27:20 2005  abcd.com
> ?
> > >AgentAddr:abcd.com generic-trap:6 time:76147227
> > >
> > >1121808440 7  Tue Jul 19 17:27:20 2005 abcd.com
> > >198867296 07/19/2005 17:28:43.890 SEV=5 IKE/50
> > >RPT=247851 XX.XXX.XXX.XX
> > >
> > >I'm sure that the oid said above is not in
> xnmtrap.
> > >but somehow these events are not making to event
> > >window neither they are coming in as no format in
> > >trapd.conf. any ideas?
> > >Many Thanks...
> > >Larry
> > >
> > >
> > >--- Paul <pstroud AT bellsouth DOT net> wrote:
> > >
> > >
> > >
> > >>Larry,
> > >>No, that's not likely. You are most likely
> > receiving
> > >>and
> > >>displaying the events, but they are displayed as
> > an
> > >>"Event with no known format" and NetView simply
> > >>dumps
> > >>all the variables. If is it NOT defined in the
> > >>trapd.log, this
> > >>is most likely how it is being displayed.
> > >>
> > >>Paul
> > >>
> > >>Larry Fagan wrote:
> > >>
> > >>
> > >>
> > >>>Hi Guys,
> > >>>I have gone through the archive's and everybody
> > >>>
> > >>>
> > >>says
> > >>
> 
=== message truncated ===


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com