[NV-L] Ruleset Editing Questions
2006-10-24 10:41:06
I am trying to set up some rules to filter out traps coming for
Ciscoworks. We are getting way to many now that the network guys have
turned it on.
Is there a way to simply drop traps that have not been defined in the
trapd.conf? I do not want to keep them in Netview or forward them to TEC.
On a side note I am having trouble setting up simple rules.
I am receiving a trap from Ciscoworks with the OID of 1.3.6.1.4.1.9.1.502
I do not want this forwarded to TEC
In the ruleset defined in tecint.conf I created an Event Attributes rule.
It looks like this:
Event Stream -> (EnterpriseOID <> 1.3.6.1.4.1.9.1.502) -> Forward
I ran the nvtecia -reload command to reload the ruleset and I am still
getting these forwarded. Is there something else required to load modified
rulesets?
Sean
_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to
internal IBM'ers only)
|
|
|