SNMP Traps in Nagios

[Sorin VALCU]

Hello 

 

I'm trying to use SNMP Traps in Nagios.

 

The SNMP Traps are collected by snmptrapd that passes them to
snmptthandler and then to snmptt.

Snmptt (via an EXEC command) writes a service status notification in the
nagios.cmd file.

 

The problem is that snmptt can not translate the traps received from a
cisco catalyst.

 

All OID's in the snmptt.conf file are all numeric values.

All the cisco mibs (snmp v1) are present in the /usr/share/snmp/mibs/
directory.

There is no snmp.conf file.

 

Here is the output from the snmptt.debug file.

 

Thank you for your help

 

 

Sorin V

 

 

 

 

 

Processing file: #snmptt-trap-1142269412443608

Reading trap.  Current time: Mon Mar 12 11:00:00 2006

Symbolic trap variable name detected (SNMPv2-MIB::sysUpTime.0).  Will
attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected (SNMPv2-MIB::snmpTrapOID.0).  Will
attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1).  Will attempt to translate to
a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(TCP-MIB::tcpConnState.172.18.36.31.80.172.18.36.50.3399).  Will attempt
to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMPv2-SMI::enterprises.9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399).
Will attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMPv2-SMI::enterprises.9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399).
Will attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMPv2-SMI::enterprises.9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399).
Will attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMPv2-SMI::enterprises.9.2.9.2.1.18.4).  Will attempt to translate to
a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMP-COMMUNITY-MIB::snmpTrapAddress.0).  Will attempt to translate to a
numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected
(SNMP-COMMUNITY-MIB::snmpTrapCommunity.0).  Will attempt to translate to
a numerical OID

  Could not translate - will leave as-is

 

Symbolic trap variable name detected (SNMPv2-MIB::snmpTrapEnterprise.0).
Will attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

 

Items passed from snmptrapd:

value 0: testcisco

 

value 1: 123.123.123.123

 

value 2: SNMPv2-MIB::sysUpTime.0

 

value 3: 0:5:49:22.74

 

value 4: SNMPv2-MIB::snmpTrapOID.0

 

value 5: SNMPv2-SMI::enterprises.9.0.1

 

value 6: SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1

 

value 7: 5

 

value 8: TCP-MIB::tcpConnState.172.18.36.31.80.172.18.36.50.3399

 

value 9: established

 

value 10:
SNMPv2-SMI::enterprises.9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399

 

value 11: 0:0:00:01.48

 

value 12:
SNMPv2-SMI::enterprises.9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399

 

value 13: 470

 

value 14:
SNMPv2-SMI::enterprises.9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399

 

value 15: 5343

 

value 16: SNMPv2-SMI::enterprises.9.2.9.2.1.18.4

 

value 17: 

 

value 18: SNMP-COMMUNITY-MIB::snmpTrapAddress.0

 

value 19: 123.123.123.123

 

value 20: SNMP-COMMUNITY-MIB::snmpTrapCommunity.0

 

value 21: public

 

value 22: SNMPv2-MIB::snmpTrapEnterprise.0

 

value 23: SNMPv2-SMI::enterprises.9

 

Symbolic trap variable name detected (SNMPv2-SMI::enterprises.9.0.1).
Will attempt to translate to a numerical OID

  Could not translate - will leave as-is

 

Agent IP address was blank, so setting to the same as the host IP
address of 123.123.123.123

 

Agent IP address (123.123.123.123) is the same as the host IP, so
copying the host name: testcisco

 

Trap received from comm4e-droite.lotsys.corp:
SNMPv2-SMI::enterprises.9.0.1

0:          hostname

1:          ip address

2:          uptime

3:          trapname / OID

4:          ip address from trap agent

5:          trap community string

6:          enterprise

0+:         passed variables

 

Value 0: testcisco

 

Value 1: 123.123.123.123

 

Value 2: 0:5:49:22.74

 

Value 3: SNMPv2-SMI::enterprises.9.0.1

 

Value 4: 123.123.123.123

 

Value 5: 

 

Value 6: 

 

Agent dns name: testcisco

 

Ent Value 0 ($1): SNMPv2-SMI::enterprises.9.2.9.3.1.1.4.1=5

 

Ent Value 1 ($2):
TCP-MIB::tcpConnState.172.18.36.31.80.172.18.36.50.3399=established

 

Ent Value 2 ($3):
SNMPv2-SMI::enterprises.9.2.6.1.1.5.172.18.36.31.80.172.18.36.50.3399=0:
0:00:01.48

 

Ent Value 3 ($4):
SNMPv2-SMI::enterprises.9.2.6.1.1.1.172.18.36.31.80.172.18.36.50.3399=47
0

 

Ent Value 4 ($5):
SNMPv2-SMI::enterprises.9.2.6.1.1.2.172.18.36.31.80.172.18.36.50.3399=53
43

 

Ent Value 5 ($6): SNMPv2-SMI::enterprises.9.2.9.2.1.18.4=

 

Ent Value 6 ($7): SNMP-COMMUNITY-MIB::snmpTrapAddress.0=123.123.123.123

 

Ent Value 7 ($8): SNMP-COMMUNITY-MIB::snmpTrapCommunity.0=public

 

Ent Value 8 ($9):
SNMPv2-MIB::snmpTrapEnterprise.0=SNMPv2-SMI::enterprises.9

 

Exact match of trap NOT found in EVENT hash table

 

Looking for wildcards in the EVENT hash table

Drilling down looking for wildcards in the EVENT hash table

SNMPv2-SMI::enterprises.9.0.*

 

Drilling down looking for wildcards in the EVENT hash table

SNMPv2-SMI::enterprises.9.*

 

Trap not defined...

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060314/13181ab4/attachment.html>