Need some help with an Snmp Entry.

[skyerjoe]

Hello ssax,

Attached this are the mib files from the Directory

But when i use the oid number i thought the mibs arent really necessary

regards john

[ssax]

Is that literally everything in your /usr/share/snmp/mibs directory? If so, you are missing all of the default MIBs.

[skyerjoe]

Is that literally everything in your /usr/share/snmp/mibs directory? If so, you are missing all of the default MIBs.

Do i need the Default MIB's if my match is based only on the OID Number

regards skyerjoe

[ssax]

No, you shouldn't if you are using the full OID.

Please run these commands and post the entire output:

Code: Select all

service snmptt stop
snmptrap -v2c -cpublic 127.0.0.1 1431439518 .1.3.6.1.4.1.31440.0.6 .1.3.6.1.4.1.31440.2.2.1.1.5 i 2

Wait a couple seconds, then run:

Code: Select all

cat /var/spool/snmptt/*
service snmptt start

[skyerjoe]

The output from the Cat command:

Code: Select all

1462963749
127.0.0.1
UDP: [127.0.0.1]:37000->[127.0.0.1]
.1.3.6.1.2.1.1.3.0 165:16:13:15.18
.1.3.6.1.6.3.1.1.4.1.0 .1.3.6.1.4.1.31440.0.6
.1.3.6.1.4.1.31440.2.2.1.1.5 2

I think this is stil in place and correct

If i start snmptt and do it again the spooler is empty

Is also correct so far or ?

regards john

[ssax]

Yes, here is mine with the default MIBs installed:

Code: Select all

1462980620
localhost
UDP: [127.0.0.1]:34411->[127.0.0.1]
DISMAN-EVENT-MIB::sysUpTimeInstance 165:16:13:15.18
SNMPv2-MIB::snmpTrapOID.0 SNMPv2-SMI::enterprises.31440.0.6
SNMPv2-SMI::enterprises.31440.2.2.1.1.5 2

You can see why I had to change mine as enterprises.31440.2.2.1.1.5

So MATCH $+1:(.1.3.6.1.4.1.31440.2.2.1.1.5:2) should have worked.

Please try this one (removed the first period):

Code: Select all

MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)

[skyerjoe]

Hello Everybody

Yes i know the thread is a little bit old but the error is still present...


@ssax:

I tried this also but this doesn't working anymore:

Code: Select all

MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)

Tried also this without brackets ....


In think i have to try out a really simple trigger which has an binding maybe there is some ... Schema or sth. like that changed in an snmptt version ... so i think i need an more basic value with an basic Varable Binding

Any ideas ?

reagards john

[ssax]

Try to add all of these to your singe trap definition, when you have multiple MATCH statements on a single trap definition it acts as an OR statement to see if it meets the criteria (this is modifiable through other SNMPTT options):

Code: Select all

MATCH $+1:(.1.3.6.1.4.1.31440.2.2.1.1.5:2)
MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)
MATCH $+1:(enterprises.31440.2.2.1.1.5)

Also, please check all files in /etc/snmp and /usr/share/snmp/mibs/processed_mibs to make sure you don't have any duplicate definitions.

Thank you

[skyerjoe]

Hello ssax

I set all 3 Matches and running against the snmp services.

I checked /etc/snmp and in the snmptt.ini is no double entry for the confile

Only these 2 lines :

Code: Select all

/etc/snmp/snmptt.conf.generic
/etc/snmp/snmptt.conf.owserverwatertest1line ( this is the one i use )

In the Directory /usr/share/snmp/mibs/processed_mibs they're no mibs at all

The Traps are still only coming in the unknown snmp section:

Code: Select all

Thu Aug 25 15:42:54 2016: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from xxx.xxx.xxx.xxx at:
Value 0: xxx.xxx.xxx.xxx
Value 1: xxx.xxx.xxx.xxx
Value 2: 198:7:38:26.95
Value 3: .1.3.6.1.4.1.31440.0.6
Value 4: xxx.xxx.xxx.xxx
Value 5: public
Value 6: .1.3.6.1.4.1.31440
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.5=2


Thu Aug 25 15:42:56 2016: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from xxx.xxx.xxx.xxx at:
Value 0: xxx.xxx.xxx.xxx
Value 1: xxx.xxx.xxx.xxx
Value 2: 198:10:25:26.22
Value 3: .1.3.6.1.4.1.31440.0.6
Value 4: xxx.xxx.xxx.xxx
Value 5: public
Value 6: .1.3.6.1.4.1.31440
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.5=1

The xxx Values are just ip's

... Either there is some big mistake in an configuration or my System is kaput in any way

regards john

[ssax]

What version of SNMPTT are you running?