SNMP Traps not coming up in XI

[frisked]

I've gone through the steps in http://assets.nagios.com/downloads/nagi ... ios_XI.pdf but i still can't get SNMP Traps to work in our environment. Trying to get some printer traps and the only thing I'm getting is the below in the /var/log/snmptt/snmpttunknown.log file.

Value 0: lexmark_1
Value 1: 10.20.1.219
Value 2: 3:20:47:54.30
Value 3: .1.3.6.1.4.1.641.0.1
Value 4: 10.20.1.219
Value 5: public
Value 6: .1.3.6.1.4.1.641
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.641.6.5.1.1.1.1.48=48
Ent Value 1: .1.3.6.1.4.1.641.6.5.1.1.2.1.48=2
Ent Value 2: .1.3.6.1.4.1.641.6.5.1.1.3.1.48=3
Ent Value 3: .1.3.6.1.4.1.641.6.5.1.1.4.1.48=5
Ent Value 4: .1.3.6.1.4.1.641.6.5.1.1.5.1.48=301
Ent Value 5: .1.3.6.1.4.1.641.6.5.1.1.6.1.48=Tray 1 Missing
Ent Value 6: .1.3.6.1.4.1.641.6.5.1.1.7.1.48=FixedId=35;Triplet=01-01-03;TrayName=1

I have added the MIBs through the XI interface. Any idea why it would keep going to unknown?

[sreinhardt]

When you added the mib to XI via the web ui, did you also check the box for processing traps? Could you send me the following files:

Code: Select all

/etc/snmp/snmptt.ini
/etc/snmp/snmptt.conf

tail -n 50 /var/log/snmptt/snmptt.log

The mib that you uploaded for your printers.

Generally when you get unknown, this is either because the corresponding mib was not loaded onto this system, or the device and mib are not reporting the same OID. Let's see if we can find out which it is.

[frisked]

When you added the mib to XI via the web ui, did you also check the box for processing traps? Could you send me the following files:

I missed that part thanks, when i tried to add the mib I got
Failed to convert uploaded file to snmptt mib.. (rc: 13)

Code: Select all

/etc/snmp/snmptt.ini
[attachment=1]snmptt.ini[/attachment]
/etc/snmp/snmptt.conf
[attachment=0]snmptt.conf[/attachment]

tail -n 50 /var/log/snmptt/snmptt.log
Did not return anything

The mib that you uploaded for your printers.

lexmark1.txt

Thanks for your help

[abrist]

Well, we need to see the snmptt log, is snmptt running?

Code: Select all

service snmptt status

Are the traps appearing in the unknown log?

Code: Select all

tail -n -50 /var/log/snmptt/ snmpttunknown.log

[frisked]

[root@Nagios-XI ~]# service snmptt status
snmptt (pid 9430) is running...


Still popping up in unknown

[root@Nagios-XI ~]# tail -n -50 /var/log/snmptt/snmpttunknown.log
Value 6: .1.3.6.1.2.1.43
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.2.1.43.18.1.1.1.1.159=159
Ent Value 1: .1.3.6.1.2.1.43.18.1.1.2.1.159=3
Ent Value 2: .1.3.6.1.2.1.43.18.1.1.3.1.159=3
Ent Value 3: .1.3.6.1.2.1.43.18.1.1.4.1.159=6
Ent Value 4: .1.3.6.1.2.1.43.18.1.1.5.1.159=6
Ent Value 5: .1.3.6.1.2.1.43.18.1.1.6.1.159=-2
Ent Value 6: .1.3.6.1.2.1.43.18.1.1.7.1.159=18


Fri Jul 25 11:11:02 2014: Unknown trap (.1.3.6.1.4.1.641.0.1) received from lexi_mx710de_1 at:
Value 0: lexi_mx710de_1
Value 1: 10.0.1.219
Value 2: 4:0:16:19.47
Value 3: .1.3.6.1.4.1.641.0.1
Value 4: 10.0.1.219
Value 5: public
Value 6: .1.3.6.1.4.1.641
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.641.6.5.1.1.1.1.159=159
Ent Value 1: .1.3.6.1.4.1.641.6.5.1.1.2.1.159=2
Ent Value 2: .1.3.6.1.4.1.641.6.5.1.1.3.1.159=0
Ent Value 3: .1.3.6.1.4.1.641.6.5.1.1.4.1.159=5
Ent Value 4: .1.3.6.1.4.1.641.6.5.1.1.5.1.159=3
Ent Value 5: .1.3.6.1.4.1.641.6.5.1.1.6.1.159=Close Door
Ent Value 6: .1.3.6.1.4.1.641.6.5.1.1.7.1.159=FixedId=9;Triplet=0a-02-01;


Fri Jul 25 11:11:16 2014: Unknown trap (.1.3.6.1.4.1.641.0.0) received from lexi_mx710de_1 at:
Value 0: lexi_mx710de_1
Value 1: 10.0.1.219
Value 2: 4:0:16:34.68
Value 3: .1.3.6.1.4.1.641.0.0
Value 4: 10.0.1.219
Value 5: public
Value 6: .1.3.6.1.4.1.641
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.641.2.1.3.1.2.1=0

[sreinhardt]

Trying to import the mib you provided throws a whole lot of errors for an incorrect object type/format, and is not getting imported properly with snmpttconvertmib or addmib commands.

Bad format of optional clauses (The): At line 1578 in /usr/share/snmp/mibs/lexmark1.txt
Bad parse of OBJECT-TYPE: At line 1578 in /usr/share/snmp/mibs/lexmark1.txt
Unknown object identifier: LEXMARK-PVT-MIB::irCleared

I tried a few things to work around this, and nothing seems to clear it up. However I was able to find the version just before this (3.1.5) and that does load correctly and looks like it has close if not matching oids. You can find it here http://support.lexmark.com/index?page=c ... &id=DR6282

I would note that your device seems to be incorrectly sending .641.0.0 instead of 641.1.0, assuming the traps you showed was for an error and clearing of error on the device. Because of this, we may still need to alter the config once the mib has been imported.