SNMP TRAP NOT RECIEVED

[ericssonvietnam]

I have multiple node from which i am receiving the trap but not for one of my node not in unknown as well

Kindly suggest what should i check i received the trap form the node 4 months back after that nothing is there in trap history.

[tgriep]

Login to the XI GUI and go to the Admin > Unconfigured Objects menu, do you see the trap there?
If so, configure it and then the XI server will receive any new traps from that node.

If it is not in that menu, can you verify that the node is sending SNMP Traps to the XI server?
To do that, run the tcpdump command as root on the Nagios server

Code: Select all

tcpdump -n udp port 162

If tcpdump is not installed, install it by running

Code: Select all

yum install tcpdump -y

Then, force a Trap from the node and see if the tcpdump command receives it and let us know the status.

[ericssonvietnam]

Login to the XI GUI and go to the Admin > Unconfigured Objects menu, do you see the trap there?
If so, configure it and then the XI server will receive any new traps from that node.

If it is not in that menu, can you verify that the node is sending SNMP Traps to the XI server?
To do that, run the tcpdump command as root on the Nagios server

Code: Select all

tcpdump -n udp port 162

If tcpdump is not installed, install it by running

Code: Select all

yum install tcpdump -y

Then, force a Trap from the node and see if the tcpdump command receives it and let us know the status.

I have used the below command but there is no output only some packet recieved and drop can you suggest what does this output means.

root@nagiosxi snmptt]# tcpdump -n udp port 162 and src host 10.10.172.46
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
^C
0 packets captured
138 packets received by filter
107 packets dropped by kernel

What else i can test at my end.

[tgriep]

Check and see if the device's configuration is correct for sending traps to the Nagios server.
If there is a way to send a trap, try sending one and check any logs on the device to see if it was sent.
Also, if there are any firewalls between the device and the Nagios server, make sure they are setup to allow the UDP port 162 traffic.

[ericssonvietnam]

Check and see if the device's configuration is correct for sending traps to the Nagios server.
If there is a way to send a trap, try sending one and check any logs on the device to see if it was sent.
Also, if there are any firewalls between the device and the Nagios server, make sure they are setup to allow the UDP port 162 traffic.

PFA traces for the node can you let me know what this screenshot shows we also have other services configured for this node which are running fine.

10.10164.52 is my nagios server IP.

[tgriep]

That screen capture shows that there is SNMP Traffic for port 161 and it looks like it is getting polled by the Nagios server.
When a Trap is sent, it uses port 162 so maybe the device is sending on the wrong port.

What is the make and model number of the device you want to send SNMP Traps with?

[ericssonvietnam]

That screen capture shows that there is SNMP Traffic for port 161 and it looks like it is getting polled by the Nagios server.
When a Trap is sent, it uses port 162 so maybe the device is sending on the wrong port.

What is the make and model number of the device you want to send SNMP Traps with?

What configuration parameter should i have in snmp configuration in order to send trap towards my Nagios server IP 10.10.164.52
If the configuration parameters are correct will sent you the device details for further action.

[tgriep]

Without knowing what the device is that is sending the trap to the Nagios server, it is a guess.
The device should be enabled to send SNMP Traps and the IP address that is sends to would be the Nagios XI server.
If there is a community string setting, it should be set to public and if there is a SNMP version setting, set it to version 2.