SNMP trap not captured by Nagiosxi

[jkettu]

Moderator Edit: This thread has been split from another - https://support.nagios.com/forum/viewto ... 16&t=47413

In the future, please create a new thread and link to the old one instead of adding on.

Hi,

I'm having the exact same issue with few new devices.
I can't see the trap in /var/log/messages

tcpdump output:

Code: Select all

08:31:01.953222 IP (tos 0x0, ttl 248, id 5, offset 0, flags [none], proto UDP (17), length 195)
    1.2.3.4.62235 > nagiosxi.snmptrap: [udp sum ok]  
{ 
SNMPv2c C=5tK42fMW { V2Trap(148) R=31  system.sysUpTime.0=1399809958 S:1.1.4.1.0=S:1.1.5.4 interfaces.ifTable.ifEntry.ifIndex.3=3 interfaces.ifTable.ifEntry.ifDescr.3="GigabitEthernet0/1" interfaces.ifTable.ifEntry.ifType.3=6 E:cisco.2.2.1.1.20.3="Link up" } 
}

[npolovenko]

Hello, @jkettu.
Can you upload /etc/snmp/snmptt.conf and /etc/snmp/snmptt.ini files?

Were SNMP traps working previously for you? Did you follow https://assets.nagios.com/downloads/nag ... 2hEALw_wcB or another guide/steps?

[nfv_nagios]

Hi Support

Please refer to attached for the tcpdump, snmptt.ini and snmptt.conf.

So far this is the only node which i do not see any messages logged in /var/log/snmptt or /var/log/messages, i do not have issues with other nodes.

[cdienger]

The config looks good. There could be firewall rules dropping traffic from this specific client. Run:

iptables -L

and check for anything that may be DROP or REJECT that applie to the client's traffic.

If that doesn't help resolve the problem, please open a ticket at support.nagios.com/tickets/ and provide a profile which can be generated under Admin > System Config > System Profile > Download System Profile.

[nfv_nagios]

There is nothing in iptables.

# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

I have logged a support ticket and waiting for response.

Thank you.

[cdienger]

Thanks. We'll continue to work through the ticket then.