SNMP traps OK: TRAP RESET

[btgnrw]

Hi,

Our environment is RHEL 7.4
The snmptt.service is active (running)
Entries can be seen in snmptt.log
/etc/snmp/snmptt.ini has:

Code: Select all

[TrapFiles]
# A list of snmptt.conf files (this is NOT the snmptrapd.conf file).  The COMPLETE path
# and filename.  Ex: '/etc/snmp/snmptt.conf'
snmptt_conf_files = <<END
/etc/snmp/snmptt.conf
/usr/share/snmp/mibs/processed_mibs
/usr/share/snmp/mibs/
END

It seems that XI is not parsing the traps for entires in snmptt.log the associated trap service for the host shows : OK: no data received yet.

Is there anything obvious that could be causing this?

[npolovenko]

Hello, @btgnrw
Would you be able to upload the etc/snmp/snmptt.conf , /var/log/snmptt/snmptt.log and /usr/local/nagios/var/nagios.log files here?

[cdienger]

It could be that the service has the freshness option enabled which will clear the results after a set amount of time and display this message. Edit it in the CCM and check for this under the Check_Settings tab. The option could also be inherited from a template applied to the service.

Other things to check/try:

/usr/share/snmp/mibs/processed_mibs and usr/share/snmp/mibs/ and shouldn't need to be listed like that. Was https://assets.nagios.com/downloads/nag ... ios_XI.pdf to set this up? Do the examples in there work?

Make sure the snmptrapd service is running with:

Code: Select all

netstat -nap | grep 162

/etc/snmp/snmptt.conf may not be configured correctly as well. Doublecheck this file to make sure that an EVENT in there matches what is seen in the snmptt.log.

[btgnrw]

snmptt running:

Code: Select all

 snmptt.service - SNMP Trap Translator (SNMPTT)
   Loaded: loaded (/usr/lib/systemd/system/snmptt.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2018-02-23 15:15:13 GMT; 56min ago
 Main PID: 41842 (snmptt)
   CGroup: /system.slice/snmptt.service
           ├─41840 /usr/bin/perl /usr/sbin/snmptt --daemon
           └─41842 /usr/bin/perl /usr/sbin/snmptt --daemon

Feb 23 15:15:13 NAGIOS systemd[1]: Starting SNMP Trap Translator (SNMPTT)...
Feb 23 15:15:13 NAGIOS snmptt-sys[41678]: SNMPTT v1.4beta2 started
Feb 23 15:15:13 NAGIOS snmptt-sys[41678]: Loading /etc/snmp/snmptt.conf
Feb 23 15:15:13 NAGIOS snmptt-sys[41678]: Finished loading 64 lines from /etc/snmp/snmptt.conf
Feb 23 15:15:13 NAGIOS snmptt-sys[41842]: Changing to UID: snmptt (995)
Feb 23 15:15:13 NAGIOS systemd[1]: snmptt.service: Supervising process 41842 which is not our child. We'll most likely not notice when it exits.
Feb 23 15:15:13 NAGIOS systemd[1]: Started SNMP Trap Translator (SNMPTT).
Feb 23 15:15:13 NAGIOS systemd[1]: snmptt.service: Supervising process 41842 which is not our child. We'll most likely not notice when it exits.

MIBs directories removed from the snmptt.ini

[scottwilkerson]

Was https://assets.nagios.com/downloads/nag ... ios_XI.pdf used to set this up?
Do the examples in there work?

[swolf]

Hi btgnrw,

As @cdienger mentioned above, the issue is almost certainly with configuration, rather than with which services are running/not running.

If you are receiving traps on the system (if traps are showing up in snmptt.log), but they're not showing up in Nagios XI, we'll need to see the snmptt configuration file, at /etc/snmp/snmptt.conf

If you're not receiving traps, we'll need to see the status of the snmptrapd service, which is responsible for listening on port 162. You can check the status of this with either

Code: Select all

netstat -nap | grep 162

or simply

Code: Select all

service snmptrapd status

[btgnrw]

I've checked /var/logs/snmptt/snmpttunknown.log and can see an entry for a test trap I initiated from the iLO.

I''ll step through the guide again and respond with the outcome.

thanks

[tmcdonald]

We'll keep this thread open for you in the meantime!

[btgnrw]

Traps are now working

[tmcdonald]

Glad to hear it! I'll be closing this up now, but feel free to open another thread if you need anything in the future!