SMTP Traps

[Pilly170]

Hi,

Trying to get a server to send nagios an SMTP trap when a user VPNs in.

I have setup the server to use %windir%\system32\evntwin.exe to start an SMTP trap on the relevant Eventlog ID.
On the server I have also configured the snmp service for the public community and the nagios servers IP

On nagios I have tried to follow this
http://assets.nagios.com/downloads/nagi ... ith_XI.pdf

I downloaded and installed the files. (snmptt)
I can do an SNMP walk wizard in nagios on the server and see results, but when I do a snmp trap wizard I get

"There are no monitoring options to configure with SNMP Traps. Click Next to continue. "


Any ideas on what I've done or what I should do next?

[sreinhardt]

snmp traps are a passive service. there really isnt much to configure in the nagios webui. Provided you have configured traps to send from the windows machine, this is completely different from being able to walk the device, and configured the snmptt.conf correctly on the nagios machine, it shouldn't be too hard. You will need to make sure that the snmptrap service is on the particular host and that the hostname matches exactly as it is coming in via the trap. Also just a note, snmp is simple network management protocol (what we are using here), smtp is simple mail transport protocol (for sending mail).

As for checking if nagios is seeing the traps, do you have anything in your snmptt.log or snmpttunknown.log, in /var/log/snmptt/. A "tail -f [logfile]" is usually a good way to see if things are coming in.

[Pilly170]

[root@nagios snmptt]# tail -f snmpttsystem.log
Fri Jul 12 14:37:52 2013 SNMPTT v1.3 started
Fri Jul 12 14:37:52 2013 Loading /etc/snmp/snmptt.conf
Fri Jul 12 14:37:52 2013 Finished loading 790 lines from /etc/snmp/snmptt.conf
Fri Jul 12 14:37:52 2013 Could not convert user id 'snmptt' to a numeric UID

this what you meant? these are the only log files I can see


I can see in the windows eventmgr that the enterprise OID is : 1.3.6.1.4.1.311.1.13.1.12.82.101.109.111.116.101.65.99.99.101.115.115

if that means anything?

[sreinhardt]

I do not mean the systemlog, there should be just an snmptt.log file as well as snmpttunknown.log. These are the two that contain snmptraps as they have been sent to the snmptt daemon. Also I should ask, have you added the mibs via the XI interface, and ran the addmib command on them, for the MS mibs?