Waiting for the Traps problem with SNMP Trap

[phyo]

Hi all,

For the customer requested, I need to monitor the http://www.efficientip.com/solidserver/solidserver with SNMP Traps.
So I followed the instruction http://assets.nagios.com/downloads/nagi ... ith_XI.pdf.
My OS is CentOS 6.4 64bits with Nagios XI latest version(Nagios XI 2012R2.7).
After installed XI, I install SNMPTT-1.3-3, then I uploaded the MIBs to /usr/share/snmp/mibs
Then I run the /usr/local/bin/addmib <mibfile> command.
After starting the service, I saw two log files at /var/log/snmptt which are snmpttsystem.log and snmpttunknown.log

cat /var/log/snmptt/snmpttsystem.log

Tue Dec 3 10:53:50 2013 SNMPTT v1.3 shutdown
Tue Dec 3 10:53:50 2013 Total traps received=0,Total traps translated=0,Total traps ignored=0,Total unknown traps=0
Tue Dec 3 10:54:07 2013 SNMPTT v1.3 started
Tue Dec 3 10:54:07 2013 Could not convert user id 'snmptt' to a numeric UID

cat /var/log/snmptt/snmpttunknown.log

[root@centos snmptt]# cat snmpttunknown.log
Mon Dec 2 13:28:34 2013: Unknown trap (.1.3.6.1.4.1.8072.4.0.2) received from 192.168.2.100 at:
Value 0: 192.168.2.100
Value 1: 192.168.2.100
Value 2: 0:1:41:55.00
Value 3: .1.3.6.1.4.1.8072.4.0.2
Value 4: 192.168.2.100
Value 5:
Value 6: .1.3.6.1.4.1.8072.4
Value 7:
Value 8:
Value 9:
Value 10:


Mon Dec 2 13:39:29 2013: Unknown trap (.1.3.6.1.6.3.1.1.5.1) received from 192.168.2.100 at:
Value 0: 192.168.2.100
Value 1: 192.168.2.100
Value 2: 0:0:00:00.05
Value 3: .1.3.6.1.6.3.1.1.5.1
Value 4: 192.168.2.100
Value 5:
Value 6: .1.3.6.1.4.1.8072.3.2.8
Value 7:
Value 8:
Value 9:
Value 10:


Mon Dec 2 13:39:29 2013: Unknown trap (.1.3.6.1.6.3.1.1.5.1) received from 192.168.2.100 at:
Value 0: 192.168.2.100
Value 1: 192.168.2.100
Value 2: 0:0:00:00.05
Value 3: .1.3.6.1.6.3.1.1.5.1
Value 4: 192.168.2.100
Value 5:
Value 6: .1.3.6.1.4.1.8072.3.2.8
Value 7:
Value 8:
Value 9:
Value 10:


Thu Jan 1 07:30:00 1970: Unknown trap () received from at:
Value 0:
Value 1:
Value 2:
Value 3:
Value 4:
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:


Thu Jan 1 07:30:00 1970: Unknown trap () received from at:
Value 0:
Value 1:
Value 2:
Value 3:
Value 4:
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:
[root@centos snmptt]#

So how can I solve this problem? Please...

[sreinhardt]

Most likely the mib did not contain trap oids, or at least thats generally the case when you have added a mib and the traps are potentially still showing as unknown. Could you send me a few files please?

/etc/snmp/snmptt.ini
/etc/snmp/snmptt.conf
/etc/snmp/snmptrapd.conf
the mib file you ran addmib on.

Feel free to attach them individually or as a zip\tar, but please do not paste them into the page, I would like to search through them off the forum.

[phyo]

Most likely the mib did not contain trap oids, or at least thats generally the case when you have added a mib and the traps are potentially still showing as unknown. Could you send me a few files please?
/etc/snmp/snmptt.ini
/etc/snmp/snmptt.conf
/etc/snmp/snmptrapd.conf
the mib file you ran addmib on.

Thanks for your reply. You can download the files that you requested in the below link.
removed
Inside the mibs files, there are .mib and .txt files. I uploaded all of these files to Nagios XI from Admin>>Manage MIBs.
But when I run addmib command for txt file, it said "This file looks like it has been added already! Exiting." That why I didn't run addmib command for other txt files. But I run for all of .mib files.

By the way, I can access customer support section, but I can't post there. We also bought license for XI. Let me know why can't post there.

Thanks.

[tmcdonald]

Can you please either post the unshortened full URL, or PM the zip file to sreinhardt as an attachment?

[phyo]

Can you please either post the unshortened full URL, or PM the zip file to sreinhardt as an attachment?

Here is the link...
https://dl.dropboxusercontent.com/u/228 ... 20Traps.7z

[sreinhardt]

OK, your snmptt.ini and .conf look great. I see that the traps you have listed in the unknown log (.1.3.6.1.6.3.1.1.5.1 & .1.3.6.1.4.1.8072.4.0.2) correctly seem to exist in the .conf file. So with that said, have you restarted the snmptt service since importing these mibs? Also, since this hopefully has been running for a bit longer, could you tar the /var/log/snmptt/ directory please? I just want to see if they are still unknown and look at a couple other things that may be happening. Great job on the setup so far though!

[phyo]

have you restarted the snmptt service since importing these mibs? Also, since this hopefully has been running for a bit longer, could you tar the /var/log/snmptt/ directory please? I just want to see if they are still unknown and look at a couple other things that may be happening. Great job on the setup so far though!

I restarted the snmptt service and restart the server also. But still the same. Here is the download that you requested file>>
https://dl.dropboxusercontent.com/u/228 ... log.tar.gz

Thanks.

[sreinhardt]

It seems that you are seeing the same thing, as you have not received any traps since december 2nd. Do you have a way to force that device to send a trap in? Also you might want to verify snmptrapd is running "service snmptrapd status".

[phyo]

It seems that you are seeing the same thing, as you have not received any traps since december 2nd. Do you have a way to force that device to send a trap in? Also you might want to verify snmptrapd is running "service snmptrapd status".

Yes, it didn't receive after dec 2. But I already setting up in the monitoring device to send snmp trap to nagios server.

SNMP Trap service also running.

[root@centos snmptt]# service snmptrapd status
snmptrapd (pid 3824) is running...
[root@centos snmptt]#

Thanks.

[sreinhardt]

The other thing you can check, if you feel that traps have come in, but are not showing in any of your logs, take a look in /var/spool/snmptt/.

Code: Select all

ll /var/spool/snmptt

if there are any items in there, your snmptt daemon is not reaping them properly and likely is an issue with permissions, and the daemon should be run as root.