Unable to get traps working. MIB import errors.

[dflick]

Nagios XI 2012 R2 8c VMware image 64 bit

snmptt -v
SNMPTT v1.4beta2

I am getting unknown traps in the snmpttunknown.log file:
Wed Jan 22 07:34:02 2014: Unknown trap (SNMPv2-SMI::enterprises.9.9.43.2.0.1) received from 10.252.111.1 at:
Value 0: 10.252.111.1
Value 1: 10.252.111.1
Value 2: 295:20:24:24.08
Value 3: SNMPv2-SMI::enterprises.9.9.43.2.0.1
Value 4: 10.252.111.1
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.3.1214=1
Ent Value 1: SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.4.1214=3
Ent Value 2: SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.5.1214=4

I tried importing the Cisco MIBS from the Cisco FTP site.

When I import the Cisco MIB, I get an error:
mib Failed to convert uploaded file to snmptt mib.

For this particular one, I also get the following errors when using the addmib command:
[root@BMCAPMON01 ~]# addmib /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Cannot find module (CISCO-TC): At line 42 in /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Cannot find module (CISCO-SMI): At line 44 in /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Did not find 'Unsigned64' in module #-1 (/usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt)
Did not find 'ciscoMgmt' in module #-1 (/usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt)
Unlinked OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIB ::= { ciscoMgmt 43 }
Undefined identifier: ciscoMgmt near line 47 of /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBGroups ::= { ciscoConfigManMIBConformance 2 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBCompliances ::= { ciscoConfigManMIBConformance 1 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBComplianceRev4 ::= { ciscoConfigManMIBCompliances 4 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBComplianceRev3 ::= { ciscoConfigManMIBCompliances 3 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBComplianceRev2 ::= { ciscoConfigManMIBCompliances 2 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ciscoConfigManMIBCompliance ::= { ciscoConfigManMIBCompliances 1 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ccmCLIHistoryCommand ::= { ccmCLIHistoryCommandEntry 2 }
Cannot adopt OID in CISCO-CONFIG-MAN-MIB: ccmCLIHistoryCommandIndex ::= { ccmCLIHistoryCommandEntry 1 }
.....output suppressed....

None of the other traps work either, even though I am seeing them being sent in the router debugs.

[lmiltchev]

Can you run the following two commands and show us the output?

Code: Select all

yum list installed | grep net-snmp-perl
grep "net_snmp_perl_enable =" /etc/snmp/snmptt.ini

[dflick]

[root@BMCAPMON01 ~]# yum list installed | grep net-snmp-perl
[root@BMCAPMON01 ~]# grep "net_snmp_perl_enable =" /etc/snmp/snmptt.ini
net_snmp_perl_enable = 0

[lmiltchev]

Install the "net-snmp-perl" package:

Code: Select all

yum install net-snmp-perl -y

Change the following line in the snmptt.ini file from:

Code: Select all

net_snmp_perl_enable = 0

to

Code: Select all

net_snmp_perl_enable = 1

Restart the services:

Code: Select all

service snmptt restart
service snmptrapd restart

Let me know if this fixed your issue.

[dflick]

I received this error:
[root@BMCAPMON01 ~]# service snmptt restart
Stopping snmptt: [ OK ]
Starting snmptt: Did not find 'zeroDotZero' in module SNMPv2-SMI (/usr/share/snmp/mibs/IP-MIB.txt)
Did not find 'zeroDotZero' in module SNMPv2-SMI (/usr/share/snmp/mibs/DISMAN-EVENT-MIB.txt)
Did not find 'zeroDotZero' in module SNMPv2-SMI (/usr/share/snmp/mibs/DISMAN-SCHEDULE-MIB.txt)
[ OK ]
am I doing something wrong when importing the MIBs?

[dflick]

Still getting traps in the unknown log:

tail -n 50 /var/log/snmptt/snmpttunknown.log
Wed Jan 22 12:25:04 2014: Unknown trap (.1.3.6.1.4.1.9.9.43.2.0.1) received from 10.252.240.1 at:
Value 0: 10.252.240.1
Value 1: 10.252.240.1
Value 2: 105:4:22:17.23
Value 3: .1.3.6.1.4.1.9.9.43.2.0.1
Value 4: 10.252.240.1
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.9.9.43.1.1.6.1.3.433=1
Ent Value 1: .1.3.6.1.4.1.9.9.43.1.1.6.1.4.433=3
Ent Value 2: .1.3.6.1.4.1.9.9.43.1.1.6.1.5.433=4

[lmiltchev]

To to honest with you, I've never seen this error. I found a post that might point you to the right direction:

http://serverfault.com/questions/440319 ... snmpv2-smi

Meanwhile, I will do some more digging into it.

[dflick]

[root@BMCAPMON01 mibs]# locate SNMPv2-SMI
/usr/share/snmp/mibs/SNMPv2-SMI.my.txt
/usr/share/snmp/mibs/SNMPv2-SMI.txt

I deleted the MIB file I downloaded from Cisco and now snmptt restarts cleanly.
rm -f /usr/share/snmp/mibs/SNMPv2-SMI.my.txt
[root@BMCAPMON01 mibs]# service snmptt restart
Stopping snmptt: [ OK ]
Starting snmptt: [ OK ]
[root@BMCAPMON01 mibs]#

Still not getting traps though:
Wed Jan 22 13:17:20 2014: Unknown trap (.1.3.6.1.4.1.9.9.43.2.0.1) received from 10.252.240.1 at:
Value 0: 10.252.240.1
Value 1: 10.252.240.1
Value 2: 105:5:14:33.44
Value 3: .1.3.6.1.4.1.9.9.43.2.0.1
Value 4: 10.252.240.1
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.9.9.43.1.1.6.1.3.435=1
Ent Value 1: .1.3.6.1.4.1.9.9.43.1.1.6.1.4.435=3
Ent Value 2: .1.3.6.1.4.1.9.9.43.1.1.6.1.5.435=4

This trap is defined in the following MIB that I uploaded and added via addmib:
CISCO-CONFIG-MAN-MIB.my CISCO-CONFIG-MAN-MIB.my.txt 48 48 rw-rw-r-- 2014-01-22 07:29:07

Since I am new to this, my guess is that I did something wrong in loading the MIB.

Any ideas?

[sreinhardt]

The lines from your intial post:

Code: Select all

[root@BMCAPMON01 ~]# addmib /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Cannot find module (CISCO-TC): At line 42 in /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt
Cannot find module (CISCO-SMI): At line 44 in /usr/share/snmp/mibs/CISCO-CONFIG-MAN-MIB.my.txt

Seem to me, that you need the cisco-tc and cisco-smi mibs imported before you can import the cisco-config-man mib. Cisco mibs often have dependencies on one another, and without the prereqs, it will not be able to load future ones properly. You should be able to find these from cisco's site, or oidview such sites.

[dflick]

OK, removed the CONFIG MIB, imported both TC and SMI, then reinstalled the config mib which all installed cleanly.

I restarted snmptt but I am still getting unknowns:
Wed Jan 22 14:17:37 2014: Unknown trap (.1.3.6.1.4.1.9.9.43.2.0.1) received from 10.252.0.123 at:
Value 0: 10.252.0.123
Value 1: 10.252.0.123
Value 2: 105:6:52:03.87
Value 3: .1.3.6.1.4.1.9.9.43.2.0.1
Value 4: 10.252.0.123
Value 5:
Value 6:
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.9.9.43.1.1.6.1.3.433=1
Ent Value 1: .1.3.6.1.4.1.9.9.43.1.1.6.1.4.433=3
Ent Value 2: .1.3.6.1.4.1.9.9.43.1.1.6.1.5.433=4

I think we are getting close now!