The snmptt has HIT the FAN!

[niebais]

Make sure the three daemons: snmpd, snmptrapd, and snmptt are running.

Second, for unknown traps, make sure that log unknown traps is set to 1.

Lastly, check permissions on /var/spool/snmptt and /var/log/snmptt. Ensure that both are owned by snmptt.

[sreinhardt]

I think we covered most if not all those in the last thread, but it never hurts to reiterate good practices! Got your configs, and am taking a look now.

[benhank]

"covered?" man we did an in depth investigation! lol
Thanks for the assist niebais, nagios crew FTW!

[sreinhardt]

Man, everything looks dead on, aside from the obvious issues of it not working. SO.... Let's enable debugging and see if we can't get some more information. Make the changes to match as I show them below. Also just to verify, you are NOT looking to use nsti presently, as mysql logging is off?

/etc/snmp/snmptt.ini (end of file)

Code: Select all

DEBUGGING = 2
DEBUGGING_FILE = /tmp/snmptt.debug

as always, restart all three services. Let it run for a little while and see what we get. The one thing I will note, is even your current logs are clearly showing traps coming in, are you certain that you should have unknown traps with as many mibs as you have?

[benhank]

no nsti is nstgone =D

[benhank]

the thing Is i am getting no logging for the known and unknown stuff. I would not care that much, but I cant figure out why nagios is not showing the trap results in the gui



So i went into nagios to

Code: Select all

admin\System Extensions\manage mibs

and tried to upload a mib. I checked "process traps", and got an error instructing me to run these commands:

Code: Select all

[root@LkennagiosT01 src]# chown root.nagios /etc/snmp/snmptt.ini /etc/snmp
[root@LkennagiosT01 src]# chmod g+w /etc/snmp/snmptt.ini /etc/snmp

which I did, and then i tried to upload the mib again and get this:

Code: Select all

MIB could not be installed - directory permissions may be incorrect.

the debugging results:

Code: Select all

[root@LkennagiosT01 src]# vi /tmp/snmptt.debug
********** SNMPTT v1.3 started: Tue Sep 17 16:38:20 2013 **********

********** Net-SNMP version 5.0702 Perl module enabled **********

********** DNS enabled **********


        Loading /etc/snmp/snmptt.conf
        Finished loading 1330 lines from /etc/snmp/snmptt.conf

Finished loading configuration files

Processing memory copy of configuration files
79 EVENTs found
79 EVENTs found that contain at least the mandatory FORMAT line
Finished processing memory copy of configuration files

==========================================================
Printing out all the events in hash table:

Event: .1.3.6.1.4.1.232.111.0.10 => powerSupplyFail,Status Events,Normal,One or more sources of power to this agent has failed. $*,

[sreinhardt]

Code: Select all

79 EVENTs found
79 EVENTs found that contain at least the mandatory FORMAT line

These two tell me at least that the traps you are currently getting seem to be correctly accounted for! However not sending to nagios is problematic. Is this still a separate box from the XI machine, or are they one in the same?

[benhank]

The host that is sending those traps is a windows server."sending.domain.org"
the receiving server, from which I am getting the info seen in my posts is a linux box running Nagios .
I keep restarting the services in order as well.
I even ran an "apply config".

[sreinhardt]

Alrighty, what are the permissions on /usr/local/nagios/var/rw/nagios.cmd, and what groups are snmptt user in?

Code: Select all

ll /usr/local/nagios/var/rw/nagios.cmd
grep -i 'snmp' /etc/group
grep -i 'snmp' /etc/passwd

[benhank]

Code: Select all

[root@LkennagiosT01 ~]# ll /usr/local/nagios/var/rw/nagios.cmd
prw-rw---- 1 nagios nagcmd 0 Sep 17 16:54 /usr/local/nagios/var/rw/nagios.cmd
[root@LkennagiosT01 ~]# grep -i 'snmp' /etc/group
snmptt:x:497:
[root@LkennagiosT01 ~]# grep -i 'snmp' /etc/passwd
snmptt:x:496:497:SNMP Trap Translator:/var/spool/snmptt:/sbin/nologin
[root@LkennagiosT01 ~]#

Hey bro, I have a question.
here is a list of the docs I have read that describe how to set up snmptt:

Code: Select all

http://www.snmptt.org/docs/snmptt.shtml

and

Code: Select all

http://assets.nagios.com/downloads/nagiosti/documentation/index.html

and the nagios integration doc.

I have a question: lets say that I have a clean box, that never had snmp or snmptt installed on it and I have a kojack clean install of the latest xi build.
I install the snmp trap wiz.
Then I want to have nagios retrieve snmp traps.
Then I properly configure the sending server to send test traps to the nagios box.
What do I do next? if I follow the steps listed in the integration doc, are there any other steps am supposed to take, or should that doc alone get me up and runnin?
i know that you guys are working on NSTI, so if I install it will i be good to go for using the trap wiz?
Or do I do the steps listed on the snmptt link (for daemon mode) and then run do the nagios integration steps?
I am asking this because i know I am missing something, so I think I will slowly and carefully reinstall snmp and snmptt after creating a checklist.