Page 3 of 9
Re: Need some help with an Snmp Entry.
Posted: Mon May 09, 2016 6:47 am
by skyerjoe
Hello ssax,
Attached this are the mib files from the Directory
But when i use the oid number i thought the mibs arent really necessary
regards john
Re: Need some help with an Snmp Entry.
Posted: Mon May 09, 2016 12:04 pm
by ssax
Is that literally everything in your /usr/share/snmp/mibs directory? If so, you are missing all of the default MIBs.
Re: Need some help with an Snmp Entry.
Posted: Tue May 10, 2016 6:52 am
by skyerjoe
Is that literally everything in your /usr/share/snmp/mibs directory? If so, you are missing all of the default MIBs.
Do i need the Default MIB's if my match is based only on the OID Number
regards skyerjoe
Re: Need some help with an Snmp Entry.
Posted: Tue May 10, 2016 9:19 am
by ssax
No, you shouldn't if you are using the full OID.
Please run these commands and post the entire output:
Code: Select all
service snmptt stop
snmptrap -v2c -cpublic 127.0.0.1 1431439518 .1.3.6.1.4.1.31440.0.6 .1.3.6.1.4.1.31440.2.2.1.1.5 i 2
Wait a couple seconds, then run:
Code: Select all
cat /var/spool/snmptt/*
service snmptt start
Re: Need some help with an Snmp Entry.
Posted: Wed May 11, 2016 5:53 am
by skyerjoe
The output from the Cat command:
Code: Select all
1462963749
127.0.0.1
UDP: [127.0.0.1]:37000->[127.0.0.1]
.1.3.6.1.2.1.1.3.0 165:16:13:15.18
.1.3.6.1.6.3.1.1.4.1.0 .1.3.6.1.4.1.31440.0.6
.1.3.6.1.4.1.31440.2.2.1.1.5 2
I think this is stil in place and correct
If i start snmptt and do it again the spooler is empty
Is also correct so far or ?
regards john
Re: Need some help with an Snmp Entry.
Posted: Wed May 11, 2016 10:34 am
by ssax
Yes, here is mine with the default MIBs installed:
Code: Select all
1462980620
localhost
UDP: [127.0.0.1]:34411->[127.0.0.1]
DISMAN-EVENT-MIB::sysUpTimeInstance 165:16:13:15.18
SNMPv2-MIB::snmpTrapOID.0 SNMPv2-SMI::enterprises.31440.0.6
SNMPv2-SMI::enterprises.31440.2.2.1.1.5 2
You can see why I had to change mine as
enterprises.31440.2.2.1.1.5
So
MATCH $+1:(.1.3.6.1.4.1.31440.2.2.1.1.5:2) should have worked.
Please try this one (removed the first period):
Code: Select all
MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)
Re: Need some help with an Snmp Entry.
Posted: Thu Aug 18, 2016 8:18 am
by skyerjoe
Hello Everybody
Yes i know the thread is a little bit old but the error is still present...
@ssax:
I tried this also but this doesn't working anymore:
Code: Select all
MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)
Tried also this without brackets ....
In think i have to try out a really simple trigger which has an binding maybe there is some ... Schema or sth. like that changed in an snmptt version ... so i think i need an more basic value with an basic Varable Binding
Any ideas ?
reagards john
Re: Need some help with an Snmp Entry.
Posted: Thu Aug 18, 2016 3:19 pm
by ssax
Try to add all of these to your singe trap definition, when you have multiple MATCH statements on a single trap definition it acts as an OR statement to see if it meets the criteria (this is modifiable through other SNMPTT options):
Code: Select all
MATCH $+1:(.1.3.6.1.4.1.31440.2.2.1.1.5:2)
MATCH $+1:(1.3.6.1.4.1.31440.2.2.1.1.5:2)
MATCH $+1:(enterprises.31440.2.2.1.1.5)
Also, please check all files in
/etc/snmp and
/usr/share/snmp/mibs/processed_mibs to make sure you don't have any duplicate definitions.
Thank you
Re: Need some help with an Snmp Entry.
Posted: Thu Aug 25, 2016 8:56 am
by skyerjoe
Hello ssax
I set all 3 Matches and running against the snmp services.
I checked /etc/snmp and in the snmptt.ini is no double entry for the confile
Only these 2 lines :
Code: Select all
/etc/snmp/snmptt.conf.generic
/etc/snmp/snmptt.conf.owserverwatertest1line ( this is the one i use )
In the Directory /usr/share/snmp/mibs/processed_mibs they're no mibs at all
The Traps are still only coming in the unknown snmp section:
Code: Select all
Thu Aug 25 15:42:54 2016: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from xxx.xxx.xxx.xxx at:
Value 0: xxx.xxx.xxx.xxx
Value 1: xxx.xxx.xxx.xxx
Value 2: 198:7:38:26.95
Value 3: .1.3.6.1.4.1.31440.0.6
Value 4: xxx.xxx.xxx.xxx
Value 5: public
Value 6: .1.3.6.1.4.1.31440
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.5=2
Thu Aug 25 15:42:56 2016: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from xxx.xxx.xxx.xxx at:
Value 0: xxx.xxx.xxx.xxx
Value 1: xxx.xxx.xxx.xxx
Value 2: 198:10:25:26.22
Value 3: .1.3.6.1.4.1.31440.0.6
Value 4: xxx.xxx.xxx.xxx
Value 5: public
Value 6: .1.3.6.1.4.1.31440
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.5=1
The xxx Values are just ip's
... Either there is some big mistake in an configuration or my System is kaput in any way
regards john
Re: Need some help with an Snmp Entry.
Posted: Thu Aug 25, 2016 4:00 pm
by ssax
What version of SNMPTT are you running?