Page 1 of 2
SNMP Trap Sender
Posted: Tue Jul 14, 2015 5:44 pm
by r34220
How can I validate that traps are being sent?
Re: SNMP Trap Sender
Posted: Tue Jul 14, 2015 10:53 pm
by Box293
Watch the outbound UDP traffic on the XI server sending the traps:
You may need to install tcpdump:
Re: SNMP Trap Sender
Posted: Thu Jul 16, 2015 6:40 pm
by r34220
I am not seeing any snmpt traps being sent. I am also using a non standard port of 1162. How can I troubleshoot this? See attached config image.
nagiosxi-snmp-trap-sender-conf.jpg
tcpdump.jpg
Re: SNMP Trap Sender
Posted: Thu Jul 16, 2015 7:00 pm
by Box293
Can you send us the output of this:
Code: Select all
yum list installed | grep net-snmp
Can you try:
Un-check the Enable Integration checkbox
Click Apply Settings
Check the Enable Integration checkbox
Click Apply Settings
Go and start the tcpdump
Submit a passive check for a host or service with a critical status, this should send a trap. Does that appear in the tcpdump?
Re: SNMP Trap Sender
Posted: Thu Jul 16, 2015 7:08 pm
by r34220
Code: Select all
[root@az84mon11v ~]# yum list installed | grep net-snmp
net-snmp.x86_64 1:5.5-50.el6_6.1 @rhel-x86_64-server-6
net-snmp-devel.x86_64 1:5.5-50.el6_6.1 @rhel-x86_64-server-6
net-snmp-libs.x86_64 1:5.5-50.el6_6.1 @rhel-x86_64-server-6
net-snmp-perl.x86_64 1:5.5-50.el6_6.1 @rhel-x86_64-server-6
net-snmp-utils.x86_64 1:5.5-50.el6_6.1 @rhel-x86_64-server-6
I tryed toggling and applied settings and toggled again to turn back on. Still dont see anything shown in tcpdump
Code: Select all
[root@az84mon11v ~]# tcpdump udp dst port 1162
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth9, link-type EN10MB (Ethernet), capture size 65535 bytes
Re: SNMP Trap Sender
Posted: Thu Jul 16, 2015 7:44 pm
by Box293
What version of the component do you have?:
Click the Admin menu
System Extensions > Manage Components
Find the SNMP Trap Sender component
What version is this component?
If there is a newer one available, please download and upload it at the top of this page.
The only other suggestion I have right now is to try putting it on the default port of 162 and then watching that traffic with tcpdump, just to see if it works at all.
I'm all out of troubleshooting ideas, we may need to wait until tomorrow for the USA techs to get back to us with some more troubleshooting steps.
Re: SNMP Trap Sender
Posted: Thu Jul 16, 2015 9:51 pm
by r34220
Looks like its up to date: Version: 1.5
Tryed the standard port 126 but still dont see anything in tcpdump.
Any other ideas?
Re: SNMP Trap Sender
Posted: Fri Jul 17, 2015 10:36 am
by ssax
I just installed it and set it up like your with 1162 and generated a service failure so that it would send the trap and it worked just fine:
Code: Select all
[root@ssc66xi scripts]# tcpdump udp dst port 1162
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
10:27:28.700024 IP 192.168.4.126.59021 > 192.168.4.124.health-trap: UDP, length 221
10:28:28.818998 IP 192.168.4.126.48031 > 192.168.4.124.health-trap: UDP, length 221
Do you see anything in your /var/log/httpd/error_log or /var/log/httpd/ssl_error_log (if using HTTPS) that may give any indication?
Also, let's take a look at the permissions:
Code: Select all
ls -ld /usr/local/nagiosxi/html/includes/components/snmptrapsender
ls -l /usr/local/nagiosxi/html/includes/components/snmptrapsender
Re: SNMP Trap Sender
Posted: Fri Jul 17, 2015 1:35 pm
by r34220
I dont see anything in the Apache error logs.
Permissions:
Code: Select all
[root@az84mon11v httpd]# ls -ld /usr/local/nagiosxi/html/includes/components/snmptrapsender
drwxr-x--- 3 nagios nagios 4096 Apr 27 10:03 /usr/local/nagiosxi/html/includes/components/snmptrapsender
[root@az84mon11v httpd]# ls -l /usr/local/nagiosxi/html/includes/components/snmptrapsender
total 40
-rwxr-x--- 1 nagios nagios 790 Apr 27 10:01 CHANGES.TXT
-rw-r----- 1 nagios nagios 0 Jul 16 17:01 installed.ok
-rwxr-x--- 1 nagios nagios 428 Apr 27 10:01 installprereqs.sh
drwxr-x--- 2 nagios nagios 4096 Mar 24 09:21 mibs
-rwxr-x--- 1 nagios nagios 889 Apr 27 10:01 sanity.sh
-rwxr-x--- 1 nagios nagios 20841 Apr 27 10:01 snmptrapsender.inc.php
Re: SNMP Trap Sender
Posted: Fri Jul 17, 2015 1:45 pm
by ssax
What version of XI are you running? You can grab it from the bottom left hand side of the Nagios XI web interface.