SNMP trap not coming for new device in nagios

[mejokj]

Hi Team,

Need you help on below issue.

We are not getting snmp trap for newly added devices in nagios xi.

We are seeing many traps coming in device, but not showing in nagios xi. Checked under /var/log/snmptt/snmptt.log and see very few message traps, but that alos not reflecting in nagios. Also could not see anything under /var/log/snmptt/snmpttunknown.log. Verified the reconfigured object but no luck.

Attached the screenshot of snmp trap page.

Thanks,
Sanoj

[mbellerue]

Let's get a tcpdump and see if we can verify whether or not the SNMP traps are actually getting to the Nagios server.

Code: Select all

tcpdump -w /tmp/output.pcap host <IPofNewDevice>

Start that command, then send a trap from the new device, and PM output.pcap to me.

[mejokj]

Hi,

From the device we could not send any trap. do you need any other info i will provide.

Thanks

[mbellerue]

Is there no way to send a trap from the device? What kind of device is it?

[mejokj]

It is a windows machine and trap are sending using xpect software and cannot send any test trap messages from that

[mbellerue]

You mentioned that you see some entries in /var/log/snmptt.log. Are any of those entries from the Windows machine? Can you post some of them here?

[mejokj]

HI,

Please find below the logs received from the windows machine.[

root@nagios ~]# grep IP /var/log/snmptt/snmptt.log
Sun Oct 20 22:36:52 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
Sun Oct 20 22:41:17 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
Mon Oct 21 03:24:39 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
Tue Oct 22 16:47:09 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
Thu Oct 24 12:10:27 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
Thu Oct 24 12:11:55 2019 .1.3.6.1.4.1.27070.5.1.0.1 Normal "Status Events" IP - Received trap "started" with variables ""
[root@nagios ~]#

[mejokj]

Hi Team,

Could you please update on this issue

Thanks

[mbellerue]

Can you run this command and show me the output.

Code: Select all

ls -lh /usr/local/nagiosxi/var/corelog*

[mejokj]

Hi,

Please find below the output.

[root@nagios ~]# ls -lh /usr/local/nagiosxi/var/corelog*
-rw-r--r-- 1 nagios nagios 9 Oct 29 08:21 /usr/local/nagiosxi/var/corelog.data
-rw-r--r-- 1 nagios nagios 3.7K Oct 29 08:21 /usr/local/nagiosxi/var/corelog.diff
-rwxrwxr-x 1 nagios nagios 109 Sep 26 20:56 /usr/local/nagiosxi/var/corelog.newobjects
[root@nagios ~]#

Thanks