Hello,

Unfortunately I'm fairly new to JFFNMS and not a programmer, which I'm 
starting to wondering if one has to be if they want to handle SNMP Traps 
well with JFFNMS.

If JFFNMS can do the following, I'd really appreciate some info on how 
to do it.

Cisco switches that support Storm Control can generate a storm control 
trap and a syslog trap when a storm control event occurs.  An example of 
such traps is:

2007-05-03 18:24:07 s1-1h-dist [192.168.2.27]:
SNMPv2-MIB::sysUpTime.0 = Timeticks: (445641028) 51 days, 13:53:30.28   
SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.9.9.41.2.0.1        
SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.2.54 = STRING: 
"STORM_CONTROL"SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.3.54 = INTEGER: 4        
SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.4.54 = STRING: "FILTERED"     
SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.5.54 = STRING: "A Unicast storm 
detected on Fa0/1. A packet filter action has been applied on the 
interface." SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.6.54 = Timeticks: 
(445641028) 51 days, 13:53:30.28
2007-05-03 18:24:07 s1-1h-dist [192.168.2.27]:
SNMPv2-MIB::sysUpTime.0 = Timeticks: (445641028) 51 days, 13:53:30.28   
SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.9.9.362.0.1.1       
SNMPv2-SMI::enterprises.9.9.362.1.2.1.1.1.1 = INTEGER: 3
2007-05-03 18:24:08 s1-1h-dist [192.168.2.27]:
SNMPv2-MIB::sysUpTime.0 = Timeticks: (445641129) 51 days, 13:53:31.29   
SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.9.9.362.0.1.1       
SNMPv2-SMI::enterprises.9.9.362.1.2.1.1.1.1 = INTEGER: 2

What I really would like to be able to do is have JFFNMS alarm (and send 
users an email) when a storm control occurs informing them of the storm 
control *and* port information.

Can anyone provide any hints as to how to bring this all together under 
JFFNMS?  It looks like JFFNMS isn't een storing the syslog trap quite 
properly, in the DB I see:

from traps:

| 150 | 192.168.2.27 | SNMPv2-SMI::enterprises.9.9.41.2.0.1  |        1 
| 1178231047 |

from traps_varbinds:

mysql> select * from traps_varbinds where trapid = '150';
+-----+--------+---------------------------------------------+----------------+-------+
| id  | trapid | trap_oid                                    | value          
| oidid |
+-----+--------+---------------------------------------------+----------------+-------+
| 595 |    150 | SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.2.54 | 
STORM_CONTROL  |     1 |
| 596 |    150 | SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.3.54 | 4              
|     2 |
| 597 |    150 | SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.4.54 | FILTERED       
|     3 |
| 598 |    150 | SNMPv2-SMI::enterprises.9.9.41.1.2.3.1.6.54 | 
51:13:53:30.28 |     4 |
+-----+--------+---------------------------------------------+----------------+-------+

Where's .5.54?

Any help is appreciated.

Thanks,

-Adam Clark


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
jffnms-users mailing list
jffnms-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jffnms-users

Reply via email to