I have version 5.1.1 installed on Solaris 8 and am having trouble setting up user monitoring.
I can successfully query the box and get the process list/ disk status etc from my Management station (SNMPc) but as for NetSNMP checking whether a process is running, setting a flag when it's not and then sending a trap - well that's the bit I'm struggling with.
Running snmpd with the -f -Le -d flags, I can see the 30 minute poll of the flag setup to monitor the process, but the flag doesn't seem to change to a non-zero when the process is stopped.
Here's the poll on the process flag when the process is running :
Sending 1 bytes to callback: 3 on fd 10
0000: 00 .
Received 1 bytes from callback: 1 on fd 4
0000: 00 .
Received SNMP packet(s) from callback: 1 on fd 4
GETNEXT message
-- UCD-SNMP-MIB::prErrorFlag.1
Sending 1 bytes to callback: 1 on fd 4
0000: 00 .
Received 1 bytes from callback: 3 on fd 10
0000: 00
and here's the poll on the process when the process isn't running :
Sending 1 bytes to callback: 3 on fd 10
0000: 00 .
Received 1 bytes from callback: 1 on fd 4
0000: 00 .
Received SNMP packet(s) from callback: 1 on fd 4
GETNEXT message
-- UCD-SNMP-MIB::prErrorFlag.1
Sending 1 bytes to callback: 1 on fd 4
0000: 00 .
Received 1 bytes from callback: 3 on fd 10
0000: 00 .
Here's my snmpd.conf -TIA
###########################################################################
#
# snmpd.conf
#
# - created by the snmpconf configuration program
#
###########################################################################
# SECTION: Access Control Setup
#
# This section defines who is allowed to talk to your running
# snmp agent.
# rouser: a SNMPv3 read-only user
# arguments: user [noauth|auth|priv] [restriction_oid]
rouser SystemsM auth
# rwcommunity: a SNMPv1/SNMPv2c read-write access community name
# arguments: community [default|hostname|network/bits] [oid]
rwcommunity SystemsM 10.10.128.147
rwcommunity SystemsM 127.0.0.1
###########################################################################
# SECTION: Monitor Various Aspects of the Running Host
#
# The following check up on various aspects of a host.
agentSecName SystemsM
defaultMonitors yes
# proc: Check for processes that should be running.
# proc NAME [MAX=0] [MIN=0]
#
# NAME: the name of the process to check for. It must match
# exactly (ie, http will not find httpd processes).
# MAX: the maximum number allowed to be running. Defaults to 0.
# MIN: the minimum number to be running. Defaults to 0.
#
# The results are reported in the prTable section of the UCD-SNMP-MIB tree
# Special Case: When the min and max numbers are both 0, it assumes
# you want a max of infinity and a min of 1.
proc xntpd 1 1
monitor -r 30 -i -u SystemsM -o prNames.1 -o prErrMessage.1 "Process xntpd" prErrorFlag.1 != 0
# disk: Check for disk space usage of a partition.
# The agent can check the amount of available disk space, and make
# sure it is above a set limit.
#
# disk PATH [MIN=100000]
#
# PATH: mount path to the disk in question.
# MIN: Disks with space below this value will have the Mib's errorFlag set.
# Can be a raw byte value or a percentage followed by the %
# symbol. Default value = 100000.
#
# The results are reported in the dskTable section of the UCD-SNMP-MIB tree
disk / 50%
# load: Check for unreasonable load average values.
# Watch the load average levels on the machine.
#
# load [1MAX=12.0] [5MAX=12.0] [15MAX=12.0]
#
# 1MAX: If the 1 minute load average is above this limit at query
# time, the errorFlag will be set.
# 5MAX: Similar, but for 5 min average.
# 15MAX: Similar, but for 15 min average.
#
# The results are reported in the laTable section of the UCD-SNMP-MIB tree
load 12.0 12.0 12.0
###########################################################################
# SECTION: System Information Setup
#
# This section defines some of the information reported in
# the "system" mib group in the mibII tree.
# syslocation: The [typically physical] location of the system.
# Note that setting this value here means that when trying to
# perform an snmp SET operation to the sysLocation.0 variable will make
# the agent return the "notWritable" error code. IE, including
# this token in the snmpd.conf file will disable write access to
# the variable.
# arguments: location_string
syslocation "L spur"
# syscontact: The contact information for the administrator
# Note that setting this value here means that when trying to
# perform an snmp SET operation to the sysContact.0 variable will make
# the agent return the "notWritable" error code. IE, including
# this token in the snmpd.conf file will disable write access to
# the variable.
# arguments: contact_string
syscontact "Systems Management"
###########################################################################
# SECTION: Trap Destinations
#
# Here we define who the agent will send traps to.
# trapsink: A SNMPv1 trap receiver
# arguments: host [community] [portnum]
#trapsink 10.10.128.147 SystemsM 161
# trap2sink: A SNMPv2c trap receiver
# arguments: host [community] [portnum]
trap2sink 10.10.128.147 SystemsM 161
# informsink: A SNMPv2c inform (acknowledged trap) receiver
# arguments: host [community] [portnum]
#informsink 10.10.128.147 SystemsM 161
# trapcommunity: Default trap sink community to use
# arguments: community-string
trapcommunity SystemsM
Lycos email has now 300 Megabytes of free storage... Get it now at mail.lycos.co.uk
