> From: Traiano Welcome [mailto:[email protected]]
> Sent: Thursday, September 03, 2009 2:43 AM

> It looks like best option would be to script something to parse
> snmptrapd logs and draw these stats periodically.

        You can also customize the format that traps are logged in, which 
should help make parsing easier.

> Looking at my snmptrapd.log, I see traps come through  with what seems
> to identify the sending host: " [UDP: [196.21.61.1]:64714]":
> 
> ---
> 2009-09-03 11:33:45 <UNKNOWN> [UDP: [196.21.61.1]:64714]:
> .1.3.6.1.2.1.1.3.0 = Timeticks: (325635303) 37 days, 16:32:33.03
> .1.3.6.1.6.3.1.1.4.1.0 = OID: .1.3.6.1.6.3.1.1.5.5
> .1.3.6.1.4.1.9.2.1.5.0 = IpAddress: 196.26.130.34
> .1.3.6.1.4.1.9.9.412.1.1.1.0 = INTEGER: ipv4(1)
> .1.3.6.1.4.1.9.9.412.1.1.2.0 = STRING:
> ---
> 
> Although the host specified above might be  proxy for other hosts, I'd
> be able to differentiate knowing the location of the agents, and still
> draw some kind of rough statistics on the 'highest sending proxy'. Does
> this sound reasonable?

        Yes, you seem to understand the key issue - forwarded traps don't have 
an indication of their source.  One workaround for this is to use different 
community names for each source engine, but this has its drawbacks, mostly in 
administrative overhead.

>  I was hoping for builtin features :-) Anyhow, I think the best option
> here would be to use a generic munin plugin to monitor snmptrapd.

        You could also install snmpd with the host resources MIBs, if they're 
supported on your system.


        HTH,

Mike

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to