I'm trying to set the format of the message that is printed when
snmptrapd, running as a service receives an SNMP trap.  I'd like to
have it actually parse the OIDs into their names, if possible.  I've
tried setting the format in smptrapd.conf, but that didn't seem to
work.  I also tried passing the format argument directly to the exe by
changing the ImageName value in the registry.  That didn't seem to
work either.

Here's what I'd like to have it display as:

%B: %w - %v

I'm making the assumption that this will give me something along the lines of:

Hostname: description - values.

Here's what my event log entries look like now:

192.168.0.1 [UDP: [0.0.0.0]->[192.168.0.1]:161]: Trap ,
.1.3.6.1.2.1.1.3.0 = Timeticks: (362648132) 41 days, 23:21:21.32,
.1.3.6.1.6.3.1.1.4.1.0 = OID: .1.3.6.1.4.1.8741.1.1.2.0.116,
.1.3.6.1.4.1.8741.1.1.1.1.1.0 = INTEGER: 560,
.1.3.6.1.4.1.8741.1.1.1.1.2.0 = STRING: "SN=<obfustaced>;Administrator
login denied due to bad credentials -  Source:<src>, 0, X0, CAPDC -
Destination:<dest>, X0 -  admin, TCP HTTP"

That's a trap from a sonicwall firewall that a login failed.  The
source and destination are part of the firewall log and not the SNMP
trap.

Here's my snmptrapd.conf

disableAuthorization yes
#traphandle default perl c:\snmp\snmptt
traphandle default perl c:\snmp\snmptthandler

format "%B: %W: %v"

I'm not sure where or what that traphandle declaration is.

Here's my snmp.conf

mibdirs c:\usr\share\snmp\mibs
mibs +ALL
persistentDir c:\usr\snmp\persist
tempFilePattern c:\usr\temp\snmpdXXXXXX
printNumericOids 1
defCommunity <community>

I just saw something:  Is printNumericOids the problem?

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to