Re: [Nagios-users] Help with creating an own trap
Hello Wim an DNS Reverse lookup is not needed cause the trapnbsp; will be determined by the OID all other things which you've mentioned are working perfectly best regards john -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Help with creating an own trap
Then the only thing left is debugging: http://snmptt.sourceforge.net/docs/faqs.shtml#SNMPTT_is_not_working -- Wim Fournier Senior Technical Appl. Administrator | comScore, Inc. (NASDAQ:SCOR) t +31 (0)20 5195476 | f +31 (0)20 6953786 | wfourn...@comscore.com ... comScore Measuring the Digital World Nedstat is now part of comScore www.comscore.com www.nedstat.nl On 7/17/12 11:12 AM, john meyer firesk...@emailn.de wrote: Hello Wim an DNS Reverse lookup is not needed cause the trapnbsp; will be determined by the OID all other things which you've mentioned are working perfectly best regards john -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Help with creating an own trap
Hello Vim Everything is checked the whole snmptt functions are working but especially not this own created trap best regards john Then the only thing left is debugging: http://snmptt.sourceforge.net/docs/faqs.shtml#SNMPTT_is_not_working Wim Fournier Senior Technical Appl. Administrator | comScore, Inc. (NASDAQ:SCOR) t +31 (0)20 5195476 | f +31 (0)20 6953786 | wfourn...@comscore.com ... -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Help with creating an own trap
Did you - make sure reverse DNS works for the host you are sending from? - create a config file for snmptt for this trap? - restart snmptt if it's not being run from snmptrapd? - add your new snmptt config file to the ini file? - try the debugging options in snmptt? Hope this helps. Good luck ;o) -- Wim Fournier Senior Technical Appl. Administrator | comScore, Inc. (NASDAQ:SCOR) t +31 (0)20 5195476 | f +31 (0)20 6953786 | wfourn...@comscore.com ... comScore Measuring the Digital World Nedstat is now part of comScore www.comscore.com www.nedstat.nl On 7/16/12 3:21 PM, john meyer firesk...@emailn.de wrote: Hello Wim The whole snmptt process is working I have some other snmp traps based on snmpttcvonverted mib's and there are no problems Only the self builded trap won't work if the trap is sent from the ow-server it will be written in the snmptt unknown file So i think sth is wrong with config trap syntax best regards john --- Ursprüngliche Nachricht --- Von: Fournier, Wim wfourn...@comscore.com Datum: 12.07.2012 14:22:23 An: Nagios Users List nagios-users@lists.sourceforge.net Betreff: Re: [Nagios-users] Help with creating an own trap Check the following: Is the cmd file a socket and not a regular file? Is it writable? Does nagios receive the check result? (check nagios.log) Does the submitcheckresult script work? Test it from the command line -- Wim Fournier Senior Technical Appl. Administrator | comScore, Inc. (NASDAQ:SCOR) t +31 (0)20 5195476 | f +31 (0)20 6953786 | wfourn...@comscore.com . .. comScore Measuring the Digital World Nedstat is now part of comScore www.comscore.com www.nedstat.nl From: firesk...@emailn.demailto:firesk...@emailn.de firesk...@emailn.demailto:firesk...@emailn.de Reply-To: firesk...@emailn.demailto:firesk...@emailn.de firesk...@emailn.demailto:firesk...@emailn.de, Nagios Users List nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge .net Date: Thursday, July 12, 2012 12:01 PM To: nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge .net nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge .net Subject: [Nagios-users] Help with creating an own trap Hello everybody i need help to create an own trap cause it' doesnt work with snmpttconvertmib the trap has non different oids but different enerptrise values tried to build the traps with the help of the trap log from our nagios server: The trap appears in the unknown trap log from snmptt. So the whole proccess from snmptt to nagios wont work. I think sth. is wrong on the config file which belongs to the trap trap.log: Mon Jul 9 11:28:33 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 115:5:24:30.31 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 Mon Jul 9 11:31:25 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 121:10:59:44.32 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 Here is the conf file: Event wateralertBOWSERVER .1.3.6.1.4.1.31440.0.6 Status Events Critical FORMAT Bedieneingriff empfohlen EXEC /usr/local/nagios/libexec/submit_check_result localhost Water Alert 2 Water $3 MATCH $Ent Value 0: 1 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 15:2:45:35.36 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 SDESC ow-server alert EDESC Event wateralertAOWSERVER .1.3.6.1.4.1.31440.0.6 Status Events INFORMATIONAL FORMAT alles ok EXEC /usr/local/nagios/libexec/submit_check_result localhost Water Alert 2 Water $3 is ok MATCH $Ent Value 0: 2 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 33:14:58:42.84 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 SDESC ow-server alert EDESC best regards john Versendet mit Emailn.dehttp://www.emailn.de/ - Freemail * Unbegrenzt Speicherplatz * Eigenes Online-Büro * 24h besten Mailempfang * Spamschutz, Adressbuch Facebook: http://www.facebook.com/Emailn.de - - Live Security Virtual Conference Exclusive live event will cover
[Nagios-users] Help with creating an own trap
Hello everybody i need help to create an own trap cause it' doesnt work with snmpttconvertmib the trap has non different oids but different enerptrise values tried to build the traps with the help of the trap log from our nagios server: The trap appears in the unknown trap log from snmptt. So the whole proccess from snmptt to nagios wont work. I think sth. is wrong on the config file which belongs to the trap trap.log: Mon Jul 9 11:28:33 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 115:5:24:30.31 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 Mon Jul 9 11:31:25 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 121:10:59:44.32 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 Here is the conf file: Event wateralertBOWSERVER .1.3.6.1.4.1.31440.0.6 "Status Events" Critical FORMAT Bedieneingriff empfohlen EXEC /usr/local/nagios/libexec/submit_check_result localhost "Water Alert" 2 "Water $3 " MATCH $Ent Value 0: 1 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 15:2:45:35.36 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 SDESC ow-server alert EDESC Event wateralertAOWSERVER .1.3.6.1.4.1.31440.0.6 "Status Events" INFORMATIONAL FORMAT alles ok EXEC /usr/local/nagios/libexec/submit_check_result localhost "Water Alert" 2 "Water $3 is ok" MATCH $Ent Value 0: 2 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 33:14:58:42.84 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 SDESC ow-server alert EDESC best regards john Versendet mit Emailn.de - Freemail * Unbegrenzt Speicherplatz * Eigenes Online-Büro * 24h besten Mailempfang * Spamschutz, Adressbuch Facebook: http://www.facebook.com/Emailn.de -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Help with creating an own trap
Check the following: Is the cmd file a socket and not a regular file? Is it writable? Does nagios receive the check result? (check nagios.log) Does the submitcheckresult script work? Test it from the command line -- Wim Fournier Senior Technical Appl. Administrator | comScore, Inc. (NASDAQ:SCOR) t +31 (0)20 5195476 | f +31 (0)20 6953786 | wfourn...@comscore.com ... comScore Measuring the Digital World Nedstat is now part of comScore www.comscore.com www.nedstat.nl From: firesk...@emailn.demailto:firesk...@emailn.de firesk...@emailn.demailto:firesk...@emailn.de Reply-To: firesk...@emailn.demailto:firesk...@emailn.de firesk...@emailn.demailto:firesk...@emailn.de, Nagios Users List nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge.net Date: Thursday, July 12, 2012 12:01 PM To: nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge.net nagios-users@lists.sourceforge.netmailto:nagios-users@lists.sourceforge.net Subject: [Nagios-users] Help with creating an own trap Hello everybody i need help to create an own trap cause it' doesnt work with snmpttconvertmib the trap has non different oids but different enerptrise values tried to build the traps with the help of the trap log from our nagios server: The trap appears in the unknown trap log from snmptt. So the whole proccess from snmptt to nagios wont work. I think sth. is wrong on the config file which belongs to the trap trap.log: Mon Jul 9 11:28:33 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 115:5:24:30.31 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 Mon Jul 9 11:31:25 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 121:10:59:44.32 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 Here is the conf file: Event wateralertBOWSERVER .1.3.6.1.4.1.31440.0.6 Status Events Critical FORMAT Bedieneingriff empfohlen EXEC /usr/local/nagios/libexec/submit_check_result localhost Water Alert 2 Water $3 MATCH $Ent Value 0: 1 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 15:2:45:35.36 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1 SDESC ow-server alert EDESC Event wateralertAOWSERVER .1.3.6.1.4.1.31440.0.6 Status Events INFORMATIONAL FORMAT alles ok EXEC /usr/local/nagios/libexec/submit_check_result localhost Water Alert 2 Water $3 is ok MATCH $Ent Value 0: 2 Variables: Value 0: 192.168.23.10 Value 1: 192.168.23.10 Value 2: 33:14:58:42.84 Value 3: .1.3.6.1.4.1.31440.0.6 Value 4: 192.168.23.10 Value 5: public Value 6: .1.3.6.1.4.1.31440 Value 7: Value 8: Value 9: Value 10: Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2 SDESC ow-server alert EDESC best regards john Versendet mit Emailn.dehttp://www.emailn.de/ - Freemail * Unbegrenzt Speicherplatz * Eigenes Online-Büro * 24h besten Mailempfang * Spamschutz, Adressbuch Facebook: http://www.facebook.com/Emailn.de -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] help with creating an own trap
Hello everybodyi need help to create an own trap caus it' doesnt work with snmpttconvertmibthe trap has non different oids but different enerptrise valuestried to build the traps with the help of the trap log from our nagios server:trap.log:Mon Jul 9 11:28:33 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at:Value 0: 192.168.23.10Value 1: 192.168.23.10Value 2: 115:5:24:30.31Value 3: .1.3.6.1.4.1.31440.0.6Value 4: 192.168.23.10Value 5: publicValue 6: .1.3.6.1.4.1.31440Value 7:Value 8:Value 9:Value 10:Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1Mon Jul 9 11:31:25 2012: Unknown trap (.1.3.6.1.4.1.31440.0.6) received from 192.168.23.10 at:Value 0: 192.168.23.10Value 1: 192.168.23.10Value 2: 121:10:59:44.32Value 3: .1.3.6.1.4.1.31440.0.6Value 4: 192.168.23.10Value 5: publicValue 6: .1.3.6.1.4.1.31440Value 7:Value 8:Value 9:Value 10:Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2conf file:Event wateralertBOWSERVER .1.3.6.1.4.1.31440.0.6 "Status Events" CriticalFORMAT Bedieneingriff empfohlenEXEC /usr/local/nagios/libexec/submit_check_result localhost "Water Alert" 2 "Water $3 "MATCH $Ent Value 0: 1SDESCow-server alertVariables:Value 0: 192.168.23.10Value 1: 192.168.23.10Value 2: 15:2:45:35.36Value 3: .1.3.6.1.4.1.31440.0.6Value 4: 192.168.23.10Value 5: publicValue 6: .1.3.6.1.4.1.31440Value 7:Value 8:Value 9:Value 10:Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=1EDESCEvent wateralertAOWSERVER .1.3.6.1.4.1.31440.0.6 "Status Events" INFORMATIONALFORMAT alles okEXEC /usr/local/nagios/libexec/submit_check_result localhost "Water Alert" 2 "Water $3 is ok"MATCH $Ent Value 0: 2SDESCow-server alertVariables:Value 0: 192.168.23.10Value 1: 192.168.23.10Value 2: 33:14:58:42.84Value 3: .1.3.6.1.4.1.31440.0.6Value 4: 192.168.23.10Value 5: publicValue 6: .1.3.6.1.4.1.31440Value 7:Value 8:Value 9:Value 10:Ent Value 0: .1.3.6.1.4.1.31440.2.2.1.1.4=2EDESChere is the output from the debug file:** SNMPTT v1.3 started: Wed Jul 11 10:50:24 2012 Net-SNMP version 5.0401 Perl module enabled DNS enabled **Loading /etc/snmp/snmptt.confFinished loading 64 lines from /etc/snmp/snmptt.confLoading /etc/snmp/snmptt.conf.nagiosFinished loading 65 lines from /etc/snmp/snmptt.conf.nagiosLoading /etc/snmp/snmptt.conf.owserverFinished loading 113 lines from /etc/snmp/snmptt.conf.owserverLoadingCould not open configuration file:Finished loading configuration filesProcessing memory copy of configuration files7 EVENTs found7 EVENTs found that contain at least the mandatory FORMAT lineFinished processing memory copy of configuration files==Printing out all the events in hash table:Event: .1.3.6.1.4.1.1302.3.1.2.8.0.2 = jobAborted,Status Events,WARNING,Benutzer benachrichtigt: $1 Auftrag:$3 Abgebrochen durch:$4,Event: .1.3.6.1.4.1.1302.3.1.2.8.0.3 = jobSuccess,Status Events,INFORMATIONAL,alles ok,Event: .1.3.6.1.6.3.1.1.5.1 = coldStart,Status Events,Normal,Device reinitialized (coldStart),Event: .1.3.6.1.6.3.1.1.5.2 = warmStart,Status Events,Normal,Device reinitialized (warmStart),Event: .1.3.6.1.6.3.1.1.5.3 = linkDown,Status Events,Normal,Link down on interface $1. Admin state: $2. Operational state: $3 ,Event: .1.3.6.1.6.3.1.1.5.4 = linkUp,Status Events,Normal,Link up on interface $1. Admin state: $2. Operational state: $3,Event: .1.3.6.1.6.3.1.1.5.5 = authenticationFailure,Status Events,Normal,SNMP athentication failure,Finished printing out all events in hash table==cwd: /Changing to UID: nagios (1001)Closing debug file /var/log/snmptt/snmptt.debugbest regards john Versendet mit Emailn.de - Freemail * Unbegrenzt Speicherplatz * Eigenes Online-Büro * 24h besten Mailempfang * Spamschutz, Adressbuch Facebook: http://www.facebook.com/Emailn.de -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
