please help regarding snmptrap
Does anyone know how to debug it when snmptrap and snmptrapd do not work? snmptrapd doesn't show anything! this is my 3rd post, but no one seems to be interested to help. I appreciate your help. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
RE: Help request snmptrap
From: Christophe Thévenin [mailto:[EMAIL PROTECTED] Sent: Friday, September 26, 2008 2:43 AM I would like create a snmptrap request but I don't understand the tutorial: http://www.net-snmp.org/wiki/index.php/TUT:snmptrap I would like send data. My request is : snmptrap -v 3 host 192.168.0.11\4700 But my request is without data. Your request is missing a few things, like v3 authentication data. Check here to figure out what you may need to add - at minimum a security level of noAuthNoPriv and a username: http://www.net-snmp.org/wiki/index.php/TUT:SNMPv3_Options Your request has no data because you have provided none. Also note that you are sedning it to a host named hoat and providing an uptime of 192.168.0.11\4700 ticks, which does not parse. Correct those two things, then add the OID of the notification itself (may I suggest NET-SNMP-EXAMPLES-MIB::netSnmpExampleHeartbeatNotification), and you should be able to get your test notification through. HTH, Mike - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Help request snmptrap
Hello, I would like create a snmptrap request but I don't understand the tutorial: http://www.net-snmp.org/wiki/index.php/TUT:snmptrap I would like send data. My request is : snmptrap -v 3 host 192.168.0.11\4700 But my request is without data. I needed your help. Thank you. -- Best regards, Christophe - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On 30/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: But I also want it to execute the command /bin/sh /tmp/trapTst.sh On the host that is running the trap receiver. OK - what is the trap PDU that should trigger this command? Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On 27/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: Hello, I have this snmpd.conf configuration on one host trapsink 10.0.0.4 test trap2sink 10.0.0.4 test informsink 10.0.0.4 test Why do you want to send three copies of every notification to the same trap receiver? Isn't trapsink for SNMPv1 traps, trap2sink for SNMPv2 traps? trapsink will send all notifications as SNMPv1 traps. trap2sink will send all notifications as SNMPv2c traps. informsink will send all notifications as SNMPv2c informs. Please see the snmpd.conf(5) man page and the FAQ entry: Where are these traps sent to? http://net-snmp.sourceforge.net/wiki/index.php/FAQ:Agent_17 Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On 27/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: [the agent] sucessfully send the trap, as it shows on the snmptrapd.log [snip] But I also want it to execute the command /bin/sh /tmp/trapTst.sh On which system? The host where the agent is running (10.0.0.1), or the host that is running the trap receiver (10.0.0.4) ? Here's my snmptrapd.conf file on 10.0.0.1 I thought you said that snmptrapd was running on 10.0.0.4? That's certainly the address you seem to have in your snmpd.conf file. The snmptrapd.conf file will only be processed by snmptrapd, and hence is only needed on the system where traps are received. It's not relevant on the system where the agent is running, where traps are sent *from*. (Unless these are both the same box, of course). Instead of sending traps, have a look at the 'setEvent' directive, to handle everything on the 10.0.0.1 system. Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On 26/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: Hello, I have this snmpd.conf configuration on one host trapsink 10.0.0.4 test trap2sink 10.0.0.4 test informsink 10.0.0.4 test Why do you want to send three copies of every notification to the same trap receiver? Now, when I start the snmpd on 10.0.0.1 (the SNMP host), the snmptrapd.log shows this [snip] Does this by any chance means that the snmptrap is working fine? It means that the agent and snmptrapd are working fine. The command-line tool snmptrap is not relevant here - that is an alternative mechanism for sending traps. But the agent is generating traps quite happily - three at a time! snmptrap -v 2c -c public localhost NOTIFICATION-TEST-MIB::demo-notif \ SNMPv2-MIB::sysLocation.0 s just here but nothing happens. Try with localhost:162 instead of just localhost. I presume you are running this on the same machine as the trap receiver (10.0.0.4), rather than the system with the SNMP agent (10.0.0.1) Also, let's say I have on the snmpd.conf file this: proc apache2 100 1 And let's say that apache2 has stopped, will this triger a trap to the trapserver? Not by itself, no. Please see the snmpd.conf(5) man page - in particular, the section headed ACTIVE MONITORING. Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On Fri, 27 Jul 2007 09:59:32 +0100, Dave Shield wrote: On 26/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: Hello, I have this snmpd.conf configuration on one host trapsink 10.0.0.4 test trap2sink 10.0.0.4 test informsink 10.0.0.4 test Why do you want to send three copies of every notification to the same trap receiver? Isn't trapsink for SNMPv1 traps, trap2sink for SNMPv2 traps? Now, when I start the snmpd on 10.0.0.1 (the SNMP host), the snmptrapd.log shows this [snip] Does this by any chance means that the snmptrap is working fine? It means that the agent and snmptrapd are working fine. The command-line tool snmptrap is not relevant here - that is an alternative mechanism for sending traps. But the agent is generating traps quite happily - three at a time! snmptrap -v 2c -c public localhost NOTIFICATION-TEST-MIB::demo-notif \ SNMPv2-MIB::sysLocation.0 s just here but nothing happens. Try with localhost:162 instead of just localhost. I presume you are running this on the same machine as the trap receiver (10.0.0.4), rather than the system with the SNMP agent (10.0.0.1) Yes, it is the same machine, (10.0.0.4), and it didn't worked with the :162 Also, let's say I have on the snmpd.conf file this: proc apache2 100 1 And let's say that apache2 has stopped, will this triger a trap to the trapserver? Not by itself, no. Please see the snmpd.conf(5) man page - in particular, the section headed ACTIVE MONITORING. I'll take a look as soon as I have some time(little busy now), and will post back doubts, and stuff. Dave Thanks a lot Dave. - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Help with snmptrap
On Fri, 27 Jul 2007 09:59:32 +0100, Dave Shield wrote: On 26/07/07, Mateus Interciso [EMAIL PROTECTED] wrote: Hello, I have this snmpd.conf configuration on one host trapsink 10.0.0.4 test trap2sink 10.0.0.4 test informsink 10.0.0.4 test Why do you want to send three copies of every notification to the same trap receiver? Now, when I start the snmpd on 10.0.0.1 (the SNMP host), the snmptrapd.log shows this [snip] Does this by any chance means that the snmptrap is working fine? It means that the agent and snmptrapd are working fine. The command-line tool snmptrap is not relevant here - that is an alternative mechanism for sending traps. But the agent is generating traps quite happily - three at a time! snmptrap -v 2c -c public localhost NOTIFICATION-TEST-MIB::demo-notif \ SNMPv2-MIB::sysLocation.0 s just here but nothing happens. Try with localhost:162 instead of just localhost. I presume you are running this on the same machine as the trap receiver (10.0.0.4), rather than the system with the SNMP agent (10.0.0.1) Also, let's say I have on the snmpd.conf file this: proc apache2 100 1 And let's say that apache2 has stopped, will this triger a trap to the trapserver? Not by itself, no. Please see the snmpd.conf(5) man page - in particular, the section headed ACTIVE MONITORING. Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users Ok, thanks a lot for the help. It worked :D(almost) This is what I've putted on the snmpd.conf file rouser test noauth agentSecName test monitor -r 5 -o prNames -o prErrMessage process table prErrorFlag != 0 And it sucessfully send the trap, as it shows on the snmptrapd.log 2007-07-27 19:05:58 UNKNOWN [UDP: [10.0.0.1]:50031]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (118788) 0:19:47.88 SNMPv2-MIB::snmpTrapOID.0 = OID: DISMAN-EVENT-MIB::mteTriggerFiredDISMAN- EVENT-MIB::mteHotTrigger.0 = STRING: process tableDISMAN-EVENT- MIB::mteHotTargetName.0 = STRING: DISMAN-EVENT-MIB::mteHotContextName.0 = STRING:DISMAN-EVENT-MIB::mteHotOID.0 = OID: UCD-SNMP- MIB::prErrorFlag.1DISMAN-EVENT-MIB::mteHotValue.0 = INTEGER: 1 UCD-SNMP-MIB::prNames.1 = STRING: apache2 UCD-SNMP- MIB::prErrMessage.1 = STRING: Too few apache2 running (# = 0) But I also want it to execute the command /bin/sh /tmp/trapTst.sh, how to do it? Here's my snmptrapd.conf file on 10.0.0.1 traphandle prErrorFlag /bin/sh /tmp/trapTst.sh traphandle default /bin/sh /tmp/trapTst.sh donotlogtraps no printeventnumbers yes ignoreauthfailure yes authCommunity log,execute public snmpTrapdAddr 10.0.0.4 Thanks a lot for the help :D - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Help with snmptrap
Hello, I have this snmpd.conf configuration on one host (a lot more, but this is the relevant part) trapsink 10.0.0.4 test trap2sink 10.0.0.4 test informsink 10.0.0.4 test authtrapenable 1 This for the snmptraps part. On host 10.0.0.4, I have this snmptrapd.conf file traphandle 1.3.6.1.2.1.2 /bin/sh /tmp/trapTst.sh traphandle 1.3.6.1.4.1.2021.2.1.100 /bin/sh /tmp/trapTst.sh traphandle NOTIFICATION-TEST-MIB::demo-notif /bin/sh /tmp/trapTst.sh traphandle default /bin/sh /tmp/trapTst.sh donotlogtraps no printeventnumbers yes ignoreauthfailure no authCommunity log,event test nmpTrapdAddr 10.0.0.4 Now, when I start the snmpd on 10.0.0.1 (the SNMP host), the snmptrapd.log shows this NET-SNMP version 5.4 2007-07-26 13:13:08 hostname_striped [***.***.***.***] (via UDP: [10.0.0.1]:49484) TRAP, SNMP v1, community ouvi NET-SNMP-MIB::netSnmpNotificationPrefix Enterprise Specific Trap (NET-SNMP-AGENT-MIB::nsNotifyShutdown) Uptime: 0:03:26.15 2007-07-26 13:13:08 UNKNOWN [UDP: [10.0.0.1]:49485]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (20615) 0:03:26.15 SNMPv2-MIB::snmpTrapOID.0 = OID: NET-SNMP-AGENT-MIB::nsNotifyShutdown 2007-07-26 13:13:08 UNKNOWN [UDP: [10.0.0.1]:49487]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (20615) 0:03:26.15 SNMPv2-MIB::snmpTrapOID.0 = OID: NET-SNMP-AGENT-MIB::nsNotifyShutdown 2007-07-26 13:13:08 hostname_striped [***.***.***.***] (via UDP: [10.0.0.1]:49491) TRAP, SNMP v1, community ouvi NET-SNMP-MIB::netSnmpAgentOIDs.10 Cold Start Trap (0) Uptime: 0:00:00.09 Does this by any chance means that the snmptrap is working fine? I've also tryed to make the snmptrap tutorial on the net-snmp wiki (http://net-snmp.sourceforge.net/wiki/index.php/TUT:snmptrap), I can execute the snmptrap -v 2c -c public localhost NOTIFICATION-TEST-MIB::demo-notif \ SNMPv2-MIB::sysLocation.0 s just here but nothing happens. I'm doing something wrong? Also, let's say I have on the snmpd.conf file this: proc apache2 100 1 And let's say that apache2 has stopped, will this triger a trap to the trapserver? Thanks a lot. Mateus - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: neeed help in snmptrap conf file
On 24/07/07, manu kumar [EMAIL PROTECTED] wrote: Now i have to gerate a snmptarp alrets when the varibles v1 and v2 values incerases 100 (v1100 i have to generate a snmptrap alret) How to Generate snmptrap alrets . That is precisely the situation that the DisMan Event MIB was designed for. Have a look at the section ACTIVE MONITORING in the snmpd.conf(5) man page - in particular, the monitor and related directives. Dave - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: neeed help in snmptrap conf file
Hi, I've implemented a trap similar in this way: -in my mib_file.txt i've implemented a node trap in which objects are notification type; - then i've created a source and header file from it throug mib2c (using mib2c.notify.conf); -then i've modified source file (that has been a very hard operation for me!) including a comparison between values and the snmp_alarm_register operation that verify the condition every X seconds. -then i've created a shared object and linked it to snmpd (including the instruction dlmod in snmpd.conf). -then run snmptrapd. conf -f -Le and from another prompt snmpd. You will see notification now! It's great but i had a problem! QUESTION: In source file generated by mib2c you will need objects values! How can you do it? ANSWER:I've done it implementing 2 internal GET instruction. That because I don't know if there is a simple instruction that allow you to get value inside agent without implementing a get instruction! I think it's the only way. For any question, mail me! Bye Messaggio originale Da: [EMAIL PROTECTED] Data: 24-lug-2007 6.43 AM A: net-snmp-users@lists.sourceforge.net Ogg: neeed help in snmptrap conf file Hi , can any one help me in creating snmptarp.conf file and I have my own xx.mib file , in that mib file contains a variables v1 and v2 .Now i have to gerate a snmptarp alrets when the varibles v1 and v2 values incerases 100 (v1100 i have to generate a snmptrap alret) How to Generate snmptrap alrets . - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk. com/___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists. sourceforge.net/lists/listinfo/net-snmp-users - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
neeed help in snmptrap conf file
Hi , can any one help me in creating snmptarp.conf file and I have my own xx.mib file , in that mib file contains a variables v1 and v2 .Now i have to gerate a snmptarp alrets when the varibles v1 and v2 values incerases 100 (v1100 i have to generate a snmptrap alret) How to Generate snmptrap alrets . - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
