Hi all

I want to process DISMAN event traps which are sent by a Net-SNMP daemon.  The 
problem I have is that these traps contain additional varbinds whose OID depend 
on the value of another varbind.

The Net-SNMP software can monitor certain resources (processes, disk space, 
etc.) locally. If a configured threshold is violated a mteTriggerFired (see 
http://tools.ietf.org/html/draft-ietf-disman-event-mib-09) notification will be 
sent. While the standard lists five varbinds for this notification, the trap 
actually contains another two varbinds with important information (I believe 
sending additional varbinds is actually standards-compliant). Unfortunately the 
OID of these varbinds depend on the resource that was monitored, i.e. they are 
not fixed!

In terms of AlertMap entries this can be described like this:

1.3.6.1.2.1.88.2.6.1    0xffffff10 \
                # mteHotTrigger
1.3.6.1.2.1.88.2.1 (1,0) \
# mteHotTargetName
                1.3.6.1.2.1.88.2.2 (2,0) \
                # mteHotContextName
                1.3.6.1.2.1.88.2.3 (3,0) \
                # mteHotOID
                1.3.6.1.2.1.88.2.4 (4,0) \
                # mteHotValue
1.3.6.1.2.1.88.2.5 (5,0) \
# additional varbind 1
1.3.6.1.4.1.2021.a.b.c (6,7) \
# additional varbind 2
1.3.6.1.4.1.2021.x.y.z (7,8)

The problem is that the actual values of 'a.b.c' and 'x.y.z' depend on the 
value of mteHotOID and only the last two varbinds provide sufficient 
information to understand the event without any further investigation.
Is there a method in Spectrum where one can either have a wildcard notation for 
varbind OID or alternatively can I dynamically poll SNMP information during 
event processing?

I hope I provided sufficient information.

Thanks

Markus

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

**********************************************************************


_____________________________________________________________________ 
This e-mail has been scanned for viruses by MCI's Internet Managed 
Scanning Services - powered by MessageLabs. For further information 
visit http://www.mci.com
---
To unsubscribe from spectrum, send email to [email protected] with the body: 
unsubscribe spectrum [email protected]

Reply via email to