Hi, I'm not sure but I think Spectrum uses IP address from agent address in UDP SNMP data, rather than source address in the IP packet.
But when Spectrum receives a trap and extract the IP address, it tries to match this IP in modeling database. If it founds a match, it associates the event to ALL models with this IP. Be aware that Spectrum search for all IP addresses assigned to a device, not only the primary address or the device's network address. It also search for any address in the "Redundancy Preferred Addresses List" AND "Redundancy Excluded Addresses List". So if Spectrum received a trap from 127.0.0.1 address, all devices in the map would have a event associated to them. Regards. James. 2011/3/10 Chandler, Bradford <[email protected]>: > You could use the southbound gateway and specify an event model. There are > certain stipulations about the trap itself as far as where the IP > Address/Name occur if you need it to occur against said device. Check the > user's guide for more info. > > > > Brad > > > > From: Ибрагимов Тимур [mailto:[email protected]] > Sent: Thursday, March 10, 2011 11:48 AM > To: spectrum > Subject: [spectrum] snmp traps with the same source ip address > > > > Hi all. > > > > How Spectrum should treat snmp traps from different network devices but with > the same Source address field in the IP packet? It needs to be unique for > each device? > > > > Agent-addr field in a Trap PDU seems to stay untouched in such a case. > > > > Thanks, > > -- > > Timur Ibragimov > > · --To unsubscribe from spectrum, send email to [email protected] > with the body: unsubscribe spectrum [email protected] > > --To unsubscribe from spectrum, send email to [email protected] with the > body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
