Are you trying to determine if traps are coming into the TD, or if traps are being forwarded to the other landscapes?
If you want to see if traps are coming into the TD, there is an attribute on the VNM model Traps_Received (0x10411), which is a counter of the number of traps received off the wire. Note that this should be zero on all but the TD landscape. If you want to see if traps are being forwarded, there is an attribute on the VNM model Traps_Processed (0x10412), which is a counter of the number of traps processed by this landscape, whether the traps arrived directly or were forwarded from the TD. This number should be near zero on the TD unless you also have real device models on the TD. Otherwise it's really a counter of the number of traps that couldn't be forwarded. Depending on your goals, you could set watches on either or both of these attributes. For example we're using a watch on Traps_Received to raise an alarm if the average number of traps per second on the TD falls below a threshold. HTH, Jim On 11/7/11 6:31 AM, "Calvin Lane" <[email protected]> wrote: I have 4 SS's in a fault tolerant setup. One of them is designated as the trap director. I'd like to verify that traps are being received, so I'm using the following queries: mysql> select count(*) from event where vardata_string like '%Alert Has Posted%'; +----------+ | count(*) | +----------+ | 20158 | +----------+ 1 row in set (1.42 sec) mysql> mysql> select from_unixtime((select max(utime) from event where vardata_string LIKE '%Alert Has Posted%')); +----------------------------------------------------------------------------------------------+ | from_unixtime((select max(utime) from event where vardata_string LIKE '%Alert Has Posted%')) | +----------------------------------------------------------------------------------------------+ | 2011-10-29 07:25:01 | +----------------------------------------------------------------------------------------------+ 1 row in set (1.44 sec) mysql> According to the query above, it appears my last trap entered the event table on 10/29/11. All three of my SS's are showing the same exact time that the last trap came in. On the box designated as the trap director, it is showing no records in the event table that have 'Alert Has Posted' in the vardata_string. Other than searching the vardata_string for 'Alert Has Posted', what else should I be looking for in the ddmdb that will confirm whether traps are coming in to the db. I plan on snooping the interfaces for port 162 traffic, but I'd like to know if there is anything I can look at or if there is something I'm missing. Keep in mind, the SS's seem to be functioning normally. Thanks. Calvin * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
