Hi Ludo, thanks. But I'm still not sure if i'm using snmptranslate.exe correctly.
Please see this article - http://docstore.mik.ua/orelly/networking_2ndEd/snmp/ch10_03.htm "Basically, you construct something that looks like an enterprise OID. It's best to look at an example. One such trap is rdbmsOutOfSpace, which is defined in the RDBMS MIB. Its complete OID is .1.3.6.1.2.1.39.2.2 (.iso.org.dod.internet.mgmt.mib-2.rdbmsMIB.rdbmsTraps.rdbmsOutOfSpace). To send this trap, which is really an SNMPv2 notification, you would use everything up to rdbmsTraps as the enterprise OID, and the entire object ID as the specific trap number." I'm using this example to check if snmptranslate.exe works. Here it says .1.3.6.1.2.1.39.2.2 should return "mib-2.rdbmsMIB.rdbmsTraps.rdbmsOutOfSpace". I copied RDBMS MIB which i downloaded from http://www.oidview.com/mibs/0/RDBMS-MIB.html to C:\usr\share\snmp\mibs. Deleted .index and then run: snmptranslate .1.3.6.1.2.1.39.2.2 > SNMPv2-SMI::mib-2.39.2.2 ".39.2.2" is not decoded to "rdbmsMIB.rdbmsTraps.rdbmsOutOfSpace". Any thoughts? Thanks again. :) Rgds, Joshua Ludo Brands wrote: > 1.3.6.1.4.1.311. is the Microsoft public mib > (.iso.org.dod.internet.private.enterprises.microsoft.) > Anything below that is considered private MIB and manufacturers can do > basically what they want with it. Translating automatically is going to be > done on a per manufacturer, and sometimes per endpoint, base. Some > manufacturers behave and their private MIB will help quite a long way in > translating automatically. > > Ludo > > >> -----Message d'origine----- >> De : Joshua Lim [mailto:joshua__...@hotmail.com] >> Envoyé : lundi 27 juin 2011 17:01 >> À : Ararat Synapse >> Objet : Re: [Synalist] RE : RE : How to decode MIBName OID to >> readablevalues? >> >> >> Hi Ludo, >> >> Thanks. I was able to download snmptranslate.exe from >> http://www.elifulkerson.com/articles/net-snmp-windows-binary-u >> nofficial.php >> >> The mib txt files must be downloaded separately - i managed to get it >> from the net snmp nightly tarball - >> http://www.net-snmp.org/nightly/tarballs - and also had to >> copied them >> to C:\usr\share\snmp\mibs in order for snmptranslate.exe to work. >> >> Ludo Brands wrote: >> >>> In this case you're trapping evntwin traps. >>> >> 1.3.6.1.4.1.311.1.13.1 is >> >>> the microsoft enterprise base OID. More info on OID's created by >>> windows here: http://support.microsoft.com/kb/318464 >>> >>> >> Is it possible to get this translated automatically? I mean, for >> testing, I'm using evntwin traps, it maybe other system in real >> practice. I would have thought that MIB files would do that >> translation? >> >> By the way, SnmpMgrGetTrapEx (Window's own SNMP Management API) >> translates 1.3.6.1.4.1.311.1.13.1.9999.1.0 to >> .iso.org.dod.internet.private.enterprises.microsoft.software.1 >> 3.1.9999.1.0. >> >> >> 23.83.101.114.118.105.99.101.32.67.111.110.116.114.111.108.32.77.97.11 >> >>> 0.97.1 >>> 03.101.114 translates to 23 characters "Service Control Manager". >>> >>> >> I noticed that even SnmpMgrGetTrapEx doesn't translate >> "Service Control >> Manager". >> >> >>> 1.3.6.1.4.1.311.1.13.1.9999.1.0 is the summary attribute. Read the >>> value to get the summary message. >>> >>> Ludo >>> >>> >>> >>>> -----Message d'origine----- >>>> De : Ludo Brands [mailto:ludo.bra...@free.fr] >>>> Envoyé : lundi 27 juin 2011 08:26 >>>> À : 'Ararat Synapse' >>>> Objet : [Synalist] RE : How to decode MIBName OID to >>>> >> readable values? >> >>>> Snmptranslate is a tool available on linux and ported to windows. >>>> >>>> Ludo >>>> >>>> >>>> >>>>> -----Message d'origine----- >>>>> De : Joshua Lim [mailto:joshua__...@hotmail.com] >>>>> Envoyé : lundi 27 juin 2011 07:54 >>>>> À : Ararat Synapse >>>>> Objet : Re: [Synalist] How to decode MIBName OID to >>>>> >> readable values? >> >>>>> Hi, >>>>> >>>>> Here's an example Trap created using Windows Event to Trap >>>>> >>>>> >>>> translator >>>> >>>> >>>>> which sends the trap for events generated by the Service >>>>> Control Manager. >>>>> >>>>> Destination: 192.168.0.10 >>>>> Source: 192.168.0.10 >>>>> Enterprise: >>>>> 1.3.6.1.4.1.311.1.13.1.23.83.101.114.118.105.99.101.32.67.111. >>>>> 110.116.114.111.108.32.77.97.110.97.103.101.114 >>>>> Community: public >>>>> Generic: 6 >>>>> Specific: 1073748860 >>>>> Seconds: 34835394 >>>>> Destination MIBName[0]: 1.3.6.1.4.1.311.1.13.1.9999.1.0 >>>>> Destination MIBValue[0]: The Dispatcher service entered the >>>>> running state. >>>>> >>>>> How do I interpret >>>>> 1.3.6.1.4.1.311.1.13.1.23.83.101.114.118.105.99.101.32.67.111. >>>>> 110.116.114.111.108.32.77.97.110.97.103.101.114 >>>>> and 1.3.6.1.4.1.311.1.13.1.9999.1.0 into something >>>>> >>>>> >>>> readable? Thanks. >>>> >>>> >>>>> Rgds, >>>>> Joshua >>>>> >>>>> >>>>> >>>>> Joshua Lim wrote: >>>>> >>>>> >>>>>> Hi, >>>>>> >>>>>> I've successfully received traps using the sample code in >>>>>> http://synapse.ararat.cz/files/contrib/Trap.zip >>>>>> >>>>>> This works fine, at least for SNMP v1 (I'll next need to >>>>>> >>>>>> >>>> figure out >>>> >>>> >>>>>> other versions). >>>>>> >>>>>> In the meantime, I'll like to know how I can decode OID values >>>>>> assigned to MIBName to readable values? >>>>>> >>>>>> e.g. Destination MIBName[0]: 1.3.6.1.2.1.1.1.0 >>>>>> >>>>>> Apologies if this question sounds silly, but I'm an SNMP newbie. >>>>>> >>>>>> Appreciate any tip. :-) >>>>>> >>>>>> Rgds, >>>>>> Joshua >>>>>> >>>>>> >>>>>> >>>>>> >> --------------------------------------------------------------------- >> >>>> - >>>> >>>> >>>>>> -------- >>>>>> All of the data generated in your IT infrastructure is >>>>>> >>>>>> >>>>> seriously valuable. >>>>> >>>>> >>>>>> Why? It contains a definitive record of application >>>>>> >>>>>> >>>>> performance, security >>>>> >>>>> >>>>>> threats, fraudulent activity, and more. Splunk takes this >>>>>> >>>>>> >>>>> data and makes >>>>> >>>>> >>>>>> sense of it. IT sense. And common sense. >>>>>> http://p.sf.net/sfu/splunk-d2d-c2 >>>>>> _______________________________________________ >>>>>> synalist-public mailing list >>>>>> >> synalist-public@lists.sourceforge.net >> >>>>>> https://lists.sourceforge.net/lists/listinfo/synalist-public >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>> -------------------------------------------------------------- >>>>> ---------------- >>>>> All of the data generated in your IT infrastructure is seriously >>>>> valuable. Why? It contains a definitive record of application >>>>> performance, security threats, fraudulent activity, and >>>>> >> more. Splunk >> >>>>> takes this data and makes >>>>> sense of it. IT sense. And common sense. >>>>> http://p.sf.net/sfu/splunk-d2d-c2 >>>>> _______________________________________________ >>>>> synalist-public mailing list synalist-public@lists.sourceforge.net >>>>> https://lists.sourceforge.net/lists/listinfo/synalist-public >>>>> >>>>> >>>>> >>>> -------------------------------------------------------------- >>>> ---------------- >>>> All of the data generated in your IT infrastructure is >>>> seriously valuable. >>>> Why? It contains a definitive record of application >>>> performance, security >>>> threats, fraudulent activity, and more. Splunk takes this >>>> data and makes >>>> sense of it. IT sense. And common sense. >>>> http://p.sf.net/sfu/splunk-d2d-c2 >>>> _______________________________________________ >>>> synalist-public mailing list >>>> synalist-public@lists.sourceforge.net >>>> https://lists.sourceforge.net/lists/listinfo/synalist-public >>>> >>>> >>>> >>> >> ---------------------------------------------------------------------- >> >>> -------- >>> All of the data generated in your IT infrastructure is >>> >> seriously valuable. >> >>> Why? It contains a definitive record of application >>> >> performance, security >> >>> threats, fraudulent activity, and more. Splunk takes this >>> >> data and makes >> >>> sense of it. IT sense. And common sense. >>> http://p.sf.net/sfu/splunk-d2d-c2 >>> _______________________________________________ >>> synalist-public mailing list >>> synalist-public@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/synalist-public >>> >>> >>> >>> >> -------------------------------------------------------------- >> ---------------- >> All of the data generated in your IT infrastructure is >> seriously valuable. Why? It contains a definitive record of >> application performance, security >> threats, fraudulent activity, and more. Splunk takes this >> data and makes >> sense of it. IT sense. And common sense. >> http://p.sf.net/sfu/splunk-d2d-c2 >> _______________________________________________ >> synalist-public mailing list synalist-public@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/synalist-public >> >> > > > ------------------------------------------------------------------------------ > All of the data generated in your IT infrastructure is seriously valuable. > Why? It contains a definitive record of application performance, security > threats, fraudulent activity, and more. Splunk takes this data and makes > sense of it. IT sense. And common sense. > http://p.sf.net/sfu/splunk-d2d-c2 > _______________________________________________ > synalist-public mailing list > synalist-public@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/synalist-public > > > ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ synalist-public mailing list synalist-public@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/synalist-public
