Scott answered this far better than I could have. However, looking at the original log entry and reading Scott's explanation does raise one additional issue:
20030703 110714 EVENT SNMP Trap/Unsolicited xxx.xxx.xxx.xxx Trap(linkUp) Addr:xxx.xxx.xxx.xxx Int:4 Int:0 Tick:20:04:40 Int:4 Int:0 should give authenticationFailure and not linkup. I did just re-test this using a utility called trapgen, and everything looked fine: 20030703 140937 EVENT SNMP Trap/Unsolicited 127.0.0.1 Trap(authenticationFailure) Addr:xxx.xxx.xxx.xxx Int:4 Int:0 Tick:05:36:05 Why is there a difference? The answer will lie in the first few line of your traps.txt file, which should look like: coldStart,snmp,0,0 warmStart,snmp,1,0 linkDown,snmp,2,0 linkUp,snmp,3,0 authenticationFailure,snmp,4,0 egpNeighborLoss,snmp,5,0 enterprise,snmp,6,0 reload,cisco,6,0 tcpConnectionClose,cisco,6,1 Mark Symons Ipswitch, Inc Augusta GA -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Taylor Sent: Thursday, July 03, 2003 13:58 To: '[EMAIL PROTECTED]' Subject: RE: [WhatsUp Forum] SNMP Trap Question Think of the first number as sort of a general category for a TRAP. The range is 0 - 6 for this number. Int:0 - Int:5 are the standard default SNMP TRAPs as defined by the ISO and the second number is always 0 for these categories. Int:6 is the enterprise category and is used to indicate a vendor supplied TRAP. The second number indicates the specific condition, or error number, for a vendor issued TRAP. This is a 32 bit number so it can theoretically range into the billions. I listed the default SNMP TRAPs below. In WUG these definitions are in the file TRAPS.TXT including any vendor specific TRAPs that you compile using MIB-EXTRACTOR. Int:0 Int:0 - coldStart Int:1 Int:0 - warmStart Int:2 Int:0 - linkDown Int:3 Int:0 - linkUp Int:4 Int:0 - authenticationFailure Int:5 Int:0 - egpNeighborLoss Int:6 Int:? - enterprise The following are two great web sites for SNMP resources. http://www.snmplink.org/ http://www.simpleweb.org/ Good Luck, Scott Taylor -----Original Message----- From: James Amann [mailto:[EMAIL PROTECTED] Sent: Thursday, July 03, 2003 11:26 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [WhatsUp Forum] SNMP Trap Question In the following trap and many if not all others: 20030703 110714 EVENT SNMP Trap/Unsolicited xxx.xxx.xxx.xxx Trap(linkUp) Addr:xxx.xxx.xxx.xxx Int:4 Int:0 Tick:20:04:40 I am wondering what the two "Int" [ Int:4 Int:0 ] values denote. Any help always appreciated. Thanks. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
