Generate SNMP traps for monitoring tests

Similar Questions

• Interpretation of the events of SNMP Trap

  Hey everybody,

  I currently receive SNMP traps for important alerts to the IPS, we put in place. The logs for these traps look like this:

  ENT value 6:. 1.3.6.1.4.1.9.9.383.1.2.3 = This signature is a Metacomponent

  ENT value 7:. 1.3.6.1.4.1.9.9.383.1.2.4 = Visual Studio Msmask32.ocx ActiveX Buffer Overflow

  ENT value 8:. 1.3.6.1.4.1.9.9.383.1.2.5 = 6990

  First of all, how can I know what strings like "Ent value 8:. 1.3.6.1.4.1.9.9.383.1.2.5" mean? Is how important it?

  Second, what is the best way to interpret these traps? I guess I need to write a custom script to gather important details and to do what I want with them?

  Pointers would be very useful! I just want to know what I'm getting into. :)

  Thank you!

  You can search the OID in this tool:

  http://Tools.Cisco.com/support/SNMP/do/BrowseOID.do?local=en

  There are many collectors of SNMP trap free and commercial that would help you to that effect. Scripts can participate really sometimes, but of course, if you're an expert at home, no need to pay money to achieve your desired goals.

  Concerning

  Farrukh

• Someone at - it successfully configured the cartridge of integration Foglight for receptions of SNMP Trap and corresponding alert?

  I have a use case, by which we receive------ingest SNMP devices SAN Hitachi interruptions in our Foglight 5.6.5 instance.   We have the cartridge installed and loaded 5.6.3 integration and full access to the dashboard integration.  Can anyone shed light on what are the next steps?

  Daisy,

  I recommend that you look at the information of the community of http://en.community.dell.com/techcenter/performance-monitoring/foglight-administrators/f/4788/t/19552981.aspx#6115

  Bart has contributed to the discussion of SNMP traps.

  David Mendoza

• How to open the port 161 on the ASA and Cisco switches for monitoring of BB

  Dear all,

  I want to install BB to monitor snmptraps suffering of failure.

  The newspaper shows BB cannot connect to all ports of the switch 161, and I even can't telnet to 161 XXX_17f for example.

  My switches are Cisco C3550, C2950, etc. of the ASA.

  Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_17f on port 161

  Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_9f on port 161

  Mon 7 Nov 15:43:03 2011 bbnet can't connect to XXX server on port 161

  Thank you

  Anson

  no need to adjust anything in bb-hosts. If you have added setings in bb-hosts, delete them. Also remove associated in bbvar/logs log files. (otherwise, you'll have purple when you delete the SNMP, trap tags bb-hosts)

  A column of trap will be that no show until the device sends a trap to BB.

• SNMP Trap Variable alertSystemFQDN

  I have a client with a PE r.620 with an iDRAC7 tries to monitor the integrity of their server with interruptions SNMP hardware. They are especially interested in the varbind alertSystemFQDN (1.3.6.1.4.1.674.10892.4.5000.10.8), which is apparently not defined and appears empty when they receive the iDRAC SNMP traps. Exactly how is set the varbind alertSystemFQDN? It is configurable by the user through racadm, or based on a DNS lookup, or what? I could not find a sufficient explanation in the reference Guide of SNMP for iDRAC8.

  anoryx

  I am interested by out exactly this information

  It is taken from the operating system. This is the host name in the operating system. You must have OpenManage Server Administrator installed to iDRAC to be able to question the news of the OS.

• SNMP traps may explain PPPoE users on a router?

  For purposes of verification, I want to use SNMP traps to account for PPPoE users on a router?  I don't see a way to do this.  Is is possible?  If not, what is the best way to go about this?

  "Server enable snmp traps pppoe" is not providing this type of info, any more than I think it should anyway. OTOH, if you configure "accounting aaa" global or "ppp accounting" by interface, the NAS (your rtr) can report these modules to the server (RADIUS or GANYMEDE) AAA:

  rtr# show accounting
  

  Active Accounted actions on tty0, User (not logged in) Priv 1
  
      

   Task ID 1, EXEC Accounting record, 00:35:16 Elapsed
  
      

   task_id=1 service=shell
  
      

  Active Accounted actions on tty33, User ellie Priv 1
  
      

   Task ID 16, EXEC Accounting record, 00:00:17 Elapsed
  
      

   task_id=16 service=shell
  
      

  Active Accounted actions on Interface Async33, User tom Priv 1
  
      

   Task ID 17, Network Accounting record, 00:00:13 Elapsed
  
      

   task_id=17 service=ppp protocol=ip addr=10.0.0.1
  
  

  Then it's a matter of instrumentation of a solution on the AAA alert/report server however you want for the listeners. I think that SNMP trap would not be the first choice as a mechanism of benefit in this case, as there are a lot more simple options on a server.

  Alternatively, if you believe this info can be obtained with some show commands on the router itself and the router supports EEM, I'd want a solution based EEM on the other Network Management forum (https://supportforums.cisco.com/community/netpro/network-infrastructure/network-management), which can certainly generate an SNMP trap as a result.

• Disable vEthernet snmp trap-the link on 1000v status

  Hello-

  Are there options to disable the registered link interruption snmp on the 1000v Veth interfaces?  The normal 'without snmp trap the status of the link"command is not available on a Vethernet interface on port-profile.  You can do it on the connection ports rising physics, but who don't buy me anything.  The example of this shows doc you can, but that doesn't seem correct to me, http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_2_1_s_v_1_4/command/reference/n1000v_cmds_s.html#wp1309091

  I prefer not to disable all notifications link snmp status, but maybe it's the only option.

  Thanks in advance

  Hey Chad,.

  I created the Bug next to track this problem in versions 1.4 and 1. 4A:

  CSCtx41516 - Disable 'snmp trap link-status' on a vethernet interface

  Essentially, it is a summary of the discussion in this thread and try I did accordingly. If all goes well, you should be able to find out.

  With respect to the request to apply the configuration to the port-profile level, I went back and tested whether this feature was never available in SV1(3b), (3d) SV1, SV1 (4) and SV1(4a). The answer to that is unfortunately not.

  If you need this feature, because it would be beneficial in your environment where you create interfaces vethernet 1000 +, I recommend that join you your team account/sales and put in place a business case for the feature request. They can help to put it together and try to get the feature approved by the developers and the Business Unit request.

  I would like to know if there is something else.

  Thank you

  Michael

• Configure SNMP source for the events of HW for IPMI sensors

  Us run Dell hardware and tested OMSA installed on ESXi5 hosts pointing to OpenManage (OME) Essentials for any interruptions SNMP. As indicated in the following Dell FAQ for OME the 9.5 troubleshooting section, to avoid massive amounts of alerts unknown on the server of the OME from our hosts ESXi5 we define the SNMP CIM for IPMI event source.

  http://en.community.Dell.com/TechCenter/systems-management/w/wiki/3265.OpenManage-Essentials-FAQ.aspx

  This article as well as VMware material and KB, any reference to the need to use the vSphere CLI to make this change, which of course works such as documented. Does anyone know if it is possible to make this change via PowerCLI? We do not want to use the vSphere CLI unless it's the only possible way as all the other configuration items that we have implemented kickstart or PowerCLI scripting.

  http://KB.VMware.com/kb/1008065

  http://pubs.VMware.com/vSphere-50/topic/com.VMware.vSphere.monitoring.doc_50/GUID-01D333E8-0A34-4F04-BB6C-D80A5FDA8CC5.html

  I was able to find the key value pair in PowerCLI where EnvEventSource/directions options, but I don't know if those who may be changed.

  If someone knows a way to do this, I would like to know how it is possible.

  Thank you.

  I think I knew that.  It seems that you have to connect directly to the ESXi host nothing to do with SNMP still, but if someone knows a way to avoid this, I'd love to hear it.  But this seems to work at the same time, but would need to change to more than one host at a time.

  ## Script function: Modify SNMP source for hardware events
  ## Usage: Connect to vCenter where host(s) reside, populate constants below and run
  
  ## Host to make changes to
  $strVMHost = "your_ESXi_5_host"
  
  ## Credentials for ESXi host(s)
  $strUser = "root"
  $strPassword = "your_password"
  
  ## Key to change value on (in case there are different key/value pairs you need to change in the future)
  $keySnmpEventSource = "EnvEventSource"
  
  ## New value for above key
  $valueSnmpEventSource = "sensors"
  
  ## Connect directly to VMHost in order to see the HostSnmpSystem object (http://pubs.vmware.com/vsphere-50/topic/com.vmware.wssdk.apiref.doc_50/vim.host.SnmpSystem.html)
  Connect-VIServer -Server $strVMHost -User $strUser -Password $strPassword
  
  ## Get the VMHost .NET View object and select only the HostSnmpSystem object
  $viewHost = Get-VMHost -Server $strVMHost -Name $strVMHost | Get-View -Property ConfigManager.SnmpSystem
  
  ## Get the HostSnmpSystem object
  $viewHostSnmpSystem = Get-View -Id $viewHost.ConfigManager.SnmpSystem
  
  ## Create new empty HostSnmpConfigSpec (http://pubs.vmware.com/vsphere-50/topic/com.vmware.wssdk.apiref.doc_50/vim.host.SnmpSystem.SnmpConfigSpec.html)
  $specHostSnmpConfigSpec = New-Object VMware.Vim.HostSnmpConfigSpec
  
  ## Populate newly created HostSnmpConfigSpec object with current values
  $specHostSnmpConfigSpec = $viewHostSnmpSystem.Configuration
  
  ## Modify desired value for the matching key
  ($specHostSnmpConfigSpec.Option | ?{$_.Key -eq $keySnmpEventSource}).Value = $valueSnmpEventSource
  
  ## Reconfigure the SNMP agent to take the new value
  $viewHostSnmpSystem.ReconfigureSnmpAgent($specHostSnmpConfigSpec)
  
  ## Disconnect from VMHost
  Disconnect-VIServer -Server $strVMHost -Confirm:$false
  

  Let me know if it works for your environment that we not use SNMP in ours, so I didn't do extensive testing.

• How will I know if a program must be bypassed through firewalls (SNMP Trap)

  My computer is having trouble, the upgrade from vista to windows 7. the Adviser to implementation level keeps stopping and when it finds solutions, none is found... Im going through my stuff Aureano and firewall and there is something called SNMP trap. What is - this and that I allow to bypass the firewall? In addition, what I do on the Upgrade Advisor?

  Hello

  Method 1:

   

  I suggest you consult the below the article that explains what the SNMP and traps are:

  http://support.Microsoft.com/kb/172879

  Method 2:

  For what is the Upgrade Advisor, if you believe that the firewall is blocking it ended, you can disable it and re-enable once the program is completed.

  http://Windows.Microsoft.com/en-us/Windows-Vista/turn-Windows-Firewall-on-or-off

• SNMP Trap to order Action Script in Foglight rule

  Hello everyone,

  I need to make a rule that runs a script via the Action control when a SNMP Trap has arrived. I create this?

  The script is required for integration with my SMS server.

  Best regards

  There is a similar example in our documentation, see if that helps

  http://eDOCS.quest.com/Foglight/5611/doc/cartridge-integration/IntegrationCartridge/UnderstandingWorkflow.5.php#404739

  Golan

• How can I have a graphical report for another test instead of only for the connection test

  Currently in our environment, we have enabled trends report function so that the connectivity for all test machines, we use the 4.3 BBFE and I noticed that in the CGI - BIN directory, we installed the bb - amcharts.sh and bb - doamcharts.sh of Quest software scripts. My problem is that I can't find any file configuration of this feature, and trying the Script BBserver troubleshooting I found no nothing related to this function.

  Can someone help me please?

  I hope to be clear enough.

  Best regards

  Community in the morning,

  I read the post from Paul O'Brien on the activation of trendig of performance data. At the present time, the solution seems to work only on my RHEL hosts, but for all our Solaris hosts, I don't see any performance data sent to my BBSERVER, expecially, the $BBVAR/perf/$HOSTNAME dir is empty and the newspaper of our BBSERVER and BBclient, I don't see any warning about, here's a bbdef - client.sh which does not , could someone help me solve this problem?

  P.S. the Server/client version is the PE bb4.3.

  bash-3. $00 cat bbc4.30-bbpe/etc/bbdef-client.sh

  #! / bin/sh

  #

  # bbdef.sh

  #

  # BIG BROTHER ZONE DEFINITIONS

  #

  # (c) Copyright Quest Software, Inc. 1997 - 2009 - all rights reserved.

  #

  #

  # LOCAL CUSTOMER CONTROL CONFIGURATION for bb - local.sh

  #

  # WARNING LEVELS AND PANIC TO LOCAL INFOMRAION SYSTEM

  # YOU CAN SET THE VALUES ON A SPECIFIC HELP FILE SYSTEM OF

  # THE etc/bb-dftab FILE

  #

  DFWARN = % DISK # 90 (YELLOW) TO WARN THE

  DFPANIC = % DISK # 95 (RED) TO PANIC

  export DFWARN DFPANIC

  #

  # CPU LEVELS ARE THE MINUTE LOAD AVERAGE x 100 5

  #

  CPUWARN = 150 # (YELLOW) WARN LOAD AVG OF 1.5

  CPUPANIC = # 300 (RED) PANIC TO LOAD AVERAGE OF 3

  DISPREALLOADAVG = "FALSE" # DISPLAY THE LOAD AVERAGE AS FOUND IN AVAILABILITY

  # BB REMOVES THE '.' DEFAULT

  export CPUPANIC CPUWARN DISPREALLOADAVG

  #

  # PROCESS MONITORING

  # THESE VALUES ARE SUBSTITUTED BY THE etc/bb-proctab FILE

  #

  PROCS = 'bbrun' # (YELLOW) WARN IF NOT RUNNING

  PAGEPROC = "cron" # (RED) PAGE IF NOT RUNNING

  export the PROCS PAGEPROC

  #

  MESSAGE # TRACE FILE (/ var/adm/messages or similar)

  #

  # SMM: WHAT'S NEW IN BB 1.4

  # CHKMSGLEN IS SET TO TRUE BY DEFAULT. HE'LL SCREAM IF IT FINDS

  # YEAR EMPTY MESSAGES FILE. BETTER SAFE THAN SORRY.

  #

  # NOTE: Since VERSION 1.8, YOU CAN USE etc/bb-msgstab to

  # CONFIGURE THE VALUES OF PAGEMSG, GSM AND IGNMSGS

  # NOTE THAT THE KEYWORDS ARE SEPARATED HERE SPACE OPPOSITES

  # À « ; » SEPERTATED IN etc/bb-msgstab

  #

  CHKMSGLEN = "TRUE" # MAKE SURE THE FILE MSG IS NON-NULLE LEN

  PAGEMSG = "NOTICE" # PAGE (RED) IF WE SEE THIS MESSAGE

  MSG = "$PAGEMSG" # (YELLOW) WARNINGS ON THE LOOKOUT FOR

  # NOTE: THE WORDS IN PAGEMSG * ALSO *.

  # DEFINE IN MSGS

  IGNMSGS = "" # list of messages to ignore if the string matches the line "

  # define each message

  MSGEXPIRE = "30:60" # EXPIRE WARNINGS IN 30 MIN, PANIC IN 60

  YELLOWMSGSLINES = 10 # return of the XX more recent warning messages

  REDMSGSLINES = # 20 return messages of most recent PANIC XX

  OLDSTYLEBBMSGS = 'FALSE' # don't expire messages found

  # just like the old days (they must be deleted manually)

  export MSGS PAGEMSG IGNMSGS CHKMSGLEN MSGEXPIRE YELLOWMSGSLINES REDMSGSLINES OLDSTYLEBBMSGS

  #

  # Control the color of the dot of cpu when a host reboots

  # Note that the minute definable maximum is 60, anything over will be reset to 60

  #

  WARNMINSONREBOOT = 60

  WARNCOLORONREBOOT = yellow

  export WARNMINSONREBOOT WARNCOLORONREBOOT

  #

  # THIS DEFINES A VALUE FOR IF YOU THINK THAT THE MACHINES MUST BE RESTARTED EVERY X DAYS

  #

  BBTOOMANYDAYSUP = 9999

  export BBTOOMANYDAYSUP

  #

  configuration variables # associated with performance data

  # define as below for processor and disk

  # BBPERFTESTS = 'cpu disk.

  #

  BBPERFTESTS = 'cpu disk.

  export BBPERFTESTS

  #

  # Variables to determine whether the local test should be performed

  # and if so, would you send a msg still

  #

  DOCPU = 'TRUE '.

  DOMSGS = 'TRUE '.

  DOPROCS = 'TRUE '.

  DODISK = 'TRUE '.

  NOCPUCOLOR = 'clear' XX set to "" If you do not want a sent message

  NOMSGSCOLOR = 'clear' # anything else will send a message to BBDISPLAY

  NODISKCOLOR = 'clear '.

  NOPROCSCOLOR = 'clear '.

  export DOMSGS DOPROCS DODISK DOCPU

  export NOCPUCOLOR NOMSGSCOLOR NODISKCOLOR NOPROCSCOLOR

  Thank you for your replies,

  Best regards

• SNMP traps

  If I enable all SNMP traps instead of activate certain specific traps. Will there be an effect on the performance of the device or the network performance?

  What is recommended, either we have to activate all or specific traps SNMP traps?

  Kind regards
  Mukesh Kumar
  Network engineer
  Spooster COMPUTER services

  allowing all the traps could have an impact on performance. Each product trap will be resources for treatment. If there are a lot of pitfalls that occur at the same time it could potentially affect the performance while these traps are processed.

  By default, are indicators of authentication, Link Up/Down, several users and Spanning Tree

  permit. I would recommend allowing specific traps that you need to watch over the default.

• SNMP Trap before rule Doc

  Is it set somewhere that that the fields are in the rule before SNMP trap. When I separate data, I understand the data essentially looks like this for all the pitfalls:

  SNMPv2 - SMI:enterprises.7572.1.4.1 = STRING: "Global restorations were 6% on server \"IT_Infrastructure_GOLD_c1\. This exceeds the threshold of 4% warning. »

  SNMPv2 - SMI:enterprises.7572.1.4.2 = STRING: "PerformaSureAgent".

  SNMPv2 - SMI:enterprises.7572.1.4.3 = STRING: "9bb99684-93f5-4d82-90f1-90f6322c1f7d".

  SNMPv2 - SMI:enterprises.7572.1.4.4 = STRING: "WAS7PROD-mw-genprod-004-IT_Infrastructure_GOLD_c1.

  SNMPv2 - SMI:enterprises.7572.1.4.5 = STRING: "f745c1c4-8317-4c69-82b8-a926960a9f27".

  SNMPv2 - SMI:enterprises.7572.1.4.6 = STRING: "WebSphere MW Global restorations.

  SNMPv2 - SMI:enterprises.7572.1.4.7 = STRING: "d1302651-decb-4cee-9bb4-719c5abe47b1".

  SNMPv2 - SMI:enterprises.7572.1.4.8 = STRING: "Transaction".

  SNMPv2 - SMI:enterprises.7572.1.4.9 = STRING: '2 '.

  SNMPv2 - SMI:enterprises.7572.1.4.10 = STRING: "server1.xyz.com".

  SNMPv2 - SMI:enterprises.7572.1.4.11 = STRING: "10.12.34.172".

  SNMPv2 - SMI:enterprises.7572.1.4.12 = «»

  SNMPv2 - SMI:enterprises.7572.1.4.13 = STRING: "https://foglight.xyz.com:8443 / console/task/showAlarm?" "alarmId = / alarms/2f625845-eed5-4c81-b02b-b8d88d52aee1"

  SNMPv2 - SMI:enterprises.7572.1.4.14 = STRING: "Wed Jan 30 09:52:22 IS 2014.

  It seems that each line represents a specific variable (or given) associated with the alarm has been triggered. For example, the first line is the message... but I would like to be able to map each row above it is "foglight Name" in our Splunk environment... I can guess on most of them, but if it has been documented somewhere I would feel better about A) do it properly mapped and B) have a place to look for potential changes during the Foglight upgrade in the future.

  I am happy to hear from you to find what you are looking for.

  There is also documentation for the SNMP Trap before rule, if you need it: http://edocs.quest.com/foglight/5610/doc/Core/AdministrationConfiguration/FineTuning_Ref.22.php

• How to deploy the agent SNMP trap receiver

  How to deploy the agent SNMP trap receiver

  The integrations cartridge contains a SNMP Trap Receiver. You can search edocs.quest.com for 'receive snmp' where there are good to work with the agent explanations.

  David Mendoza

• SNMP MIB for ASR5k

  Hi guys.

  I need monitor the status of the SCTP on HNBGW sessions. I use zabbix as SNMP server for this server.

  I must add MIB snmp STARENT - MIB.my. I found the next guide with this MIB:

  http://www.Cisco.com/c/dam/en/us/TD/docs/wireless/asr_5000/19-0/PDF/19-S...

  But this guide is not practical. I tried to find this MIB on the ftp server to cisco, but it was ineffective. Do you where I can download STARENT - MIB.my?

  Thank you.

  Yuliya salvation,

  I hope you do well,

  Find enclosed the STARENT-MIB. I changed the extension, please download and modify the .my extension.

  ****

  Starent - MIB.txt for starent - mib.my

  ****

  I hope that helps!

  Claudio Gonzalez