[prev in list] [next in list] [prev in thread] [next in thread]
List: net-snmp-bugs
Subject: snmptrapd trap variable value truncated
From: Ahmad Zuhd <ahmad.zuhd () gmail ! com>
Date: 2012-05-09 12:15:39
Message-ID: CAGj+z1fnOCqvBDQS4xZrWDEc5j=5qfOvh5AQb61Zuud8RtPw5A () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
I have configured snmptrapd to log the traps to log file. the traps
received and logged ok based on the mib file definition.
there is only one problem.
the value of one of the variables seems to be truncated due to end of line
or some special char.
linux is centos 6.2
snmp software versions:
net-snmp-5.5-27.el6.x86_64
net-snmp-libs-5.5-27.el6.x86_64
net-snmp-utils-5.5-27.el6.x86_64
net-snmp-perl-5.5-27.el6.x86_64
*Trap definition from the MIB:*
EVENT fredFault .1.3.6.1.4.1.1383.1008.0.50 "Status Events"
This trap is sent if a device is not reachable using IP ping
Variables:
1: alarmId
Syntax="OCTETSTR"
Descr="OMC unique alarm id"
2: deviceName
Syntax="OCTETSTR"
Descr="Name of device"
3: deviceType
Syntax="INTEGER"
Descr="Type of device such as WEB, VAD, etc."
4: severity
Syntax="INTEGER"
Descr="severity of trap"
5: timeStamp
Syntax="OCTETSTR"
Descr="time that the trap was sent. YYYYMMDDHHMMSS"
6: description
Syntax="OCTETSTR"
Descr="short description of trap."
7: text
Syntax="OCTETSTR"
Descr="full description of trap."
*Below is the log from syslog file*
##HOSTNAME## Hostname of the device sending the alarm
##IP## IP address of the device sending the alarm
May 6 03:13:12 nms snmptrapd[26523]: 2012-05-06 03:13:12 ##HOSTNAME##
[##IP##] (via UDP: [##IP##]:45364->[10.102.4.10]) TRAP, SNMP v1, community
public#012#011.1.3.6.1.4.1.1383.1008 Enterprise Specific Trap (50) Uptime:
205 days, 11:48:19.09#012#011.1.3.6.1.4.1.1383.1008.1.7.0 = STRING:
"567349"#011.1.3.6.1.4.1.1383.1008.1.1.0 = STRING:
"sgf.domain"#011.1.3.6.1.4.1.1383.1008.1.2.0 = STRING:
"ASU"#011.1.3.6.1.4.1.1383.1008.1.3.0 = INTEGER:
4#011.1.3.6.1.4.1.1383.1008.1.4.0 = STRING:
"20120426132231"#011.1.3.6.1.4.1.1383.1008.1.5.0 = STRING: "ASU EVENT:
Alarm already raised For App ID 4 and Event ID 110 (Confusion message
received for CIC:"#011.1.3.6.1.4.1.1383.1008.1.6.0 = STRING: "No Alarm is
present in the Alarm Table for the given AlarmID - ID=5 SEVERITY=INFO
STATUS=ALARM_ACTIVE No Alarm is present in the Alarm Table for the given
AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_ACTIVE No Alarm is present in the
Alarm Table for the given AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_"
*Problem*
the variable 6: description seems to be truncated, as follows:
- values that supposed to appear is
ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion
message received for CIC: 29, DPC: 6-0-2)
- the value truncated and appeared at the log file
ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion
message received for CIC
[Attachment #5 (text/html)]
<div dir="ltr">I have configured snmptrapd to log the traps to log file. the traps \
received and logged ok based on the mib file definition.<br> <br>
there is only one problem. <br>
<br>
the value of one of the variables seems to be truncated due to end of line or some \
special char.<br> <br>
linux is centos 6.2<br>
snmp software versions:<br>
net-snmp-5.5-27.el6.x86_64<br>
net-snmp-libs-5.5-27.el6.x86_64<br>
net-snmp-utils-5.5-27.el6.x86_64<br>
net-snmp-<acronym title="Practical Extraction and Report \
Language">perl</acronym>-5.5-27.el6.x86_64<br> <br>
<br>
<u><b>Trap definition from the MIB:</b></u><br>
<br>
EVENT fredFault .1.3.6.1.4.1.1383.1008.0.50 "Status Events" <br>
This trap is sent if a device is not reachable using IP ping<br>
Variables:<br>
1: alarmId<br>
Syntax="OCTETSTR"<br>
Descr="OMC unique alarm id"<br>
2: deviceName<br>
Syntax="OCTETSTR"<br>
Descr="Name of device"<br>
3: deviceType<br>
Syntax="INTEGER"<br>
Descr="Type of device such as WEB, VAD, etc."<br>
4: severity<br>
Syntax="INTEGER"<br>
Descr="severity of trap"<br>
5: timeStamp<br>
Syntax="OCTETSTR"<br>
Descr="time that the trap was sent. YYYYMMDDHHMMSS"<br>
6: description<br>
Syntax="OCTETSTR"<br>
Descr="short description of trap."<br>
7: text<br>
Syntax="OCTETSTR"<br>
Descr="full description of trap."<br>
<br>
<br>
<br>
<br>
<b><u>Below is the log from syslog file</u></b><br>
<br>
##HOSTNAME## Hostname of the device sending the alarm<br>
##IP## IP address of the device sending the alarm<br>
<br>
May 6 03:13:12 nms snmptrapd[26523]: 2012-05-06 03:13:12 ##HOSTNAME##
[##IP##] (via UDP: [##IP##]:45364->[10.102.4.10]) TRAP, SNMP v1,
community public#012#011.1.3.6.1.4.1.1383.1008 Enterprise Specific Trap
(50) Uptime: 205 days, 11:48:19.09#012#011.1.3.6.1.4.1.1383.1008.1.7.0 =
STRING: "567349"#011.1.3.6.1.4.1.1383.1008.1.1.0 = STRING:
"sgf.domain"#011.1.3.6.1.4.1.1383.1008.1.2.0 = STRING:
"ASU"#011.1.3.6.1.4.1.1383.1008.1.3.0 = INTEGER:
4#011.1.3.6.1.4.1.1383.1008.1.4.0 = STRING:
"20120426132231"#011.1.3.6.1.4.1.1383.1008.1.5.0 = STRING: "ASU EVENT: \
Alarm already raised For App ID 4 and Event ID 110 (Confusion message
received for CIC:"#011.1.3.6.1.4.1.1383.1008.1.6.0 = STRING: "No Alarm
is present in the Alarm Table for the given AlarmID - ID=5
SEVERITY=INFO STATUS=ALARM_ACTIVE No Alarm is present in the Alarm
Table for the given AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_ACTIVE No
Alarm is present in the Alarm Table for the given AlarmID - ID=5
SEVERITY=INFO STATUS=ALARM_"<br>
<br>
<br>
<b><u>Problem</u></b><br>
<br>
the variable 6: description seems to be truncated, as follows:<br>
<br>
- values that supposed to appear is <br>
<br>
ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion message \
received for CIC: 29, DPC: 6-0-2)<br> <br>
- the value truncated and appeared at the log file<br>
<br>
ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion message \
received for CIC</div>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Net-snmp-bugs mailing list
Net-snmp-bugs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-bugs
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic