CSS not sending generic traps to trap host

My CSS is writing both generic and enterprise traps to the local traplog file, yet it is only forwarding the enterprise traps to the remote log?
YD01LB09# show log traplog tail 5
01/05/2005 12:45:12:Generic:Virtual Rounter 200 down on interface 7.32.172.15
01/05/2005 12:45:14:Enterprise:Service Transition:upstream_downstream -> down
01/05/2005 12:45:14:Enterprise:Service Transition:upstream_downstream -> alive
01/05/2005 12:45:14:Generic:Virtual Router 200 backup on interface 7.32.172.15
01/05/2005 12:45:18:Generic:Virtual Rounter 200 master on interface 7.32.172.15
01/05/2005 12:49:16:Enterprise:Service Transition:upstream_downstream -> suspended
01/05/2005 12:49:16:Generic:Virtual Rounter 200 down on interface 7.32.172.15
01/05/2005 12:49:18:Enterprise:Service Transition:upstream_downstream -> down
01/05/2005 12:49:20:Enterprise:Service Transition:upstream_downstream -> alive
01/05/2005 12:49:20:Generic:Virtual Router 200 backup on interface 7.32.172.15
01/05/2005 12:49:23:Generic:Virtual Rounter 200 master on interface 7.32.172.15
Remote Syslog
bash-2.00$ grep yd01lb09 contivity.*
contivity.Dec22:DEC 22 09:44:39 yd01lb09.net.rc.gc.ca 1/1 112 NETMAN-2: Enterprise:Service Transition:7.35.40.216:80 -> down
contivity.Jan02:JAN 2 04:02:45 yd01lb09.net.rc.gc.ca 1/1 113 NETMAN-2: Enterprise:Service Transition:7.35.38.213:80 -> down
contivity.Jan02:JAN 2 04:04:18 yd01lb09.net.rc.gc.ca 1/1 114 NETMAN-2: Enterprise:Service Transition:7.35.40.216:80 -> down
contivity.log:JAN 5 12:45:12 yd01lb09.net.rc.gc.ca 1/1 115 NETMAN-2: Enterprise:Service Transition:upstream_downstream -> suspended
contivity.log:JAN 5 12:45:14 yd01lb09.net.rc.gc.ca 1/1 121 NETMAN-2: Enterprise:Service Transition:upstream_downstream -> down
contivity.log:JAN 5 12:49:16 yd01lb09.net.rc.gc.ca 1/1 127 NETMAN-2: Enterprise:Service Transition:upstream_downstream -> suspended
contivity.log:JAN 5 12:49:18 yd01lb09.net.rc.gc.ca 1/1 133 NETMAN-2: Enterprise:Service Transition:upstream_downstream -> down

HI,
have you configured both
snmp trap-type enterprise ...
(see
http://www.cisco.com/en/US/partner/products/hw/contnetw/ps789/products_configuration_guide_chapter09186a00800d6b32.html#xtocid19)
and
snmp trap-type generis ...
(see http://www.cisco.com/en/US/partner/products/hw/contnetw/ps789/products_configuration_guide_chapter09186a00800d6b32.html#xtocid16)
Kind Regards,
Joerg

Similar Messages

Cisco WLC 5508 not sending SNMP Traps

Hello Everyone.
I'm having a weird error on our WLC environment. We have an HA with two cisco WLC 5508 and i cannot get SNMP Traps working on a Windows PC running Kiwi Syslog server (free ed.).
I can receive correctly Syslog messages, but not traps.
I Tried also to send SNMP Traps from WLC to a different PC using Linux with snmptrapd and it works fine.
I tried then to send from my Linux box a snmp trap to my Windows PC, and it works fine, but i still cannot receive anything from WLC.
Using Wireshark to detect traffic, i cannot see any packet on udp port 162.
I cannot figure out any problem with my scenario, but i can see the following errors on syslog:
*rmgrTrasport: Mar 30 16:08:22.602: #RMGR-3-INVALID_PING_RESPONSE: rmgr_utils.c:270 Ping response from <my_windows_PC> is invalid. Ip address do not match.
My WLC Version is 7.6.130.0
Thank you for your support.

I have gone through your query and found the following fruitful links ,please let me know if it helps and mark it correct answer if it is.
https://www.manageengine.com/network-monitoring/help/userguide/processing_traps.html
https://rscciew.wordpress.com/2014/10/12/snmp-configuration-on-wlc/
Thanks :)

Email form submit not sending to GoDaddy and Yahoo hosted email accounts

I have two sites that have contact forms and for some reason I addresses hosted by go daddy and yahoo aren't getting the form submissions. One site is http://www.lashwaxboutique.com/contact.html the other site I can't share at the moment. Are there known issues with godaddy and yahoo mails? They have worked in previous versions of muse.

I have a similar issue. I don't know if it is just go daddy and yahoo. I think it is all submit to email. Here is the thread.
Re: muse broken update - not emailing pdf forms from website

Muse contact form is not sending emails.

Muse site contact form is not sending emails. I perform a form check using this link http:/my_site.com/scripts/form_check.php. It is giving the message that SQL configuration problem.
Please help to solve this.

I posted a very similar issue into the bugs forum. "
Email form submit not sending to GoDaddy and Yahoo hosted email accounts"
I have tested the emails across various forms and it works but does not using the Muse form widget. I strongly believe this is an Adobe Muse issue and needs further support from Adobe. In the mean time I have begun using Jot Form on my sites (jotform.com)

WLC not sending AP up/down traps

Hello guys,
I am running WLC 7.2.110.0 and i realise that the AP up/down traps are not being sent to my configured Management server.
The WLC is however able to send other traps such as client disconnect, security alert related and coverage alarm holes.
can anyone advise or provide any way to have these particular traps sent to a monitroing server? The AP up/down traps seem to me to be one of the most important traps on the CUWN but are not working in this case.
thanks in advance.

You can try capturing traffic on the WLC port to make sure that the SNMP packets are being sent. Once you make sure they are sent then you can check the whole path to the management system to see where probably those packets are getting lost.
If the WLC is not sending the packets then it looks like a bug where the WLC should send the packets but it actually does not.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

ASA 5580 not sending traps

I must be missing something in the config as this is happening on multiple ASA's. I have the following config in place and not receiving any traps on our management servers. I don't even see the Trap PDU's increasing in the snmp-server statistics. Any suggestions and advice is much appreciated.
snmp-server host inside 10.235.42.38 community ****
snmp-server host inside 10.236.32.34 community ****
snmp-server host inside 10.236.36.34 community ****
snmp-server host inside 10.236.43.34 community ****
snmp-server location MEH
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
snmp-server enable traps syslog
snmp-server enable traps ipsec start stop
snmp-server enable traps entity config-change fru-insert fru-remove
snmp-server enable traps remote-access session-threshold-exceeded
logging enable
logging standby
logging list snmp message 212001-212015
logging console snmp
logging trap debugging
logging asdm informational
logging host inside 10.236.38.36

Are you able to ping the snmp servers from the firewall? Is the snmp server subnet directly connected to the firewall, or multiple hops away? Another thing to note is between the ASA and the snmp servers, are there any other firewall, or ACL that might be blocking the snmp traps?
If you run packet capture on the ASA firewall inside interface, are you seeing the snmp traps being sent out?
Lastly, what does the output of "show snmp-server statistics" show?

Enterprise Manager Grid Control can send SNMP Traps to third-party?

GC 11.1
It looks like a simple config, but I've got into a confusion about it.
I'm trying to figure out the configuration to send SNMP traps to a third party server.
My scenario is:
Node A (managed, monitored) ---- GC box------ SNMP box (final destination).
My understanding is that the traps (notification methods) configured on GC box are generated by the Agent on Node A, then received by the GC and distributed as e-mails.
What is the config to set the traps from A to reach SNMP box?
There is the help page from the GC page (confused about interpretation):
"Add SNMP Trap pageThe Add SNMP Trap page enables you to provide the name of the host (machine) on which the SNMP Master Agent is running and other details so that SNMP traps can be sent through Notification Rules.
An example is shown below.
Name HP OpenView Console
Description Notification method to send trap to HP openview console
SNMP Trap Host Name litleguy.us.oracle.com
SNMP Host Port 162
SNMP Community public
This SNMP host will receive your SNMP traps.
Note: A Test Trap button exists for you to test your setup."
Any suggestions are highly appreciated.
Thx,

Please reply with the specific questions around this.
11.1
EM can send SNMP traps to specific designated receivers. You create an advanced notification method (of type SNMP Trap) with the appropriate details about the receiver.
(See Setup->Notification Methods)
In the notification rules UI, you specify the alerts you are interested in forwarding and select the SNMP trap advanced notification method you created earlier.
The SNMP receiver should be provided the correct MIB that defines the SNMP trap. There were some bugs with the MIB definition in one of the releases (don't recall which one off hand), so if the traps you are receiving don't match what the receiver expects - please let us know and we can point to the right one.
regards

Can SOA suite send SNMP traps?

Hi!
I've looked in a lot documentation to find whether the SOA suite supports sending SNMP traps or not.
It can be done in Oracle Enterprise Manager 10.2.0.3 10g Release 3, but can it be done in EM 10.1.3.1.0 10g Application Manager Control?
(I can't find it there anyway)
/Per

IMHO the SOA Suite itseld is not able to send SNMP traps. You could implement it in for example in BPEL, with sensors. You call a java class that performs the SNMP trap. Or you make a generic BPEL process that sends SNMP traps based on the incoming payload via embedded java, and call this process from ESB or BPEL whenever you want to send a SNMP trap.

Experiences with sending SNMP-Traps to 3rd party (Nagios)

Hello Colleagues,
i'm working on a project where we would like to monitor our databases additionally sending SNMP-Traps to Nagios.
At the moment i'm using net-snmp-utils and snmptt. The snmptt-traphandler is running in daemon-mode and passes incoming SNMP-Traps to Nagtrap.
Now i want to create passive service checks. For example a passive service check for TBS_Usage for database 'exdb' which returns the values from the incoming SNMP-Trap.
Has anyone experiences by implementing the SNMP Notifications (to Nagios)? Is there an easier way to implement this than using snmptt?
Does anyone know, how the MIB (snmptt.conf) must be configured for the passive service check?
I'm looking forward hearing from you soon!
Best regards,
Sönke

Hi Nikhil!
Basically I am trying to set trap forwarding to a
a NNM on the network from sunMC 3.5 Update 1.
I have followed all the directions in sunMC snmp FAQ
and other threads on this forum but I am not able to
set the trap destinations.<snip>
Other thread having same question is
http://forum.sun.com/thread.jspa?threadID=15625&tstart
=0Have you reviewed the options in the other thread? (i.e. Halcyon SNMP integration or HP integration packages). Both are off-the-shelf and if you can understand SunMC SNMP infrastructure you certainly wouldn't have trouble configuring either. If you've looked at both packages, what parts made you decide not to use them? Note: I work for Halcyon.
Building your own custom integration with direct traps may be difficult: the generic snmp faq doens't have all the info you need to do so (i.e. how to get NNM to go backwards to an Agent to request the details of an event like "Warning /op is 95% full" or "Critical: Power Supply 2 is Offline"). I'm not even sure how I'd go about it, and I've been using SunMC for years :)
Regards,
Mike
([email protected])

LMS 4.2.3 Unidentified Trap Generic Trap:6 Specific Trap:1 EnterpriseOid:.1.3.6.1.4.1.9.9.41.2

Hi All,
We are seeing unidentified traps continuously on the LMS 4.2.3.
Unidentified Trap Generic Trap:6 Specific Trap:1 EnterpriseOid:.1.3.6.1.4.1.9.9.41.2
What are these traps and how to avoid the same. as these traps are coming from all the devices in the network.
Regards,
Channa

Hello Channa,
the 'Unidentified Trap' Alerts that you provided :
NOTIFICATION ORIGINATOR = Fault Management Module
The EnterpriseOid in this Alert tells me that this is the cisco syslog trap :
.1.3.6.1.4.1.9.9.41.2.0.1
clogMessageGenerated OBJECT-TYPE
        -- FROM CISCO-SYSLOG-MIB
        TRAP
        VARBINDS       { clogHistFacility, clogHistSeverity,
clogHistMsgName, clogHistMsgText, clogHistTimestamp }
        DESCRIPTION    "When a syslog message is generated by the device a
               clogMessageGenerated notification is sent. The
               sending of these notifications can be enabled/disabled
               via the clogNotificationsEnabled object."
This tells me that you have configured this device with 'snmp-server enable trap syslog' , which means that every syslog message that is generated on the device will also be sent as an snmp trap.
Is there a specific reason why the sending of syslog messages as an snmp trap has been enabled on this device (and others) ?
To stop LMS generating an Alert for every syslog message I would recommend that you disable this device from sending syslog traps to LMS. If there are multiple devices sending syslog traps to LMS then the sending of these traps to LMS should be disabled on all such devices.
Thanks-
Afroz
***Ratings Encourages Contributors ****

Sending SNMP traps using JDMK from a SunOS 5.8 workstation

Hi,
We are using JDMK 5.1 for sending traps. This works when I run my java application (sending the traps) on my Windows desktop, where I have installed the JDMK.
I want to run my application on a Sun workstation . For this I copied the JDMK libraries and traps are not received by the SNMP Manager. I would like to know the procedure for using JDMK from Sun OS. Do I have to install the Agent on Sun workstation rather than just copying the libraries?
Thank you for the help.
-Rejani

There is a big difference between an app that isn't sending traps and one that isn't receiving them.
You aren't eating exceptions in your code are you? If not then that means the traps are being sent. And if so then it means it has nothing to do with your application and probably nothing to do with the box and probably does have something to do with the network.

Sending snmp traps for SVM

i've got my box sending general traps, but i've noticed Sun Volume Manager requires separate configuration for this using /etc/snmp/conf/mdlogd.acl. How can i now verify that i will get traps if my internal drives (mirrored using meta commands) have issues or fail? is there a meta or md command i can issue as a check?
thanks

Hi Rolf,
Thanks for the information. It helped me.
I have configured the trigger event to use the track instead insted of the syslog. And it send the traps to the server.
sysUpTime.0 = 1805405563
snmpTrapOID.0 = cEventMgrMIB.0.2
ceemHistoryEventEntry.2.3 = 211
ceemHistoryEventEntry.3.3 = 0
ceemHistoryEventEntry.4.3 = 0
ceemHistoryEventEntry.5.3 = 0
ceemHistoryEventEntry.6.3 =
ceemHistoryEventEntry.7.3 = applet: TRACK_SNMP_TRAP
ceemHistoryEventEntry.9.3 = 0
ceemHistoryEventEntry.10.3 = 0
ceemHistoryEventEntry.11.3 = DOWN
Cheers!
Win

Hosted Email Server can not send emails to certain domains including Hotmai

I host my own email server and domain, but when I try to send emails to certain domains Hotmail being one of them, It gets refused saying something about spamming, when I know I am not a spammer because only one of the users in my domain can actually send and receive emails.
Is there a list I can include my domain in, so that I can bypass the spammer status?
Any help is greatly appreciated it.
Thanks!

This is getting common as people attempt to cut down the spam.
Check your reverse dns is correct, I'd suggest an external test like http://www.mxtoolbox.com/ against your system/domain is a good place to start.
In the case of the problems I had at home a while back this was down to my ISP not setting up the reverse DNS correctly. I got the Reverse DNS not matching the SMTP Banner i.e. IP address then ISP name:-
xxx.xxx.xxx.xxx.btopenworld.com
Microsoft and some other companies introduced a while back the use of SPF records, so check your zone file info to make sure this is there and valid.
http://old.openspf.org/index.html will help here, if you haven't got SPF set-up.
Some ISP's employ Goodmail systems, now which isn't a problem for small companies/home users sending small amounts of email, but will effect large companies.
If you're not sending large amounts of email to AOL, Hotmail, Yahoo etc this shouldn't effect you. Basically, it will force a 'drip feed' into their email systems. One company I worked at had to send email to customers, and this meant the first few emails would be accepted, then the server wouldn't accept more email for 20 minutes or so, then it would take another 5 emails, and so on....
Dynamic IP addresses, from your ISP can also cause huge problems. If you haven't got a fixed IP address, many systems will reject email. Even if you have a static IP address, ensure your ISP has this correctly allocated. Sometimes, you'll get it from the wrong range (ones which normally are Dynamic), and this will cause problems. 'Cheap state' ISP's can often allocate you a fixed IP, but because they have 'run out' of fixed addresses, they may pinch a dynamic one....
Some places check your MX records http://vger.kernel.org/mxverify.html will help here. It's a bit of a cheat, as large companies may not have the same outbound servers as inbound servers, but I have seen this cause problems when ALL the mail servers are not listed in the MX records.
The only one I wouldn't worry about too much is the Goodmail system, unless you're sending large amounts of email. But even then, they normally only slow email delivery down and not actually reject it.

Remove any logging, or snmp trap hosts for the IP addresses in ASA 5550

I want to remove any syslog or snmp trap host related to an ip address for example 10.32.1.10. how can i get that specific line in running configuration related to specific ip address so that i can remove those lines?

Hi,
You can remove the logging host using this command:-
no logging host inside 10.32.1.10
You can check in "show run logging"
For SNMP host ,
no snmp-server host inside 192.0.2.5
Check using show run snmp-server
Thanks and Regards,
Vibhor Amrodia

Cisco Prime Infrastructure 2.1 not send email alert when link down

Hello everyone
I use PI to monitor 1 switch and 1 firewall . When a link up/down on switch , PI immediately sends an email alert .
But when a link up/down on FW , PI not send any email alert . PI knows link up/down on a FW is a critical alarm ( it's show up on "Alarm Browser") , but not send email.
I enable all SNMP trap on FW , i tested that event on SolarWinds and it immediately sends an email alert . So there is no problem about FW config

Causes of Errdisable
This feature was first implemented to handle special collision situations in which the switch detected excessive or late collisions on a port. Excessive collisions occur when a frame is dropped because the switch encounters 16 collisions in a row. Late collisions occur after every device on the wire should have recognized that the wire was in use. Possible causes of these types of errors include:
A cable that is out of specification (either too long, the wrong type, or defective)
A bad network interface card (NIC) card (with physical problems or driver problems)
A port duplex misconfiguration
A port duplex misconfiguration is a common cause of the errors because of failures to negotiate the speed and duplex properly between two directly connected devices (for example, a NIC that connects to a switch). Only half-duplex connections should ever have collisions in a LAN. Because of the carrier sense multiple access (CSMA) nature of Ethernet, collisions are normal for half duplex, as long as the collisions do not exceed a small percentage of traffic.
There are various reasons for the interface to go into errdisable. The reason can be:
Duplex mismatch
Port channel misconfiguration
BPDU guard violation
UniDirectional Link Detection (UDLD) condition
Late-collision detection
Link-flap detection
Security violation
Port Aggregation Protocol (PAgP) flap
Layer 2 Tunneling Protocol (L2TP) guard
DHCP snooping rate-limit
Incorrect GBIC / Small Form-Factor Pluggable (SFP) module or cable
Address Resolution Protocol (ARP) inspection
Inline power
Note: Error-disable detection is enabled for all of these reasons by default. In order to disable error-disable detection, use the no errdisable detect cause command. The show errdisable detect command displays the error-disable detection status.

CSS not sending generic traps to trap host

Similar Messages

Maybe you are looking for