Start a Conversation

Unsolved

This post is more than 5 years old

867

December 14th, 2011 06:00

Is it possible to identify the trap variable number in Trap Mgr using ASL script?

I have a vendor NETOPTICS that send us traps but the var data does not tell me what port has changed link state.

The only values given in the var data is the values of 1 and 2 which are UP and Down state. A problem

arises because there are 4 ports involved. So I cannot distinguish if the port is A B C or D. Because of this

there is no way for me to setup correlation for Up/Down in fact it becomes a mess.

The only way to tell the port index is within the OID for the var.

For example

  .1.3.6.1.4.1.23022.2.5.1.2.1.1.0 --> 1 (my comment - The number 1 in the twelve location is the port A)

  .1.3.6.1.4.1.23022.2.5.1.2.2.1.0 --> 1 (my comment - The number 2 in the twelve location is the port B)

  .1.3.6.1.4.1.23022.2.5.1.2.3.1.0 --> 1 (my comment - The number 2 in the twelve location is the port C)

  .1.3.6.1.4.1.23022.2.5.1.2.4.1.0 --> 1 (my comment - The number 2 in the twelve location is the port D)

Example TRAP

========= Trap attributes  ==============

Timestamp:       13-Dec-2011 10:00:11 AM Eastern Standard Time

Agent: 10.10.10.215

Enterprise OID:  .1.3.6.1.4.1.23022

Generic Type:    6

Specific Type:   2

Processing Time: 0 Secs

Varbinds: [oid]->[varbind]

.1.3.6.1.4.1.23022.2.5.1.2.2.1.0 --> 1 (My Comment - port B down but again I cannot determine the port is B from the data and only from the OID)

I was thinking there could be a way to handle this in ASL hook script. Has anyone have any ideas? I never used the ASL script to check the var OID numbers before

of know if it is possible.

2 Intern

 • 

138 Posts

December 14th, 2011 09:00

Hello

As i understand your task is two way to solve this:

1) To create a hook script and parse data from trap varibles, then create custom event "Down - Up" with portname and correlate down - up events

2) Forfard traps from trap exploder - trap adapter to APM, then to add RULE with parsing to file

"/rules/discovery/discovery-snmp-trap.asl".

as u can see in this file, APM use this file to catch forwarded traps and then generate events based on attributes in Repo.

Second way is more elegant, but is  more difficult. Any way you should to know ASL to solve this task.

No Events found!

Top