Unsolved
This post is more than 5 years old
1 Message
0
867
December 14th, 2011 06:00
Is it possible to identify the trap variable number in Trap Mgr using ASL script?
I have a vendor NETOPTICS that send us traps but the var data does not tell me what port has changed link state.
The only values given in the var data is the values of 1 and 2 which are UP and Down state. A problem
arises because there are 4 ports involved. So I cannot distinguish if the port is A B C or D. Because of this
there is no way for me to setup correlation for Up/Down in fact it becomes a mess.
The only way to tell the port index is within the OID for the var.
For example
.1.3.6.1.4.1.23022.2.5.1.2.1.1.0 --> 1 (my comment - The number 1 in the twelve location is the port A)
.1.3.6.1.4.1.23022.2.5.1.2.2.1.0 --> 1 (my comment - The number 2 in the twelve location is the port B)
.1.3.6.1.4.1.23022.2.5.1.2.3.1.0 --> 1 (my comment - The number 2 in the twelve location is the port C)
.1.3.6.1.4.1.23022.2.5.1.2.4.1.0 --> 1 (my comment - The number 2 in the twelve location is the port D)
Example TRAP
========= Trap attributes ==============
Timestamp: 13-Dec-2011 10:00:11 AM Eastern Standard Time
Agent: 10.10.10.215
Enterprise OID: .1.3.6.1.4.1.23022
Generic Type: 6
Specific Type: 2
Processing Time: 0 Secs
Varbinds: [oid]->[varbind]
.1.3.6.1.4.1.23022.2.5.1.2.2.1.0 --> 1 (My Comment - port B down but again I cannot determine the port is B from the data and only from the OID)
I was thinking there could be a way to handle this in ASL hook script. Has anyone have any ideas? I never used the ASL script to check the var OID numbers before
of know if it is possible.
Hemulll
2 Intern
•
138 Posts
0
December 14th, 2011 09:00
Hello
As i understand your task is two way to solve this:
1) To create a hook script and parse data from trap varibles, then create custom event "Down - Up" with portname and correlate down - up events
2) Forfard traps from trap exploder - trap adapter to APM, then to add RULE with parsing to file
"/rules/discovery/discovery-snmp-trap.asl".
as u can see in this file, APM use this file to catch forwarded traps and then generate events based on attributes in Repo.
Second way is more elegant, but is more difficult. Any way you should to know ASL to solve this task.