Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problems understanding SNMP OIDs/Traps

Dear Community,

i would be very glad if you could help me with this thopic...i seem to have some trouble understanding it...

Here an example:

2010-01-18 06:28:44    Unknown alert received from device of type SwCiscoIOS. Device Time 82+21:21:53. (Trap type\nTrap var bind data: \nOID:  Value:  1\nOID:  Value:  4\nOID:  Value:  2\nOID:  Value:

Ok. Let's take the trap type:

Searching with SNMP Object Navigator ( i only get as far as:   -> ...6.0 is unkown.

If i search for the OID for example

i get the following:  -> ...738 is unknown.

This happens with a lot of OIDs for me (not just these ones). If i understand the OID correctly, this could be a command from the command line which forced this trap.

So what's the .738 for? Why couldn't it be recognised by the search-function?

In advance i like to thank you for any feedback.

Sven Schlingloff

Everyone's tags (3)
Cisco Employee

Re: Problems understanding SNMP OIDs/Traps

Try using my search and translate tool at .  If you do, you will see that translates to ciscoConfigManEvent.  The OID translates to ccmHistoryEventCommandSource.  However, ccmHistoryEventCommandSource'd OID is  The .738 is the specific instance.  The definition of ccmHistoryEventCommandSource is:

"The source of the command that instigated the event."

This object comes from the ccmHistoryEventTable which is indexed by the ccmHistoryEventIndex object.  The definition of that object is:

"A monotonically increasing integer for the sole
purpose of indexing events.  When it reaches the
maximum value, an extremely unlikely event, the agent
wraps the value back to 1 and may flush existing

So, the 738 is simply a unique number which identifies this particular history event.