Snmp trap question

[ekeen]

Can anyone point me in the right direction so that I can try to figure out what this message means?

28-Apr 12:11:23 Trap Utah:Arches.efs.sw 1.3.6.1.2.1.17 (2){<no variables>}

I know what the majority of this Trap is but I trying to find out what this Object descritor means.(1.3.6.1.2.1.17 (2){<no variables>})

Any help will be greatly appreciated.

[miheg]

Hmm, "topology changes" would be my guess.

What type of device?

Cheers,

Michel

[ekeen]

Michel,

This is a Cisco 3550. We have been doing some topology changes but how do you get that from the Object descritor?(1.3.6.1.2.1.7 (2){})

I have a couple of these messages and would like to learn how to interpret them.

TIA

[miheg]

The start of OID points to spanning tree part of MIB

With "sh spanning-tree detail" you can check if there is a relation between the traps and the topology changes

Where do you see the traps? What's your trap logger?

Michel

[ekeen]

Michel,

Thanks for you help but I'm still lost as to what OID is?

I have an application on a server that Monitors my cisco devices and this is where I'm getting these Traps. This application is called Intermapper and I have it configurated to capture Traps.

Thanks

[David Stanford]

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

[David Stanford]

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

[David Stanford]

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

[ekeen]

Davistan,

Thanks for so many replys. I don't know what happen there.

I still trying to get someone to point me in the right direction so I can learn how to interpret these myself.

I understand what your telling me but is there documentation that I can learn how to read the encrypted messages?

TIA

[David Stanford]

HI,

Sorry, for some reason it posted 3 times :)

I think the best way to explain how I determined this was to look at what you posted:

1.3.6.1.2.1.17 (2)

This usually means its MIB object 1.3.6.1.2.1.17 returning a value of 2

I think translated the complete OID to get the info

Dave

[ekeen]

Hey

Thanks again but where did you learn how to interpret these Traps??? Is there a class? Is there documentation?

Is there a website or any resource that you refer to?

Let me know what you use to interpret these traps?

Thanks Eric

[David Stanford]

This link will translate OID's and give a description of the object if there is one:

http://jaguar.ir.miami.edu/cgi-bin/snmptransc.cgi

[miheg]

Better try this.

http://jaguar.ir.miami.edu/~marcus/snmptrans.html

Michel

[y-korolevski]

Bascially, if you attend the HP OpenView NNM 1 class

(Essentials) it is part of one or two of the lessons.

Also there are some good SNMP books around. Take a look

at: http://www.nms-guru.com/nms_books.htm just to name

a few.

[ekeen]

Thanks everyone for all your help. This will give me a great start in learning how to interpret these messages.