Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

Snmp trap question

Can anyone point me in the right direction so that I can try to figure out what this message means?

28-Apr 12:11:23 Trap Utah:Arches.efs.sw 1.3.6.1.2.1.17 (2){<no variables>}

I know what the majority of this Trap is but I trying to find out what this Object descritor means.(1.3.6.1.2.1.17 (2){<no variables>})

Any help will be greatly appreciated.

14 REPLIES
Silver

Re: Snmp trap question

Hmm, "topology changes" would be my guess.

What type of device?

Cheers,

Michel

New Member

Re: Snmp trap question

Michel,

This is a Cisco 3550. We have been doing some topology changes but how do you get that from the Object descritor?(1.3.6.1.2.1.7 (2){})

I have a couple of these messages and would like to learn how to interpret them.

TIA

Silver

Re: Snmp trap question

The start of OID points to spanning tree part of MIB

With "sh spanning-tree detail" you can check if there is a relation between the traps and the topology changes

Where do you see the traps? What's your trap logger?

Michel

New Member

Re: Snmp trap question

Michel,

Thanks for you help but I'm still lost as to what OID is?

I have an application on a server that Monitors my cisco devices and this is where I'm getting these Traps. This application is called Intermapper and I have it configurated to capture Traps.

Thanks

Cisco Employee

Re: Snmp trap question

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

Cisco Employee

Re: Snmp trap question

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

Cisco Employee

Re: Snmp trap question

From the object you listed

it does look to be .1.3.6.1.2.1.17.2 (dot1dStp)

which is part of the BRIDGE-MIB

The traps from the BRIDGE-MIB are:

enterprise 1.3.6.1.2.1.17

1 newRoot

2 topologyChange

New Member

Re: Snmp trap question

Davistan,

Thanks for so many replys. I don't know what happen there.

I still trying to get someone to point me in the right direction so I can learn how to interpret these myself.

I understand what your telling me but is there documentation that I can learn how to read the encrypted messages?

TIA

Cisco Employee

Re: Snmp trap question

HI,

Sorry, for some reason it posted 3 times :)

I think the best way to explain how I determined this was to look at what you posted:

1.3.6.1.2.1.17 (2)

This usually means its MIB object 1.3.6.1.2.1.17 returning a value of 2

I think translated the complete OID to get the info

Dave

New Member

Re: Snmp trap question

Hey

Thanks again but where did you learn how to interpret these Traps??? Is there a class? Is there documentation?

Is there a website or any resource that you refer to?

Let me know what you use to interpret these traps?

Thanks Eric

Cisco Employee

Re: Snmp trap question

This link will translate OID's and give a description of the object if there is one:

http://jaguar.ir.miami.edu/cgi-bin/snmptransc.cgi

Silver

Re: Snmp trap question

New Member

Re: Snmp trap question

Bascially, if you attend the HP OpenView NNM 1 class

(Essentials) it is part of one or two of the lessons.

Also there are some good SNMP books around. Take a look

at: http://www.nms-guru.com/nms_books.htm just to name

a few.

New Member

Re: Snmp trap question

Thanks everyone for all your help. This will give me a great start in learning how to interpret these messages.

238
Views
24
Helpful
14
Replies
CreatePlease to create content