cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
359
Views
0
Helpful
1
Replies

cam monitor/notification syslogs

bitterman
Level 1
Level 1

Is there any way to get a syslog message when a cam entry is added instead of the usual snmp trap on a 6500? If I must use snmp does anyone know the specific format of the message? (ie it looks to me like there's 3 bytes prefix and postfix to a list of macs learned????) Setting the logging level of earl (who is earl anyways?) to debug gives me only the "%EARL-7-MAC_NOTIF_SLEEP:Process is going to sleep for the next 15 seconds" messages, but nothing with the actual mac in it.

1 Reply 1

bitterman
Level 1
Level 1

snmp format:

cmnHistMacChangedMsg OBJECT-TYPE

SYNTAX OCTET STRING (SIZE(1..254))

MAX-ACCESS read-only

STATUS current

DESCRIPTION

"This object contains the information of a MAC change

notification event. It consists of several tuples packed

together in the format of '...'.

Each tuple consist of 11 octets in the format of

'' where

is of size 1 octet and supports the following values

0 - End of MIB object.

1 - MAC learnt.

2 - MAC removed.

is VLAN number of the VLAN which the MAC address is

belonged to and has size of 2 octet.

is the Layer2 Mac Address and has size of 6 octets.

is the value of dot1dBasePort for the

interface from which the MAC address is learnt and has size

of 2 octets."

::= { cmnHistoryEntry 2 }

Review Cisco Networking products for a $25 gift card