SNMPTT/SYSLOG viewer Plugin for Cacti. v 1.4.3 (2009/02/06)

General discussion about Plugins for Cacti

Moderators: Moderators, Developers

Post Reply
Author
Message
User avatar
gthe
Cacti User
Posts: 410
Joined: Sat Jul 29, 2006 1:23 pm
Location: RU

SNMPTT/SYSLOG viewer Plugin for Cacti. v 1.4.3 (2009/02/06)

#1 Post by gthe » Thu Apr 03, 2008 9:24 am

Update on 2009-02-26:
Here is a new version of this plugin with new name (cAMM 1.5.0) http://forums.cacti.net/viewtopic.php?p=156769#156769





Hi All!
Here is my first plugin for Cacti.
Besides it is my first work on php :oops:
----[ Requirements:
  • - Cacti 0.8.7b/c
    - Plugin Architecture v2.х for Cacti v0.8.7b/c
    - NET-SNMP trapd
    - SNMPTT from http://www.snmptt.org/

----[ Installation
computer_guru wrote:FYI, I have also created a CactiEZ / SNMPTT tutorial:
http://paulscomputerservice.net/article ... .php?ID=50
  • IMPORTANT: This plugin ONLY show data from mysql. It does not accept snmp traps.
    By analogy with syslog plugin:
    syslog-ng => mysql => syslog plugin
    snmptrapd => SNMPTT=> mysql => snmptt plugin
  • 1. Install just like any other plugin, just throw it in the plugin directory, in a folder called snmptt.
    Edit your includes/config.php and add it to your $plugins list, and you are rolling.
    For PIA 2.0 and higher go to :
    1.1 Console->Plugin Management->Uninstalled tab->snmptt -> install
    1.2 Console->Plugin Management->Installed tab->snmptt -> enable
    2. After that, change same setting in snmptt.ini:

Code: Select all

		mibs_environment = ALL
		date_time_format = %Y-%m-%d %H:%M:%S
		unknown_trap_log_enable = 1
		statistics_interval = 300
		db_translate_enterprise = 1
		
		mysql_dbi_enable = 1
		mysql_dbi_table = plugin_snmptt
		mysql_dbi_table_unknown = plugin_snmptt_unknown
		mysql_dbi_table_statistics = plugin_snmptt_statistics

		mysql_dbi_host = localhost 			# << CHANGE !
		mysql_dbi_port = 3306 				# << CHANGE !
		mysql_dbi_database = cacti			# << CHANGE !
		mysql_dbi_username = cactiuser		# << CHANGE !
		mysql_dbi_password = cactipassword	# << CHANGE !

		mysql_ping_on_insert = 1
		mysql_ping_interval = 300
		date_time_format_sql = %Y-%m-%d %H:%M:%S
		stat_time_format_sql = %Y-%m-%d %H:%M:%S
    ----[ Changes
    ........
    --- 1.2.2rc ---
    • - Rebuild "Add/Edit rule" window again. New system for creating filter - more powerfull.
      This update DELETE ALL existinf rule, you need recreate it after;
      - New rule's modes - "Mark rule" and "Execute user functions". User functions must be in snmptt/lib/
      - "Show full unknown traps info" window;
      - Deleted "Create rule based on traps";
      - Fix bug for show stats if [plugin_snmptt_statistics] table is emty;
      Minor updates:
      - Constrain the window to the viewport;
      - Just after create and save rule - auto reload grid, so deleting new rule work fine;
      - Changed type formatline for unknown traps table from varchar(255) to text;
      - ReFixed save/restore state (IE). Checked on IE, GC, FF.
    --- 1.3.9 with Syslog ---
    • - Added Syslog tab. It may be use both/seperetly with cacti SYSLOG plugin. ([HOWTO] Install Syslog 0.5.2 plugin on Linux/Unix Cacti vers - http://forums.cacti.net/viewtopic.php?t=26040)
      --For use syslog tab WITHOUT old cacti SYSLOG plugin:
      Change the following lines to the /etc/syslog-ng/syslog-ng.conf file to the END of the file:

      Code: Select all

      				source net {
      					udp();
      				};
      				destination d_mysql {
      				    pipe("/tmp/mysql.pipe"
      				    template("INSERT INTO plugin_snmptt_syslog (host, sourceip, facility, priority, sys_date, message, status) VALUES ( '$HOST',  '$SOURCEIP', '$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$MSG', '0' );\n")
      				    template-escape(yes)
      				     );
      				};
      
      				log { source(net); destination(d_mysql); };
      				log { source(s_sys); destination(d_mysql); };
      			
      --For use syslog tab AND old cacti SYSLOG plugin:
      Change the following lines to the /etc/syslog-ng/syslog-ng.conf file to the END of the file:

      Code: Select all

      				source net {
      					udp();
      				};
      				destination d_mysql {
      				    pipe("/tmp/mysql.pipe"
      			            template("INSERT INTO syslog_incoming (host, sourceip, fullhost, facility, priority, date, time, message) VALUES ( '$HOST',  '$SOURCEIP', '$FULLHOST','$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$MSG' );
      								INSERT INTO plugin_snmptt_syslog (host, sourceip, facility, priority, sys_date, message, status) VALUES ( '$HOST',  '$SOURCEIP', '$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$MSG', '0' );\n")
      				    template-escape(yes)
      				     );
      				};
      
      				log { source(net); destination(d_mysql); };
      				log { source(s_sys); destination(d_mysql); };


      - Optimize sql for create tree menu (for 1000000 traps create tree menu take 3-5 sec);
      - Added Setting tab;
      - Switch to use ExtJS v 2.2;
      - In rules added "Force run" function - run this rule for already processed records (traps or syslog);
      - Update for graph and cacti/scripts/ss_snmpttpoller.php in addons.rar/graph

      Fix:
      - Fixed error when deleting unk. traps records;
      - Fix error in poller auto purge deleting;
      - Fix error with incorrect [plugin_snmptt_alert] table when first install plugin;

      Minor updates:
      - Allow Email Message field in rule be blank;
      - Added patch to autosize column header width on Dbl click;
      - For Syslog treeMenu added full expand/collapse all menu items and quick filter.
    --- 1.3.92 ---
    • - Add Syslog tab unused by default. For use it - change [Use SYSLOG] parameter in settings tab AND reload plugin page.
    --- 1.3.96 ---
    • - Hide Syslog tab if it is unused (by default);
      - Fix sql error is syslog unused;
      Need update addons.rar/graph/ss_snmpttpoller to cacti/scripts/ss_snmpttpoller.php.
      - One more fix errors if syslog unused;
      - Convert filter comboboxes to combo and textbox;
    --- 1.4.1 ---
    • - Syslog database name now may be any and changed in settings. Default is [syslog_ng]. If You have another - than after install/update plugin - change setting and import plugin_snmptt_syslog.sql in You syslog db.
      - Now you can use one of two viewing mode's - "show all records" or "show only records, already processed by poller (i.e. by rules)". Change mode in settings tab.
      - Create rule based on traps;
      - Create rule based on syslog message;

      Minor updates:
      - Correct sorting in settings;
      - Speed up of the process rule's executing by process all deletion rules first, and to process the rules that see the highest amount of hits first. (thanks cigamit);
    --- 1.4.2 ---
    • - Added new parameter for choose join method (dns hostname or ip-address). Use that method which you use in hostname field of cacti device's.
      - Fix 2 error in poller.
      - Fix error with creating rule from record.
      - Added setting to use regular or smaller tab.

      Minor updates:
      - Settings tab look more like Cacti default;
      - ReCheck user rigth;
    --- 1.4.3 ---
    • Minor updates:
      - Use ExtJS v2.2.1;
      - Add indices for syslog table (may cause long time to first open page);
      - Use mysql_affected_rows() instead of ROW_COUNT();
      - Fix error in snmptt_header_ext.php (thanks savagemindz);


    This is a last version of snmptt plugin.
    Next will be camm (CActi Message Manager) plugin 1.5
    Last edited by gthe on Thu Feb 26, 2009 3:50 am, edited 35 times in total.
    My cacti plugin -[url=http://forums.cacti.net/viewtopic.php?p=156769#156769]CaMM[/url]
    [size=75]Sorry for my English. [/size]

    eternal
    Cacti User
    Posts: 68
    Joined: Thu Dec 14, 2006 4:38 pm
    Location: Kingsport TN
    Contact:

    #2 Post by eternal » Thu Apr 03, 2008 11:11 am

    this is SWEET


    thanks

    User avatar
    TheWitness
    Developer
    Posts: 14817
    Joined: Tue May 14, 2002 5:08 pm
    Location: MI, USA
    Contact:

    #3 Post by TheWitness » Thu Apr 03, 2008 10:57 pm

    Very nice!! More and more plugins every day. Give me joy to see this taking off this way.

    TheWitness
    True understanding begins only when we realize how little we truly understand...

    Life is an adventure, let yours begin with Cacti!

    Author of MacTrack, Boost, CLog, SpikeKill, Platform RTM, DSStats, maintainer of Spine, lot's of unpublished work and most of Cacti's bugs.
    _________________
    Official Cacti Documentation
    GitHub Repository with Supported Plugins
    Central Plugin Repository
    Central Templates Repository


    I'm still out there people. Getting excited for Cacti 1.2. I think it will be a great release.

    corbin
    Posts: 9
    Joined: Thu Mar 06, 2008 11:32 am
    Location: Oregon

    #4 Post by corbin » Wed Apr 09, 2008 1:27 pm

    Sweet Plugin!!! Good work!!! A couple of questions though...
    Ive been trying to get snmptrapd working with syslog-ng for a few days now to no avail. Do you have a process you used for setting up the Net-SNMP snmptrapd piece? Also do you have spine running with net-snmp and are there any conflicts? Any input would be appreciated.
    Thanks

    User avatar
    Howie
    Cacti Guru User
    Posts: 5333
    Joined: Thu Sep 16, 2004 5:53 am
    Location: United Kingdom
    Contact:

    #5 Post by Howie » Wed Apr 09, 2008 4:35 pm

    Nice plugin :-) I'll be trying this one. I have had snmptt dumping data into a mysql database for ages now, but no nice way to look at it...
    Weathermap 0.98 is out! & QuickTree 1.0. Superlinks is over there now (and built-in to Cacti 1.x).
    Some Other Cacti tweaks, including strip-graphs, icons and snmp/netflow stuff.
    (Let me know if you have UK DevOps or Network Ops opportunities, too!)

    User avatar
    gthe
    Cacti User
    Posts: 410
    Joined: Sat Jul 29, 2006 1:23 pm
    Location: RU

    #6 Post by gthe » Thu Apr 10, 2008 12:27 am

    corbin wrote:Sweet Plugin!!! Good work!!! A couple of questions though...
    Ive been trying to get snmptrapd working with syslog-ng for a few days now to no avail. Do you have a process you used for setting up the Net-SNMP snmptrapd piece? Also do you have spine running with net-snmp and are there any conflicts? Any input would be appreciated.
    Thanks
    Have you installed the program snmptt ?
    Syslog-ng not needed for this.

    corbin
    Posts: 9
    Joined: Thu Mar 06, 2008 11:32 am
    Location: Oregon

    #7 Post by corbin » Fri Apr 18, 2008 1:13 pm

    Sorry for the delay in my response... I installed snmptt and working on the configuration. Do you have an easy how to for installing snmptrapd with snmptt? Nothing i can find on the web seems clear.

    Also. I tried to install your plugin like any other plugin but its not showing up in the realm permissions and there is no tab associated with it. But it does show up in the host info tab.

    ------------------------
    Ubuntu 6.06
    Cacti Version 0.8.7b
    Plugin Architecture 2.0
    Poller Type Cactid v
    Server Info Linux 2.6.15-51-386
    Web Server Apache/2.0.55 (Ubuntu) PHP/5.1.2
    PHP Version 5.1.2
    PHP Extensions xmlwriter, libxml, xml, wddx, tokenizer, sysvshm, sysvsem, sysvmsg, standard, SimpleXML, sockets, soap, SPL, shmop, session, Reflection, posix, mime_magic, mbstring, iconv, hash, gettext, ftp, filepro, exif, dom, dba, date, ctype, calendar, bz2, bcmath, zlib, pcre, openssl, xmlreader, apache2handler, mysql, mysqli, gd
    MySQL Version 5.0.22-Debian_0ubuntu6.06.6-log
    RRDTool Version 1.2.15
    SNMP Version 5.2.1.2
    Plugins Global Plugin Settings (settings - v0.3)
    Thresholds (thold - v0.3.9)
    Device Monitoring (monitor - v0.8.2)
    Host Info (hostinfo - v0.2)
    Network Tools (tools - v0.2)
    PHP Network Weathermap (weathermap - v0.95b)
    SNMPTT viewer for cacti (snmptt - v0.0.16b)
    ---------------------------------------------------

    User avatar
    gthe
    Cacti User
    Posts: 410
    Joined: Sat Jul 29, 2006 1:23 pm
    Location: RU

    #8 Post by gthe » Sat Apr 19, 2008 12:56 am

    corbin wrote:Sorry for the delay in my response... I installed snmptt and working on the configuration. Do you have an easy how to for installing snmptrapd with snmptt? Nothing i can find on the web seems clear.
    from SNMPTT web:

    Code: Select all

    Installation - Unix
    
    1.  Read this entire file to understand how snmptt works
    2.  Copy snmptt to /usr/sbin/ and ensure it is executable (chmod +x snmptt)
    3.  Copy snmptthandler to /usr/sbin/ and ensure it is executable (chmod +x snmptthandler)
    4.  Copy snmptt.ini to /etc/snmp/ or /etc/ and edit the options inside the file.
    5a.   For standlone mode:  Modify the Net-SNMP snmptrapd.conf file by adding the following line:
    
        traphandle default /usr/sbin/snmptt
    
        Note:   It is possible to configure snmptrapd to execute snmptt based on the specific trap received, but using the default option is preferred
    
    5b.   For daemon mode:  Modify the Net-SNMP snmptrapd.conf file by adding the following line:
    
        traphandle default /usr/sbin/snmptthandler
    
        Launch snmptt using:
    
        snmptt --daemon
    
        A startup script is included which can be used to start and stop snmptt on Mandrake, RedHat and other systems.  Copy the script to the init.d directory (renaming the file during the copy):
    
        cp snmptt.init.d to /etc/rc.d/init.d/snmptt
    
        Add the service using chkconfig:
    
        chkconfig --add snmptt
    
        Configure the service to start at runlevel 2345:
    
        chkconfig --level 2345 snmptt on
    
        Snmptt will be started at the next reboot, or can be started immediately with:
    
        service snmptt start
    
        or
    
        /etc/rc.d/init.d/snmptt start
    
    6.  Start snmptrapd using the command line:  snmptrapd -On.
         You should be able to edit the /etc/rc.d/init.d/snmptrapd script if you have one and change
         the OPTIONS to "-On".
    
    Note:  The -On is recommended.  This will make snmptrapd pass OIDs in numeric form and prevent SNMPTT from having to translate the symbolic name to numerical form.  If the UCD-SNMP / Net-SNMP Perl module is not installed, then you MUST use the -On switch.  Depending on the version of UCD-SNMP / Net-SNMP, some symbolic names may not translate correctly.  See the FAQ for more info.
    
         As an alternative, you can edit your snmp.conf file to include the line: printNumericOids 1.  This setting will take effect no matter what is used on the command line.
    
    7.  See the Securing SNMPTT section.
    corbin wrote:Also. I tried to install your plugin like any other plugin but its not showing up in the realm permissions and there is no tab associated with it. But it does show up in the host info tab.
    Do you install it like PIA 2.x plugin ?
    gthe wrote: For PIA 2.0 and higher go to :
    1.1 Console->Plugin Management->Uninstalled tab->snmptt -> install
    1.2 Console->Plugin Management->Installed tab->snmptt -> enable

    corbin
    Posts: 9
    Joined: Thu Mar 06, 2008 11:32 am
    Location: Oregon

    #9 Post by corbin » Mon Apr 21, 2008 1:09 pm

    Thanks for the setup guide... I'll give it a shot.

    I don't have the Plugin Mangement option. Do I have to do something special to enable that? The only way I see to enable plugins is through the Realm Permissions of the admin user. I am running PIA 2.0.

    Thanks again.

    niobe
    Cacti User
    Posts: 228
    Joined: Mon Mar 10, 2008 6:52 pm
    Location: Australia

    #10 Post by niobe » Mon Apr 21, 2008 1:30 pm

    This looks fantastic - syslog-ng for snmp. I have had to take snmptrapd offline due to bugs in the Red Hat version, but looks like I can now workaround it.
    Last edited by niobe on Tue Apr 22, 2008 2:02 am, edited 1 time in total.

    User avatar
    gthe
    Cacti User
    Posts: 410
    Joined: Sat Jul 29, 2006 1:23 pm
    Location: RU

    #11 Post by gthe » Tue Apr 22, 2008 12:17 am

    corbin wrote:Thanks for the setup guide... I'll give it a shot.

    I don't have the Plugin Mangement option. Do I have to do something special to enable that? The only way I see to enable plugins is through the Realm Permissions of the admin user. I am running PIA 2.0.

    Thanks again.
    Go to Console -> User management -> (you User Name or Admin) - check (enable) Realm Permission "Plugin Management"

    niobe
    Cacti User
    Posts: 228
    Joined: Mon Mar 10, 2008 6:52 pm
    Location: Australia

    #12 Post by niobe » Wed Apr 23, 2008 12:00 am

    gthe, can you tell me how to install the required perl modules?

    I get this:

    Code: Select all

    [[email protected] snmp]# service snmptt start
    Starting snmptt: Can't locate Config/IniFiles.pm in @INC (@INC contains: /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/5.8.8 .) at /usr/sbin/snmptt line 3894.
    BEGIN failed--compilation aborted at /usr/sbin/snmptt line 3894.
    [FAILED]
    
    Sorry being a TCL guy not much of a perl guy...

    cheers,

    N

    User avatar
    gthe
    Cacti User
    Posts: 410
    Joined: Sat Jul 29, 2006 1:23 pm
    Location: RU

    #13 Post by gthe » Wed Apr 23, 2008 12:17 am

    Try:

    Code: Select all

    perl -MCPAN -e 'install Config::IniFiles'

    niobe
    Cacti User
    Posts: 228
    Joined: Mon Mar 10, 2008 6:52 pm
    Location: Australia

    #14 Post by niobe » Wed Apr 23, 2008 12:44 am

    thanks for that, worked ok - probably my first experience with perl modules that has!

    Another question. Is it actually necessary the build a massive snmptt.conf with all your MIB data if you don't want to actually do any text translations? I am hoping to use snmptt with cacti (obviously) but also to intelligently store the traps in text files. net-snmp is not so good at this compared to syslog-ng..

    Edit: I have a problem getting snmptt working. I have followed the document but it seems snmptrapd is not passing logs to snmptt:

    Code: Select all

    [[email protected] snmp]# tail snmpttsystem.log
    Wed Apr 23 17:22:40 2008 Finished loading 0 lines from /etc/snmp/snmptt.conf
    Wed Apr 23 17:22:40 2008 Loading /etc/snmp/snmptt.conf.base
    Wed Apr 23 17:22:40 2008 Finished loading 3458 lines from /etc/snmp/snmptt.conf.base
    Wed Apr 23 17:28:35 2008 SNMPTT v1.2 shutdown
    Wed Apr 23 17:28:35 2008 Total traps received=0,Total traps translated=0,Total traps ignored=0,Total unknown traps=0
    Strange as snmptrapd itself is working - with or without snmptt enabled it is writing to it's own log file snmptrapd.log.

    gthe what options do you use when starting snmptrapd? mine are:

    Code: Select all

    OPTIONS="-c /etc/snmp/snmptrapd.conf -On -Lf /var/snmp/snmptrapd.log -p /var/run/snmptrapd.pid"
    What do you have in your snmptrapd.conf? Mine is simply:

    Code: Select all

    authCommunity log <my_com_str>
    traphandle default /usr/sbin/snmptthandler
    
    cheers,

    N

    User avatar
    gthe
    Cacti User
    Posts: 410
    Joined: Sat Jul 29, 2006 1:23 pm
    Location: RU

    #15 Post by gthe » Wed Apr 23, 2008 3:25 am

    niobe wrote:thanks for that, worked ok - probably my first experience with perl modules that has!

    Another question. Is it actually necessary the build a massive snmptt.conf with all your MIB data if you don't want to actually do any text translations? I am hoping to use snmptt with cacti (obviously) but also to intelligently store the traps in text files. net-snmp is not so good at this compared to syslog-ng..
    Withous *.conf files all traps go to table plugin_snmptt_unknown.
    Here is exapmle:
    wo *.conf in plugin_snmptt_unknown, column formatline

    Code: Select all

    \'des3526.2.7.1.1.1.5 ():5 des3526.2.15.3.1 ():192.168.0.27 des3526.2.15.3.2 ():00 1B 38 CB 6A 1E \'
    with *.conf in plugin_snmptt, column formatline

    Code: Select all

    FORM: WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding <br>   (IP: 192.168.0.27, MAC: 00:1B:38:CB:6A:1E, Port: 5)
    and here is the part conf file for this trapoid:

    Code: Select all

    EVENT swL2IpMacBindingViolationTrap .1.3.6.1.4.1.171.11.64.1.2.15.3.0.3 "Status Events" Normal
    FORMAT FORM: When the IP-Mac Binging trap is enabled, if there's a new MAC that violates the pre-defined $+*
    REGEX ((.*)des35[0-9]{2}.[0-9]{1,2}[\.0-9]{0,12}\:\ ?([0-9]{1,2})\ ?des35[0-9]{2}.[0-9]{1,2}[\.0-9]{0,12}\:([0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3})\ ?des35[0-9]{2}.[0-9]{1,2}[\.0-9]{0,12}\:\ ?([A-Z0-9]{2})\ ?([A-Z0-9]{2})\ ?([A-Z0-9]{2})\ ?([A-Z0-9]{2})\ ?([A-Z0-9]{2})\ ?([A-Z0-9]{2}))("FORM: WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding <br>   (IP: $3, MAC: $4:$5:$6:$7:$8:$9, Port: $2)")ige
    SDESC
    When the IP-Mac Binging trap is enabled, if there's a new MAC that violates the pre-defined
    port security configuration, trap will be sent out
    Variables:
      1: swL2IpMacBindingPorts
         Syntax="OCTETSTR"
         Descr="The port members of this entry."
      2: swL2IpMacBindingViolationIP
         Syntax="OCTETSTR"
         Descr="This object indicates the MAC address that violates the IP-Mac Binging configuration."
      3: swL2IpMacBindingViolationMac
         Syntax="OCTETSTR"
         Descr="This object indicates the IP address that violates the IP-Mac Binging configuration."
    EDESC
    
    note* REGEX row is created by myself

    niobe wrote: gthe what options do you use when starting snmptrapd? mine are:

    Code: Select all

    OPTIONS="-c /etc/snmp/snmptrapd.conf -On -Lf /var/snmp/snmptrapd.log -p /var/run/snmptrapd.pid"
    In my snmptrapd:

    Code: Select all

    OPTIONS="-On -Lf /var/log/snmptrapd.log -p /var/run/snmptrapd.pid"
    niobe wrote: What do you have in your snmptrapd.conf? Mine is simply:

    Code: Select all

    authCommunity log <my_com_str>
    traphandle default /usr/sbin/snmptthandler
    
    cheers,

    N
    Try :

    Code: Select all

    authCommunity log,execute,net  <my_com_str>
    traphandle default /usr/sbin/snmptthandler
    
    please check:

    Code: Select all

    tail  /var/log/snmptrapd.log
    grep -m 30 snmpt /var/log/messages
    ls -1l /var/spool/snmptt
    and post result.

    Sorry for my English.

    Post Reply