Decode SNMP Traps

[gparrish]

We are dumping all our from our Cisco switches to a Syslog server and then we use Big Brother to alert us via email to the traps when they occur in the log file when a config change is made.

We want to be able to have the trap receiver host decode these traps into plain text so they are more readable rather than just sending us the OIDs to manually decode.

We are running snmptrapd on RedHat Linux 3.0. I think I need to add some trap MIBs to the server but not sure which ones or where, can someone get me started please?

Here is a sample of the email we receive.

Oct 26 17:01:25 syslogserver snmptrapd[27136]: 192.168.41.243: Enterprise Specific Trap (1) Uptime: 10

SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.3.32 = INTEGER: 1

SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.4.32 = INTEGER: 2

SNMPv2-SMI::enterprises.9.9.43.1.1.6.1.5.32 = INTEGER: 3

Thanks,

Greg

[milan.kulik]

Hi,

you can use Cisco TAC SNMP Object Navigator tool

(http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en)

put enterprises.9.9.43.1.1.6.1.3.32

into it, try to translate and will get a partial translation.

If you click on it, you'll get a MIB tree and notice you should add the CISCO-CONFIG-MAN-MIB into your snmptrapd.

The Cisco SNMP Support page is http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:SNMP&viewall=true

and you can find some useful documents there.

Regards,

Milan