09-13-2010 02:14 PM - edited 02-21-2020 04:05 AM
I am trying to run syslog reports in LMS. When I run the 24 hour syslog report nothing is found. No data on the report. I am trying to troubleshoot this. How can I tell if my traps are getting to the Ciscoworks server (10.223.241.32)? Is there something I can look at on the Ciscoworks server?
Here is what debug shows on the router:
ms-DUNCAN#sh log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 109 flushe
s, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 31006 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 29155 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: level informational, 31 message lines logged
Log Buffer (4096 bytes):
06:53:13: SNMP: Queuing packet to 10.223.248.83
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.231.86
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.241.32
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Packet sent via UDP to 10.223.248.83
06:53:13: SNMP: Packet sent via UDP to 10.223.231.86
06:53:13: SNMP: Packet sent via UDP to 10.223.241.32
06:53:16: SNMP: Queuing packet to 10.223.248.83
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.231.86
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.241.32
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Packet sent via UDP to 10.223.248.83
06:53:16: SNMP: Packet sent via UDP to 10.223.231.86
06:53:16: SNMP: Packet sent via UDP to 10.223.241.32
06:53:23: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to adminis
tratively down
06:53:28: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to down
06:53:28: SNMP: Queuing packet to 10.223.248.83
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.231.86
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.241.32
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Packet sent via UDP to 10.223.248.83
06:53:28: SNMP: Packet sent via UDP to 10.223.231.86
06:53:28: SNMP: Packet sent via UDP to 10.223.241.32
06:53:41: %SYS-5-CONFIG_I: Configured from console by micros on vty0 (10.194.32.
88)
09-13-2010 03:35 PM
You can run a packet capture on the Ciscoworks server to see if it's getting any traffic from the router.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: