09-13-2010 02:14 PM - edited 02-21-2020 04:05 AM
I am trying to run syslog reports in LMS. When I run the 24 hour syslog report nothing is found. No data on the report. I am trying to troubleshoot this. How can I tell if my traps are getting to the Ciscoworks server (10.223.241.32)? Is there something I can look at on the Ciscoworks server?
Here is what debug shows on the router:
ms-DUNCAN#sh log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 109 flushe
s, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 31006 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 29155 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: level informational, 31 message lines logged
Log Buffer (4096 bytes):
06:53:13: SNMP: Queuing packet to 10.223.248.83
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.231.86
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.241.32
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Packet sent via UDP to 10.223.248.83
06:53:13: SNMP: Packet sent via UDP to 10.223.231.86
06:53:13: SNMP: Packet sent via UDP to 10.223.241.32
06:53:16: SNMP: Queuing packet to 10.223.248.83
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.231.86
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.241.32
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Packet sent via UDP to 10.223.248.83
06:53:16: SNMP: Packet sent via UDP to 10.223.231.86
06:53:16: SNMP: Packet sent via UDP to 10.223.241.32
06:53:23: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to adminis
tratively down
06:53:28: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to down
06:53:28: SNMP: Queuing packet to 10.223.248.83
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.231.86
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.241.32
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Packet sent via UDP to 10.223.248.83
06:53:28: SNMP: Packet sent via UDP to 10.223.231.86
06:53:28: SNMP: Packet sent via UDP to 10.223.241.32
06:53:41: %SYS-5-CONFIG_I: Configured from console by micros on vty0 (10.194.32.
88)
09-13-2010 03:35 PM
You can run a packet capture on the Ciscoworks server to see if it's getting any traffic from the router.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide