View previous topic :: View next topic |
Author |
Message |
sysadmber
Joined: 08 Dec 2015 Posts: 50
|
Posted: Mon Sep 11, 2017 3:33 am Post subject: SNMP Trap Issues |
|
|
Hi,
i wanted to create a snmp trap test, unfortunately without any success. In NirSoft Currsoft i can see that the required port (udp/162) is bound to hostmon.exe.
We have a linux based appliance which sends traps. However if i test the connection it fails all the time. If i replace hostmon by a test tool (PowerSNMP Free Manager in my case) the snmp connection is established and i receive the following result:
Message Type: InformMessage
Time Received: 11.09.2017 11:24:54
SNMP Version: Two
Origin Address/Port: 192.168.32.68:48695
Destination Address/Port: 0.0.0.0:162
Community: monitoring
Id: 129239031
Variable IIDs and Values:
1.3.6.1.2.1.1.3.0 (sysUpTime): 85314000
1.3.6.1.6.3.1.1.4.1.0 (snmpTrapOID): 1.3.6.1.4.1.19960.3.3.3.1.1
1.3.6.1.6.3.18.1.3.0: 192.168.32.110
1.3.6.1.4.1.19960.3.3.3.1.1: test message
So there is no firewall which could block traffic.
Is there a bug in the latest hm version (10.70) or am i doing something wrong? |
|
Back to top |
|
|
KS-Soft Europe
Joined: 16 May 2006 Posts: 2832
|
Posted: Mon Sep 11, 2017 6:12 am Post subject: |
|
|
Please check SNMP TRAP related options first, using menu: Options -> Misc -> "SNMP Trap tests".
"Receive traps on UDP port #162" should be specified there (most likely it is, bu check to be sure)
Then you need to create SNMP Trap test item. With default settings, this test item should accept any SNMP Trap message.
Please check for details at:
http://www.ks-soft.net/hostmon.eng/mframe.htm#tests.htm#snmptrap |
|
Back to top |
|
|
sysadmber
Joined: 08 Dec 2015 Posts: 50
|
Posted: Mon Sep 11, 2017 6:20 am Post subject: |
|
|
Yes i checked the options. As i wrote the program is bound to port 162/udp.
what can i check that hm receives the data? Are they stored in a log? |
|
Back to top |
|
|
KS-Soft Europe
Joined: 16 May 2006 Posts: 2832
|
Posted: Mon Sep 11, 2017 6:52 am Post subject: |
|
|
SNMP data received by HostMonitor are redirected to all SNMP Trap test items, then each SNMP Trap test item filters all messages and accepts messages that correspond configured rules.
We recommend to setup one SNMP Trap test items with default settings(filters) for testing. It will accept (set Bad status for) all SNMP trap messages, received by HostMonitor.
Could you stop Windows "SNMP Trap" service and any other applicationthat may accept SNMP Traps and restart HostMonitor?
It's also good idea to check HostMonitor's system log (menu View -> Auditing tool -> Recent syslog) for recent errors after HostMonitor restart. |
|
Back to top |
|
|
sysadmber
Joined: 08 Dec 2015 Posts: 50
|
Posted: Tue Sep 12, 2017 2:38 am Post subject: |
|
|
I have a test with no specific filters. Therefor i assume that it will go bad when data are received.
The Audittool says: "SNMP Trap Listener: UDP port # 162 opened for listening".
Sending TRAP Data with several programs. But i can't see if hostmon receives data.
Changing the Port and restarting service, Same result.
ireasoning mibbrowser can act as trap sender and trap receiver. This program can also receive data from the linux server. I stopped hm service and bound 162/udp the mibbrowser. This program showed me the received data.
I setup a private log, but this log only contains one line. Test OK (the Date is the date of test creation).
So i'm stuck. I dunno why either hm doesn't receive data or why i can't process data. |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12801 Location: USA
|
Posted: Tue Sep 12, 2017 10:07 am Post subject: |
|
|
SNMP Traps v2?
We cannot reproduce the problem.
What Windows do you use?
Can you send your settings to support@ks-soft.net (HML file with tests + *.LST and *.INI files)?
Regards
Alex |
|
Back to top |
|
|
|