SNMP Request not returning value

plambrecht · Post by **plambrecht** » Thu Oct 07, 2004 2:51 am

HiAlex,

I have a little issue with SNMP Get request
Using SNMP I request the system uptime of a PIX firewall (OID 1.3.6.1.2.1.1.3.0). The value is returned as it should.
Only, I want to alert when the value is less then the previous one.
So I changed the Alert when OID "1.3.6.1.2.1.1.3.0" "decreased by..." "1"

The problem now, is that no result is returned anymore. When I change it back to "is < then" or any other, I do get a value...

Can you try to reproduce this problem ?

Pieter,

OS: W2K3 Server
Hm : 4.70
Test is performed by RMA v2.0

KS-Soft · Post by **KS-Soft** » Thu Oct 07, 2004 12:16 pm

HostMonitor sets empty Reply value after 1st check because it doesn't have previous value to compare. After 2nd check you should see relative value.
Have you performed test several times?

Regards
Alex

plambrecht · Post by **plambrecht** » Fri Oct 08, 2004 3:44 am

I tried the test 5 times in a row. it always returnes an empty value.

2nd check you should see relative value.

Do you mean that the 'decreased by' test returns the difference ? not the actual value ?

Pieter

KS-Soft · Post by **KS-Soft** » Fri Oct 08, 2004 1:51 pm

Yes, it should be difference, not the actual value (for integer counters).

I tried the test 5 times in a row. it always returnes an empty value.

Can you use some tool to check what type of the counter is returned by firewall? It should be TimeTicks...

Regards
Alex

plambrecht · Post by **plambrecht** » Mon Oct 11, 2004 1:30 am

If I change the alert rule to "is < then" in stead of "decreased by..." , then the test returns the correct (timeticks indeed) value...

KS-Soft · Post by **KS-Soft** » Mon Oct 11, 2004 11:48 am

You see the value but don't know type of the value. The same value '173318642' can be a string, integer, timeticks...
If you do not use "decreased by" option, HostMonitor displays any responce (IP address, timeticks, integer, octet string). If you use "decreased by" option, HostMonitor checks type of the counter and does not evaluate strings....

BTW:
What the status of the test (when you use "decreased by" option)? Ok, Bad, Unknown?
What Reply field shows when you do not use "decreased by" option?

Regards
Alex