SNMP Perl script and trap formatting

[eriedl]

Hello,

I have SNMPTT and the Perl script as trap handler set up and receive now traps in Zabbix. However, the format of the traps that the Perl script generates seems a little bit odd to me. For example, our SAN is sending on a regular interval a heart beat trap. I converted the MIB with snmpttconvert and the resulting SNMPTT configuration file for this kind of event looks as follows:

EVENT mngmtAgentTrap-35000 .1.3.6.1.4.1.232.0.136035000 "Status Events" INFORMATIONAL
FORMAT ZBXTRAP Management Agent Event 35000: Host $1 : SCellName-TimeDate $2 : EventCode $3 : Description $4 : nscStatus $5 : nscName $6
SDESC
A Heart Beat Event is generated for one of the controller
Variables:
  1: hostName
  2: scellNameDateTime
  3: agentEventCode
  4: agentEventDescription
  5: nscStatus
  6: nscName
EDESC

I would have expected to see in Zabbix a trap that is formatted something along the line how the FORMAT line above looks like:

Management Agent Event 35000: Host <somethingHere> : SCellName-TimeDate <somethingHere> : EventCode <somethingHere> : Description <somethingHere> : nscStatus <somethingHere> : nscName <somethingHere>

However, what I get in Zabbix and see in the SNMPTT logs is this:

08:41:47 2013/07/16 PDU INFO:
  notificationtype               TRAP
  version                        1
  receivedfrom                   UDP: [0.0.0.0]:56650->[1.1.1.1]
  errorstatus                    0
  messageid                      0
  community                      Public
  transactionid                  222
  errorindex                     0
  requestid                      14458
VARBINDS:
  SNMPv2-SMI::mib-2.1.3.0        type=67 value=Timeticks: (1253119681) 145 days, 0:53:16.81
  SNMPv2-SMI::snmpModules.1.1.4.1.0 type=6  value=OID: SNMPv2-SMI::enterprises.232.136035000
  SNMPv2-SMI::enterprises.232.136.1.1.4 type=4  value=STRING: "somestring"
  SNMPv2-SMI::enterprises.232.136.1.3.1.2.1.12 type=4  value=STRING: "hostname: 16-Jul-2013/08:40:34"
  SNMPv2-SMI::enterprises.232.136.1.1.7.1.3 type=2  value=INTEGER: 35000
  SNMPv2-SMI::enterprises.232.136.1.1.7.1.6 type=4  value=STRING: "A Heart Beat Event is generated for one of the controller"
  SNMPv2-SMI::enterprises.232.136.1.3.4.2.1.4 type=2  value=INTEGER: 0
  SNMPv2-SMI::enterprises.232.136.1.3.4.2.1.2 type=4  value=STRING: "Controller 2"

Am I missing here something? Is this the expected behavior?


thanks for any comments.

[eriedl]

This seems to be the intended behavior. If you want the trap on one line, edit your snmptrapd.conf file, comment the line for using the Perl script and add the following

traphandle default snmptthandler