Ad Widget

Collapse

zabbix trap receiver don't translate mibs

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • alescri
    Member
    • May 2019
    • 32
    #1

    zabbix trap receiver don't translate mibs

    good morning,
    I have correctly configured the reception of traps,
    I added the mib in the mibs folder but if I receive a trap it is not translated
    SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: SNMPv2-SMI::enterprises.231.7.2.1.21.2.3.0.20 SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.1 type=2 value=INTEGER: 1 SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.2 type=2 value=INTEGER: 0 SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.3 type=2 value=INTEGER: 0 SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.4 type=2 value=INTEGER: 2147465897 SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.5 type=4 value=STRING: "F5992" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.6 type=4 value=STRING: "E8" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.7 type=4 value=STRING: "IN SERV" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.8 type=4 value=STRING: "BPB" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.9 type=4 value=STRING: "CIRCUIT" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.10 type=4 value=STRING: "LX ACTIVE S0" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.11 type=4 value=STRING: "P203:1-01-003-000" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.12 type=4 value=STRING: "01" SNMPv2-SMI::enterprises.231.7.2.1.3.1.1.13 type=4 value=STRING: "--" does anyone know how i could fix it?
    thank you
    Tags: None
    • tim.mooney
      Senior Member
      • Dec 2012
      • 1427
      #2
      Does your distribution automatically load all the MIB files from the mibs folder? The default config on the distro we're using (RHEL 7.x for our Zabbix server) doesn't appear to load any additional MIBs by default, so I had to add some config to get it to load the special MIB.

      What I ended up doing on RHEL 7.x was creating a

      /etc/snmp/snmp.local.conf

      and putting a line in that with

      mibs +My-MIB-Name

      (using 'mibfile' may have been better, but what I have seems to be working).

      According to the documentation I found (for RHEL), that file is used by both snmpd and snmptrapd for local overrides, so that's where I chose to specify the 'mibs' directive for our special MIB.

        Comment

        • alescri
          Member
          • May 2019
          • 32
          #3
          Originally posted by tim.mooney
          Does your distribution automatically load all the MIB files from the mibs folder? The default config on the distro we're using (RHEL 7.x for our Zabbix server) doesn't appear to load any additional MIBs by default, so I had to add some config to get it to load the special MIB.

          What I ended up doing on RHEL 7.x was creating a

          /etc/snmp/snmp.local.conf

          and putting a line in that with

          mibs +My-MIB-Name

          (using 'mibfile' may have been better, but what I have seems to be working).

          According to the documentation I found (for RHEL), that file is used by both snmpd and snmptrapd for local overrides, so that's where I chose to specify the 'mibs' directive for our special MIB.
          it works!
          thank you,
          as distribution I use a centos and I thought it automatically loaded the mibs once in the folder.
          thank you very much now the traps are more understandable

            Comment

            • tim.mooney
              Senior Member
              • Dec 2012
              • 1427
              #4
              You're welcome, thanks for following up and confirming that resolved the issue.

                Comment

                • ghaffar33
                  Junior Member
                  • Jul 2023
                  • 1
                  #5
                  Im having the same issue, i already have a snmp.conf at /etc/snmp with the following contents

                  mibdirs +/var/lib/snmp/mibs
                  mibs +ALL

                  at the above location var/lib/snmp/mibs i have all the mibs located in .txt format.

                  But i dont get the translation. What more do i need to do​

                    Comment

                    • tim.mooney
                      #5.1
                      tim.mooney commented
                      14-07-2023, 02:06
                      Editing a comment
                      The config you've shown looks fine. Have you restarted snmptrapd since you put that config in place?

                      I would probably try enable logging and debugging, and then do something to generate a trap that your Zabbix server's snmptrapd should receive and translate, to see if there's any clue in the debug or log output that helps explain why snmptrapd is not honoring your settings.
                    • ueuei
                      Junior Member
                      • Mar 2023
                      • 6
                      #6
                      I got also this same problem, all configurations are in place, I also tried the snmp.local.conf solution but did not work.
                      snmptranslate works really fine, only Zabbix is still showing OID in numeric form.
                      What can I do next to solve this?​

                        Comment

                        • skullbox15
                          Junior Member
                          • Aug 2023
                          • 5
                          #7
                          I have the same issue. I'm using zabbix from the OVA. I have the traps coming in from a palo alto firewall:

                          VARBINDS:
                          DISMAN-EVENT-MIB::sysUpTimeInstance type=67 value=Timeticks: (3812785368) 441 days, 7:04:13.68
                          SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: SNMPv2-SMI::enterprises.25461.2.1.3.2.0.1900
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.2 type=4 value=STRING: "2023/08/24 15:17:10"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.3 type=4 value=STRING: "012001072398"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.4 type=4 value=STRING: "SYSTEM"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.5 type=4 value=STRING: "sslmgr"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.7 type=4 value=""
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.8 type=70 value=Counter64: 7107212813705366132
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.9 type=4 value=STRING: "0x0"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.12 type=4 value=STRING: "PA-820"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.300 type=4 value=STRING: "sslmgr-config-p1-success"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.301 type=4 value=""
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.302 type=4 value=STRING: "general"
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.303 type=2 value=INTEGER: 1
                          SNMPv2-SMI::enterprises.25461.2.1.3.1.304 type=4 value=STRING: "SSLMGR daemon configuration load phase-1 succeeded."

                          I downloaded the PA MIBs and have them in /usr/share/snmp/mibs/

                          in my /etc/snmp/snmpd.conf I have an entry:

                          mibdirs +/usr/share/snmp/mibs/
                          mibs +ALL

                          I restarted the services after adding. What am I missing here? I'm assuming I should see entries for the Palo Alto MIB files instead of "SNMPv2-SMI"​

                            Comment

                            • skullbox15
                              Junior Member
                              • Aug 2023
                              • 5
                              #8
                              does anyone know how to fix this?

                                Comment

                                • cyber
                                  Senior Member
                                  Zabbix Certified SpecialistZabbix Certified Professional
                                  • Dec 2006
                                  • 4807
                                  #9
                                  SNMPv2-SMI is so high level mib that it "contains" basically everything else... "enterprises" being one of its sub-branches for example..
                                  So everything is just fine...
                                  RFC 2578: Structure of Management Information Version 2 (SMIv2)
                                  https://datatracker.ietf.org/doc/html/rfc2578
                                  It is the purpose of this document, the Structure of Management Information Version 2 (SMIv2), to define that adapted subset, and to assign a set of associated administrative values. [STANDARDS-TRACK]

                                    Comment

                                    • ueuei
                                      Junior Member
                                      • Mar 2023
                                      • 6
                                      #10
                                      Is it only snmptrapd to be restarted after configuration or any other service too? Because in case still the MIBs come in numerical format from Zabbix
                                      (snmptranslate working fine instead)

                                        Comment

                                        • skullbox15
                                          Junior Member
                                          • Aug 2023
                                          • 5
                                          #11
                                          Sounds like I'm facing the same issue. I am able to get snmptranslate to work:

                                          [root@appliance ~]# snmptranslate -m /usr/share/snmp/mibs/JUNIPER-MIB.txt -IR -On jnxFruFailed
                                          .1.3.6.1.4.1.2636.4.1.9​

                                          Am I correct in thinking with the proper MIB loaded I should get text that says "jnxFruFailed" instead of .1.3.6.1.4.1.2636.4.1.9 in the trap history through zabbix? My goal is to get rid of the OIDs and replace them with text so I can grab them with the API. I've got the API part working, I just need to get the OID translation part working.
                                          Last edited by skullbox15; 08-09-2023, 16:49.

                                            Comment

                                            Previous template Next
                                            Working...