Ad Widget

**Hamardaban** · 02-09-2020, 18:46

I hope you know the entire sequence of processing the incoming trap and the place of snmptt in it. This component converts (formats) what will be output to the file that is processed by zabbix. Read the documentation on using SNMPTT and configure the conversion to suit your needs.
http://www.snmptt.org/docs/snmptt.sh...on-file-format

**manosnms** · 03-09-2020, 08:47

I have to say that is quite confusing. Could you please tell me which file Zabbix is reading to present the traps at GUI?

is it the /var/log/zabbix/snmptrap.log or the /var/log/snmptt/snmptt.log ?

thank you

**Hamardaban** · 03-09-2020, 11:58

Read this https://www.zabbix.com/documentation...types/snmptrap - "The workflow of receiving a trap"

**manosnms** · 03-09-2020, 12:38

where can I see what is specified in regexp?

Catches all SNMP traps that match the regular expression specified in regexp. If regexp is unspecified, catches any trap

Attached Files

**Hamardaban** · 03-09-2020, 13:09

You specify this regex expression yourself. For example, an item with the snmptrap["\bXXX\b"] key will only catch traps that have XXX in the text.

may be this help? https://blog.zabbix.com/snmp-traps-in-zabbix/8210/

**isaqueprofeta** · 04-09-2020, 02:39

a lot of information is missing. why is that?

Seems like some MIB's are missing in your system, try to install/copy at least the IETF/RCF basic ones.

**Hamardaban** · 04-09-2020, 12:02

The absence of MIB only affects the conversion of the oid to text and back, and messages in logs. If you use numeric oid values in snmp items, you can ignore the lack of mib. But of course it is better to configure the snmp subsystem correctly!

**manosnms** · 07-09-2020, 16:06

maybe this is the root cause?

I get the below message

HTML Code:

[root@zabbix snmp]# systemctl status snmptrapd
â— snmptrapd.service - Simple Network Management Protocol (SNMP) Trap Daemon.
Loaded: loaded (/usr/lib/systemd/system/snmptrapd.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2020-09-07 17:02:20 EEST; 3min 36s ago
Main PID: 3292 (snmptrapd)
Tasks: 1
CGroup: /system.slice/snmptrapd.service
â””â”€3292 /usr/sbin/snmptrapd -On -Lsd -f

Sep 07 17:05:39 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:40 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:41 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:41 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:42 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:50 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:50 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:50 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:50 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1
Sep 07 17:05:52 zabbix snmptrapd[3292]: perl callback function 0x5600ae8203b0 returns 1

**Hamardaban** · 07-09-2020, 16:30

How have you configured snmptrapd? Does it send data to snmptt or to the pl script? Show the contents of snmptrapd. conf (remove all comments!)

**manosnms** · 07-09-2020, 16:40

HTML Code:

authCommunity execute public
authCommunity execute internal
perl do "/usr/bin/zabbix_trap_receiver.pl";

and I i tried also with

traphandle default snmptt

**manosnms** · 07-09-2020, 16:41

and whatever oid I put at snmp.conf

i get the below

HTML Code:

[root@zabbix snmp]# systemctl restart snmptrapd
[root@zabbix snmp]# systemctl status snmptrapd
â— snmptrapd.service - Simple Network Management Protocol (SNMP) Trap Daemon.
Loaded: loaded (/usr/lib/systemd/system/snmptrapd.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2020-09-07 17:40:50 EEST; 2s ago
Main PID: 9049 (snmptrapd)
Tasks: 1
CGroup: /system.slice/snmptrapd.service
â””â”€9049 /usr/sbin/snmptrapd -On -Lsd -f

Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORUpTime ::= { sysOREntry 4 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORDescr ::= { sysOREntry 3 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORID ::= { sysOREntry 2 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORIndex ::= { sysOREntry 1 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpTrapEnterprise ::= { snmpTrap 3 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpTrapOID ::= { snmpTrap 1 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpMIBConformance ::= { snmpMIB 2 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpMIBObjects ::= { snmpMIB 1 }
Sep 07 17:40:50 zabbix snmptrapd[9049]: NET-SNMP version 5.7.2
Sep 07 17:40:50 zabbix snmptrapd[9049]: perl callback function 0x56536097a340 returns 1[root@zabbix snmp]# systemctl restart snmptrapd
[root@zabbix snmp]# systemctl status snmptrapd
â— snmptrapd.service - Simple Network Management Protocol (SNMP) Trap Daemon.
Loaded: loaded (/usr/lib/systemd/system/snmptrapd.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2020-09-07 17:40:50 EEST; 2s ago
Main PID: 9049 (snmptrapd)
Tasks: 1
CGroup: /system.slice/snmptrapd.service
â””â”€9049 /usr/sbin/snmptrapd -On -Lsd -f

Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORUpTime ::= { sysOREntry 4 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORDescr ::= { sysOREntry 3 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORID ::= { sysOREntry 2 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: sysORIndex ::= { sysOREntry 1 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpTrapEnterprise ::= { snmpTrap 3 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpTrapOID ::= { snmpTrap 1 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpMIBConformance ::= { snmpMIB 2 }
Sep 07 17:40:49 zabbix snmptrapd[9049]: Cannot adopt OID in SNMPv2-MIB: snmpMIBObjects ::= { snmpMIB 1 }
Sep 07 17:40:50 zabbix snmptrapd[9049]: NET-SNMP version 5.7.2
Sep 07 17:40:50 zabbix snmptrapd[9049]: perl callback function 0x56536097a340 returns 1

**Hamardaban** · 07-09-2020, 16:55

Unfortunately, I didn't work with the PL script use case. I prefer the option with snmptt .
I have snmptrapd.conf made like this " traphandle default /usr/local/sbin/snmptthandler --ini=/usr/local/etc/snmp/snmptt.ini "

**manosnms** · 07-09-2020, 17:03

so in my case -> " traphandle default /usr/sbin/snmptthandler --ini=/snmp/snmptt.ini"

do i still need the "authCommunity execute public" ?

**Hamardaban** · 07-09-2020, 17:10

Yes you need.

example of snmptrapd.conf

Code:

pidFile /var/run/snmptrapd.pid
doNotLogTraps yes
authCommunity log,execute YOU_COMMUNITY
traphandle default /usr/local/sbin/snmptthandler --ini=/usr/local/etc/snmp/snmptt.ini
[snmp] logOption s 7
[snmp] logOption f /var/log/snmptrapd.log
#0 or ! for LOG_EMERG,
#1 or a for LOG_ALERT, default
#2 or c for LOG_CRIT,
#3 or e for LOG_ERR,
#4 or w for LOG_WARNING,
#5 or n for LOG_NOTICE,
#6 or i for LOG_INFO, and
#7 or d for LOG_DEBUG.

Ad Widget

SNMP traps

SNMP traps

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment