topic Re: Determine SNMP Listener in Server Management - Systems Insight Manager

Determine SNMP Listener

Chad Taggart — Fri, 17 Sep 2004 00:57:41 GMT

I'm wondering whether there is a way that you can determine what program is listening for SNMP traps on a particular server, ie SIM server.

The reason for this request is that I am not receiving any SNMP traps on the CIM server. I have done a packet sniff and have confirmed that they are been sent to the CIM server but they aren't getting into the event list.

I'm essentially assuming (based on a previous post/resolution in this forum) that something else is intercepting the trap before CIM grabs it.

Re: Determine SNMP Listener

Ivan KOVAC — Fri, 17 Sep 2004 08:47:48 GMT

Hello

Check Default SNMP settings in HPSIM console under Options, Global Protocol setting.

Are you have SIM on Windows2003. The default installation of SNMP service have under propertis, tab Security enabled options: Accept traps from these host and entered value is localhost. If that, change to Accept traps from any host.

Ivan

Re: Determine SNMP Listener

Rob Buxton — Sun, 19 Sep 2004 15:27:27 GMT

Also, check that they're not Informational Events as these do not trigger the Traffic Lights.
On HPSIM, it's the standard Windows SNMP Trap Handler that handles SNMP Traps.

There's a SNMP Utility that you can run that shows the SNMP Traps that the Server sees, I think its an MS Utility - something like SNMPUtil.

You can use the HP Management Agents GUI to send Test SNMP Traps, these should turn up as Major Events.
Check the SNMP Settings on the SIM Server, I've set my W2003 to Allow All Hosts, the default is allow selected. Then you need to have at least a Read Only Community name that is used by both ends.

Re: Determine SNMP Listener

Chad Taggart — Sun, 19 Sep 2004 16:51:11 GMT

I have discovered that the "syslog" program that i am using had attached itself to port 162 and was intercepting the alerts from the servers etc. To discover this i found a utility called fport.exe. Basically it did a dump of all active ports and the program/executable that was attached/listening to the port.

I am now successfully receiving ALL alerts.

Now i've got to find out a resolution to my timezone issue, in that all alerts are sent with GMT time when i need GMT +10.