"Generic Unregistered" and "authentication failure" alerts in HP SIM 6.1

[shocko]

Ok, so the test SNMP trap is contained in CPQHOST.MIB. Can you post the output of?

• mxmib -t CPQHOST.MIB

[shocko]

Also, just check the following file exists

• CPQHOST.CFG

This is the compiled MIB.

[shocko]

Do you see the following in SIM under SNMP trap settings?

[mathewr]

C:\Users\Administrator>mxmib -t CPQHOST.MIB

SHOW TRAPS FOR A MIB

cpqHoSWRunningStatusChangeTrap
cpqHoCrashDumpNotEnabledTrap
cpqHo2NicStatusFailed2
cpqHoGenericTrap
cpqHoBootPagingFileOrFreeSpaceTooSmallTrap
cpqHo2NicStatusOk2
cpqHoAppErrorTrap
cpqHo2NicSwitchoverOccurred2
cpqHo2NicStatusOk
cpqHoCriticalSoftwareUpdateTrap
cpqHo2NicStatusFailed
cpqHo2AppErrorTrap
cpqHo2GenericTrap
cpqHo2PowerThresholdTrap
cpqHoProcessCountWarning
cpqHoProcessEventTrap
cpqHoProcessCountNormal
cpqHo2NicSwitchoverOccurred
cpqHoBootPagingFileTooSmallTrap

COMMAND COMPLETED SUCCESSFULLY

[mathewr]

Yes, I see cpqhost.mib in SIM. The only difference from the screen shot given by you is that severity is Major in HP SIM, instead of Informational

[shocko]

This is not making any sense. Its like the traps are registered but the trap details are not.

[shocko]

Also, what version of the Insight Agents are you running on the server sending the test trap?

[Pedae]

Hello

i am getting too this generic unregistered

Event Name: (SNMP) Generic Unregistered

URL: ****

Event originator: ***

Event Severity: Informational

Event received: 22-Feb-2012, 12:15:01

Event description: A genericUnregistered trap signifies that a system has sent a trap to the management server for a MIB that has not yet been compiled.  Try compiling any MIBs from the vendor for this system to obtain additional information. See Details for more information.

cpqGenEntOIDStr: 1.3.6.1.4.1.8072.4

cpqGenTrapID: 6

cpqSpecTrapID: 2

so which is the right mib to use?

OS on the Server is SUSE Linux Enterprise Server 11 SP1

Greetz

Peter

[Bryan Swanson_1]

Greetings all,

1.3.6.1.4.1.8072 is the OID for NET-SNMP (the snmp agent used in most Linux distributions)

8072.4  is netSnmp.netSnmpNotificationPrefix

Generic trapid 6 is 'enterprise-specific'

Specific trapid 2 is 'nsNotifyShutdown'

The Linux snmpd sends NOTIFICATIONs (not TRAPs) on startup, shutdown, and restart.

However, HPSIM does not support SNMPv2 NOTIFICATIONs. It can only receive SNMPv1 TRAPs.

Even if you convert the SNMPv2 MIB to SNMPv1 (using mcompile) and then import the mib into

HPSIM (using mxmib -a) the Linux agent is still sending a SNMPv2 PDU which is not equivalent

to an SNMPv1 PDU.

If you are intent on using HPSIM, your best bet would be to use some 3rd party translator

like snmptt on Linux or SimpleSnmpProxy on Windows to convert the v2 NOTIFICATION to

a v1 TRAP and then forward that to HPSIM.

I spent quite a bit of time chasing this down myself, so I hope this information is somewhat helpful.

kind regards,

-b