snmp trap

[Sigma]

Hello all,

I have a customer with an L3000 that is sending out snmp traps to an unknown host. Below is the information I have.


Deny inbound UDP from 10.0.1.3/53962 to 10.100.100.55/161 on interface inside

10.0.1.3 is the HPUX, and .55 is the unknown host.

In the /etc/hosts.old file the .55 is referenced as the shehpux server

10.100.100.55 shehpux shehpux.uucp.com

This is no longer a valid host.


Any ideas where it is getting this information?

Thanks,
Steve

[Tim Nelson]

If you are running HP's snmp then check out the config file on /etc/SnmpAgent.d/snmpd.conf

trap-dest=

[Sigma]

Thanks, but I have checked snmpd.conf file and there's no reference to that hosts.

-Steve

[Steven E. Protter]

Shalom,

Restart the daemon or system.

It may have the hosts file cached.

Otherwise search the system for a script that is hardcoded to the wrong host.

SEP

[Sigma]

I've reboot and searched and have found nothing referencing that IP.

Thanks for your help.

-Steve

[Tim Nelson]

how about EMS ?

/etc/opt/resmon/lbin>/monconfig

[Sigma]

Thanks, but that's not it.

-Steve

[Sp4admin]

I agree with Steven.

Restart the daemon or system. This information could be cached some where in the system. does anything show up in the syslog?

Sp,