mxdomainmgr.0.log: Automation construction TrapHandler has large number of events

[C0nner]

Hi

I run SIM 5.1 (C.05.01.00.00) & have recently noticed traps failing to appear in HPSIM. We reviewed the 'mxdomainmgr.0.log' file and the last line reads:

10 Jul 2007 13:18:06,183 INFO [HPSIM_DEBUG] Automation construction TrapHandler has large number of events 12,500 in Queue

Can anyone give me some tips about where the Traps are queued? or why they may be queueing up?

Thanks in advance guys

[Geoff Schunicht · Accepted solution]

SIM needs to process each trap that comes into it, this processing can take time and can cause the queueing you see.

Most of the time this has been see is because there are large numbers of AuthFail traps being received. These are filtered from the DB by default, but as noted above takes time to do the initial processing.

You can either enable this trap in SIM (Events SNMP Trap Settings, select rfc1215) and for each event in the log go to the systems sending it and disable the sending of auth fail events or use a CLI utility (eg snmputil from Microsoft) to see where the traps are coming from. BTW, if you enable this trap in SIM, it is likely you will end up with 10's of thousands of events in the log so don't leave it on for long.

[C0nner]

Thanks.

We went with snmputil and found two box's flooding our monitoring device. Once we tackled those we we're back in business.

Cheers