DX NetOps

 View Only
  • 1.  Mapping a trap with a variable trap OID

    Posted Dec 14, 2016 04:38 PM

    I have a need to map traps from people that are using the Microsoft Event to SNMP trap tool.  This tool makes the trap enterprise OID variable for different systems.  So for us that may be 300 different enterprise OIDs that mean the same thing.  Is there a way to map a trap and ignore some parts of the enterprise OID?

     

    example:

       1.3.6.1.4.1.311.1.13.1.4.84.67.54.54.6.2147747842

     

    The 1.3.6.1.4.1.311.1.13.1.4 will always be the same.  But after that it gets strange.

    The 84.67.54.54 will be different from different sources.

     

    So how can I take:

    1.3.6.1.4.1.311.1.13.1.4.84.67.54.54

    1.3.6.1.4.1.311.1.13.1.4.85.32.27.32

    1.3.6.1.4.1.311.1.13.1.4.96.16.38.55

     

    and make them all represent the same thing?  I know if I only had a few, I could repeat those in the alert map, but since I'm going to have hundreds of them, and I don't have any idea what they will look like, it could be a maintenance nightmare.



  • 2.  Re: Mapping a trap with a variable trap OID
    Best Answer

    Posted Jan 19, 2017 05:06 PM

    No way of doing this that I am aware of.



  • 3.  Re: Mapping a trap with a variable trap OID

    Posted Jan 19, 2017 05:38 PM

    Thanks.  I was afraid of that, but at least I now know to stop looking for some fancy trick.    You'll love the massive AlertMap/EventDisp that I've set up to take all those individual OIDs and merge them into one stream.



  • 4.  Re: Mapping a trap with a variable trap OID

    Broadcom Employee
    Posted Jan 20, 2017 08:01 AM
      |   view attached

    Have you tried just using the 1.3.6.1.4.1.311.1.13.1.4 and mapping the varbinds?

    Spectrum does attempt to try and do a match (and can assume the rest of the oid is an “index” if you will).   So mapping the oid and the varbinds up to the “index” might just work as long as you don’t have any duplicate entries for this oid…

     

    Cheers

    Jay