From: Thomas Fowles (tfowles@gmail.com)
Date: Sat Apr 19 2008 - 12:18:58 ART
J.-
It doesn't seem like the rmon event description is used in logging or snmp
traps. I tested by configuring an event/alarm pair set to log and trap.
When I triggered the alarm (while running 'debug snmp packet' and 'debug
snmp header'), I did not see the description used in the log messages nor
the sent traps. I also packet captured the traps and the description was
not in there.
From the various documentation that I've read, configuring an rmon event
creates an entry in the rmon.event.eventTable. One of the fields in this
table is rmon.event.eventTable.eventEntry.eventDescription (your event
description shows up under this as 'DISPLAY STRING- (ascii):
whatevermydescriptionis'). This description can be pulled from the router
via an snmp walk/get. The decsription is also displayed in the various
"show rmon event" and "show rmon alarm" outputs.
With what I've seen and read, I would think of an rmon event description as
similar to an interface description.
Here are a couple of decent docs, but none directly address your question:
http://72.14.253.104/search?q=cache:WqWt2tCblFwJ:www.unix.org.ua/orelly/networking_2ndEd/snmp/ch09_01.htm+what+is+the+rmon+event+description+for%3F&hl=en&ct=clnk&cd=9&gl=us
http://www.cisco.com/en/US/tech/tk961/technologies_configuration_example09186a0080094478.shtml
HTH
-Tom
CCIE#18762
On Sat, Apr 19, 2008 at 7:58 AM, Jack Flash <jack.flash@inbox.com> wrote:
> Hi,
>
> I'm trying to get a grip of rmon, can anyone tell me if I have a
> misunderstanding here. I thought that the following config would produce
> logs in "sh log" and send them to a syslog server...
>
> rmon event 3 log description "CPU ABOVE 50%" owner config
> rmon event 4 log description "CPU BELOW 50%" owner config
> rmon alarm 1 lsystem.58.0 60 absolute rising-threshold 50 3
> falling-threshold 50 4 owner config
>
> I was excpecting to get "CPU BELOW 50%" in the log.
>
> However I get the following....
>
> %RMON-5-FALLINGTRAP: Falling trap is generated because the value of
> lsystem.58.0 has fallen below the falling-threshold value 50
>
> My misunderstanding, or have I configured it wrong? Does the description
> only get sent to snmp?
>
> Thanks.
> J.
>
>
> Pass the CCIE in six weeks, Guaranteed!
> http://www.certscience.com/CCIE
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE
This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:51 ART