Re: rmon / syslog / snmp confusions

From: Jack Flash (jack.flash@inbox.com)
Date: Sat Apr 19 2008 - 12:38:47 ART


cheers Tom, I'll check the link out.

Thomas Fowles wrote:
> J.-
>
> It doesn't seem like the rmon event description is used in logging or snmp
> traps. I tested by configuring an event/alarm pair set to log and trap.
> When I triggered the alarm (while running 'debug snmp packet' and 'debug
> snmp header'), I did not see the description used in the log messages nor
> the sent traps. I also packet captured the traps and the description was
> not in there.
>
> From the various documentation that I've read, configuring an rmon event
> creates an entry in the rmon.event.eventTable. One of the fields in this
> table is rmon.event.eventTable.eventEntry.eventDescription (your event
> description shows up under this as 'DISPLAY STRING- (ascii):
> whatevermydescriptionis'). This description can be pulled from the router
> via an snmp walk/get. The decsription is also displayed in the various
> "show rmon event" and "show rmon alarm" outputs.
>
> With what I've seen and read, I would think of an rmon event description as
> similar to an interface description.
> Here are a couple of decent docs, but none directly address your question:
> http://72.14.253.104/search?q=cache:WqWt2tCblFwJ:www.unix.org.ua/orelly/networking_2ndEd/snmp/ch09_01.htm+what+is+the+rmon+event+description+for%3F&hl=en&ct=clnk&cd=9&gl=us
> http://www.cisco.com/en/US/tech/tk961/technologies_configuration_example09186a0080094478.shtml
>
> HTH
>
> -Tom
> CCIE#18762
>
>
>
>
> On Sat, Apr 19, 2008 at 7:58 AM, Jack Flash <jack.flash@inbox.com> wrote:
>
>
>> Hi,
>>
>> I'm trying to get a grip of rmon, can anyone tell me if I have a
>> misunderstanding here. I thought that the following config would produce
>> logs in "sh log" and send them to a syslog server...
>>
>> rmon event 3 log description "CPU ABOVE 50%" owner config
>> rmon event 4 log description "CPU BELOW 50%" owner config
>> rmon alarm 1 lsystem.58.0 60 absolute rising-threshold 50 3
>> falling-threshold 50 4 owner config
>>
>> I was excpecting to get "CPU BELOW 50%" in the log.
>>
>> However I get the following....
>>
>> %RMON-5-FALLINGTRAP: Falling trap is generated because the value of
>> lsystem.58.0 has fallen below the falling-threshold value 50
>>
>> My misunderstanding, or have I configured it wrong? Does the description
>> only get sent to snmp?
>>
>> Thanks.
>> J.
>>
>>
>> Pass the CCIE in six weeks, Guaranteed!
>> http://www.certscience.com/CCIE
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Pass the CCIE in six weeks, Guaranteed!
> http://www.certscience.com/CCIE
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:51 ART