SNMP trap monitor

The SNMP trap monitor receives trap messages from SNMP monitors on remote hosts. The monitor only receives messages that originate from the asset's IP address. The first step of the filtering is done with the specified enterprise OIDs. Further inspection of the trap is done with the variable binding filter, which can include several rules. The rules are either evaluated all together (AND operation) or one by one (OR operation). The resulting trap triggers a failed test. The monitor can filter out standard generic SNMP v1 and v2c trap types.

Each OID field can be populated by selecting it from the MIB browser. The MIB browser is opened by pressing the button to the right of the OID field.

See the

  • System type: All
  • Category: SNMP

NOTE   Only monitor specific settings are documented here. See Standard monitor settings.

Basic tab

  • OID include filter - Enter one or more OIDs, separated by a comma. The monitor triggers an alarm for the specified enterprise OID.
    • You can specify either a named OID or a OID in number format. If you specify a named OID, Network Monitor tries to resolve it to its number format automatically when the field loses focus. Network Monitor uses the currently compiled MIBs to attempt to find the number format of the OID.
    • The [...] button next to the OID field display a MIB Browser dialog that can be used to select asset identifiers from the remote SNMP agent.
    • When the MIB browser displays an OID number with a @string it means you can use this string as part of the OID. For example the OID .1.3.6.1.2.1.2.2.1.16@Intel(R) PRO/1000 MT Network Connection can be entered in the OID field instead of identifying the index number of the network connection.
  • OID exclude filter - Enter one or more OIDs, separated by a comma. This monitors ignores traps from the specified enterprise OID.
  • Community - SNMP community to use.

Variable Binding filter tab

  • Include all variables - If checked, include all variable bindings from the trap in the alarm message. If unchecked only matched variable bindings will be included.
  • Match option - If All, all variable bindings must match. If At least one, only one variable binding must match.
  • OID/Value pairs - Filter rule to evaluate trap data. Performs a compare operation on a dynamic number of OIDs in the trap. The filter rules can be evaluated together or one by one. The result of the operation must be evaluate to true to be considered a matching trap.

Trap type filter tab

  • Trap type filter - Trap types to be included in the test.

    Coldstart
    Warmstart
    Link down
    Link up
    Authentication failed
    EGP
    Enterprise