RE: Does anyone know what trap it is ? (Ryan guo)

 

Ryan,

Normally, a source IP address on a network is either a system that is
booting up and has not been assigned an IP address, or it is not really
coming from your network at all.  It may only be internal to your
system.  If you question this, you can run a network capture application
such as "ethereal" and capture for that source address.

 

Regards,

Bill Smith

 

 

________________________________

 

From: Ryan guo [mailto:[email protected]] 
Sent: Thursday, October 20, 2005 6:00 AM
To: Bill Smith; [email protected]
Subject: Re: Does anyone know what trap it is ? (Ryan guo)

 

 

hi,bill,thank u so much for ur help,but i also want to know that how the
source of "0.0.0.0" coming up,and what it is represented?



 

On 10/19/05, Bill Smith <[email protected]> wrote: 


Ryan,
The "10" in the last digit means "linux".  You have a system on your
network (maybe the local system?) that is advertising itself as a 
NET-SNMP agent on a Linux system.  The 0.0.0.0 source address and the 0
second timestamp is telling me it is your local snmpagent advertising to
itself.

Regards,
Bill Smith 


-------------------------------------------------

Message: 1
Date: Wed, 19 Oct 2005 13:38:28 +0800
From: Ryan guo <[email protected]>
To: [email protected],
       [email protected]
Subject: Does anyone know what trap it is ?

------=_Part_13255_14685800.1129700308637 
Content-Type: multipart/alternative;
       boundary="----=_Part_13256_31395193.1129700308637"

------=_Part_13256_31395193.1129700308637
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable 
Content-Disposition: inline

hi ,all, i received some stange traps through trap receiver,the snmp
trap '=
s
source is 0.0.0.0 <http://0.0.0.0 >,and trap's oid is
1.3.6.1.4.8072.3.2.10,=
i
lookup some references ,and get that this oid is locate in NET-SNMP.that
is
netSnmp(8072).netSnmpEnumerations(3).netSnmpAgentOIDs(2),and i wanna
know
that what the useness this trap it is and why it's source is 
0.0.0.0<http://0.0.0.0>,i
will very appreciate anyone who can help me.and attachment is the pic of
trap printscreen.