RE: Does anyone know what trap it is ? (Ryan guo)

 

Ryan,

Yes, the trap() description seems to match the event you are seeing.
There is one or more devices on your network that are sending out this
trap when the device is first booting up (timestamp is 0).  It may not
have its configuration file setup correctly with an IP address, or it
may be a network entity such as a bridge, router, switch, etc. that
nobody thought to configure.  Since you see the NET-SNMP trap, this
particular one is definitely a Linux box on your network with the snmpd
daemon loaded at bootup.

 

My suggestion is to run ethereal, capture the MAC address of the
offending station or stations and report to your network administrator
so the systems can be properly configured.

 

Regards,

Bill Smith                                  214-654-5622
[email protected]

 

 

________________________________

From: Ryan guo [mailto:[email protected]] 
Sent: Thursday, October 20, 2005 6:42 AM
To: Bill Smith; [email protected]
Subject: Re: Does anyone know what trap it is ? (Ryan guo)

 

hi,bill,i tried ur advisement,i used commview to capure the network
package ,it's source ip is correct ip ,but one tool named advent net mib
browser 's trap viewer show it is 0.0.0.0,i don't know why,and another
question ,in network package,i saw a item named agentaddr ,it showed
0.0.0.0,i lookup some references,found that some words:

 

trap() - send a SNMP trap to the remote manager

 

When the Transport Domain is UDP/IPv4 or TCP/IPv4, the default value for
the trap -agentaddr is the IP address associated with the hostname on
which the script is running or the address specified by the -localaddr
option. For other Transport Domains the -agentaddr is defaulted to
"0.0.0.0". When specified, the agent-addr is expected to be an IpAddress
in dotted notation 

 

i don't know whether it has relationship with which i said above?

 

 



 

On 10/20/05, Bill Smith <[email protected]> wrote: 

 

Ryan,

Normally, a source IP address on a network is either a system that is
booting up and has not been assigned an IP address, or it is not really
coming from your network at all.  It may only be internal to your
system.  If you question this, you can run a network capture application
such as "ethereal" and capture for that source address. 

 

Regards,

Bill Smith