chris_calabrese
asked on
snmp traps in Cisco Secure IDS
We're using Cisco Secure Intrusion Detection System
(aka NetRanger) and are having a real hard time with
the event stuff.
We want to send SNMP traps, and have followed the
manuals, but it still doesn't work. Even setup a real
simple script and tried to call that from eventd (both
on the IDS probe and on the Director) and that didn't
work either.
Anybody have any experience with this?
(aka NetRanger) and are having a real hard time with
the event stuff.
We want to send SNMP traps, and have followed the
manuals, but it still doesn't work. Even setup a real
simple script and tried to call that from eventd (both
on the IDS probe and on the Director) and that didn't
work either.
Anybody have any experience with this?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Turns out I needed to upgrade from NetRanger software version 2.2.1 to version 2.2.3 (which came out last month). Seems 2.2.1 got buggy SNMP trap handling and also can't handle newer versions of OpenView.
But since Tim was the only person who had anything on this, the points obviously should go to him...
But since Tim was the only person who had anything on this, the points obviously should go to him...
ASKER
I've configured eventd, but it still doesn't trap.
Even put in my own custom script just to see if it's being called at all on an alarm, and that's not being called either.
Tried on both the sensor and the director.