Link to home
Start Free TrialLog in
Avatar of chris_calabrese
chris_calabrese

asked on

snmp traps in Cisco Secure IDS

We're using Cisco Secure Intrusion Detection System
(aka NetRanger) and are having a real hard time with
the event stuff.

We want to send SNMP traps, and have followed the
manuals, but it still doesn't work.  Even setup a real
simple script and tried to call that from eventd (both
on the IDS probe and on the Director) and that didn't
work either.

Anybody have any experience with this?
ASKER CERTIFIED SOLUTION
Avatar of Tim Holman
Tim Holman
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of chris_calabrese
chris_calabrese

ASKER

Yup.

I've configured eventd, but it still doesn't trap.

Even put in my own custom script just to see if it's being called at all on an alarm, and that's not being called either.

Tried on both the sensor and the director.
Turns out I needed to upgrade from NetRanger software version 2.2.1 to version 2.2.3 (which came out last month).  Seems 2.2.1 got buggy SNMP trap handling and also can't handle newer versions of OpenView.

But since Tim was the only person who had anything on this, the points obviously should go to him...