SNMP Trap - Hex (?)

February 6, 2008, 9:02 am

≫ Next: email alert not working

≪ Previous: AS400 Monitoring?

$

0

0

I have hosts configured to send SNMP traps to ipMonitor on logon failures.  ipMonitor then sends e-mail with the trap contents.  However, some of the e-mails I receive are in hex format.  Is there a way to fix this?  I noticed in the log some weird characters are coming through that might be causing the problem... (Logon Process:\tÈù²)

Here is an example e-mail:

 

hex:  4c 6f 67 6f 6e 20 46 61 69 6c 75 72 65 3a 0d 0a 0d 0a 09 52 65 61 73 6f 6e 3a 09 09 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 64 75 72 69 6e 67 20 6c 6f 67 6f 6e 0d 0a 0d 0a 09 55 73 65 72 20 4e 61 6d 65 3a 09 0d 0a 0d 0a 09 44 6f 6d 61 69 6e 3a 09 09 0d 0a 0d 0a 09 4c 6f 67 6f 6e 20 54 79 70 65 3a 09 33 0d 0a 0d 0a 09 4c 6f 67 6f 6e 20 50 72 6f 63 65 73 73 3a 09 c8 f9 b2 0d 0a 0d 0a 09 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 61 63 6b 61 67 65 3a 09 4e 54 4c 4d 0d 0a 0d 0a 09 57 6f 72 6b 73 74 61 74 69 6f 6e 20 4e 61 6d 65 3a 09 0d 0a 0d 0a 09 53 74 61 74 75 73 20 63 6f 64 65 3a 09 30 78 38 30 30 39 30 33 30 38 0d 0a 0d 0a 09 53 75 62 73 74 61 74 75 73 20 63 6f 64 65 3a 09 30 78 30 0d 0a 0d 0a 09 43 61 6c 6c 65 72 20 55 73 65 72 20 4e 61 6d 65 3a 09 2d 0d 0a 0d 0a 09 43 61 6c 6c 65 72 20 44 6f 6d 61 69 6e 3a 09 2d 0d 0a 0d 0a 09 43 61 6c 6c 65 72 20 4c 6f 67 6f 6e 20 49 44 3a 09 2d 0d 0a 0d 0a 09 43 61 6c 6c 65 72 20 50 72 6f 63 65 73 73 20 49 44 3a!

  09 2d 0d 0a 0d 0a 09 54 72 61 6e 73 69 74 65 64 20 53 65 72 76 69 63 65 73 3a 09 2d 0d 0a 0d 0a 09 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 3a 09 2d 0d 0a 0d 0a 09 53 6f 75 72 63 65 20 50 6f 72 74 3a 09 2d 0d 0a 0d 0a

 

Here is the snmptrap.log entry for that trap:

1.3.6.1.4.1.311.1.13.1.9999.1.0: TYPE[4] TEXT "Logon Failure:\r\n\r\n\tReason:\t\tAn error occurred during logon\r\n\r\n\tUser Name:\t\r\n\r\n\tDomain:\t\t\r\n\r\n\tLogon Type:\t3\r\n\r\n\tLogon Process:\tÈù²\r\n\r\n\tAuthentication Package:\tNTLM\r\n\r\n\tWorkstation Name:\t\r\n\r\n\tStatus code:\t0x80090308\r\n\r\n\tSubstatus code:\t0x0\r\n\r\n\tCaller User Name:\t-\r\n\r\n\tCaller Domain:\t-\r\n\r\n\tCaller Logon ID:\t-\r\n\r\n\tCaller Process ID:\t-\r\n\r\n\tTransited Services:\t-\r\n\r\n\tSource Network Address:\t-\r\n\r\n\tSource Port:\t-\r\n\r\n" 

---

email alert not working

January 28, 2012, 1:24 am

≫ Next: What We're Working On - ipMonitor

≪ Previous: SNMP Trap - Hex (?)

$

0

0

email alerts have been working for years with no problem.  all of a sudden a couple of days ago email alerts stopped working.  need assistance to troubleshoot and fix.  here are some points regarding the issue for us.

1. the monitors are going red and are set to alert.

2. there are group alerts setup.

3. if i go into a group alert via 

• Configuration
• Alert List
• go to that alert
• Force Test

the alert works fine and i receive the email

4. if a monitor goes red i do not receive email.  no changes on monitor alert setup.  has been working for years.

5. we recently had an exchange upgrade but that was about 6 months ago and it was working after the upgrade.

6. we recently had a mail domain name change so we edited all of the To/From email addresses in the alerts and in Configuration, System Settings, Identification

7. this started happening after the ipmonitor server was rebooted a couple of days ago.

8. i noticed at first that the tests in #3 above were giving cannot connect errors.  i wound up having to go to 

• Configuration
• System Settings
• Email Delivery

- i had to add SMTP relay server option with exchange server domain name and port 25.  after doing this i was successful on manual test in #3.  however automatic alerts are not working.

oh and also i can talk to the exchange server via telnet from ipmonitor server and send mail that way no problem (like this example http://support.microsoft.com/kb/153119.  also email server pings from ipmonitor server.

can you explain how i can force test and alert and get the email however when the monitor goes red and is supposed to alert it is not doing it?

or better yet can you help me resolve this issue.  it doesn't make sense to me.

What We're Working On - ipMonitor

May 2, 2012, 7:11 am

≫ Next: Windows server upgrade from 2003 R2 to 2008 R2 64 bit

≪ Previous: email alert not working

$

0

0

To receive updates on the ipMonitor roadmap, JOIN thwack and BOOKMARK this page

 

ipMonitor 10.9 is now available, and we are actively working on the next release. Some new and exciting enhancements being looked at are:

 

• Integration with Office 365 as SMTP relay.

• Improved VMWare ESX Host and Microsoft Hyper-V Monitoring

• Discovery Improvements

• Improved workflow for accessing monitor tools.

• Report SQL values returned by a Monitor within notification/alerts

 

We also want to hear what you would like to see in the next version of ipMonitor®!  Submit your ideas or vote on existing feature requests here ipMonitor Feature Requests

Windows server upgrade from 2003 R2 to 2008 R2 64 bit

April 5, 2013, 3:13 am

≫ Next: Not able to get traps for Firewalls and Network Devices

≪ Previous: What We're Working On - ipMonitor

$

0

0

Hello Everyon

 

We currently have IPmonitor 10.0 installed on a windows server 2003 R2 enterprise edition box. We are planning to upgrade this server to windows server 2018 R2 64 bit. I have a few questions on compatibility before we attempt the upgrade.

 

Is IPmonitor 10 X compatible with windows server 2008 64 bit

 

Is upgrading the OS to 2008 with retaining IPmonitor is recommended or we need to install a clean IPmonitor on the new server.

 

If compatible, do we have any procedure to follow during upgrade.

 

Not able to get traps for Firewalls and Network Devices

April 16, 2019, 11:32 pm

≫ Next: Monitor wmi namespace root\MSCluster with IPMonitor

≪ Previous: Windows server upgrade from 2003 R2 to 2008 R2 64 bit

$

0

0

Hi I tried configuring trap based alerting , but somehow am not able to receive any kind of traps. On initial level we kept the Syslogs and Trap services disabled, but even after enabling the services I am not able to receive the traps.

 

I also validated if any firewall is there between the devices I monitor and my APE's. Not sure what can be done just to receive traps. Facing issues with also device types.

 

Regards

Himanshu Ranjan

Monitor wmi namespace root\MSCluster with IPMonitor

August 15, 2019, 6:08 am

≫ Next: OID for Average Disk Queue Length on Windows Server 2003 R2 SP2 Cluster

≪ Previous: Not able to get traps for Firewalls and Network Devices

$

0

0

Hello

 

We have tried to monitor a Microsoft Failover Cluster with IPMonitor, but apparently the application has to use the authentication level "Packet Privacy", which IPMonitor doesn't support I assume.

We can monitor certain WMI namespaces like root\cimv2, but root\MSCluster gives an error "An error occurred while communicating with the WMI Service: Could not get classes."

 

Does anyone know of a way to make this work?

 

Thanks much and regards,

Patrick

OID for Average Disk Queue Length on Windows Server 2003 R2 SP2 Cluster

January 4, 2008, 8:15 am

≫ Next: WAVECOM GSM Modem not work .

≪ Previous: Monitor wmi namespace root\MSCluster with IPMonitor

$

0

0

I am looking for the OID for the average disk queue length a Clustered Windows Server 2003 R2 with SP2. Also, whenever I get the OID for the average disk queue length, should I hit the IP address for the cluster or either of the two nodes?

Thanks,

Eric

WAVECOM GSM Modem not work .

July 8, 2008, 12:26 am

≫ Next: Monitor IBM Server Temperature

≪ Previous: OID for Average Disk Queue Length on Windows Server 2003 R2 SP2 Cluster

$

0

0

 Hello there  8-)

I've brought a GSM modem and config everything I could find from the Doc.and once I trigger the SMS alert, the IPmonitor sent a SMS to my mobile properly .but after that, the SMS alert never worked again. 8-(

I've checked other post on the forum, and also change the bit rate to 115200.

my GSM MODEM is using the chipset WAVECOM Q2403A which compatible with GSM Phase2 / 2+
I could use AT command to sent message from the GSM MODEM.so seems the GSM modem should not have any problem.

BTW: coud you give me a more detailed configuration guide for how to connect a GSM MODEM ? or where I could got more debug message ?

thanks in advance.

 Ricky with 8-)

 below is the log I've got when I force a test.

======================================

Action Error: The outbound alert message did not reach its destination. The test failed. Call Log, started: Tuesday, July 8th, 2008 at 15:25:0

0.001 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
0.039 secs	Recv	.	1B
0.528 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
0.531 secs	Recv	..	FB F3
1.060 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
1.063 secs	Recv	..	FF FD
1.219 secs	Recv	.	FC
1.592 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
1.597 secs	Recv	...	FF FF FF
2.122 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
2.133 secs	Recv	...	FF FF FF
2.654 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
3.107 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
3.654 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
4.107 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
4.560 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
4.563 secs	Recv	.	1B
5.092 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
5.094 secs	Recv	{s	7B 73
5.623 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
5.627 secs	Recv	..	7F 7F
6.154 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
6.160 secs	Recv	.~.	7F 7E 7F
6.686 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
6.697 secs	Recv	...	7F 7F 7F
7.217 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
7.670 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
8.123 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D
8.576 secs	Sent	..ATE0Q0.AT..	1B 0D 41 54 45 30 51 30 0D 41 54 0D 0D

===========================================

 

and output of the config from the GSM modem

================

 at&v
Q:0 V:1 S0:000 S2:043 S3:013 S4:010 S5:008
+CR:0 +CRC:0 +CMEE:0 +CBST:0,0,1
+SPEAKER:0 +ECHO:0,1 &C:1 &D:2 %C:0
+IPR:115200 +ICF:3,4 +IFC:2,2

OK

=================

---

Monitor IBM Server Temperature

April 5, 2009, 7:09 pm

≫ Next: SNMP Trap Content Generator question

≪ Previous: WAVECOM GSM Modem not work .

$

0

0

We are trying to monitor temperature on a x3650 server. Unlike Dell server, we are not able to get the SNMP working. I assume we do not have the required MIBs in our ipMonitor SNMP list? With Solarwinds consultants help I've now imported a pack of IBM MIBs into our ipMonitor. However, still no luck with monitoring the temperature. Other general items are fine, like CPU, Memory, SysUptime...

I notice with IBM server, it usually use a hardware adapter for remote monitoring RSA. Do I need to have it installed in order to monitor the temperature? I notice its update files shipped with MIBs, do I need to import them into ipMonitor as well?

SNMP Trap Content Generator question

April 13, 2009, 6:26 am

≫ Next: Printer monitoring via OIDs

≪ Previous: Monitor IBM Server Temperature

$

0

0

I'm new to SNMP trap processing in ipMonitor and I have been able to receive the trap and notify from it with a Content Generator so far. I had SolarWinds create a custom MIB database for me since their online one didn't have my device built in. I imported that successfully. Using snmptrap.log, I was able to configure the SNMP Trap monitor to successfully receive the trap. I then configured the content generator to send me information from the trap. Here is the trap from snmptrap.log:

--------------------------------------------
Intact SNMP Trap Accepted: time(Mon Apr 13 09:20:14 2009) src_ip(10.1.1.52)
version: 1
community: public
enterprise: 1.3.6.1.4.1.21735.1.1.1.9
agent-addr: 10.1.1.52
generic-trap: enterpriseSpecific (6)
specific-trap: 1
time-stamp: 50545051
Variable Bindings:
1.3.6.1.4.1.21735.1.1.1.1.8.0: TYPE[4] TEXT "lafayette"
1.3.6.1.4.1.21735.1.1.1.1.9.0: TYPE[4] TEXT "CCR Room"
1.3.6.1.4.1.21735.1.1.1.1.10.0: TYPE[2] NUMERIC 1
1.3.6.1.4.1.21735.1.1.1.1.11.0: TYPE[2] NUMERIC 1
1.3.6.1.4.1.21735.1.1.1.1.12.0: TYPE[2] NUMERIC 9
1.3.6.1.4.1.21735.1.1.1.1.13.0: TYPE[2] NUMERIC 1
1.3.6.1.4.1.21735.1.1.1.1.14.0: TYPE[4] TEXT "ù\r7 "
0000 | 30 81 DA 02 01 00 04 06  70 75 62 6C 69 63 A4 81  |0.......public..|
0010 | CC 06 0C 2B 06 01 04 01  81 A9 67 01 01 01 09 40  |...+......g....@|
0020 | 04 0A 01 01 34 02 01 06  02 01 01 43 04 03 03 41  |....4......C...A|
0030 | 9B 30 81 A9 30 1B 06 0E  2B 06 01 04 01 81 A9 67  |.0..0...+......g|
0040 | 01 01 01 01 08 00 04 09  6C 61 66 61 79 65 74 74  |........lafayett|
0050 | 65 30 1A 06 0E 2B 06 01  04 01 81 A9 67 01 01 01  |e0...+......g...|
0060 | 01 09 00 04 08 43 43 52  20 52 6F 6F 6D 30 13 06  |.....CCR Room0..|
0070 | 0E 2B 06 01 04 01 81 A9  67 01 01 01 01 0A 00 02  |.+......g.......|
0080 | 01 01 30 13 06 0E 2B 06  01 04 01 81 A9 67 01 01  |..0...+......g..|
0090 | 01 01 0B 00 02 01 01 30  13 06 0E 2B 06 01 04 01  |.......0...+....|
00A0 | 81 A9 67 01 01 01 01 0C  00 02 01 09 30 13 06 0E  |..g.........0...|
00B0 | 2B 06 01 04 01 81 A9 67  01 01 01 01 0D 00 02 01  |+......g........|
00C0 | 01 30 1A 06 0E 2B 06 01  04 01 81 A9 67 01 01 01  |.0...+......g...|
00D0 | 01 0E 00 04 08 07 D9 04  0D 07 37 18 00           |..........7..   |

I'm most interested in the line 1.3.6.1.4.1.21735.1.1.1.1.12.0: TYPE[2] NUMERIC 9. In the MIB, the value 9 is defined in the comments as "high temperature"

"Alarm type of new alert
0 = high cell voltage
1 = low cell voltage
2 = high cell resistance
3 = high intercell resistance
4 = high overall voltage
5 = low overall voltage
6 = high float current
7 = warning
8 = ground fault
9 = high temperature
etc.

I can get the notification email to return the value "9", but not the description "high temperature". Is is possible to configure the content generator to decode
this alarm type and display "high temperature" instead of "9"?

Printer monitoring via OIDs

February 26, 2010, 5:06 pm

≫ Next: IPMonitor Upgrade - New Features

≪ Previous: SNMP Trap Content Generator question

$

0

0

I am curious if there is way to monitor things like toner low and paper out/ jam using OIDs. The current OID im using is straight from the SNMP search(1.3.6.1.2.1.25.3.5.1.2.1) and according to the decsription it should funtion properly. However, the values returned are not accurate and I am not informed when the toner is low or if paper is out. I have tested this by manually removing the paper and the toner low warning is already active. I have an HP 2840 colorjet that's Jetdirect compatible

IPMonitor Upgrade - New Features

July 5, 2011, 6:18 am

≫ Next: 401 Access Denied using the WSDL API

≪ Previous: Printer monitoring via OIDs

$

0

0

When is the last time SolarWinds released a decent product update for IPMonitor?  I am not sure even worth paying maintenance renewal every year!! Quality of this product is degrading day by day.  I think its time to look for other monitoring software.

401 Access Denied using the WSDL API

October 16, 2012, 10:10 am

≫ Next: How to configure Latency monitor with IP Monitor 10

≪ Previous: IPMonitor Upgrade - New Features

$

0

0

I am running ipMonitor 10.6 and cannot for the LIFE of me connect to the WSDL via code.

 

I can see the URL in my browser just fine, but, on the same machine, via code, I immediately get a 401 Access Denied error whether I use SOAP or CURL.

 

Documentation is dry at best and there aren't many examples out there.

 

$context = stream_context_create(array('ssl' => array('verify_peer' => FALSE)));

 

 

$soapURL = 'https://domain.com/soap/status.asmx?wsdl';

$soapParameters = array  (

            'login' => 'user',

            'password' => 'password',

            'WSDL' => TRUE,

            'stream_context' => $context

            );

$soapClient = new SoapClient($soapURL,$soapParameters);

 

And that yields:

 

HTTP request failed! HTTP/1.0 401 Access Denied

How to configure Latency monitor with IP Monitor 10

April 30, 2013, 3:22 am

≫ Next: Monitoring Mapped Drives

≪ Previous: 401 Access Denied using the WSDL API

$

0

0

Hello All,

 

This is my first post here so if i make any mistake in giving any vital information then please correct me. We are using Solarwinds IpMonitor 10 licensed version in our Enterprise network.We have 6 Data centers and about more than 150 servers. So far IpMonitor is working fine and giving us all vital alerts but we want to configure the Latency monitoring so we can be alerted when the latency is going higher than the threshold so we can check with the ISP and save the Production websites going down or not reachable to the customers.

 

Can Latency be monitored with IP Monitor and if it can be please can somebody guide me how to do that as it will be very helpful to me.

 

Thanks,

Dhyanesh

Monitoring Mapped Drives

February 12, 2009, 6:24 am

≫ Next: Monitor PostgreSQL

≪ Previous: How to configure Latency monitor with IP Monitor 10

$

0

0

Is there a simple way to create a monitor to check for the existance of a mapped drive?

---

Monitor PostgreSQL

December 5, 2018, 11:18 am

≫ Next: Do you use ipMonitor? Write a review for a chance to win an Amazon gift card.

≪ Previous: Monitoring Mapped Drives

$

0

0

I am trying to configure a monitor for a Postgres database. I am having trouble finding instructions on how to add the ado connection

 

When I run the wizard it gives me a list of unavailable databases that can be configured, but the link is dead to the instructions.

 

http://ipmsupport.solarwinds.com/?98b610dcc3164cb398e85e73a7c66a6d

Do you use ipMonitor? Write a review for a chance to win an Amazon gift card.

December 19, 2018, 11:26 am

≫ Next: Monitor wmi namespace root\MSCluster with IPMonitor

≪ Previous: Monitor PostgreSQL

$

0

0

ipMonitor^® is featured on Capterra^®, a business software review site. If you’re an ipMonitor user, please consider writing us a review to help others evaluate if our software is the right IT monitoring tool for their organization.

 

Writing a review will only take about five minutes, and to thank you for your time, the first forty reviewers will receive a $20 Amazon^® gift card, while supplies last.

It just takes two easy steps:

1. Click HERE to leave your review
2. Email a screenshot to kathleen.walker@solarwinds.com or post the screenshot as a reply below. 

Thank you for your help!

**Offer expires on 12/31/18. Valid for United States and Canada only**

 

Terms & Conditions Apply

Monitor wmi namespace root\MSCluster with IPMonitor

August 15, 2019, 6:08 am

≫ Next: Is there a better way to do Process monitoring via SNMP

≪ Previous: Do you use ipMonitor? Write a review for a chance to win an Amazon gift card.

$

0

0

Hello

 

We have tried to monitor a Microsoft Failover Cluster with IPMonitor, but apparently the application has to use the authentication level "Packet Privacy", which IPMonitor doesn't support I assume.

We can monitor certain WMI namespaces like root\cimv2, but root\MSCluster gives an error "An error occurred while communicating with the WMI Service: Could not get classes."

 

Does anyone know of a way to make this work?

 

Thanks much and regards,

Patrick

Is there a better way to do Process monitoring via SNMP

August 20, 2010, 10:47 am

≫ Next: How do I turn off ssl 3.0 support in the web server? (CVE-2014-3566 poodle)

≪ Previous: Monitor wmi namespace root\MSCluster with IPMonitor

$

0

0

We monitor processes via SNMP using a two line powershell script which does a snmpwalk of the current running processes on the target  machines host_resource mib, returning a 0 or 1, depending it it finds the process or not. This simple script works for both Unix and Windows successfully however we have hit two problems.

The first, is that it cannot differentiate multiple processes by the same name. 

The second problem is that the overhead of using powershell for these 20 external process monitors can be greater than ipmonitor itself which has over 3000 active standard monitors. I think this is because powershell is using CPU to actively check if the snmpwalk has come back yet, which can take a second or two.

Below is the simple but effective generic script which we pass the target server, community string and process name as parameters. It runs on the IPMONITOR host machine, requiring nothing installed on the target servers.

if (invoke-expression "d:\net-snmp\usr\bin\snmpwalk -v 1 -c $($args[0]) $($args[1]) 1.3.6.1.2.1.25.4.2.1.2" | select-string "$($args[2])") { Write-Host "FOUND"; exit 1 } else { Write-Host "NOT FOUND";exit 0 }

Does anyone have a better/faster/more effecive/alternate way of being able to solve or improve either of these issues?

Does anyone know if process monitoring, including monitoring multiple processes of the same name, will be added as a monitor type at any point in IPMONITOR's future?

Paul

How do I turn off ssl 3.0 support in the web server? (CVE-2014-3566 poodle)

October 16, 2014, 2:57 pm

≫ Next: AS400 Monitoring?

≪ Previous: Is there a better way to do Process monitoring via SNMP

$

0

0

I'm using ipMonitor which has a build-in web server. I need to turn off SSL 3.0 support in the server to prevent an attack via poodle, CVE-2014-3566.

Is there a setting that allows this to be accomplished?