ruby-snmp icon indicating copy to clipboard operation
ruby-snmp copied to clipboard

Wrong matching of vendor MIBs

Open MarcusCaepio opened this issue 7 years ago • 0 comments

It seems, that although the MIBS are found when I start logstash in Debug, the OIDs are not translated correctly.

"FSC-SERVERCONTROL2-MIB::sc2TrapInfoServerName.0" => "XXXXXX",
                                         "@timestamp" => 2017-06-22T12:45:53.984Z,
                  "SNMPv2-SMI::snmpModules.1.1.4.3.0" => "FSC-SERVERCONTROL2-MIB::sc2Notifications",
                "DISMAN-EVENT-MIB::sysUpTimeInstance" => "11:45:22.43",
          "FSC-SERVERCONTROL2-MIB::sc2TrapInfoTime.0" => "0",
                                               "host" => "XXXXXX",
                                           "@version" => "1",
                  "SNMPv2-SMI::snmpModules.1.1.4.1.0" => "FSC-SERVERCONTROL2-MIB::sc2TrapTest",
                                            "message" => .........

The SNMPv2-SMI::snmpModules.1.1.4.3.0 and SNMPv2-SMI::snmpModules.1.1.4.1.0 doesn't seem to be correct, as when I log with snmptrapd it is called:

2017-06-22 10:15:52 SNMPv: 1 Host: XXXXXX [UDP: [XXXXXX]:60992->[XXXXX]:162]:DISMAN-EXPRESSION-MIB::sysUpTimeInstance = Timeticks: (4216045) 11:42:40.45 SNMPv2-MIB::snmpTrapOID.0 = OID: FSC-SERVERCONTROL2-MIB::sc2TrapTest FSC-SERVERCONTROL2-MIB::sc2TrapInfoServerName.0 = STRING: "XXXXXXX" FSC-SERVERCONTROL2-MIB::sc2TrapInfoTime.0 = INTEGER: 0 SNMPv2-MIB::snmpTrapEnterprise.0 = OID: FSC-SERVERCONTROL2-MIB::sc2Notifications

Anybody know to fix this?

MarcusCaepio avatar Jun 22 '17 12:06 MarcusCaepio