Minor updates to SNMP Messages in NetBeez BeezKeeper

At NetBeez, we believe in continuous improvement to provide our users with the best experience. To that end, we are introducing some minor changes to the SNMP (Simple Network Management Protocol) values reported by our system.

What’s Changing?

The MIB schema will remain exactly the same, but some of the formatting within the fields reported is going to change. These modifications are designed to make the messages more meaningful and user-friendly. The fields may seem cryptic but you can use the MIB schema as a reference.

Details of Changes

1. Incident Messages (v1 and v2c):

Before: Incident messages used to have a string format that may not have been very descriptive.

v1 before example

Aug  9 09:22:31 dev-build snmptrapd[1640540]: 2023-08-09 09:22:31 localhost [127.0.0.1] (via UDP: [172.30.10.10]:50776->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug  9 09:22:31 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.5 Enterprise Specific Trap (1) Uptime: 9:20:35.58
Aug  9 09:22:31 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.4.1.1.1.1 = STRING: "3472_1691587351014"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.2 = INTEGER: 3472
#011iso.3.6.1.4.1.44523.1.4.1.1.1.3 = STRING: "something bad happened :("
#011iso.3.6.1.4.1.44523.1.4.1.1.1.4 = STRING: "1691587351014"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.5 = STRING: "NbTarget"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.6 = INTEGER: 5
#011iso.3.6.1.4.1.44523.1.4.1.1.1.8 = STRING: "INCIDENT_OPEN"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.7 = STRING: "Local Gateway"

v2c before example

Aug 17 21:18:02 dev-build snmptrapd[1640540]: 2023-08-17 21:18:02 <UNKNOWN> [UDP: [172.30.10.10]:61823->[172.29.0.13]:162]:
Aug 17 21:18:02 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (39259) 0:06:32.59
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.5.1
#011iso.3.6.1.4.1.44523.1.4.1.1.1.1 = STRING: "6754_1692321481813"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.2 = INTEGER: 6754
#011iso.3.6.1.4.1.44523.1.4.1.1.1.3 = STRING: "something bad happened :("
#011iso.3.6.1.4.1.44523.1.4.1.1.1.4 = STRING: "1692321481813"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.5 = STRING: "Agent"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.6 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.4.1.1.1.8 = STRING: "INCIDENT_OPEN"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.7 = STRING: "dev-testing"

After: We’ve enhanced the incident messages to provide more detailed information. Readable date/times have been added to increase clarity.

v1 after example

Aug  9 09:23:00 dev-build snmptrapd[1640540]: 2023-08-09 09:23:00 192.168.86.49(via UDP: [172.30.10.10]:54634->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug  9 09:23:00 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523 Enterprise Specific Trap (1) Uptime: 9:21:43.46
Aug  9 09:23:00 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.4.1.1.1.1 = STRING: "3473-1691587380351"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.2 = INTEGER: 3473
#011iso.3.6.1.4.1.44523.1.4.1.1.1.3 = STRING: "1 out of 2 (100%) Ping tests have issues."
#011iso.3.6.1.4.1.44523.1.4.1.1.1.4 = STRING: "2023-08-09 09:23:00 -0400"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.5 = STRING: "NbTarget"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.6 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.4.1.1.1.7 = STRING: "Google Mail"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.8 = STRING: "INCIDENT_OPEN"

v2c after example

Aug 17 21:10:32 dev-build snmptrapd[1640540]: 2023-08-17 21:10:32 <UNKNOWN> [UDP: [172.30.10.10]:64070->[172.29.0.13]:162]:
Aug 17 21:10:32 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (1351465) 3:45:14.65
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.5.1
#011iso.3.6.1.4.1.44523.1.4.1.1.1.1 = STRING: "6753-1692321032346"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.2 = INTEGER: 6753
#011iso.3.6.1.4.1.44523.1.4.1.1.1.3 = STRING: "4 out of 4 (100%)Ping tests have issues."
#011iso.3.6.1.4.1.44523.1.4.1.1.1.4 = STRING: "2023-08-17 21:10:32 -0400"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.5 = STRING: "Agent"
#011iso.3.6.1.4.1.44523.1.4.1.1.1.6 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.4.1.1.1.7 = STRING: "dev-testing"#011iso.3.6.1.4.1.44523.1.4.1.1.1.8 = STRING: "INCIDENT_OPEN"

2. Test Alerts (v1 and v2c):

Before: Test alert timestamps were presented with numeric values.

v1 before example

Aug 12 15:39:54 dev-build snmptrapd[1640540]: 2023-08-12 15:39:54 localhost [127.0.0.1] (via UDP: [172.30.10.10]:64146->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug 12 15:39:54 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.0 Enterprise Specific Trap (2) Uptime: 0:05:36.52
Aug 12 15:39:54 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.1.2.1.1.1 = INTEGER: 42
#011iso.3.6.1.4.1.44523.1.1.2.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.4 = INTEGER: 6
#011iso.3.6.1.4.1.44523.1.1.2.1.1.3 = INTEGER: 6
#011iso.3.6.1.4.1.44523.1.1.2.1.1.5 = STRING: "1691869193815"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.6 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.7 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.8 = STRING: "_gateway_"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.9 = STRING: "Alert cleared"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.10 = STRING: "Local Gateway"

v2c before example

Aug 17 21:13:10 dev-build snmptrapd[1640540]: 2023-08-17 21:13:10 <UNKNOWN> [UDP: [172.30.10.10]:61823->[172.29.0.13]:162]:
Aug 17 21:13:10 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (10094) 0:01:40.94
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.0.2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.1 = INTEGER: 30
#011iso.3.6.1.4.1.44523.1.1.2.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.4 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.3 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.5 = STRING: "1692321189153"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.6 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.7 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.8 = STRING: "drive.google.com"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.9 = STRING: "Fake error"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.10 = STRING: "Google Drive"

After: The updated test alerts now include a timestamp and more human-readable information.

v1 after example

Aug 16 11:31:55 dev-build snmptrapd[1640540]: 2023-08-16 11:31:55 192.168.86.49(via UDP: [172.30.10.10]:63068->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug 16 11:31:55 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523 Enterprise Specific Trap (2) Uptime: 3 days, 22:22:31.41
Aug 16 11:31:55 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.1.2.1.1.1 = INTEGER: 37959
#011iso.3.6.1.4.1.44523.1.1.2.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.4 = INTEGER: 37955
#011iso.3.6.1.4.1.44523.1.1.2.1.1.3 = INTEGER: 6
#011iso.3.6.1.4.1.44523.1.1.2.1.1.5 = STRING: "2023-08-16 11:31:53 -0400"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.6 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.7 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.8 = STRING: "_gateway_"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.9 = STRING: "Alert cleared"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.10 = STRING: "Local Gateway"

v2c after example

Aug 17 21:13:10 dev-build snmptrapd[1640540]: 2023-08-17 21:13:10 <UNKNOWN> [UDP: [172.30.10.10]:56724->[172.29.0.13]:162]:
Aug 17 21:13:10 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (1367234) 3:47:52.34
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.0.2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.1 = INTEGER: 39729
#011iso.3.6.1.4.1.44523.1.1.2.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.4 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.3 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.2.1.1.5 = STRING: "2023-08-17 21:13:09 -0400"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.6 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.7 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.2.1.1.8 = STRING: "drive.google.com"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.9 = STRING: "Fake error"
#011iso.3.6.1.4.1.44523.1.1.2.1.1.10 = STRING: "Google Drive"

3. Agent Device Alerts (v1 and v2c):

Before: Device alerts contained integer and string values without specific timestamps.

v1 before example

Aug  9 00:02:45 dev-build snmptrapd[1640540]: 2023-08-09 00:02:45 localhost [127.0.0.1] (via UDP: [172.30.10.10]:50776->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug  9 00:02:45 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.0 Enterprise Specific Trap (1) Uptime: 0:00:50.18
Aug  9 00:02:45 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.1.1.1.1.1 = INTEGER: 12774
#011iso.3.6.1.4.1.44523.1.1.1.1.1.3 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.8 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.4 = STRING: "1691553764981"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.5 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.6 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.7 = STRING: "Agent Unreachable"

v2c before example

Aug 18 11:59:09 dev-build snmptrapd[1640540]: 2023-08-18 11:59:09 <UNKNOWN> [UDP: [172.30.10.10]:51706->[172.29.0.13]:162]:
Aug 18 11:59:09 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (271348) 0:45:13.48
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.0.1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.1 = INTEGER: 41526
#011iso.3.6.1.4.1.44523.1.1.1.1.1.3 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.8 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.4 = STRING: "1692374348097"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.5 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.6 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.7 = STRING: "Agent Unreachable"

After: We’ve introduced readable timestamps and changed the Enterprise Specific Trap number to 3 (for v1).

v1 after example

Aug  9 00:02:45 dev-build snmptrapd[1640540]: 2023-08-09 00:02:45 192.168.86.49(via UDP: [172.30.10.10]:50598->[172.29.0.13]:162) TRAP, SNMP v1, community public
Aug  9 00:02:45 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523 Enterprise Specific Trap (3) Uptime: 0:01:28.70
Aug  9 00:02:45 dev-build snmptrapd[1640540]: 
#011iso.3.6.1.4.1.44523.1.1.1.1.1.1 = INTEGER: 12774
#011iso.3.6.1.4.1.44523.1.1.1.1.1.3 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.8 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.4 = STRING: "2023-08-09 00:02:44 -0400"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.5 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.6 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.1.1.1.7 = STRING: "Agent Unreachable"

v2c after example

Aug 18 11:02:04 dev-build snmptrapd[1640540]: 2023-08-18 11:02:04 <UNKNOWN> [UDP: [172.30.10.10]:62334->[172.29.0.13]:162]:
Aug 18 11:02:04 dev-build snmptrapd[1640540]: iso.3.6.1.2.1.1.3.0 = Timeticks: (6340649) 17:36:46.49
#011iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.44523.1.0.1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.1 = INTEGER: 41288
#011iso.3.6.1.4.1.44523.1.1.1.1.1.3 = INTEGER: -1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.2 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.8 = INTEGER: 1
#011iso.3.6.1.4.1.44523.1.1.1.1.1.4 = STRING: "2023-08-18 11:02:04 -0400"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.5 = STRING: "dev-testing"
#011iso.3.6.1.4.1.44523.1.1.1.1.1.6 = INTEGER: 2
#011iso.3.6.1.4.1.44523.1.1.1.1.1.7 = STRING: "Agent Unreachable"

How This Impacts You

If you are utilizing SNMP for monitoring and managing devices within your network, these changes will provide you with more concise and meaningful information, aiding in faster decision-making and issue resolution.

We Want to Hear From You

If you are using SNMP with NetBeez, we’d love to hear how it is helping your day-to-day workflow. Your feedback is valuable to us and helps in shaping the tools that support your needs. Feel free to reach out and share your experience.

1 Like