SNMP Support
The NetProfiler sends SNMP Version 1 or Version 3 traps, if enabled. The Definitions > Notifications page specifies two IP addresses and port numbers for the trap destinations.
Each trap is identified by an enterprise-specific trap number. This is an INTEGER, provided as the last part of the trap Object ID .1.3.6.1.4.1.7054.70.0. n, where n is the trap number as follows:
|
Enterprise-specific Trap Number |
||
Type of Policy that Triggered the Alert |
Low Alert |
Medium Alert |
High Alert |
Denial of Service/Bandwidth Surge |
11 |
12 |
13 |
Worm |
15 |
16 |
17 |
Host Scan |
19 |
20 |
21 |
Port Scan |
23 |
24 |
25 |
Suspicious Connection |
27 |
28 |
29 |
New Host |
31 |
32 |
33 |
New Server Port |
47 |
48 |
49 |
User-defined policy |
55 |
56 |
57 |
Data Source Problem |
- |
- |
65 |
Application Availability |
79 |
80 |
81 |
Link Congestion |
83 |
84 |
85 |
Link Outage |
87 |
88 |
89 |
Application Performance |
91 |
92 |
93 |
Service Policy |
95 |
- |
97 |
Storage Problem |
- |
- |
105 |
Module Problem |
- |
- |
106 |
Hardware Problem |
- |
- |
107 |
Test |
- |
- |
99 |
Data Source Problem, Storage Problem, Module Problem and Hardware Problem events always generate high level alert traps.
Each NetProfiler trap message includes variables that provide event information to the trap receiver.