000011742 - Not able to receive snmp logs when NIC Trapd services have already been turned on

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000011742
Applies ToenVision 3.7.x, 4.0.x
You can see that the NIC TRAPD service is turned on, however you don't see any log entries from EnVision Event Viewer, LC shared memory block or IPDB lsnode folders.

Running the following command line from the LC shows no logs are being collected in the shared memory block.

e:\nic\%version%\%hostname%\bin\shmtest TRAPD

IssueTo collect SNMP messages from the manage monitored device (e.g: Symantec AV 10)
NIC Trapd Service
Symantec AntiVirus
CauseA typical cause is when the Microsoft SNMP TrapD Service is in a started status has occupied port 162.  In that case, the NIC trapd service will still be able to start, but will be listening on an alternate port number.
Resolution

Make sure the Microsoft SNMP service is turned off, then restart NIC trapd service for it to take effect.

Legacy Article IDa47757

Attachments

    Outcomes