MID Server SNMP Trap error

[rodrigofuturo]

I'm trying to connect couple of monitoring tools through SNMP traps with ServiceNow event management module through the MID Server. If i manually force a SNMP trap, using for example TrapGen tool, it all works fine, but if the tool try to send the information i get error.

one thing is weird, on the monitor tool, after setting ip the SNMP server destination, i send a test and the MID server receives it ok and dispatch it to ServiceNow console with no issues. However, if i force a monitor to fail to trigger an SNMP message, i got the below error at the MID Server event log:

Successful notification test from tool after SNMP server setup

03/24/15 12:20:42 (989) DefaultUDPTransportMapping_0.0.0.0/1163 DEBUG: Event   sent to https://thenewdellpov.service-now.com/api/now/table/em_event , response code: 201

Problem with monitor triggering the event:

03/24/15 12:36:56 (632) DefaultUDPTransportMapping_0.0.0.0/1163 SEVERE *** ERROR *** Failed to create the trap Instance event, trap: CommandResponderEvent[securityModel=1, securityLevel=1, maxSizeResponsePDU=65535, pduHandle=PduHandle[0], stateReference=StateReference[msgID=0,pduHandle=PduHandle[0],securityEngineID=null,securityModel=null,securityName=public,securityLevel=1,contextEngineID=null,contextName=null,retryMsgIDs=null], pdu=V1TRAP[reqestID=0,timestamp=6 days, 8:49:45.00,enterprise=1.3.6.1.4.1.1031.5,genericTrap=6,specificTrap=3, VBS[1.3.6.1.4.1.1031.5.1.1.0 = PORTAL-DELL; 1.3.6.1.4.1.1031.5.1.2.0 = PORTAL-DELL/Infrastructure/SNMP_Test; 1.3.6.1.4.1.1031.5.1.3.0 = u1vmprdemsim0.aus.amer.dell.com; 1.3.6.1.4.1.1031.5.1.4.0 = Ping; 1.3.6.1.4.1.1031.5.1.5.0 = ; 1.3.6.1.4.1.1031.5.1.6.0 = Application Collection Status; 1.3.6.1.4.1.1031.5.1.7.0 = Failed to ping unknown host u1vmprdemsim0.aus.amer.dell.com: (Ping Interface Paramlet); 1.3.6.1.4.1.1031.5.1.8.0 = 3; 1.3.6.1.4.1.1031.5.1.9.0 = Tue, 24 Mar 2015 17:36:56 +0000; 1.3.6.1.4.1.1031.5.1.10.0 = U4VMBMCRSM2; 1.3.6.1.4.1.1031.5.1.13.0 = PING_SNMP_Test; 1.3.6.1.4.1.1031.5.1.14.0 = 4; 1.3.6.1.4.1.1031.5.1.15.0 = 3; 1.3.6.1.4.1.1031.5.1.17.0 = 0.0; 1.3.6.1.4.1.1031.5.1.18.0 = 1427218616070; 1.3.6.1.4.1.1031.5.1.19.0 = ; 1.3.6.1.4.1.1031.5.1.21.0 = 2; 1.3.6.1.4.1.1031.5.1.22.0 = ; 1.3.6.1.4.1.1031.5.1.23.0 = New Violation: Element PING_SNMP_Test now CRITICAL]], messageProcessingModel=0, securityName=public, processed=false, peerAddress=10.160.139.11/63622, transportMapping=org.snmp4j.transport.DefaultUdpTransportMapping@5adf20ae, tmStateReference=null]

java.lang.IllegalArgumentException: Parameter oid may not be nil!

      at com.service_now.mid.extension.trap.OIDNeebula.init(OIDNeebula.java:30)

      at com.service_now.mid.probe.snmp.OID.<init>(OID.java:44)

      at com.service_now.mid.extension.trap.OIDNeebula.<init>(OIDNeebula.java:24)

      at com.service_now.mid.extension.trap.SNMPTrapListener.getVariables(SNMPTrapListener.java:227)

      at com.service_now.mid.extension.trap.SNMPTrapListener.createTrapEvent(SNMPTrapListener.java:184)

      at com.service_now.mid.extension.trap.SNMPTrapListener.access$000(SNMPTrapListener.java:40)

      at com.service_now.mid.extension.trap.SNMPTrapListener$1.processPdu(SNMPTrapListener.java:97)

      at org.snmp4j.Snmp.fireProcessPdu(Snmp.java:1438)

      at org.snmp4j.Snmp.processPdu(Snmp.java:1215)

      at org.snmp4j.MessageDispatcherImpl.fireProcessPdu(MessageDispatcherImpl.java:670)

      at org.snmp4j.MessageDispatcherImpl.dispatchMessage(MessageDispatcherImpl.java:297)

      at org.snmp4j.MessageDispatcherImpl.processMessage(MessageDispatcherImpl.java:368)

      at org.snmp4j.MessageDispatcherImpl.processMessage(MessageDispatcherImpl.java:328)

      at org.snmp4j.transport.AbstractTransportMapping.fireProcessMessage(AbstractTransportMapping.java:76)

      at org.snmp4j.transport.DefaultUdpTransportMapping$ListenThread.run(DefaultUdpTransportMapping.java:414)

      at java.lang.Thread.run(Unknown Source)

Anybody have any idea?

[alexandrabellog]

Hi Rodrigo,

a quick question:

When manually triggering the message, are you sending all the required data? Note that in the error message you have posted it shows: java.lang.IllegalArgumentException: Parameter oid may not be nil!

It would seem that you may be missing the OID value. Can you confirm that?

Kind regards,

Alexandra

[rodrigofuturo]

Hi, mauall generated traps you're sending only a few OID's with their values, so nothing is wrong there, but the automated event sends ALL OID's and yes, some of them are blank, check the highlighted OID's.

8:49:45.00,enterprise=1.3.6.1.4.1.1031.5,genericTrap=6,specificTrap=3, VBS[1.3.6.1.4.1.1031.5.1.1.0 = PORTAL-DELL; 1.3.6.1.4.1.1031.5.1.2.0 = PORTAL-DELL/Infrastructure/SNMP_Test; 1.3.6.1.4.1.1031.5.1.3.0 = u1vmprdemsim0.aus.amer.dell.com; 1.3.6.1.4.1.1031.5.1.4.0 = Ping; 1.3.6.1.4.1.1031.5.1.5.0 = ; 1.3.6.1.4.1.1031.5.1.6.0 = Application Collection Status; 1.3.6.1.4.1.1031.5.1.7.0 = Failed to ping unknown host u1vmprdemsim0.aus.amer.dell.com: (Ping Interface Paramlet); 1.3.6.1.4.1.1031.5.1.8.0 = 3; 1.3.6.1.4.1.1031.5.1.9.0 = Tue, 24 Mar 2015 17:36:56 +0000; 1.3.6.1.4.1.1031.5.1.10.0 = U4VMBMCRSM2; 1.3.6.1.4.1.1031.5.1.13.0 = PING_SNMP_Test; 1.3.6.1.4.1.1031.5.1.14.0 = 4; 1.3.6.1.4.1.1031.5.1.15.0 = 3; 1.3.6.1.4.1.1031.5.1.17.0 = 0.0; 1.3.6.1.4.1.1031.5.1.18.0 = 1427218616070; 1.3.6.1.4.1.1031.5.1.19.0 = ; 1.3.6.1.4.1.1031.5.1.21.0 = 2; 1.3.6.1.4.1.1031.5.1.22.0 = ; 1.3.6.1.4.1.1031.5.1.23.0 = New Violation: Element PING_SNMP_Test now CRITICAL]], messageProcessingModel=0, securityName=public, processed=false, peerAddress=10.160.139.11/63622, transportMapping=org.snmp4j.transport.DefaultUdpTransportMapping@5adf20ae, tmStateReference=null]

java.lang.IllegalArgumentException: Parameter oid may not be nil!

Hence, i believe that in some level inside the MID Server Trap extension code, there might have some Conditional test where all incoming OID's are tested for NULL values and if any is, it Will cause that SEVERE error in the log file.

[juancarlos_muro]

Hi Rodrigo.

This is a bug. I have been able to reproduce "simulating" one of those empty values.

Those variable bindings with the empty value cause the IllegalArgumentException.

Ideally, SNMP agents should not send empty values. Can I ask you what SNMP you are using?

PRB627669 has been opened for that.

Feel free to open an Incident with Support so that you gain visibility on PRB627669.

Cheers,

Carlos

[tony_barratt]

Hi Rodrigo,

Seems like you have had a good response to your inquiry.

Consider marking the question as answered, or marking replies as helpful as appropriate.

Or ask further questions or tell us what solution you found.

This will add value to Community Members reading this thread.

Best Regards

Tony