help with writing a trap filter

Hi,

What would the correct trap filter rule be to match this trap? ( haven't been able to get it to work nor can I figure out what I am doing wrong).

I have tried: CISCO-SYSLOG-MIB:clogMessageGenerated is equal to * plus many other iterations of this.

thanks,

michael

10/1/2009 2:12 PM 172.16.8.178:172.16.8.178 CISCO-SYSLOG-MIB:clogMessageGenerated SNMP Trap

Received Time:10/1/2009 2:12:10 PM

Source:172.16.8.178(172.16.8.178)

Community:UM1X162

Variable Bindings

sysUpTime:= 21 hours 57 minutes 13.43 seconds (7903343)

snmpTrapOID:= CISCO-SYSLOG-MIB:clogMessageGenerated (1.3.6.1.4.1.9.9.41.2.0.1)

clogHistFacility.63:= STACKMGR

clogHistSeverity.63:= 5

clogHistMsgName.63:= SWITCH_ADDED

clogHistMsgText.63:= Switch 2 has been ADDED to the stack

clogHistTimestamp.63:= 7903342

Find more posts tagged with

What are you seeing? Does the rule not catch this trap at all? Or does it catch too many other traps? Can you provide more context ?