BK

The format for a syslog packet is defined in RFC 3164 (and others), which includes several examples. community.roxen.com/.../rfc3164.html BK Nobody Special

I would guess that when you installed the Solarwinds Package, you did not install in Administrative mode. I have seen a simlar problem with Windows Terminal Service. If you did not enable Administrative Install Mode, Windows will redirect file saves intended for the c:\Windows\system32 directory to a system32 directory…

The answer would be yes. The RPC is trying to use your userid and password that you logged in with on A to authenticate on B that you are allowed to connect to the service. Try creating an identical userid on B with the same password as the user account on A you are logged in with. BK Nobody Special

Well, on the NetSNMP you would need to configure the community string the agent will respond to. As for the HPUX SNMP daemon, you probably need to disable it. Two services cannot listen on the same UDP Port. BK Nobody Special

You are probably getting stopped by DEP. (Data Execution Protection) SP1 for 2003 changed the default behavior. The simplist thing to do is put the DEP setting back like it was pre-SP1. Click right on My Computer, and bring up Properties Click on the Advanced Tab Click on the Performance Settings Button Click on the Data…

Orions macro processor is Case-Insensative, so it doesn't see the difference between MM and mm. For the Month try ${M} For the Minutes try ${MM} For the Hour try ${H} BK Nobody Special

OK, I think I know the answer to this one now. You have terminal services installed. When Terminal Services is installed on 2003, it is always in Application Mode. Terminal Service Administration mode was replace with Remote Deskop. Terminal Service will alter some key environmental variables to help protect the…

Hey Brian, Be patient. If you have a large Syslog table. Adding the FirstIP column may take a couple of hours. Yes hours. Not much that can be done around it, it is just a big SQL I/O opperation that only has to be done once. The Update to 7.8 will help this in the future. Earlier version of the Syslog Service may not have…

The new Syslog Services that comes with the Orion 7.7 will let you build alerts and actions which could page or email. BK Nobody Special

If you are polling the node CPU at a rate of 1 or 2 minutes, it grabs the 1 Minute. If you are polling at 3 or greater it grabs the 5 Minute. BK Nobody Special

My first guess at the problem would be the Counter32 rollover. Your standard MIB II Interface Counters are 32 bit, so after 4294967296 bytes, the counter rolls back to zero. That may sound big, but if you do the math, it means that a 70Mb/sec interface will roll the counter over in 8.1 minutes. A 200Mb/sec interface will…

I heard there was a problem with the PEGRP32C.OCX and the developers are working to track down the cause and fix. BK Nobody Special

I hate to differ with the Network Guru, but I don't think even Kiwi does this. What iceman is asking for is the Orion Syslog Service to spoof the IP address of the original message when forwarding. The Orion Syslog Service cannot spoof an IP address, but I don't see Kiwi doing that either. BK Nobody Special

HINT: HOW TO: Use Replication with SQL Server 2000 Desktop Engine (MSDE 2000) support.microsoft.com/default.aspx BK Nobody Special

The Syslog Services does not receive SNMP traps. Totally different format for the data and decoding. However, most vendors will send the same information in a syslog packet. For example, on a Cisco Device you can add the commands syslog trap debugging syslog x.x.x.x where x.x.x.x is the IP address of the Orion Syslog…

Turning off Huper-Threading will probably not help. You are fulling using the processor, it is just that the OS is dividing by 4 instead of 2 when reporting. If you are running less that the 7.8 build of Orion. I would suggest you upgrade. A few changes where made to the system manager so it could pull information directly…

The 7.2 Early Release has support for SNMPv2 only devices. BK Nobody Special

The LSASS problem is caused when the Administrative GUI is killed from the task manager instead of being closed normally. Apparently some cleanup deep within Windows is not taking place. Michael is right about it taking a fix from Microsoft to prevent this from happening, but for now, I would try to avoid killing the…

A -2 is Orion's internal way of storing No Response. BK Nobody Special

If you have an Opteron box you can sign up for the OS preview www.microsoft.com/.../default.mspx BK Nobody Special

You may want to check what account the SQL server is running under, and if that account has create access to the directory you are selecting. On the server that is running SQL, start by going to the Service under the control pannel. Find the instance of SQL you are connecting to and look at the Log In As column. This is…

Just checking to be sure here. The sample packet you gave will not match the pattern match you gave. In the sample packet, the src=10.98, but in your like pattern you say that you are wanting src=10.22. Have you tried *src=10.*dst_port=137* as your match pattern? BK Nobody Special

Yeah, The time of last data, and 5 minute averages are from the OLD-CISCO-INTERFACES-MIB MIB, which are not support by the CatOS software. BK Nobody Special

Is the 6905 running CATOS while the 2900 is running IOS? BK Nobody Special

The Host CPU poller will first try to poll the processor utilization using the Host Resource MIBs hrProcessorLoad (1.3.6.1.2.1.25.3.3.1.2) column. If the MIB is supported, then the column is read (one row for each reported CPU) and the values averaged. If hrProcessorLoad is not supported, then Net-SNMP MIB variable,…

OK based on your connection string, your SQL server is on a box called DATA. 1) from the command prompt, is DATA resolvable? (can you type ping DATA and it resolve) 2) if you can resolve DATA, can you ping it? 3) Is the SQL server on DATA the default instance or is it installed as a secondary instance. Like if it is the…

If you go look in the REGISTRY under HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Ping Sweep you will find the list of IP addresses that are preloaded into the combo box. You can then delete the ones you do not want. BK Nobody Special

I found this article at Microsoft which tells how to ENABLE DNS lookup for IIS. By "reversing the polarity" one could make sure the DNS is disabled support.microsoft.com/default.aspx Which comes with the following warning Warnings Enabling reverse DNS on your IIS server can affect the performance of your Web server and DNS…

The MIB-Database.exe just updates the Engineers Toolset. BK Nobody Special

iunderwo, You may want to check out the "Interact with Desktop" setting on the NPM Service! Go to Start, Programs, Administrative, Services Right click on the Solarwinds NPM Service and bring up properties Click on the Logon tab. Make sure the Allow Service to Interact with Desktop is UNCHECKED! If it is checked, uncheck…