SNMP Trap details in email/action profile

[ckratsch]

We've got an SNMP Trap test configured to catch traps about port violations on switches, where a device with a MAC address not in a whitelist connects to a switch port, the trap sends out and triggers our test. This much works.

However, we'd like the email that the test sends as part of its action profile to include the MAC address of the errant device. My network admin reports that the MAC shows up in syslog on the device; how can I get it from the trap?

[KS-Soft Europe]

You may include %TrapAllValues% or %TrapAllValues_NameShort% variable into e-mail profile. It will contain all variables, received within Trap message.
Please check for details at:
http://www.ks-soft.net/hostmon.eng/mfra ... #trapmacro

[KS-Soft]

If you want to show all variables received with Trap message, use macros like
%TrapAllValues%
%TrapAllValues_Name%
%TrapAllValues_NameShort%

%TrapAllValues%
This macro returns information about ALL variables received within Trap message (%TrapAllValues% returns "oid=value" line(s); if there is more than 1 variable in SNMP Trap message, lines will be separated by #13#10 characters).
Note: %MibOid%, %MibName%, %MibType%, %MibValue% variables provide the information about specific OID variable (if you have set "Message contains OID" option of the test filter) or the information about 1st variable within SNMP Trap packet.

Regards
Alex

[ckratsch]

Thanks, I figured as much. Looks like what we want to display is not included in the trap (yet).