SNMP Trap: Security Updates

A trap is generated when security updates are available.

Identification

  • The originating IP / hostname is used to identify the system generating the traps
  • The NMS is responsible for associating traps with each managed system, along with clearing of alarms and escalation to the relevant system operator
  • The trap OID is generic for various SNMP events monitored by the system
  • The SNMP system name is included as part of the variable binding to assist identification:
  • .iso.org.dod.internet.mgmt.mib-2.system.sysName.0 = standalone

Trap OID

.iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotifications.mteTriggerFired

Variable Bindings - Security updates availabe.

  • .iso.org.dod.internet.mgmt.mib-2.system.sysUpTime.0 = 2 minutes (12065)
  • snmpTrapOID = mteTriggerFired
  • .iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotificationObjects.mteHotTrigger.0 = ‘WARNING: Security Updates available’
  • .iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotificationObjects.mteHotValue.0 = 1
  • .iso.org.dod.internet.mgmt.mib-2.system.sysName.0 = standalone