• Big Sister as an SNMP trap source
• MIB

Big Sister as an SNMP trap source

Since version 0.38 Big Sister includes support
for sending SNMP traps.

Traps may be sent on the following occasions:

	- alarm raised by bb_event_generator
	- alarm cleared
	- reminder sent by bb_event_generator
	- alarm acknowledgement received
	- any service changes status (version >0.38)

Big Sister will (try) to act as an SNMP proxy,
the agent reported is usually the IP address of
the host associated with the service. If this
IP address is not determinable then the agent
is reported to be the system on which the SNMP
trap is generated.

MIB

Big Sister uses the following MIB:


BIGSISTER-MIB DEFINITIONS ::= BEGIN

IMPORTS
        enterprises
                FROM RFC1155-SMI

        TRAP-TYPE
                FROM RFC-1215

        OBJECT-TYPE
                FROM RFC-1212;


-- Graeffet Communications and Big Sister enterprise OID
graeff  	OBJECT IDENTIFIER ::= { enterprises 5281 }

bigsister	OBJECT IDENTIFIER ::= { graeff 1 }


-- object types used in Big Sister traps
-- note that Big Sister will always sort bindings
-- by object type, variables with lower object
-- type will always appear first in the bindings

bstrapinfo	OBJECT IDENTIFIER ::= { bigsister 1 }

bshost	OBJECT-TYPE
		SYNTAX		OCTET STRING
		ACCESS		not-accessible
		STATUS		mandatory
		DESCRIPTION
			"The name of the monitored host as
			 reported by the Big Sister agent"
		::= { bstrapinfo 1 }
			

bsservice OBJECT-TYPE
		SYNTAX		OCTET STRING
		ACCESS		not-accessible
		STATUS		mandatory
		DESCRIPTION
			"The name of the monitored service"
		::= { bstrapinfo 2 }

bsstatus OBJECT-TYPE
		SYNTAX		OCTET-STRING
		ACCESS		not-accessible
		STATUS		optional
		DESCRIPTION
			"The service's status code"
		::= { bstrapinfo 3 }

bscomment OBJECT-TYPE
		SYNTAX		OCTET-STRING
		ACCESS		not-accessible
		STATUS		optional
		DESCRIPTION
			"The text reported by the Big Sister
			 agent associated with this event"
		::= { bstrapinfo 4 }

bsseverity OBJECT-TYPE
		SYNTAX		INTEGER (0..100)
		ACCESS		not-accessible
		STATUS		optional
		DESCRIPTION
			"This event's severity, 100 for
			 maximum severity"
		::= { bstrapinfo 5 }

bsackmode OBJECT-TYPE
		SYNTAX		OCTET-STRING
		ACCESS		not-accessible
		STATUS		optional
		DESCRIPTION
			"In alarm acknowledge events this represents
			 the type of acknowledgement"
		::= { bstrapinfo 6 }

bsackuser OBJECT-TYPE
		SYNTAX		OCTET-STRING
		ACCESS		not-accessible
		STATUS		optional
		DESCRIPTION
			"In alarm acknowledge events this represents
			 the name of the acknowledging user"
		::= { bstrapinfo 7 }

			
-- Trap types

bsstatuschange TRAP-TYPE
		ENTERPRISE	graeff
		VARIABLES
			{
			bshost,	bsservice,
			bsstatus, bscomment
			}
		DESCRIPTION
			"This trap will be generated on status changes
			 of any monitored service"
		::= 1

bsserviceup TRAP-TYPE
		ENTERPRISE	graeff
		VARIABLES
			{
			bshost,	bsservice,
			bsstatus, bscomment,
			bsseverity
			}
		DESCRIPTION
			"This trap will be generated by bb_event_generator
			 whenever a service up alarm is raised"
		::= 2

bsservicedown TRAP-TYPE
		ENTERPRISE	graeff
		VARIABLES
			{
			bshost,	bsservice,
			bsstatus, bscomment,
			bsseverity
			}
		DESCRIPTION
			"This trap will be generated by bb_event_generator
			 whenever a service down alarm is raised"
		::= 3

bsalarmack TRAP-TYPE
		ENTERPRISE	graeff
		VARIABLES
			{
			bshost,	bsservice,
			bscomment,
			bsackmode, bsackuser
			}
		DESCRIPTION
			"This trap will be generated by bb_event_generator
			 whenever an alarm acknowledgement is seen"
		::= 4

bsremind TRAP-TYPE
		ENTERPRISE	graeff
		VARIABLES
			{
			bshost,	bsservice,
			bsstatus, bscomment,
			bsseverity
			}
		DESCRIPTION
			"This trap will be generated by bb_event_generator
			 whenever a repeated alarm - aka reminder - is raised"
		::= 5

END