Dalam NMS (Network Monitoring System) metode untuk menerima SNMP Traps adalah metode yang terbalik dengan query SNMP-Enabled ke device tujuan. Dalam kasus SNMP Traps, informasi di SNMP-Enabled device dikirim dan dianalisa di server NMS (Dalam tutorial ini NMS yang dimaksud ialah Zabbix). Biasanya Traps dikirim ke port 162 di NMS.
Notes
- Tutorial ini dengan asumsi bahwa zabbix sudah di install di tempat Anda. Untuk tutorial Zabbix bisa liat di link ini Installasi Zabbix di CentOS.
- Selinux disabled.
Dibawah ini langkah-langkah untuk konfigurasinya.
1. Apabila CentOS Anda Mengaktifkan IPTables, Allow Port UDP 162
[root@localhost ~]# vi /etc/sysconfig/iptables:
###tambahkan line dibawah ini
-A INPUT -p udp -m udp --dport 162 -j ACCEPT
###Lalu restart service iptables
[root@localhost ~]# /etc/init.d/iptables restart
2. Setting Zabbix Agar Dapat Menerima SNMP Traps Menggunakan zabbix_trap_receiver.pl
[root@localhost ~]# yum install -y net-snmp-utils net-snmp-perl
Download zabbix_trap_receiver.pl di URL ini -> https://github.com/miraclelinux/MIRACLE-ZBX-2.0.3-NoSQL/blob/master/misc/snmptrap/zabbix_trap_receiver.pl
Isi dari script perl tersebut kurang lebih seperti dibawah ini.
[root@localhost ~]# cat /usr/bin/zabbix_trap_receiver.pl
#!/usr/bin/perl
#
# Zabbix
# Copyright (C) 2001-2014 Zabbix SIA
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
#
#########################################
#### ABOUT ZABBIX SNMP TRAP RECEIVER ####
#########################################
# This is an embedded perl SNMP trapper receiver designed for sending data to the server.
# The receiver will pass the received SNMP traps to Zabbix server or proxy running on the
# same machine. Please configure the server/proxy accordingly.
#
# Read more about using embedded perl with Net-SNMP:
# http://net-snmp.sourceforge.net/wiki/index.php/Tut:Extending_snmpd_using_perl
#################################################
#### ZABBIX SNMP TRAP RECEIVER CONFIGURATION ####
#################################################
### Option: SNMPTrapperFile
# Temporary file used for passing data to the server (or proxy). Must be the same
# as in the server (or proxy) configuration file.
#
# Mandatory: yes
# Default:
$SNMPTrapperFile = '/tmp/zabbix_traps.tmp';
### Option: DateTimeFormat
# The date time format in strftime() format. Please make sure to have a corresponding
# log time format for the SNMP trap items.
#
# Mandatory: yes
# Default:
$DateTimeFormat = '%H:%M:%S %Y/%m/%d';
###################################
#### ZABBIX SNMP TRAP RECEIVER ####
###################################
use Fcntl qw(O_WRONLY O_APPEND O_CREAT);
use POSIX qw(strftime);
sub zabbix_receiver
{
my (%pdu_info) = %{$_[0]};
my (@varbinds) = @{$_[1]};
# open the output file
unless (sysopen(OUTPUT_FILE, $SNMPTrapperFile, O_WRONLY|O_APPEND|O_CREAT, 0666))
{
print STDERR "Cannot open [$SNMPTrapperFile]: $!\n";
return NETSNMPTRAPD_HANDLER_FAIL;
}
# get the host name
my $hostname = $pdu_info{'receivedfrom'} || 'unknown';
if ($hostname ne 'unknown') {
$hostname =~ /\[(.*?)\].*/; # format: "UDP: [127.0.0.1]:41070->[127.0.0.1]"
$hostname = $1 || 'unknown';
}
# print trap header
# timestamp must be placed at the beggining of the first line (can be omitted)
# the first line must include the header "ZBXTRAP [IP/DNS address] "
# * IP/DNS address is the used to find the corresponding SNMP trap items
# * this header will be cut during processing (will not appear in the item value)
printf OUTPUT_FILE "%s ZBXTRAP %s\n", strftime($DateTimeFormat, localtime), $hostname;
# print the PDU info
print OUTPUT_FILE "PDU INFO:\n";
foreach my $key(keys(%pdu_info))
{
printf OUTPUT_FILE " %-30s %s\n", $key, $pdu_info{$key};
}
# print the variable bindings:
print OUTPUT_FILE "VARBINDS:\n";
foreach my $x (@varbinds)
{
printf OUTPUT_FILE " %-30s type=%-2d value=%s\n", $x->[0], $x->[2], $x->[1];
}
close (OUTPUT_FILE);
return NETSNMPTRAPD_HANDLER_OK;
}
NetSNMP::TrapReceiver::register("all", \&zabbix_receiver) or
die "failed to register Zabbix SNMP trap receiver\n";
print STDOUT "Loaded Zabbix SNMP trap receiver\n";
3. Copy Script Perl tersebut ke /usr/bin
[root@localhost ~]# cp zabbix_trap_receiver.pl /usr/bin
[root@localhost ~]# chmod +x /usr/bin/zabbix_trap_receiver.pl
4. Update snmptrad.conf
[root@localhost ~]# vi /etc/snmp/snmptrapd.conf
### tambahkan line dibawah ini
authCommunity execute public
perl do "/usr/bin/zabbix_trap_receiver.pl";
5. Enable Zabbix SNMP Trapper
[root@localhost ~]# vi /etc/zabbix/zabbix_server.conf
### Enable SNMP Trap di Zabbix Server
StartSNMPTrapper=1
### Konfigurasi SNMPTrapperFile harus sama dengan yang ada di zabbix_trap_receiver.pl file.
SNMPTrapperFile=/tmp/zabbix_traps.tmp
Setelah selesai save & quit, lalu restart zabbix server services.
[root@localhost ~]# /etc/init.d/zabbix_server restart
Notes :
- Untuk cek SNMPTrapperFile di zabbix_trap_receiver.pl dapat gunakan command ini, pastikan outputnya sama dengan di zabbix_server.conf
[root@localhost ~]# cat /usr/bin/zabbix_trap_receiver.pl | grep \$SNMPTrapperFile\ =
$SNMPTrapperFile = '/tmp/zabbix_traps.tmp';
- [root@localhost ~]# cat /usr/local/etc/zabbix_server.conf | grep SNMPTrapperFile
- SNMPTrapperFile=/tmp/zabbix_traps.tmp
6. Setting snmptrad Agar Start on Reboot
[root@localhost ~]# chkconfig snmptrapd on
[root@localhost ~]# /etc/init.d/snmptrapd restart
7. Enable SNMP Trap Transmission File Rotation
[root@localhost ~]# mkdir -p /var/log/zabbix_traps_archive
[root@localhost ~]# chmod 777 /var/log/zabbix_traps_archive
Lalu tambahkan script dibawah ini untuk rotasi log di file /etc/logrotate.d/zabbix_traps.
/tmp/zabbix_traps.tmp {
weekly
size 10M
compress
compresscmd /usr/bin/bzip2
compressoptions -9
notifempty
dateext
dateformat -%Y%m%d
missingok
olddir /var/log/zabbix_traps_archive
maxage 365
rotate 10
}
8. Testing Send Traps
Langkah terakhir ialah send traps ke NMS atau localhost untuk memastikan bahwa NMS Zabbix yang kita configure dapat menerima traps dari device lain.
Gunakan Command Dibawah ini Untuk Sendtraps:
[root@localhost ~]# snmptrap -v 1 -c public 127.0.0.1 '.1.3.6.1.6.3.1.1.5.4' '0.0.0.0' 6 33 '55' \ .1.3.6.1.6.3.1.1.5.4 s "eth0"
Lalu cek di file /tmp/zabbix_trapper.tmp
[root@localhost ~]# cat /tmp/zabbix_traps.tmp
PDU INFO:
notificationtype TRAP
version 0
receivedfrom UDP: [127.0.0.1]:33161->[127.0.0.1]
errorstatus 0
messageid 0
community public
transactionid 1
errorindex 0
requestid 0
VARBINDS:
iso.3.6.1.2.1.1.3.0 type=67 value=Timeticks: (55) 0:00:00.55
iso.3.6.1.6.3.1.1.4.1.0 type=6 value=OID: iso.3.6.1.6.3.1.1.5.4.0.33
iso.3.6.1.6.3.1.1.5.4 type=4 value=STRING: "eth0"
iso.3.6.1.6.3.18.1.4.0 type=4 value=STRING: "public"
iso.3.6.1.6.3.1.1.4.3.0 type=6 value=OID: iso.3.6.1.6.3.1.1.5.4
Done...............
