Email notification of node/vs down

On the linux host (i.e. ssh into the F5, or go in via the console for bash shell command line access) and type

 

 

tcpdump -i 0.0 -p -w /var/tmp/snmp_traps.dump -s 3000 port 162

 

 

Then that sits in the background putting a copy of all the packets that match the filter 'port 162' into the file /var/tmp/snmp_traps.dump (The -w parameter) without putting the interface into promiscuous mode (-p, although it's a bit of a moot point with the way the F5 packet capture works) and is listening on interface 0.0 (Which on f5 is a special ALL interfaces pseudo device).

 

 

Once a trap has been sent, ctrl-c the tcpdump, and copy the file off to where there's a copy of wireshark (tcpdump could do this for you as well, but unless you're familiar with it I'd recommend wireshark) and load the dumpfile. Find the trap and have a look at the OID that it was sent with.

 

 

H