Submit a ticketCall us

Webinar: Web Help Desk for HR, Facilities and Accounting Departments
This webinar will focus on use cases for HR, Facilities and Accounting.

Having a unified ticketing and asset management system for all the departments in your company can provide end-users with a seamless experience and make things easier for your IT team. Yet, with different business tasks and objectives, many departments don’t fully understand the capabilities of Web Help Desk and how the software can be customized for effective use in their departments.
Register Now.

Home > Success Center > Network Performance Monitor (NPM) > ERROR: TrapService.TrapService – Bad trap packet received from Node with IP xxx.xxx.x.x. Error description – Unknown user and engine. Packet discarded.

ERROR: TrapService.TrapService – Bad trap packet received from Node with IP xxx.xxx.x.x. Error description – Unknown user and engine. Packet discarded.

 

Created by Malik Haider, last modified by MindTouch on Jun 23, 2016

Views: 296 Votes: 3 Revisions: 16

Overview

The following error message appears within the Traps Service:

Trap Service Failed to receive Traps

Traps Viewer will not show the Traps from the Node

ERROR TrapService.TrapService – Bad trap packet received from Node with IP xxx.xxx.x.x. Error description – Unknown user and engine. Packet discarded

We receive such events when the node is sending the traps to Orion. The SNMP v3 trap packet is verified against the SNMP authentication for the node in order to translate the encrypted trap information.

Environment

NPM 10.6 or later

Cause

The SNMP information sent by the Node within Trap does not match with the Node in the Orion database.

Resolution

​Make sure that the node is sending traps with the same SNMP user account that is used in Orion when adding the node. The trap packet will only be recognized if it sent with the correct SNMP user account.

  1. Edit the node in Orion and note down the SNMPv3 username. Orion WebConsole > Go to the Node > Edit Node. 

 

snmpv3.PNG

 

Note: The username is also shown in the nodes table in the Orion database.

 

  1. Run Wireshark on the Orion server to filter the traffic for traps sent by the node.
  2. The username that was previously should match the trap is received.
    The following screenshot show that the trap that was sent by node xxx.xxx.x.x caused the error.

 

Start > All Programs > SolarWinds Orion > Advanced Feature > Database Manager> Add Default Server > 

Right Click on the Orion DB > New Query > Type the below Query 

SELECT * FROM  [dbo].[Nodes] where ip_address = 'Type_your_Node_IP_here'  

Execute Query 

DBNode.JPG

 

You will need to Run the Wireshark on Orion server  filter the traffic for Traps sent by the Node and verify the User name should be matching when received the Trap

In below packet capture example where Trap sent by the  Node 192.168.1.1  user ABC which caused the above Event that should correct in the Node .

 

 

user.JPG

 

Following example included where the correct SNMP user is been sent by the node within Trap information

 

correct user.JPG

 

For more details please see Thwack Post

 

 

 

 

 

Last modified
22:16, 22 Jun 2016

Tags

Classifications

Public