I have configured snmptrapd to log the traps to log file. the traps received and logged ok based on the mib file definition.

there is only one problem.

the value of one of the variables seems to be truncated due to end of line or some special char.

linux is centos 6.2
snmp software versions:
net-snmp-5.5-27.el6.x86_64
net-snmp-libs-5.5-27.el6.x86_64
net-snmp-utils-5.5-27.el6.x86_64
net-snmp-perl-5.5-27.el6.x86_64


Trap definition from the MIB:

EVENT fredFault .1.3.6.1.4.1.1383.1008.0.50 "Status Events"
This trap is sent if a device is not reachable using IP ping
Variables:
1: alarmId
Syntax="OCTETSTR"
Descr="OMC unique alarm id"
2: deviceName
Syntax="OCTETSTR"
Descr="Name of device"
3: deviceType
Syntax="INTEGER"
Descr="Type of device such as WEB, VAD, etc."
4: severity
Syntax="INTEGER"
Descr="severity of trap"
5: timeStamp
Syntax="OCTETSTR"
Descr="time that the trap was sent. YYYYMMDDHHMMSS"
6: description
Syntax="OCTETSTR"
Descr="short description of trap."
7: text
Syntax="OCTETSTR"
Descr="full description of trap."




Below is the log from syslog file

##HOSTNAME## Hostname of the device sending the alarm
##IP## IP address of the device sending the alarm

May 6 03:13:12 nms snmptrapd[26523]: 2012-05-06 03:13:12 ##HOSTNAME## [##IP##] (via UDP: [##IP##]:45364->[10.102.4.10]) TRAP, SNMP v1, community public#012#011.1.3.6.1.4.1.1383.1008 Enterprise Specific Trap (50) Uptime: 205 days, 11:48:19.09#012#011.1.3.6.1.4.1.1383.1008.1.7.0 = STRING: "567349"#011.1.3.6.1.4.1.1383.1008.1.1.0 = STRING: "sgf.domain"#011.1.3.6.1.4.1.1383.1008.1.2.0 = STRING: "ASU"#011.1.3.6.1.4.1.1383.1008.1.3.0 = INTEGER: 4#011.1.3.6.1.4.1.1383.1008.1.4.0 = STRING: "20120426132231"#011.1.3.6.1.4.1.1383.1008.1.5.0 = STRING: "ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion message received for CIC:"#011.1.3.6.1.4.1.1383.1008.1.6.0 = STRING: "No Alarm is present in the Alarm Table for the given AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_ACTIVE No Alarm is present in the Alarm Table for the given AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_ACTIVE No Alarm is present in the Alarm Table for the given AlarmID - ID=5 SEVERITY=INFO STATUS=ALARM_"


Problem

the variable 6: description seems to be truncated, as follows:

- values that supposed to appear is

ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion message received for CIC: 29, DPC: 6-0-2)

- the value truncated and appeared at the log file

ASU EVENT: Alarm already raised For App ID 4 and Event ID 110 (Confusion message received for CIC

Read this carefully
(In other words, its supposed to be 'short'; use field 7 for 'full')

forget to mention that the traps i'm recieving are forwarded from another server.

what i have posted the value that supposed to appear in the main server who is initially receiving the traps.

the truncated message appears at the server that the traps are forwarded to. and it seems that the truncation occurs at the forwarder server.

#solved#

Please tell us how so that others may learn ...

It is not accually solved, there is no issue at all since i get the message already truncated from the forwarding snmptrap server.

so there is no problem