Table Of Contents

Supported Traps and Syslogs

Syslogs Supported By Cisco IOS and CATOS Devices

Syslogs Supported by Cisco IOX Devices

Traps Supported by Cisco Devices

Supported Traps and Syslogs

---

This appendix provides the list of Cisco traps and syslogs that are supported in Cisco ANA:

•Syslogs Supported By Cisco IOS and CATOS Devices

•Syslogs Supported by Cisco IOX Devices

•Traps Supported by Cisco Devices

---

Note If the source of the alarm is an interface with technology which is not supported by Cisco ANA, then the syslogs and traps will not be parsed and will be generated generically.

---

---

Note If the source of the alarm is an entity which is not modeled by Cisco ANA, for example, an unsupported module, then the syslogs and traps will not be parsed and will be generated generically.

---

The columns that are displayed in Table B-1, Table B-2 and Table B-3 relate to the registry parameters described in this guide. For more information about these parameters, see Event (Sub-Type) Configuration Parameters.

---

Note The Expedite column indicates whether the syslogs that are received from the device should expedite other commands in order to receive additional information. This is not a registry-related parameter.

---

Syslogs Supported By Cisco IOS and CATOS Devices

The following table lists the supported proprietary Cisco IOS and CATOS syslogs.

Table B-1 Cisco IOS and CATOS Device Syslogs 

Item	Syslog	Severity	Description	is- correlation- allowed	correlate	is- ticketable	Expedite
1	AMDP2_FE-5-LOSTCARR	MINOR	The cable and/or transceiver is not connected	false	true	false
2	AT-6-NODEWRONG	MINOR	An AppleTalk node sent a GetNet Info request to this router specifying an invalid network number for the source of the GetNet Info request	false	false	false
3	BGP-3-NOTIFICATION	INFO	Handles BGP 3 syslog	false	true	true
4	BGP-5-ADJCHANGE	MAJOR	Handles BGP 5 syslog				bgp neighbors
	bgp neighbor up syslog	CLEARED		false	false	false
	bgp neighbor down syslog	MAJOR		false	true	true
5	BGP-5-ADJCHANGE-vrf	MAJOR	Handles BGP 5 syslog from VRF	false	true	true	bgp neighbors
6	C6KENV-SP-4-FANTRAYFAILED	INFO	Fan tray failed	true	false	true
7	C6KPWR-SP-2-PSFAIL	INFO	Power supply failed	true	false	true
8	CDP-4-DUPLEX_MISMATCH	INFO	There is a duplex mismatch problem (IOS)	false	true	true
9	CLNS-5-ADJCHANGE	MAJOR	Handles isis syslog	false	true	true
10	CONTROLLER-5-UPDOWN		Syslog for status changed in controllers, needs to drop	drop*
11	DEC21140-5-COLL	MINOR	A Fast Ethernet packet has been dropped because too many attempts to transmit it were stopped by collisions	false	true	true
12	DEC21140-5-LATECOLL	MINOR	Late collisions are collisions that occur after transmitting the preamble	false	true	true
13	DIAL5-3-MSG		A problem with the digital signal processor	drop*
14	DTP-5-NONTRUNKPORTON	MINOR	The interface changed to a non-trunk	false	true	true
15	DTP-5-TRUNKPORTON	CLEARED	The interface returned to being a trunk	false	false	false
16	DUAL-3-SIA	INFO	The EIGRP router has not received a reply to a query from one or more neighbors within the time allotted, so the neighbors that did not send a reply are cleared	false	true	false
17	DUAL-5-NBRCHANGE	MAJOR	Handles EIGRP syslog
	dual5 neighbor up	CLEARED		false	false	false
	dual5 neighbor down	MAJOR		false	true	true
18	EE48-6-ALPHAECC		ECC correctable error occurred, drop syslog	drop*
19	ENV_MON-2-SUPPLY	INFO	Power supply is not working or has not been turned on	false	true	true
20	FABRIC-SP-5-FABRIC_MODULE_BACKUP	INFO	The clear block option is on/off for the fabric or on standby
	FABRIC-SP-5-CLEAR_BLOCK_OFF_SYSLOG	INFO		false	true	true
	fabric sp 5 clear block on syslog	INFO		false	false	true
21	FR-5-DLCICHANGE	MAJOR	Handles DLCI change syslog
	dlci down	MAJOR		false	true	true
	dlci up	CLEARED		false	false	false
22	HSRP-6-STATECHANGE	INFO	Handles HSRP syslog				HSRP
	hsrp group change syslog	INFO		false	true	true
	hsrp group restored syslog	CLEARED		false	false	false
23	ILACC-5-COLL	MINOR	An Ethernet cable is broken or is not terminated, or the transceiver is unplugged	false	true	true
24	ILACC-5-LATECOLL	MINOR	An Ethernet transceiver is malfunctioning, the Ethernet is overloaded, or the Ethernet cable is too long	false	true	true
25	IPX-3-BADIGRPSAP	MINOR	A hardware or software error occurred	false	true	true
26	ISDN-6-CONNECT	MAJAR	Handles ISDN connect syslog	false	true	false
27	ISDN-6-CONNECT-2	MAJOR	Handles ISDN connect syslog2	false	true	false
28	ISDN-6-DISCONNECT	CLEARED	Handles ISDN disconnect syslog	false	true	false
29	ISDN-6-DISCONNECT-2	CLEARED	Handles ISDN disconnect syslog2	false	true	false
30	LANCE-3-BADCABLE	MINOR	The Ethernet cable is not connected	false	true	false
31	LANCE-5-COLL	INFO	An Ethernet cable is broken or unterminated, or the transceiver is unplugged	false	true	false
32	LANCE-5-LATECOLL	MINOR	An Ethernet transceiver is unplugged or defective	false	true	true
33	LAPB-4-CTRLBAD	MINOR	A received FRMR has reported a frame with an invalid control code	false	true	true
34	LDP-5-NBRCHG-LDP	MAJOR	Handles LDP neighbor change syslog				MPLS LDP discovery
	ldp neighbor up syslog	CLEARED		false	false	false
	ldp neighbor down syslog	MAJOR		false	true	true
35	LDP-5-NBRCHG-TDP	MAJOR	Handles TDP neighbor change syslog				MPLS TPP discovery
	tdp neighbor up syslog	CLEARED		false	false	false
	tdp neighbor down syslog	MAJOR		fasle	true	true
36	LINEPROTO-5-UPDOWN	MAJOR	Handles line syslog	false	true	false	port-status
37	LINEPROTO-5-UPDOWN-exclude-dynamic-interfaces		Syslog for line down in Asyn,Virtual-Access and Channelized interfaces, needs to drop	drop*
	LINEPROTO-5-UPDOWN	CLEARED		false	false	false
	line down syslog	MAJOR		false	true	false
38	LINK-3-UPDOWN	MAJOR	Handles link down syslog	false	true	true
39	LINK-3-UPDOWN-EXCLUDE-DYNAMIC-INTERFACES		Syslog for link down in Asyn,Virtual-Access and Channelized interfaces, needs to drop	drop*
40	LINK-5-CHANGED	MAJOR	Handles link syslog
	LINK-5-CHANGED	CLEARED		fasle	false	false
	link down syslog	INFO		false	true	true
41	link up 3 syslog	CLEARED	Handles backup syslog	false	false	false
	link down 3 syslog	MAJOR		false	true	true
42	LINK-SP-5-CHANGED	INFO	Handles link sp 5 changed syslog	false	true	true
43	card in syslog	CLEARED	Handles module out (mbud) syslog	false	false	false	physical-command
	card out syslog	MAJOR		false	false	true
44	MICA-3-NOENTRIES		Modem ISDN channel aggregation no entries	drop*
45	MICA-3-RESTART		Modem ISDN channel aggregation restart	drop*
46	MODEM-5-DL		Modem completed firmware download, drop syslog	drop*
47	MPLS_TE-5-TUN_DOWN	MAJOR	Handles tunnel down syslog	false	true	false	MPLS traffic engineering tunnel information
48	MPLS_TE-5-TUN_REOPTIMIZE	INFO	Handles tunnel reoptimization syslog	false	true	true
49	MPLS_TE-5-TUN_UP	CLEARED	Handles tunnel up syslog	false	false	false
50	OIR-6-(REM|INS)CARD	CLEARED	Handles module out syslog	false	false	false	physical-command
51	OIR-SP-3-PWRCYCLE	INFO	Card being power cycled	true	false	true
52	OSPF-5-ADJCHG	MAJOR	Handles ospf syslog
	ospf neighbor down syslog	MAJOR		false	true	true
	ospf neighbor up syslog	CLEARED		false	false	false
53	PFREDUN-SP-4-BOOTSTRING_INVALID	INFO	Bootstring invalid	true	false	true
54	PM-SP-STDBY-4-ERR_DISABLE	INFO	Err disable state	true	false	true
55	PQUICC-5-COLL	MINOR	An Ethernet cable is broken or is not terminated	false	true	true
56	PQUICC-5-LATECOLL	MINOR	The Ethernet cable might be too long, or there could be too many repeaters with the result that the delay from one end to the other is too long	false	true	true
57	PQUICC_ETHER-5-COLL	MINOR	An Ethernet cable is broken or is not terminated	false	true	true
58	PQUICC_ETHER-5-LATECOLL	MINOR	A new network may not have been engineered properly or adding a regenerator to an existing network may have changed the network specifications	false	true	true
59	PQUICC_FE-5-COLL	MINOR	Ethernet or Fast Ethernet is detecting multiple collisions	false	true	true
60	PQUICC_FE-5-LATECOLL	MINOR	Late collisions have occurred on the Ethernet or Fast Ethernet interface	false	true	true
61	QUICC_ETHER-5-COLL	MINOR	An Ethernet cable is broken or unterminated	false	true	true
62	QUICC_ETHER-5-LATECOLL	MINOR	A software or hardware error occurred	false	true	true
63	RPS-3-MULTFAIL		Failure with the redundant power system, drop syslog	drop*
64	RADIUS AUTHENTICATION SYSLOG		Syslog for radius authentication, needs to drop	drop*
65	SCHED-3-STUCKMTMR	MINOR	A process can register to be notified when various events occur in the router. This message indicates that a registered timer is expired and its value is unchanged after the process has executed two successive times	false	true	true
66	SECURITY-1-PORTSHUTDOWN	MINOR	A port has been shut down due to an insecure host sourcing a packet into that port	false	true	true
67	SNMP-5-LINKTRAP		The type of Link Trap	drop*
68	SNMP-5-SNMPAUTHFAIL	MINOR	The switch has received an SNMP message that was not properly authenticated	false	true	true
69	SNMP-5-TOPOTRAP	MINOR	A configured port changed from the learning state to the forwarding state, or from the forwarding state to the blocking state	false	true	true
70	SPANTREE-2-LOOPGUARDBLOCK	MINOR	When the loop guard blocks an inconsistent port, the following message is logged	false	true	true
71	SPANTREE-2-LOOPGUARDUNBLOCK	MINOR	After the recovery, the following message is logged	false	true	true
72	SPANTREE-2-RX_PORTFAST	MINOR	A BPDU that has spanning-tree portfast enabled was received on the specified interface	false	true	true
73	STANDBY-6-STATECHANGE	INFO	Handles HSRP syslog				HSRP
	hsrp group change syslog	INFO		false	true	true
	hsrp group restored syslog	CLEARED		false	false	false
74	SYS-2-MALLOCFAIL	MINOR	The requested memory allocation is not available from the specified memory pool	false	true	true
75	SYS-3-CPUHOG	MINOR	The indicated process ran too long without relinquishing the processor	false	true	true
76	SYS-5-CONFIG_I	INFO	The router's configuration was changed	false	false	true
77	SYS-5-POWER-SUPPLY	MAJOR	Power supply failure notification
	power supply okay syslog	CLEARED		false	false	false
	power supply failed syslog	MAJOR		false	false	true
78	SYS-5-RELOAD	INFO	Syslog for reloading the device	true	false	true
79	SYS-5-RESTART	INFO	Syslog for restarting the device	false	true	true	physical-command
80	SYS-SP-STDBY-5-RESTART	INFO	Restarting the device	false	true	true
81	Security-1-PORTSHUTDOWN	MINOR	A port has been shut down due to an insecure host sourcing a packet into that port	false	true	true
82	UDLD-3-DISABLE	MINOR	A fault has been detected in a fiber Ethernet port connection and that the port has been disabled to prevent other protocols from malfunctioning	false	true	true
83	UDLD-3-DISABLEFAIL	MINOR	A fault was detected in the wiring on a fiber Ethernet port, but UDLD could not disable the port	false	true	true
84	UDLD-4-ONEWAYPATH	MINOR	A fault has been detected in a fiber Ethernet connection in a shared media environment and the connection may cause a possible malfunction	false	true	true
85	UDLD-SP-4-UDLD_PORT_DISABLED	INFO	Aggressive mode failure detected	false	true	true
86	GENERIC-SYSLOG		Generic syslog	drop*
87	VALIDATE-SYSLOG-STRUCTURE		Generic structure of syslogs. If fails - not a syslog, need to drop	drop*

* This event is configured to be dropped in order to prevent alarm overload. This is subject to chnage on a customization basis.

Syslogs Supported by Cisco IOX Devices

The Cisco IOX devices support the syslogs listed in Table B-1 in addition to the ones specified in Table B-2. The following table lists the syslogs supported for Cisco IOX devices.

Table B-2 Cisco IOX Devices Syslogs 

Item	Name	Severity	Description	is- correlation-allowed	correlate	is- ticketable	Expedite
1	BGP-5-ADJCHANGE	MAJOR	The adjacent BGP neigbour was lost	false	true	false	bgp neighbors
2	ENVMON-ADDITIVE-POWER-OVERBUDGET	MAJOR	The power calculated in use by the chassis exceeds that available by the powershelf. This condition could result in an outage of the chassis if action is not immediately taken	true	true	false
3	ENVMON-ENV-CONDITION	MAJOR	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	true	true	false
4	ENVMON-FAN	MAJOR	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	true	true	false
5	ENVMON-LOW-FAN-SPEED-WARNING	MAJOR	Indicates that the fan is spinning very slow	true	true	false
6	ENVMON-OVERTEMP	MAJOR	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	true	true	false
7	ENVMON-PEM-REMOVE	MAJOR	The power entry module specified was detected as removed	false	true	false	physical-command
8	ENVMON-POWERSUPPLY-CURRENT	MAJOR	The current supply specified has reached a critical level and is now out of specification	true	true	false
9	ENVMON-POWERSUPPLY-NONOP	MAJOR	The power supply specified has become non-operational	true	true	false
10	ENVMON-POWERSUPPLY-VOLTAGE	MAJOR	The voltage supply specified has reached a critical level and is now out of specification	true	true	false
11	ENVMON-TEMP	MAJOR	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	true	true	false
12	ENVMON-VOLTAGE	MAJOR	The voltage supply specified has reached a critical level and is now out of specification	true	true	false
13	FIA-FIAHW-LOS	MAJOR	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	true	true	false
14	FLASH-CARD-REMOVAL	MAJOR	Handles flash card removed syslog	true	true	false
15	LIBPARSER-ERR-MEMALLOC	MINOR	Memory allocation is not available	false	true	false
16	LINEPROTO-5-UPDOWN	MAJOR	The data link level line protocol has changed state.	false	true	false	port-status
17	LINK-3-UPDOWN	MAJOR	Handles link down syslog	false	true	false	port-status
18	LINK-5-CHANGED	MAJOR	Handles link down 5 syslog	false	true	false
19	NODE-RELOAD	INFO	Handles module reset syslog	true	true	true
20	NODE-STATE-CHANGE	MINOR	Indicates a change in the card oper status	false	true	false
21	OIROUT	MAJOR	Handles card out syslog	false	true	false	physical-command
22	OSPF-5-ADJCHG	MAJOR	Indicates a change in the OSPF neighbor status	false	true	false
23	PIM-5-NBRCHG	MAJOR	Handles PIM neighbor loss syslog	false	true	false
24	PIM-5-UPDOWN	MAJOR	Handles PIM interface down syslog	false	true	false
25	PIM-INVALID-JOIN	MINOR	Handles PIM invalid join syslog	false	true	false
26	POWERDOWN-RESET	MINOR	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	false	true	false
27	SONET-LOCAL-4-ALARM	MAJOR	Handles line down syslog	false	true	false
28	SPA-OIROUT	MAJOR	Handles card out syslog	false	true	false	physical-command
29	OIROUT-on-CPU0	MAJOR	Handles module out syslog	false	false	false	physical-command

Traps Supported by Cisco Devices

The following table lists the supported MIB-II and Cisco proprietary traps. The traps listed in this table are the most commonly used ones and relate to Cisco IOS devices only.

Table B-3 Cisco Traps 

Item	Name	Severity	OID	is-correlation- allowed	correlate	is- ticketable
1	Authentication Failure	INFO	1.3.6.1.4.1	false	false	false
2	BGP Trap	MINOR	1.3.6.1.2.1.15.3.1	false	true	false
3	hdsl2shdsl-dc-continuity-fault	INFO	1.3.6.1.2.1.10.48.0.12	false	true	true
4	Chassis Alarm On	MINOR	1.3.6.1.4.1.9.5.0	true	true	true
5	Chassis Temperature Major Fault	MAJOR	1.3.6.1.4.1.9.5.1.2.13	false	true	true
6	Chassis Temperature Minor Fault	MINOR	1.3.6.1.4.1.9.5.1.2.13	false	true	true
7	Chassis Temperature Other Fault	MINOR	1.3.6.1.4.1.9.5.1.2.13	false	true	true
8	Ent Config Change	INFO	1.3.6.1.2.1.47.2.0.1	false	true	true
9	Fan Down	MAJOR	1.3.6.1.4.1.9.9.13.3.0.4	false	true	true
10	FR Dlci Status Change	INFO	1.3.6.1.2.1.10.32.0.1	false	true	true
11	Line Down Cisco Prop	INFO	1.3.6.1.4.1.9.9.41.2	false	true	false
12	Line Down/Up	MINOR		false	true	false
13	hdsl2shdsl-config-init-failure	INFO	1.3.6.1.2.1.10.48.0.13	false	true	true
14	VRRP Trap Auth Failure	MINOR	1.3.6.1.2.1.68.0.2	false	true	true
15	VRRP Trap New Master	MINOR	1.3.6.1.2.1.68.0.1	false	true	true
16	Warm Start	INFO		false	true	true
17	Cold Start	INFO		false	true	true
18	dot1qBridge trap	INFO	1.3.6.1.2.1.17.0.2	false	true	false
19	Vlan trunk port dynamic status	INFO	1.3.6.1.4.1.9.9.46.2.0.7	false	true	false
20	dlsw circuit down trap	INFO	1.3.6.1.2.1.46.1.0	false	true	true
21	hdsl2shdsl service fault v2 trap	INFO	1.3.6.1.2.1.10.48.0.11	false	true	true
22	bgp-established-trap_v2	CLEARED	1.3.6.1.2.1.15.7.1	false	false	false
23	bgp-backward- transition-trap_v2	MINOR	1.3.6.1.2.1.15.7.2	false	true	false
24	tcp connection table	INFO	1.3.6.1.4.1.9.2.6.1.1	false	false	dump
25	lts table	INFO	.1.3.6.1.4.1.9.2.9	false	false	dump
26	clogHistoryTable trap	INFO	.1.3.6.1.4.1.9.9.41.1.2.3.1	false	false	dump
27	hdsl2shdsl-local-power-loss	INFO	1.3.6.1.2.1.10.48.0.16	false	true	true
28	hdsl2shdsl-loop- atten-crossing	INFO	1.3.6.1.2.1.10.48.0.1	false	true	true
29	hdsl2shdsl-loopback-failure	INFO	1.3.6.1.2.1.10.48.0.9	false	true	true
30	hdsl2shdsl-no- neighbor-present	INFO	1.3.6.1.2.1.10.48.0.15	false	true	true
31	hdsl2shdsl-perf-crc- anomalies-thresh	INFO	1.3.6.1.2.1.10.48.0.5	false	true	true
32	hdsl2shdsl-perf-los-ws-thresh	INFO	1.3.6.1.2.1.10.48.0.3	false	true	true
33	hdsl2shdsl-perf-los-ws-thresh	INFO	1.3.6.1.2.1.10.48.0.6	false	true	true
34	hdsl2shdsl-perf-ses-thresh	INFO	1.3.6.1.2.1.10.48.0.4	false	true	true
35	hdsl2shdsl-perf-uas-thresh	INFO	1.3.6.1.2.1.10.48.0.7	false	true	true
36	hdsl2shdsl-power-back-off	INFO	1.3.6.1.2.1.10.48.0.10	false	true	true
37	hdsl2shdsl-protocol- init-failure	INFO	1.3.6.1.2.1.10.48.0.14	false	true	true
38	hdsl2shdsl-snr- margin-crossing	INFO	1.3.6.1.2.1.10.48.0.2	false	true	true
39	hdsl2shdsl-span- invalid-num-repeaters	INFO	1.3.6.1.2.1.10.48.0.8	false	true	true
40	new root trap	INFO	1.3.6.1.2.1.17.0.1	false	true	true
41	ospf-if-auth-failure	INFO	1.3.6.1.2.1.14.16.2.6	false	true	true
42	ospf-if-config-error	INFO	1.3.6.1.2.1.14.16.2.4	false	true	true
43	ospf-if-rx-bad-packet	INFO	1.3.6.1.2.1.14.16.2.8	false	true	true
44	ospf-if-state-change	INFO	1.3.6.1.2.1.14.16.2.16	false	true	true
45	dlsw-trap-tconn-down	MINOR	1.3.6.1.2.1.46.1.0	false	true	true
46	ospf-lsdb-approaching- overflow	INFO	1.3.6.1.2.1.14.16.2.15	false	true	true
47	ospf-lsdb-overflow	INFO	1.3.6.1.2.1.14.16.2.14	false	true	true
48	ospf-max-age-lsa	INFO	1.3.6.1.2.1.14.16.2.13	false	true	true
49	ospf-nbr-state-change	INFO	1.3.6.1.2.1.14.16.2.2	false	true	true
50	ospf-originate-lsa	INFO	1.3.6.1.2.1.14.16.2.12	false	true	true
51	ospf tx retransmit trap	INFO	1.3.6.1.2.1.14.16.2.10	false	true	true
52	ospf-virt-if-auth-failure	INFO	1.3.6.1.2.1.14.16.2.7	false	true	true
53	ospf-virt-if-config-error	INFO	1.3.6.1.2.1.14.16.2.5	false	true	true
54	dlsw-trap-tconn- partner-reject	INFO	1.3.6.1.2.1.46.1.0.1	false	true	true
55	ospf-virt-if-rx-bad-packet	INFO	1.3.6.1.2.1.14.16.2.9	false	true	true
56	ospf-virt-if-state-change	INFO	1.3.6.1.2.1.14.16.2.1	false	true	true
57	ospf-virt-if-tx-retransmit	INFO	1.3.6.1.2.1.14.16.2.11	false	true	true
58	ospf virt nbr state change trap	INFO	1.3.6.1.2.1.14.16.2.3	false	true	true
59	dlsw-trap-tconn-prot- violation	INFO	1.3.6.1.2.1.46.1.0.2	false	true	true
60	x25-reset	INFO	1.3.6.1.2.1.10.5.0.2	false	true	true
61	dummy-ticket	CLEARED	1.3.6.1.4.1.42	false	true	false