1. Supporting SNMP In MOM and WMI
using hands-on examples

2. Objectives
This purpose of this presentation is to introduce the Simple Network Management Protocol (SNMP) features of Microsoft Operations Manager (MOM) and Windows Management Instrumentation (WMI).
This presentation does not get bogged down with long definitions and architectural overviews. It also does not assume that you are an SNMP expert.
If you need more details on a particular topic you can refer to MSDN and the MOM and WMI documentation.

3. Overview During this presentation…
We will configure the Windows SNMP service.
Test the SNMP service using SNMPUTIL and WMI.
Capture SNMP Traps with WMI.
Generate and capture SNMP Traps with MOM.

4. Test Environment
The simple test environment represented below is used throughout this presentation.
MOM Agent
IP =
MOM Server
IP =

5. Windows SNMP Service
The first step is to make sure that the SNMP Service is installed on both systems (Server and Agent).
From “Add/Remove Programs” click on “Add/Remove Windows Components”.
Select “Management and Monitoring Tools” and click on “Details”.
Select “Simple Network Management Protocol” and click OK.
Click “Next” to Configure Components.

6. WMI SNMP Provider
Next, install the WMI SNMP Provider (WMISNMP.exe) on both systems.

7. Configuring SNMP Service
Now that the components are installed we need to configure the SNMP service on both systems.
Right click on “My Computer” and select “Manage”.
Locate the “SNMP Service”, right click on it, and select “Properties”. (continued on next slide…)

8. Configuring SNMP Service
We will set up a single SNMP community called “public”.
Select the “Security” tab.
Configure the “public” community with READ and CREATE rights. Note: Community names are case sensitive! (continued on next slide…)

9. Configuring SNMP Service
We will send all SNMP traps to our MOM Agent.
Select the “Traps” tab.
Configure the SNMP “Trap Destination” for the “public” community to the IP address of the MOM Agent ( ).
Click OK.

10. Testing SNMP Service
To test the SNMP service we will first use “SNMPUTIL” to listen for SNMP traps. This utility can be found in the Windows Resource Kit.
On the MOM Agent, open a console window and execute “snmputil trap”.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>snmputil trap
snmputil: listening for traps...

11. Testing SNMP Service
Next, we will generate an SNMP Trap by stopping and restarting the SNMP Service on the MOM Server. The easiest way to do this is to use the “net stop” and “net start” commands from a console window.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>net stop snmp
The SNMP Service service is stopping.
The SNMP Service service was stopped successfully.
C:\>net start snmp
The SNMP Service service is starting.
The SNMP Service service was started successfully.

12. Testing SNMP Service
After the SNMP service is restarted on the MOM Server you will see that SNMPUTIL (on the MOM Agent) caught several traps.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>snmputil trap
snmputil: listening for traps...
Incoming Trap:
generic = 0
specific = 0
enterprise = ...software.systems.os.windowsNT.server
agent =
source IP =
community = public
...

13. Testing SNMP Service
Most likely you will see two different types of traps when you restart the SNMP Service.
The first will be generic type 0. This represents an SNMP “coldStart” trap.
The second will be generic type 3. This represents an SNMP “linkUp” trap. You may see a couple of these traps when the SNMP Service is restarted.

14. Testing SNMP Service with WMI
You can also use WMI (via WBEMTEST) to capture and display SNMP traps.
On the MOM Agent, start “wbemtest”.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>wbemtest

15. Testing SNMP Service with WMI
Connect/Login to the “root\snmp\localhost” namespace.

16. Testing SNMP Service with WMI
Click on “Notification Query”…

17. Testing SNMP Service with WMI
Enter the query “select * from snmpnotification” and click “Apply”.

18. Testing SNMP Service with WMI
Next, generate an SNMP Trap by stopping and restarting the SNMP Service on the MOM Server.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>net stop snmp
The SNMP Service service is stopping.
The SNMP Service service was stopped successfully.
C:\>net start snmp
The SNMP Service service is starting.
The SNMP Service service was started successfully.

19. Testing SNMP Service with WMI
After the SNMP service is restarted on the MOM Server you will see that WMI (on the MOM Agent) caught the same traps we saw earlier with SNMPUTIL.

20. Management Information Base
SNMP management software needs access to the Management Information Base (MIB) for each system (workstation, server, router, bridge, and so on) in the network. The MIB reflects the status of the managed resources at that system.
A MIB “file” is a text file that defines a hierarchical set of data variables, called objects, in which each variable represents a manageable object.
The SNMP objects/traps generated by MOM are defined in “MissionCritical.mib”. This file can be found in the “OnePoint” program folder.

21. Compiling MIBs into WMI
In order to capture and display MOM generated SNMP traps with WMI you must first compile the “MissionCritical.mib” file using the “SMI2SMIR” MIB compiler.
Copy the MIB file to a folder on the MOM Agent and compile the MIB file using the “/sa” and “/t” options.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\TEST>smi2smir /sa /t MissionCritical.mib

22. Compiling MIBs into WMI
You can use the compiler’s “/l” option to list all of the modules that have been compiled into WMI.
At the very least you should see the “RFC1213_MIB” and “MISSION_CRITICAL_MIB” modules.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\TEST>smi2smir /l
smi2smir : Version
smi2smir : Modules in the SMIR :
"RFC1213_MIB"
"MISSION_CRITICAL_MIB"

23. Generating SNMP Traps with MOM
To generate an SNMP Trap in MOM we first create an Event Processing Rule in the MOM “Agents, Consolidators or DAS” group.

24. Generating SNMP Traps with MOM
This new rule will look for events with the ID = 500.

25. Generating SNMP Traps with MOM
The rule will generate a Critical Error alert.

26. Generating SNMP Traps with MOM
The rule will respond with a locally generated SNMP trap.

27. Generating SNMP Traps with MOM
We will call this new rule “SNMP Trap Test”.

28. Generating SNMP Traps with MOM
Commit the configuration changes and wait for the rule to be picked up by the agent on the MOM Server.
You can speed up this process by stopping and restarting the OnePoint service on the MOM Server.

29. Generating SNMP Traps with MOM
Once again, we will use WMI (via WBEMTEST) to capture and display SNMP traps. This time we will be capturing traps generated by the MOM Server.
On the MOM Agent, start “wbemtest”.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>wbemtest

30. Generating SNMP Traps with MOM
Connect/Login to the “root\snmp\localhost” namespace.

31. Generating SNMP Traps with MOM
Click on “Notification Query”…

32. Generating SNMP Traps with MOM
Enter the query “select * from snmpnotification” and click “Apply”.

33. Generating SNMP Traps with MOM
To test the “SNMP Trap Test” rule we need to generate an NT Event with the ID = 500. To do this we will use “logevent.exe”. This utility can be found in the Windows Resource Kit.
Open a console windows on the MOM Server and generate an NT event using the logevent syntax shown below.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\tools\>logevent -e 500 "SNMP Test Event"

34. Generating SNMP Traps with MOM
The “SNMP Trap Test” rule will see the NT Event we generated with logevent, and ultimately generate an SNMP Trap in response. This SNMP Trap will be caught by WMI on our MOM Agent.

35. Generating SNMP Traps with MOM
To get additional information on the trap simply double click on it.

36. Catching SNMP Traps with MOM
OK, the last thing we are going to demonstrate in this presentation is how to “catch” SNMP traps in MOM.
MOM employs WMI to enable SNMP management capability.
The WMI SNMP Provider catches the actual SNMP Traps. WMI passes SNMP Trap information on to MOM as WMI events.
Although we will not use them in this presentation, MOM includes two predefined WMI Event Providers for catching SNMP Traps.

37. Catching SNMP Traps with MOM
First, we need to create a new MOM provider.

38. Catching SNMP Traps with MOM
Select “WMI Events” as the Data Provider Type.

39. Catching SNMP Traps with MOM
Set the Properties as follows, then click “Finish”
Name: WMI TRAP CATCHER
Namespace: root\snmp\localhost
Query: select * from snmpnotification

40. Catching SNMP Traps with MOM
Next, create a new Event Processing Rule in the MOM “Agents, Consolidators or DAS” group. This rule will be used to catch SNMP Traps.

41. Catching SNMP Traps with MOM
Select “WMI TRAP CATCHER” as the Provider.

42. Catching SNMP Traps with MOM
Leave the “Criteria” and “Schedule” properties blank.
Configure the rule to generate a Critical Error alert.

43. Catching SNMP Traps with MOM
Call the new rule “SNMP Trap Catch Test”.

44. Catching SNMP Traps with MOM
Commit the configuration changes and wait for the rule to be picked up by the MOM Agent.
You can speed up this process by stopping and restarting the OnePoint service on the MOM Agent.

45. Catching SNMP Traps with MOM
Next, generate an SNMP Trap by stopping and restarting the SNMP Service on the MOM Server.
Microsoft Windows 2000 [Version ]
(C) Copyright Microsoft Corp.
C:\>net stop snmp
The SNMP Service service is stopping.
The SNMP Service service was stopped successfully.
C:\>net start snmp
The SNMP Service service is starting.
The SNMP Service service was started successfully.

46. Catching SNMP Traps with MOM
Watch the MOM Console and you will see the MOM Agent catch the same SNMP Traps we saw earlier in this presentation.

47. We’re Done!
A lot of material was covered in this presentation. I hope you found it useful.
For additional information on the topics we covered you can refer to the following documentation.
MOM Installation Guide
WMI SDK Documentation
MSDN Library