snmp tsline question

[jimfixit]

every now and again I get a cryptic snmp trap send from an old 4506 switch. I've run through Cisco's mib navigator and as near as I can tell, it's from the TTY trap set. But the trap contents don't tell me squat! When I read up on the TTY trap itself it said that the implication is a TCP session was disconnected (as in someone telneted in, then got out and that then sent a trap). But I can telnet into that bad boy all day long and not generate a trap, so that explanation doesn't ring true....

This is the exact trap content received by my snmp managment unit from the switch:
SNMP Trap 1.3.6.1.4.1.9.1 received from 10.1.7.124 1.3.6.1.4.1.9.2.9.3.1.1.2.1=5;1.3.6.1.2.1.6.13.1.1.10.1.7.12
4.23.10.1.3.9.55794=0;1.3.6.1.4.1.9.2.6.1.1.5.10.1.7.124.23.
10.1.3.9.55794=202;1.3.6.1.4.1.9.2.6.1.1.1.10.1.7.124.23.10.
1.3.9.55794=18;1.3.6.1.4.1.9.2.6.1.1.2.10.1.7.124.23.10.1.3.
9.55794=173;tsLineUser=

It doesn't say who the user is, doesn't tell me if maybe this is an authentication issue or what. Just a random trap for fun, I guess.

I have walked through the MIB and after about 1.3.6.1.4.1.9.2.9.3.1.1.2 we start getting into table data, the contents of which are not supplied in the trap message.

Am I doomed to be awakened at odd hours for an occassional hiccup or is there some way to determine what this trap means so I can address the cause?

Much obliged.

 

[jimfixit]

If anyone follows this thread, I learned that the documentation is a bit of a misnomer. the TTY trap is not only from telnet session ended (in fact in this case it clearly was not) but can be generated by ssh sessions that are terminated. We don't have SSH set up on these units so I'm still at a loss but at least now I know what avenue to run down.