gmane.network.net-snmp.user

RE: mib2c

David Ganor — 2013-05-21T11:16:08

Hi Leonard,

I had a similar issue with adding several tables from a newly MIB, which I've defined.

I've solved it is the following manner; Note: Since you're trying to add only a single table, from a MIB, you might need to modify some of the steps below…

 

1.       Place the auto-generated .c and .h files in agent/mibgroups/entity-mib/entAliasMappingTable

 

2.       Create a file: agent/mibgroups/entity-mib/entAliasMappingTable.h that has the following line:

/*

* module to include the modules

*/

config_require(entity-mib/entAliasMappingTable/entAliasMappingTable)

 

3.       Create another file: agent/mibgroups/entity-mib.h that has the following lines:

/*

* module to include the modules

*/

config_require(entity-mib/entAliasMappingTable)

config_add_mib(ENTITY-MIB)

 

4.       Now run the ./configure

 

 

HTH,

David Ganor

 

From: Leonard G [mailto:ked3713< at >yahoo.com] 
Sent: Tuesday, May 14, 2013 6:46 PM
To: net-snmp-users< at >lists.sourceforge.net
Subject: mib2c

 

Hi,

I am new to Net-SNM

Re: snmp_parse_oid gives Unknown Object Identifier when run from awebui

ramnarasimha prasad — 2013-05-21T08:31:16

Hi does anyone faced the same problem. When a snmp command is called from a web browser, the application is giving the Unknown Object Identifier. Some where I read that we need to configure the snmp.conf file for application specific. Ean some one help me in configuring application specific snmp.conf file.

Thanks and Regards,
BRN Prasad.

________________________________
 From: ramnarasimha prasad <brnprasad630< at >yahoo.co.in>
To: "net-snmp-users< at >lists.sourceforge.net" <net-snmp-users< at >lists.sourceforge.net>; "D.T.Shield< at >liverpool.ac.uk" <D.T.Shield< at >liverpool.ac.uk> 
Sent: Wednesday, May 15, 2013 5:50 PM
Subject: snmp_parse_oid gives Unknown Object Identifier when run from a webui

Hi Dave and Others,

I am working using net-snmp in our linux (TexasInstruments beaglebone distribution which is have net-snmp) based project and we have created our MIB files and stub files for supporting those OID get/set functionalities. We are able to get/set from the command prompt from both local system as well as the r

RE: Trap description

Todd Bradley — 2013-05-20T16:29:29

FWIW, a few months ago I ran into the same issue you just wrote about. I didn't post it here, assuming "I must be doing something wrong, since this feature seems broken so badly they couldn't have released the software this way."  Maybe I was wrong. I just learned to live with it. But I'd love to hear if there's something I'm missing.


Cheers,
Todd.



From: Nicholas Satterly [mailto:nfsatterly< at >gmail.com]
Sent: Sunday, May 19, 2013 2:18 PM
To: net-snmp-users< at >lists.sourceforge.net
Subject: Trap description

Hi

I'm using snmptrapd to call a trap handler and assumed that defining an execute format with "%W" in it would give me the trap description because that is how the man page describes it [1]. However, it seems this only gives me "Enterprise Specific" which is not very useful.

Can snmptrapd be configured to supply the description for a trap that is contained in the MIB to a trap handler?

If not, can anyone suggest other ways that this description could be obtained when a trap is received? One possibilit

Regarding the net-snmp RequestId

hemant mehar — 2013-05-20T11:30:51

Hi,
after snmp_read() call, how can i retrive Request-id from net-snmp pdu?
is there any net-snmp Api to support this?

what i have currently is, as soon as the select() fd pops up for snmpset
request, snmp_read() gets called and the write_method () as call back is
invoked, i want the net-snmp pdu's requestId to be used to identify few
reqeust's during snmpset.

could you please suggest me on this.

Thanks,
Hemant
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourc

Trap description

Nicholas Satterly — 2013-05-19T20:17:57

Hi

I'm using snmptrapd to call a trap handler and assumed that defining an
execute format with "%W" in it would give me the trap description because
that is how the man page describes it [1]. However, it seems this only
gives me "Enterprise Specific" which is not very useful.

Can snmptrapd be configured to supply the description for a trap that is
contained in the MIB to a trap handler?

If not, can anyone suggest other ways that this description could be
obtained when a trap is received? One possibility would be to execute
"snmptranslate -Td" for every trap received but this might not scale for
systems receiving 100's or 1000's of traps a second.

Any help would be appreciated.

Thanks,
Nick


[1] /etc/snmp/snmptrapd.conf

authCommunity log,execute,net public
format execute $a %a\n$A %A\n$b %b\n$B %B\n$x %#y-%#02m-%#02l\n$X
%#02.2h:%#02.2j:%#02.2k\n$N %N\n$q %q\n$P %P\n$t %t\n$T %T\n$w %w\n$W
%W\n%V~\%~%v\n
traphandle default /tmp/traphandler.sh
------------------------------------------------------------

execute_format via config rather than source compile?

Gareth Llewellyn — 2013-05-17T18:40:56

Hello,

I'm experimenting with classifying traps by the community string but so far
I haven't been able to work out a way to use the format specifications to
get the community as part of the payload passed to the script.

Looking at the source I can see on line 784 of snmptrapd_handlers.c the
following format is specified;
#define EXECUTE_FORMAT  "%B\n%b\n%V\n%v\n"

I've confirmed that if I suffix %P to that I get the community string as
part of the payload to the script but the comment within the function
source indicates that a custom format string can be registered for this
trap.

Try as I might I can't find how to pass a custom format string to an
execute script in either the command line options or the snmptrapd.conf and
I'd rather not have to custom compile just for one format variable.

Could someone point me in the right direction / docs please?

Gareth
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complet

Re: snmp3 & intermediate CA certs

David W — 2013-05-16T08:42:07

Could someone be more precise on this ?
I don't get it.

D.


2013/5/14 Shing-Kun Kuo (shkuo) <shkuo< at >cisco.com>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Change traps version by the forward handler

Michael Shcwarcz — 2013-05-16T08:45:11

Hey,

Does anyone have any inputs?

BR
Mickey

From: Michael Shcwarcz [mailto:Michael.Shcwarcz< at >compass-eos.com]
Sent: Wednesday, April 10, 2013 11:47 AM
To: net-snmp-users< at >lists.sourceforge.net
Subject: Change traps version by the forward handler

Hello,

Is it possible to change the trap's version in a trap handler in snmptrapd?

For example: I send a v2 trap, snmptrapd receives it and forwards it as a v1 trap.

BR
Michael Schwarcz
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:

snmp_parse_oid gives Unknown Object Identifier when run from a webui

ramnarasimha prasad — 2013-05-15T12:20:23

Hi Dave and Others,

I am working using net-snmp in our linux (TexasInstruments beaglebone distribution which is have net-snmp) based project and we have created our MIB files and stub files for supporting those OID get/set functionalities. We are able to get/set from the command prompt from both local system as well as the remote system.

We are developing a webui (web User interface) for our system. To interface this webui, I have written a cgi script file in which I am reading the commands sent from webui and processing both get/set commands with oids. When I am running the cgi script from my hyperterminal, I am getting /setting the oids properly. But when I send the command from webui, I am getting the error message "Unknown Object Identifier" in the snmp_parse_oid function. If i give the oid with full sub string (like .1.3.6.1.4.1.128.5.1.37.2.13), it works fine. Can some help me to over come this problem. 

My strong guess is, when i run the command from the webui like "<ipaddress>/cgi-bin/snmp.cgi?

(unknown)

ramnarasimha prasad — 2013-05-15T12:05:55


 
Thanks and Regards,
BRN Prasad.------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Net-Snmp generate_Ku() Function details needed

Satyam Pandita — 2013-05-15T04:14:34

Hi,

     I am trying to implement snmpv3 application for my network i
looked on net-snmp website for a demo C program and there is this
function generate_Ku() what i thought this fuction does is that it
makes snmp agent to know that with which encryption method and
username and password, agent needs to encrypt the data such that
manager can decrypt the data with same username and password.

Is this the generate_Ku() funtion does. If not then i wanted to know
how the agent and manager share the username and password such that
both can encrypt and decrypt data with a common. I can't understand
how to make a connection to device using snmp c api i.e. how they will
communicate securely how they both get to know of the username and
password set.

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all

No Such Instance currently exists at this OID

Jaap Winius — 2013-05-14T21:35:55

Hi folks,

Following an upgrade from Debian squeeze to wheezy*, the SNMP agent on  
one of my servers stopped responding to queries for data from  
lm-sensors. Before the upgrade it did this:

   ~# snmpget -v2c -c public <host> .1.3.6.1.4.1.2021.13.16.3.1.1.4
   LM-SENSORS-MIB::lmFanSensorsIndex.4 = INTEGER: 3

Now it does this:

   ~# snmpget -v2c -c public <host> .1.3.6.1.4.1.2021.13.16.3.1.1.4
   LM-SENSORS-MIB::lmFanSensorsIndex.4 = No Such Instance currently \
   exists at this OID

In this case, as for the other servers, the libsnmp-base package is  
installed that contains the LM-SENSORS-MIB file. Otherwise the  
configurations for lm-sensors and snmpd are identical and the output  
from the 'sensors' command looks fine. The misbehaving machine only  
has a slightly different sensor chip, although that never used to be a  
problem and it'a even supported by the same kernel module.

Any idea what might be preventing snmpd from relaying the sensors data?

Thanks,

Jaap

*) Both Debian squeeze and wheez

hi

Steve McCarthy — 2013-05-14T21:13:59


 http://www.vitalmind.net/sasnomsvkplil.php 














  









 













------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpget with multiple oid query fails for table structures

Samitha Wijedasa — 2013-05-14T18:06:15

 
Hi,

 I'm
trying to get multiple oid query responses in a single snmpget as
follows from a table structure that is designed to facilitate two
wifi modules. The last digit identify the particular wifi module I'm
querying at the moment. In this case the module 1.

 snmpget
-v 2c -t 2 -m "" -c public 192.168.0.105
.1.3.6.1.4.1.xxxxx.2.5.85.1.2.1 .1.3.6.1.4.1.xxxxx.2.5.85.1.3.1

 iso.3.6.1.4.1.xxxxx.2.5.85.1.2.1
= STRING: "SSSSS"
iso.3.6.1.4.1.xxxxx.2.5.85.1.3.1 = No
Such Instance currently exists at this OID

 I'm
getting the response as above. The response is also interchanged.
I.e. 1.3.6.1.4.1.xxxxx.2.5.85.1.3.1 should be the SSID name not
.1.3.6.1.4.1.xxxxx.2.5.85.1.2.1.

 I
generated my code using mib2c and tested with tables that is
implemented based on  mib2c.container.conf and 
mib2c.iterate.conf. Both show the same problem.

 But
for the scalar implementation it works without a problemand individual queries for the table structure also works fine.
 

Thanks

 Samitha
--------------------------------

RE: snmp3 & intermediate CA certs

Shing-Kun Kuo (shkuo — 2013-05-14T17:20:26

Hi David,

Same topic in the web. It states that
"If the policy extensions in the CA certificate indicate that it must be verified by CRL or OSCP - then you may have a legitimate hang in your application when it can't find the root CA to verify parts of this process."

http://security.stackexchange.com/questions/17391/can-an-intermediate-ca-be-trusted-like-a-self-signed-root-ca

Regards,

Shing


From: David W [mailto:david.w3c< at >gmail.com]
Sent: Tuesday, May 14, 2013 1:53 AM
To: net-snmp-users< at >lists.sourceforge.net
Subject: Re: snmp3 & intermediate CA certs

Hi all,
A little up on this. If someone have some more informations for me.
Thank you.

2013/4/25 David W <david.w3c< at >gmail.com<mailto:david.w3c< at >gmail.com>>
Hi everybody,
I'm currently trying to get net-snmp 5.7.2 communicating through tsm authPriv snmpv3 using intermediate CA signed certificates, but I cannot achieve this, while it works when certs are signed by a Root CA.
My question is: does net-snmp handles intermediate CA signed certificates ? And if

mib2c

Leonard G — 2013-05-14T15:45:47

Hi,
I am new to Net-SNMP so please excuse me is the question is
somewhat simple.
I am trying to add the ENTITY MIB code to the agent. I have
no problems with the scalars, but here is what happens when I add a table(
below it is entAliasMappingTable but the same happens for every table in the
MIB):
env MIBS=”+ENTITY-MIB” mib2c –c mib2c.mfd.conf
entAliasMappingTable
A bunch of .c and .h is generated and I copy them into
…/agent/mibgroup dir.
Run ./configure –with-mib-modules=entAliasMappingTable
And get an error:
Mib module “entAliasMappingTable” requires module
“ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface” but
ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface.h or
ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface.c could not be
found in ./agent/mibgroup
 
But the files entAliasMappingTable_interface.c and
entAliasMappingTable_interface.h were generated and are in mibgroup.
 
What am I doing wrong?
Thanks,
lg--------------------------------------

DTLS (how to configure SHA-2 and AES-256 mode for net-snmp).

Shing Kuo — 2013-05-06T21:11:51



Hi, 
 
I plan to utilize net-snmp DTLS feature but I have trouble
to get complete picture of how to do it. The only document I can find is the
following example link, “using DTLS”, from net –snmp. 
                              http://www.net-snmp.org/wiki/index.php/Using_DTLS
 
* ·        Where to find the complete document related to net-snmp
DTLS configuration? For example, the link above has an example using option “—san”
and there is no explanation for it. 
* ·        How to configure to instruct net-snmp to use
SHA-2 finger print?
* ·        How to configure AES-256 password? Net-snmp example
only shows how to configure certificate, I don’t know how to relate the certificate
to AES-256 password that can be configured by MIB browsers (e.g. Ireasoning MIB
browser can configure password for AES-256 but net-snmp only shows how to configure
certificate. How can I know what AES-256 password to be configured in MIB
browser if I only co

double free in snmptrapd - free_trapd_address

Michael Shcwarcz — 2013-05-13T07:00:29

Hello,

I am running net-snmp 5.7.2 and it looks like there is a double free problem in snmptrapd, in free_trapd_address() and parse_trapd_address().
I get a SIGABORT on the second SIGHUP (looks like it does a double free on the first SIGHUP and on the second it crashes).

I have this snmptrapd.conf configuration:
  snmpTrapdAddr udp:162,udp6:162
  authCommunity log,execute,net public

And this is the back-trace from gdb:
*** glibc detected *** /opt/compass/bin/snmptrapd: free(): invalid next size (fast): 0x080c17a8 ***
======= Backtrace: =========
/lib/libc.so.6[0xf7204845]
/lib/libc.so.6(cfree+0x9c)[0xf72066ec]
/opt/compass/bin/snmptrapd(free_trapd_address+0x2a)[0x804a6ba]
/usr/lib/libnetsnmp.so.30(free_config+0x32)[0xf74ae4c2]
/opt/compass/bin/snmptrapd[0x804a557]
/opt/compass/bin/snmptrapd[0x804bfa9]
/lib/libc.so.6(__libc_start_main+0xe5)[0xf71b0455]

I have a patch that fixes this issue, here is the diff:
< at >< at > -446,6 +446,7 < at >< at > free_trapd_address(void)
{
     if (default_port != ddefault_port) {
        fr

Forwarding all traps to a destination

Michael Shcwarcz — 2013-04-23T17:14:02

Hello,

Is it possible to forward all traps to a given destination (including traps which are already forwarded explicitly to another destination)?

I have these lines in snmptrapd.conf:
forward .1.3.6.1.4.1.2021.251.1  10.1.90.130
forward default 10.1.90.77

What I see is that the ucdStart trap is forwarded only to 10.1.90.130 and not to 10.1.90.77.
I understand that "default" means all traps that do not match other oid-specific handlers, but I would like 10.1.90.77 to receive all the traps including those which are explicitly forwarded to other destinations.
Is it possible maybe with another configuration parameter?

Thanks
Michael Schwarcz
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
htt

Question about DisMan

Nick L — 2013-04-23T18:46:17

Hi there,

I am trying to use the Disman to monitor the link up/down in my system.
access to the user. It worked fine on my system and I was able to get link
up/down trap.

My question is - it seems like the SNMP request from outside the world
could also use the user, if someone knows the user/password. Is there a way
to restrict the usage of the user to only DisMan? I know I could make the
user/password random, but this would be a hack. Thank you for your help in
advance.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page

Re: disman event mib monitor statement question

merlin — 2013-05-09T10:51:12

only accepts one expression.  I would love to find out if there is any way 
to do AND/OR logic in the monitor statement.
both admin and operationally up.  The rest are both admin and 
operationally down.
of the ifOperStatus.  For example, the following lines will generate 
linkDownTraps when the ifOperStatus is detected to be down (2):
ifOperStatus ifName ifDescr
ifOperStatus ifName ifDescr
ifOperStatus != 2
linkDown" ifOperStatus == 2
down, I only want to generate linkDownTraps IFF the interface is 
ifAdminStatus == UP AND ifOperStatus == DOWN.
linkDown" ifAdminStatus != 2 and ifOperStatus == 2
am looking for any ideas on how to do this.
-----
Discussions 
http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Is there someone have a workaround for this?



------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure