gmane.network.net-snmp.user

Regarding the net-snmp RequestId

hemant mehar — 2013-05-20T11:30:51

Hi,
after snmp_read() call, how can i retrive Request-id from net-snmp pdu?
is there any net-snmp Api to support this?

what i have currently is, as soon as the select() fd pops up for snmpset
request, snmp_read() gets called and the write_method () as call back is
invoked, i want the net-snmp pdu's requestId to be used to identify few
reqeust's during snmpset.

could you please suggest me on this.

Thanks,
Hemant
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourc

Trap description

Nicholas Satterly — 2013-05-19T20:17:57

Hi

I'm using snmptrapd to call a trap handler and assumed that defining an
execute format with "%W" in it would give me the trap description because
that is how the man page describes it [1]. However, it seems this only
gives me "Enterprise Specific" which is not very useful.

Can snmptrapd be configured to supply the description for a trap that is
contained in the MIB to a trap handler?

If not, can anyone suggest other ways that this description could be
obtained when a trap is received? One possibility would be to execute
"snmptranslate -Td" for every trap received but this might not scale for
systems receiving 100's or 1000's of traps a second.

Any help would be appreciated.

Thanks,
Nick


[1] /etc/snmp/snmptrapd.conf

authCommunity log,execute,net public
format execute $a %a\n$A %A\n$b %b\n$B %B\n$x %#y-%#02m-%#02l\n$X
%#02.2h:%#02.2j:%#02.2k\n$N %N\n$q %q\n$P %P\n$t %t\n$T %T\n$w %w\n$W
%W\n%V~\%~%v\n
traphandle default /tmp/traphandler.sh
------------------------------------------------------------

execute_format via config rather than source compile?

Gareth Llewellyn — 2013-05-17T18:40:56

Hello,

I'm experimenting with classifying traps by the community string but so far
I haven't been able to work out a way to use the format specifications to
get the community as part of the payload passed to the script.

Looking at the source I can see on line 784 of snmptrapd_handlers.c the
following format is specified;
#define EXECUTE_FORMAT  "%B\n%b\n%V\n%v\n"

I've confirmed that if I suffix %P to that I get the community string as
part of the payload to the script but the comment within the function
source indicates that a custom format string can be registered for this
trap.

Try as I might I can't find how to pass a custom format string to an
execute script in either the command line options or the snmptrapd.conf and
I'd rather not have to custom compile just for one format variable.

Could someone point me in the right direction / docs please?

Gareth
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complet

snmp_parse_oid gives Unknown Object Identifier when run from a webui

ramnarasimha prasad — 2013-05-15T12:20:23

Hi Dave and Others,

I am working using net-snmp in our linux (TexasInstruments beaglebone distribution which is have net-snmp) based project and we have created our MIB files and stub files for supporting those OID get/set functionalities. We are able to get/set from the command prompt from both local system as well as the remote system.

We are developing a webui (web User interface) for our system. To interface this webui, I have written a cgi script file in which I am reading the commands sent from webui and processing both get/set commands with oids. When I am running the cgi script from my hyperterminal, I am getting /setting the oids properly. But when I send the command from webui, I am getting the error message "Unknown Object Identifier" in the snmp_parse_oid function. If i give the oid with full sub string (like .1.3.6.1.4.1.128.5.1.37.2.13), it works fine. Can some help me to over come this problem. 

My strong guess is, when i run the command from the webui like "<ipaddress>/cgi-bin/snmp.cgi?

(unknown)

ramnarasimha prasad — 2013-05-15T12:05:55


 
Thanks and Regards,
BRN Prasad.------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Net-Snmp generate_Ku() Function details needed

Satyam Pandita — 2013-05-15T04:14:34

Hi,

     I am trying to implement snmpv3 application for my network i
looked on net-snmp website for a demo C program and there is this
function generate_Ku() what i thought this fuction does is that it
makes snmp agent to know that with which encryption method and
username and password, agent needs to encrypt the data such that
manager can decrypt the data with same username and password.

Is this the generate_Ku() funtion does. If not then i wanted to know
how the agent and manager share the username and password such that
both can encrypt and decrypt data with a common. I can't understand
how to make a connection to device using snmp c api i.e. how they will
communicate securely how they both get to know of the username and
password set.

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all

No Such Instance currently exists at this OID

Jaap Winius — 2013-05-14T21:35:55

Hi folks,

Following an upgrade from Debian squeeze to wheezy*, the SNMP agent on  
one of my servers stopped responding to queries for data from  
lm-sensors. Before the upgrade it did this:

   ~# snmpget -v2c -c public <host> .1.3.6.1.4.1.2021.13.16.3.1.1.4
   LM-SENSORS-MIB::lmFanSensorsIndex.4 = INTEGER: 3

Now it does this:

   ~# snmpget -v2c -c public <host> .1.3.6.1.4.1.2021.13.16.3.1.1.4
   LM-SENSORS-MIB::lmFanSensorsIndex.4 = No Such Instance currently \
   exists at this OID

In this case, as for the other servers, the libsnmp-base package is  
installed that contains the LM-SENSORS-MIB file. Otherwise the  
configurations for lm-sensors and snmpd are identical and the output  
from the 'sensors' command looks fine. The misbehaving machine only  
has a slightly different sensor chip, although that never used to be a  
problem and it'a even supported by the same kernel module.

Any idea what might be preventing snmpd from relaying the sensors data?

Thanks,

Jaap

*) Both Debian squeeze and wheez

hi

Steve McCarthy — 2013-05-14T21:13:59


 http://www.vitalmind.net/sasnomsvkplil.php 














  









 













------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpget with multiple oid query fails for table structures

Samitha Wijedasa — 2013-05-14T18:06:15

 
Hi,

 I'm
trying to get multiple oid query responses in a single snmpget as
follows from a table structure that is designed to facilitate two
wifi modules. The last digit identify the particular wifi module I'm
querying at the moment. In this case the module 1.

 snmpget
-v 2c -t 2 -m "" -c public 192.168.0.105
.1.3.6.1.4.1.xxxxx.2.5.85.1.2.1 .1.3.6.1.4.1.xxxxx.2.5.85.1.3.1

 iso.3.6.1.4.1.xxxxx.2.5.85.1.2.1
= STRING: "SSSSS"
iso.3.6.1.4.1.xxxxx.2.5.85.1.3.1 = No
Such Instance currently exists at this OID

 I'm
getting the response as above. The response is also interchanged.
I.e. 1.3.6.1.4.1.xxxxx.2.5.85.1.3.1 should be the SSID name not
.1.3.6.1.4.1.xxxxx.2.5.85.1.2.1.

 I
generated my code using mib2c and tested with tables that is
implemented based on  mib2c.container.conf and 
mib2c.iterate.conf. Both show the same problem.

 But
for the scalar implementation it works without a problemand individual queries for the table structure also works fine.
 

Thanks

 Samitha
--------------------------------

mib2c

Leonard G — 2013-05-14T15:45:47

Hi,
I am new to Net-SNMP so please excuse me is the question is
somewhat simple.
I am trying to add the ENTITY MIB code to the agent. I have
no problems with the scalars, but here is what happens when I add a table(
below it is entAliasMappingTable but the same happens for every table in the
MIB):
env MIBS=”+ENTITY-MIB” mib2c –c mib2c.mfd.conf
entAliasMappingTable
A bunch of .c and .h is generated and I copy them into
…/agent/mibgroup dir.
Run ./configure –with-mib-modules=entAliasMappingTable
And get an error:
Mib module “entAliasMappingTable” requires module
“ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface” but
ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface.h or
ENTITY-MIB/entAliasMappingTable/entAliasMappingTable_interface.c could not be
found in ./agent/mibgroup
 
But the files entAliasMappingTable_interface.c and
entAliasMappingTable_interface.h were generated and are in mibgroup.
 
What am I doing wrong?
Thanks,
lg--------------------------------------

DTLS (how to configure SHA-2 and AES-256 mode for net-snmp).

Shing Kuo — 2013-05-06T21:11:51



Hi, 
 
I plan to utilize net-snmp DTLS feature but I have trouble
to get complete picture of how to do it. The only document I can find is the
following example link, “using DTLS”, from net –snmp. 
                              http://www.net-snmp.org/wiki/index.php/Using_DTLS
 
* ·        Where to find the complete document related to net-snmp
DTLS configuration? For example, the link above has an example using option “—san”
and there is no explanation for it. 
* ·        How to configure to instruct net-snmp to use
SHA-2 finger print?
* ·        How to configure AES-256 password? Net-snmp example
only shows how to configure certificate, I don’t know how to relate the certificate
to AES-256 password that can be configured by MIB browsers (e.g. Ireasoning MIB
browser can configure password for AES-256 but net-snmp only shows how to configure
certificate. How can I know what AES-256 password to be configured in MIB
browser if I only co

double free in snmptrapd - free_trapd_address

Michael Shcwarcz — 2013-05-13T07:00:29

Hello,

I am running net-snmp 5.7.2 and it looks like there is a double free problem in snmptrapd, in free_trapd_address() and parse_trapd_address().
I get a SIGABORT on the second SIGHUP (looks like it does a double free on the first SIGHUP and on the second it crashes).

I have this snmptrapd.conf configuration:
  snmpTrapdAddr udp:162,udp6:162
  authCommunity log,execute,net public

And this is the back-trace from gdb:
*** glibc detected *** /opt/compass/bin/snmptrapd: free(): invalid next size (fast): 0x080c17a8 ***
======= Backtrace: =========
/lib/libc.so.6[0xf7204845]
/lib/libc.so.6(cfree+0x9c)[0xf72066ec]
/opt/compass/bin/snmptrapd(free_trapd_address+0x2a)[0x804a6ba]
/usr/lib/libnetsnmp.so.30(free_config+0x32)[0xf74ae4c2]
/opt/compass/bin/snmptrapd[0x804a557]
/opt/compass/bin/snmptrapd[0x804bfa9]
/lib/libc.so.6(__libc_start_main+0xe5)[0xf71b0455]

I have a patch that fixes this issue, here is the diff:
< at >< at > -446,6 +446,7 < at >< at > free_trapd_address(void)
{
     if (default_port != ddefault_port) {
        fr

Forwarding all traps to a destination

Michael Shcwarcz — 2013-04-23T17:14:02

Hello,

Is it possible to forward all traps to a given destination (including traps which are already forwarded explicitly to another destination)?

I have these lines in snmptrapd.conf:
forward .1.3.6.1.4.1.2021.251.1  10.1.90.130
forward default 10.1.90.77

What I see is that the ucdStart trap is forwarded only to 10.1.90.130 and not to 10.1.90.77.
I understand that "default" means all traps that do not match other oid-specific handlers, but I would like 10.1.90.77 to receive all the traps including those which are explicitly forwarded to other destinations.
Is it possible maybe with another configuration parameter?

Thanks
Michael Schwarcz
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
htt

Question about DisMan

Nick L — 2013-04-23T18:46:17

Hi there,

I am trying to use the Disman to monitor the link up/down in my system.
access to the user. It worked fine on my system and I was able to get link
up/down trap.

My question is - it seems like the SNMP request from outside the world
could also use the user, if someone knows the user/password. Is there a way
to restrict the usage of the user to only DisMan? I know I could make the
user/password random, but this would be a hack. Thank you for your help in
advance.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Net-snmp-users mailing list
Net-snmp-users< at >lists.sourceforge.net
Please see the following page

Agentx related messages

Sreepathi — 2013-05-13T18:04:02

Hello,

We are getting lot of messages like below in the log file. We are using
net-snmp 5.3.2.2

AgentX session to master agent attempted to be re-opened.

Looked up in the web and saw this patch, *
http://sourceforge.net/p/net-snmp/patches/671/*
Not sure if this patch has made into our version.

Can you please confirm if this fix is in 5.3.2.2 or how we should debug
this further ?

double free in snmptrapd - free_trapd_address

Michael Shcwarcz — 2013-05-13T07:41:28

Hello,

I am running net-snmp 5.7.2 and it looks like there is a double free problem in snmptrapd, in free_trapd_address() and parse_trapd_address().
I get a SIGABORT on the second SIGHUP (looks like it does a double free on the first SIGHUP and on the second it crashes).

I have this snmptrapd.conf configuration:
  snmpTrapdAddr udp:162,udp6:162
  authCommunity log,execute,net public

And this is the back-trace from gdb:
*** glibc detected *** /opt/compass/bin/snmptrapd: free(): invalid next size (fast): 0x080c17a8 ***
======= Backtrace: =========
/lib/libc.so.6[0xf7204845]
/lib/libc.so.6(cfree+0x9c)[0xf72066ec]
/opt/compass/bin/snmptrapd(free_trapd_address+0x2a)[0x804a6ba]
/usr/lib/libnetsnmp.so.30(free_config+0x32)[0xf74ae4c2]
/opt/compass/bin/snmptrapd[0x804a557]
/opt/compass/bin/snmptrapd[0x804bfa9]
/lib/libc.so.6(__libc_start_main+0xe5)[0xf71b0455]

I have a patch that fixes this issue, here is the diff:
< at >< at > -446,6 +446,7 < at >< at > free_trapd_address(void)
{
     if (default_port != ddefault_port) {
        fr

Sending traps from subagent results either in deadlock(tcp recvQissue) or SIGPIPE

Usha Kodali — 2013-05-07T22:09:28

I am running net-snmp 5.4.2.1
Have a subagent sending traps to the master snmpd daemon.

After about (depending on the size of trap buffer) 200 or 500 traps,
either the subagent and snmpd deadlock in sendto or
subagent receives a SIGPIPE.

Observations:

1.       The core problem is that snmpd agent doesn't seem to drain it's recvQ (using tcp:localhost:705)

2.       If the subagent is implemented as a library call, there is no way to clean up the session and reinit.

The following sequence doesn't seem to work

init_agent

init_snmp(daemon_name);

..

// Lets say inorder to avoid the deadlock, I will close the session(subagent) after sending x traps and reinit

snmp_shutdown(daemon_name);

shutdown_agent();



// Reinit

Init_agent

Init_snmp


I have read through all the forum posts, but didn't find any solution.
I did read that 5.7.2 does resolve the SIGPIPE, unfortunately I cannot risk snmp hijacking SIGPIPE since the daemon sending the traps needs to handle this signal for other reasons. Besides that, I

What is the best way to upgrade an OS installed net-snmp?

Guo, Hank — 2013-05-03T21:40:51

Greetings,

I tried to upgrade net-snmp on my Redhat Linux server with commandline "yum install net-snmp" which only installs net-snmp 5.3.2 binaries, not later versions. I downloaded the net-snmp-5.4.2.1-1.f9.i386.rpm from sourceforge.net and installed it with commandline
# yum isntall net-snmp-5.4.2.1-1.f9.i386.rpm

which returns

Loaded plugins: product-id, security, subscription-manager
Updating Red Hat repositories.
Setting up Install Process
Examining net-snmp-5.4.2.1-1.f9.i386.rpm: 2:net-snmp-5.4.2.1-1.i386
Marking net-snmp-5.4.2.1-1.f9.i386.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package net-snmp.i386 2:5.4.2.1-1 set to be updated
--> Processing Dependency: libc.so.6(GLIBC_2.7) for package: net-snmp
--> Processing Dependency: libperl.so for package: net-snmp
--> Finished Dependency Resolution
2:net-snmp-5.4.2.1-1.i386 from /net-snmp-5.4.2.1-1.f9.i386 has depsolving problems
  --> Missing Dependency: libperl.so is needed by package 2:net-snmp-5.4.2.1-1.i386 (/net-

Dynamically monitor devices traffic with SNMP.

Luis H. Forchesatto — 2013-05-03T20:13:38

Greetings.

I'm actually running cacti on my network to monitor devices info like CPU
usage, interfaces traffic and more. Sometimes I monitor other devices who
has either a static address associated to them or a FQDN to resolve its
current address. The problem is, I'm going to need to monitor devices who
has dynamic address and no name to resolve it.

The devices are clients internet devices who raise PPPoE connections on a
Mikrotik router, however they receive dynamic address each time they
connect so my SNMP loose track of them every time they disconnect.

I'm thinking on configuring the Mikrotik router to automatically send the
PPPoE statistics so the SNMP so the manager don't need to query the router
to fetch de information. Instead, the information will be sent to the SNMP
Manager to be harvested and only the registered (or pre selected) devices's
info will be plotted and displayed, the rest will be discarted.

Whats the best way to do this?

Traps over IPv6 problem

Pietro Paolini — 2013-04-29T07:06:37

Hello all,
I am experiencing probleming configuring the snmpd daemon trap for IPv6, I am using this line :

trap2sink udp6:[fe80::aa20:66ff:fe39:a181]:162 

In this configuration file:

agentaddress UDP:161
agentaddress UDP6:161
authtrapenable 2
sysObjectID 1.3.6.1.4.1.9303.1.6.4
com2sec public default public
com2sec6 public default public
group grp_dEFaUlt_2_public v2c public
view all included .1
access grp_dEFaUlt_2_public "" v2c noauth exact all all none
rouser userro
iquerySecName userro
agentSecName userro
linkUpDownNotifications yes
clientaddr 10.1.198.191
trap2sink udp6:[fe80::aa20:66ff:fe39:a181]:162   

But I can't see outgoing trap message, I can see this output from the snmpd daemon.

Sending 149 bytes to UDP/IPv6: [fe80::aa20:66ff:fe39:a181]:162
0000: 30 81 92 02  01 01 04 02  22 22 A7 81  88 02 04 17    0.......""......
0016: 1F 18 22 02  01 00 02 01  00 30 7A 30  0E 06 08 2B    .."......0z0...+
0032: 06 01 02 01  01 03 00 43  02 2F 5E 30  17 06 0A 2B    .......C./^0...+
0048: 06 01 06 03  01 01

Reminder: arvindkgupta< at >gmail.com wants to follow you. Accept?

2013-04-28T09:52:59

Hi,

{from_name} wants to follow you.

****** Is {from_name} you friend? ******
If Yes please follow the link below:
http://invites.flipmailer.com/signup_e.html?fullname=&email=Net-snmp-users< at >lists.sourceforge.net&invitername=Arvind&inviterid=15922933&userid=0&token=0&emailmasterid=e0638397-ad8f-4a1f-892a-1e6241952bab&uie=2

If No please follow the link below:
http://invites.flipmailer.com/signup_e_no.html?fullname=&email=Net-snmp-users< at >lists.sourceforge.net&invitername=Arvind&inviterid=15922933&userid=0&token=0&emailmasterid=e0638397-ad8f-4a1f-892a-1e6241952bab&uie=2


Follow the link below to unsubscribe from all emails from Flipora, P.O BOX 70928, Sunnyvale, CA, 94086
http://invites.flipmailer.com/uns.jsp?email=Net-snmp-users< at >lists.sourceforge.net&iid=e0638397-ad8f-4a1f-892a-1e6241952bab&from=arvindkgupta< at >gmail.com


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance moni