gmane.network.snmp4j.general

MIB parser/browser

Jonathan Van den Schrieck AETHIS — 2013-06-18T08:03:45

Dear all,

I am looking for a way to parse a MIB as I would like to create a MIB Browser (tree view of a MIB).
SNMP4J-SMI seemed to be the right tool for it but I figured out that it can "only" compile MIB's and provide OID <- > variable name mapping.
Am I wrong about SNMP4J-SMI ? If not, does anyone know a good open-source MIB parser?

Thank you !

Regards,

jvs

minreddy minreddy

minreddy minreddy — 2013-06-16T12:11:42

kklq http://jademasszazs.com/xhox/RNDCHR,3,15%/ubzxdqb/nvqka/ecwn.htm




cfp

SNMPv3 encryption related questions

Pimm, Kevin H. (TippingPoint — 2013-06-12T18:36:23

Hello.  We use snmp4j in our product and are currently undergoing UC APL testing.  As part of this testing some questions regarding our snmpv3 encryption implementation have come up.

Actually, my first question would be, is this the right direction for these questions, or do I need to look to the JSSE/JCE for these answers?

Here are the UC APL questions we have yet to answer.  Does snmp4j support any of the following capabilities?

The product shall support the capability to use Data Encryption Standard-Cipher Block Chaining (DES-CBC) (usmDESPrivProtocol) with a 16 octet (128 bit) input key, as specified in RFC 3414, as an encryption cipher for SNMPv3.

The product shall support the capability to use the CFB-AES128 encryption cipher usmAesCfb128PrivProtocol for SNMPv3 as defined in RFC 3826 and specify this as the default encryption cipher for SNMPv3.

The product using SNMPv3 shall implement the key-localization mechanism.



Thank You
Kevin

Unusual Delay in sr.nextBytes()

2013-05-30T14:13:16

Hi,
I've been using SNMP4J 2.1.0 (with JDK 1.7.0_05 on a VM with RHEL 2.6.32-279.2.1.el6.x86_64) for a month or so now and have noticed an unusual performance variation when running my trap-sender test program.  One time it will run in less than a second, the next time 10-30 seconds.

I reproduced the delay with org.snmp4j.tools.console.SnmpRequest using the following command-line:

java -classpath \
$COMMON/lib/log4j.jar:\
$SNMP4J/snmp4j-2.1.0/dist/lib/SNMP4J.jar:\
 org.snmp4j.tools.console.SnmpRequest \
-p TRAP \
-a MD5 \
-A myotherpassword \
-u myuser \
-v 3 \
-x DES \
-X mypassword \
localhost/162 \
"1.3.6.1.2.1.1.3.0={t}0" \
"1.3.6.1.6.3.1.1.4.1.0={o}1.3.6.1.6.3.1.1.5.1" \
"1.3.6.1.2.1.1.1.0={s}System XYZ, Version N.M"

I loaded the SNMP4J 2.1.0 source into Eclipse and started adding debug trace statements.  The delay, when it happens, was occurring in the Salt constructor within the method call to sr.nextBytes(rnd).

protected Salt() {
    byte[] rnd = new byte[8];
    try {
      SecureRandom

Performance hotspot in Cipher.getInstance() method call

Praveen Jain — 2013-05-30T11:03:24

We are using SNMP4J version 1.11.4 for a legacy application running in Java
1.4 environment. The application behaved slower than expected and profiling
showed that there is hotspot in PrivDES.encrypt() method. This method in
turn calls javax.crypto.Cipher.getInstance(String) method (apparently on
each message transmission) and Cipher.getInstance(String) is the expensive
and CPU intensive call. Can you please suggest if:

1.       This might be due wrong way of calling SNMP4J api (and also point
to a reference code for correct usage to prevent this problem)

2.       Is this an inherent problem with Java 1.4 code?

3.       Is this a problem with SNMP 1.11.4 code (it is not caching the
obtained cipher object)?

Thanks in advance for the help.

 

-Praveen

V3 Not In Time Window and Client Clock Drift

Elise Atkins — 2013-05-23T15:52:07

We have been successfully using snmp4j using v3 for both requests and 
traps but have recently run into a problem with a client whose engine 
time clock runs slow.

Initial time synchronization  goes ok and the  SNMP v3 requests and 
responses flow properly.  Eventually this client's engine time becomes 
more 150 seconds behind the time SNMP4j is expecting and the responses 
are marked as Not In Time.  I have looked at RFC 2574 Section 3.2 
subsection 7b and the code in the UsmTimeTable class, checkTime method 
and have questions about the order of testing for timeliness.

Based on the RFC, I would expect the code to test for the conditions in 
1 first and update if needed before testing the conditions in 2 but the 
code seems to test in the reverse order. Testing 1 and updating reboots 
and time first will allow the client's clock to drift (fast or slow) as 
long as it is always increasing and remain in the time window. Am I 
missing something here?

Elise Atkins

The RFC says:

3.2.  Processing an Incoming

Fwd: Fwd: Table Model

Aiman Farhat — 2013-05-03T09:57:22

Hi Frank,

 Thanks for your response. According to instrumentation guide I am updating
the table model before the request is processed based on external event.
Our table will be small tables doesn't exceed 20 row max. The problem we
are having is not with the order, it is actually with the content. I have
a test data as follow:

Set1:
Component_set1_1
Component_set1_2
Component_set1_3

Set2:
Component_set2_1
Component_set2_2
Component_set2_3

When I send a request from a Mib browser, the table content gets mixed. For
example the data in the table could be something like that:

Component_set1_1
Component_set2_2
Component_set1_3

Which is not what I have expected as my model should have either Set1 or
Set2 but not mix of both.

As you know I am implementing MOServerLookupListener interface and in
queryEvent(MOServerLookupEvent event)  I am building my table model. I know
queryEvent method get called multiple times based on number of columns and
rows, and maybe that's why I am getting mixed results even though

Why 'stop' on SocketException in DefaultUdpTransportMapping.ListenThread?

Kelly Dyer — 2013-04-30T21:05:59

I am a little confused by this change.  

We have run into this issue, with a sporadic socket closed exception, the cause of which we have not been able to identify.  What we are seeing is that the new behavior results in a busy-loop, since we go right back to a receive that is guaranteed to fail.  

This strikes me as a case where we need to either remediate the socket directly, or cancel the listener.  What am I missing?

Regards,
Kelly.


On 12.07.2011 14:02, Fock, Frank wrote:

Cannot change the snmp password remotely

Vilagut Abad, Roger — 2013-04-17T11:58:14

Hello,

In order to remotely change the authentication password of a user I do the following steps:


1.       Get the usmUsrSpinLock.0 and save in sValue

2.       I obtain the old key of the user whose password I want to change as follows:
byte[] oldKey = snmp.getUSM().getUser(engineId, new OctetString(user)).getUsmUser().getAuthenticationPassphrase();

3.       Then I generate the new key as follows:

byte[] newKey = SecurityProtocols.getInstance().passwordToKey(AuthMD5.ID, new OctetString(newPassword), engineId.toByteArray());

4.       Then I generate the key change value as follows:

byte[] keyChange = new AuthMD5().changeDelta(oldKey, newKey, random.getBytes());

5.       And finally I do a SET to the usmUserTable:

SET(usmUserSpinLock.0=sValue, usmUserAuthKeyChange=keyChange, usmUserPublic=random)

When I read the usmUserTable MIB table after the SET I can see the random value in the usmUserPublic column, however when I do a request using the new password the agent responds that the password is not c

Sending v1/2c Traps With Authentication

m k — 2013-04-16T14:40:31

Let's say I have a community user with a name like "public", which is associated with a v3 user security name for compatibility purposes. Does SNMP4j somehow support explicitly sending a trap on behalf of "public", so that trap-receivers with v1/2c authentication can recognize it?

Thanks

Intercepting gets and sets from the Network Manager to individual cells in an MOTable

Charan, Brad — 2013-04-04T16:32:12

We have been tasked to create an SNMP agent for our application.   Our application can have multiple instances within the same JVM, and we have been able to create an agent using MOTables that shows each instance as a row in a table to the Network Manager.    However we are struggling with how to go about intercepting the 'getValue' or 'setValue' to each cell in this table as we have been able to do quite easily for MOScalar - by simply subclassing it and over-riding the getValue and setValue methods.

We don't see the analogue for the MOScalar getValue/setValue in DefaultMOTable.    So, we tried using VariantVariable for each cell in the table.  However, we have found that the VariantVariable is overwritten when a set is received by the SNMP4J from the NetworkManager.  So, the VariantVariableCallback 'updateVariable' works well, until a 'set' is received from the Network Manager -- after which the VariantVariableCallback stops working because the VariableVariable object appears to have been de-referenced.

SET access to created managed objects

Marek Hajduczenia — 2013-04-02T09:13:04

Dear colleagues, 

 

I create a very simple scalar in my agent:

 

OID oidTest = new OID("1.3.6.1.3.22.1.5.0");

MOScalar sysScalarTest = new MOScalar(oidTest,
MOAccessImpl.ACCESS_READ_WRITE, new Integer32(15));

server.registerManagedObject(sysScalarTest);

 

and then would like to change its value remotely using the MIB browser. What
I get back on the debug in Eclipse is the "Error 'Authorization error'
generated at: 1.3.6.1.3.22.1.5.0 = 123" preceded by debug information about
the message exchange and status exchange between agent and MIB browser.
Everything seems fine, i.e., "private" community is found, request with the
private scope was created and proper object was found. However, when time to
change came around, no change was done. 

 

===========================================================

 

20353 [DefaultUDPTransportMapping_127.0.0.1/2001] DEBUG
org.snmp4j.transport.DefaultUdpTransportMapping  - Received message from
localhost/127.0.0.1/56019 with length 45:
30:2b:02:01:01:04:07:70:72:69:

SNMPv3 Trap reception where autodiscovery of EID is notpossible

Ganesh, Lakshmi Prabha — 2013-04-02T08:47:09

Hi,

In our management environment, some of the agents operate in push only mechanism where they only send out the SNMPv3 traps to management station and will not respond for any of the SNMPGet's.
In this scenario, autodiscovery of EngineID fails hence the management station is doing the following -


1.)     Creating the user with the EID of the agent  (fixed value that is known to the administrator)

new USM(SecurityProtocols.getInstance(),new OctetString(eID), 0);

2.)     Adding this to the MPv3 model in addition to it's local EID that was added during initialization.
Snmp.getMessageDispatcher().addMessageProcessingModel(new MPv3(usm));

Can someone please help clarify if this is the right approach as though the specification recommends usage of a unique EID, to unblock the reception of traps this is being done.

Also, when trying to delete the old EID anytime the user information is modified or deleted, the below code is deleting the MPv3 model altogether. So not using this code leads to only additions

Creating public / private v2c communities

Marek Hajduczenia — 2013-03-31T09:46:43

Dear colleagues, 

Following the online tutorials and the structure of the BaseAgent.java
class, I am trying to add read and write community definitions into my
project. I am extending the BaseAgent.java class, and I have done the
following changes to the following extensions:

[1] changes in method protected void addCommunities(SnmpCommunityMIB
communityMIB)

              Variable[] com2sec1 = new Variable[] 

              { 

                     new OctetString("public"),

                     new OctetString("cpublic"), // security name

                     getAgent().getContextEngineID(), // local engine ID

                     new OctetString("public"), // default context name

                     new OctetString(), // transport tag

                     new Integer32(StorageType.nonVolatile), // storage type

                     new Integer32(RowStatus.active) // row status

              };

              

              Variable[] com2sec2 = new Variable[] 

              {

Registering multiple managed objects andorg.snmp4j.agent.DuplicateRegistrationException error

Marek Hajduczenia — 2013-03-30T13:35:21

Dear colleagues, 

 

I am continuing the development of my project and now I have a rather simple
task that keeps on generating errors for some reason I do not quite
understand. But let me first describe what I am doing and what the output
is:

 

[1] I create 4 individual OID to be used later on 

 

OID oidLocalHostName = new OID(".1.3.6.1.3.22.1.1"); // nomeServidor 

OID oidRootFolder = new OID(".1.3.6.1.3.22.1.2"); // diretoriaBase 

OID oidDefaultPlayer = new OID(".1.3.6.1.3.22.1.3"); // musicPlayer 

OID oidNumberOfMusicFiles = new OID(".1.3.6.1.3.22.1.4"); //
nTotalmMsicasDisp

 

[2] then I try to register individual new managed objects as follows

 

server.registerManagedObject(MOCreator.createReadOnly(oidLocalHostName,
java.net.InetAddress.getLocalHost().getHostName()));

server.registerManagedObject(MOCreator.createReadOnly(oidDefaultPlayer,
"VLC")); // HERE IS THE LINE WITH ERROR

server.registerManagedObject(MOCreator.createReadOnly(oidRootFolder,
folder.getAbsolutePath()));

server.registerM

HP LaserJet usage-printer-total-charge

Константин Лохтин — 2013-03-30T13:08:29

I send SNMP reqest to HP LaserJet 3005 with MIB 
"usage-printer-total-charge" (1.3.6.1.4.1.11.2.3.9.4.2.1.1.16.1.2.0) and 
get the following response:
======================
1.3.6.1.4.1.11.2.3.9.4.2.1.1.16.1.2.0 = 47:9b:54:00
======================
Printer WEB interface shows me total count of printed pages = 79528.
Can anybody tell me how 47:9b:54:00 corresponds with 79528 ?
I tried any binary representations, forward and backward. I tried ASCII 
codes. But I cannot find any connection!

SNMP4J 2.2.0 and SNMP4J-SMI 1.0 Released

Frank Fock — 2013-03-27T22:41:25

Hi,

SNMP4J 2.2.0 and SNMP4-SMI 1.0 have been released and are available for
download from http://www.snmp4j.org/html/download.html

The new SNMP4J-SMI provides MIB support for any SNMP4J application
without the need of changing existing code. Adding a few lines of code
is all you need to do. For more details see:
http://www.snmp4j.org/smi/doc/com/snmp4j/smi/package-summary.html

With SNMP4J-SMI, you can compile MIB modules at runtime into your
application and OID values are displayed as object names, SMI variables can
be parsed from their DISPLAY-HINT representation or enumeration value
for example.

SNMP4J 2.2.0 contains several enhancements but also a major bugfix regarding
the processing of SNMPv3 reports. To ensure higher security and 
compatibility
with RFC 3412 and 3414, reports will be sent back to the command generator
with the same security level as the command was received, except for a few
exceptions described in the RFCs.
By configuration the behavior of SNMP4J < 2.2.0 can be restored and also a

Maven checksum issue with v2.1.0

Duncan Jones — 2013-03-12T16:07:35

Hi,

I just tried to use v2.1.0 from Maven and received checksum errors for the JAR file:

[WARNING] Checksum validation failed, expected 10e37bdf61fd8f870d36570c4086352762963f86 but is 60c86ea9e41d4c46d5c035470f4fee89c5f7f20e for http://artifactory/artifactory/libs-release/org/snmp4j/snmp4j/2.1.0/snmp4j-2.1.0.jar
[WARNING] Checksum validation failed, expected 10e37bdf61fd8f870d36570c4086352762963f86 but is 60c86ea9e41d4c46d5c035470f4fee89c5f7f20e for http://artifactory/artifactory/libs-release/org/snmp4j/snmp4j/2.1.0/snmp4j-2.1.0.jar


(Note: this is a WARNING because I've told my Artifactory to ignore checksum errors for https://oosnmp.net/dist/release)

According to an old mailing list entry (http://lists.agentpp.org/pipermail/snmp4j/2012-March/004801.html) this issue was present in v2.0.3 and should be resolved "with the next version". Has anyone else experienced this issue with v2.1.0?


Kind regards,

Duncan Jones CISSP
Advanced Solutions Group Manager

Thales
Jupiter House, Station Road, Cambridge, CB

Question about User Localization (Agent side)

m k — 2013-03-12T01:53:20

Hello,

I have a confusion I'd like to clear up about localization. So, if I understand correctly, these should be the results when adding a user according
to different function signatures:

usm.addUser(user.getSecurityName(), usm.getLocalEngineID(), user);  <-- User is localized (password + engine + algorithm = key)

usm.addUser(user.getSecurityName(), null, user) <-- Not localized  ? (password + algorithm = key)

usm.addUser(user.getSecurityName(), user) <-- Not localized ? (password + algorithm = key)


....

However, I'm confused, because I have tried to add the user in all these ways, but I never have to change this command:

"snmpget -v 3 -u MYUSER -l authPriv -a SHA -A MYUSERAuthPassword -x DES -X MYUSERPrivPassword localhost:1161 .1.3.6.1.2.1.1.1.0"

The command ALWAYS works. I would think that I should need to change some parameter or something to indicate that I'm using a localized key or non-localized key, but I don't. 
Is there some logic going on behind the scenes on the manager side or SNMP4j

Please Help, Notification Filtering (code included)

m k — 2013-03-06T15:20:59

Hello,

I'm trying to figure out notification filtering, and only having a bit of success. I managed to set up a notification profile that is checked, but it turns out that no matter what I do,
 ALL notifications are blocked. In this example, I'm trying to ALLOW the coldstart notification to notify--and its not working. I'd really appreciate some help.


Thanks

.....

The following is the code, but this might look mangled on the mailing list, so I'm including a pastebin, too.

http://pastebin.com/ti0efAMv


Code:

/* Works. Creates filter profile */

notificationMIB.getNotifyFilterProfileTable().addRow(
                    notificationMIB.getNotifyFilterProfileTable().createRow(
                        new OctetString("v2c").toSubIndex(true), // true - implied length    
                        new Variable[]{
                            new OctetString("onlyDefault"),
                            new Integer32(StorageType.permanent),
                            new Integer32(RowStatus.active)}));

agent-jmx methods

david pocivalnik — 2013-03-04T15:50:17

Hi,

i'm having a method that should add actions to the MIB, and I also add 
the OID's to the ACTION_OIDS array.

here's some code:


Object[][] ret = new Object[mappings.length][3];
   for (int cnt = 0; cnt < mappings.length; cnt++) {
     ret[cnt][0] = mappings[cnt].getOid(dynIndex);
     MBeanStateInfo[] states = new MBeanStateInfo[] {
new MBeanStateInfo(2, null, null) };
     ret[cnt][1] = states;
     MBeanActionInfo[] actions = new MBeanActionInfo[] {
new MBeanActionInfo(
mappings[cnt].getActionDef().getActionId(),
mappings[cnt].getActionDef().getMemberName(),
new Object[0] )
};
     ret[cnt][2] = actions;
   }
   scalarSupportActions.addAll(new ObjectName(name), ret);

consider that the OID is correct (everytime an action is found I print 
the OID) and unique, also the ActionId is different for each action. A 
MOScalar is also registered at the server.

I can call one method (the one method I created long time ago), but none 
of the new methods I just created today.

Can you think of anything