Configuring Teo En Ming's Cisco ASA 5516-X Firewall to Send Syslog Messages to Kiwi Syslog Server - Free Edition

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: Configuring Teo En Ming's Cisco ASA 5516-X Firewall to Send Syslog 
Messages to Kiwi Syslog Server - Free Edition

Good day from Singapore,

These are the Cisco ASA CLI commands:

config terminal
logging enable
logging host inside 192.168.1.101
logging trap debugging
end
write memory

Reference guides
=

[1] How to configure syslog on Cisco ASA firewalls
Link: 
https://support.auvik.com/hc/en-us/articles/360048078372-How-to-configure-syslog-on-Cisco-ASA-firewalls

[2] Chapter: Configuring Logging
Link: 
https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/monitor_syslog.html#68764

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems
7 June 2024 Friday 9.00 PM Singapore Time







___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

build net-snmp with AES192/AES256 support to PowerC

[Avner Flesch via Net-snmp-users]

Hi,

I am trying to build net-snmp with AES192/AES256 support to PowerPC machine - 
it is old but I have to make it work (it already works for me with AES 128)
I am using eldk4.2 (I don't want to upgrade because it is newer libc, and will 
need to build everything in my system)
I have openssl 0.9.8b in my toolchain, and I set the --with-openssl option, I 
even tried with newer openssl version 1.1.1
But nothing help - I get in the configure:
"checking for authentication support... configure: error: Asked to use OpenSSL 
but I couldn't find it."

I am just trying to understand what I miss because with a newer eldk (5.6) - I 
do have success (but as I mentioned, I need to stay with the old eldk)

The configure file looks like that:
./configure --enable-blumenthal-aes --host=ppc-linux --with-endianness=big 
--enable-ipv6 --enable-privacy --enable-des --enable-internal-md5 --without-rpm 
--with-openssl=/opt/eldk/ppc_6xx/usr --enable-mini-agent 
--with-default-snmp-version=2 --enable-shared --with-cflags="-O2 -fsigned-char" 
--with-sys-location=Unknown --with-logfile=/var/log/snmpd.log 
--with-persistent-directory=/var/net-snmp 
--with-out-mib-modules=examples/ucdDemoPublic --sysconfdir=/etc --with-pic 
--disable-embedded-perl --with-perl-modules=no 
--with-sys-contact=root@localhost --with-mib-modules=agentx --disable-manuals 
--disable-scripts --disable-mibs --disable-mib-loading --disable-deprecated 
--with-out-mib-modules="mibII mibII/snmp_mib mibII/system_mib mibII/sysORTable 
mibII/vacm_vars"

How can I make it work? (The openssl so file does exist)

Thanks

Avner Flesch

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: what is right place to load subagent configuration

[Андрей Лобов]

I was able to catch the temporary file generated by net-snmp-config
and learnt from it that I can just write manually init_MyModuleName and
shutdown_MyModuleName functions and should be good.
Thanks, the question is closed.

вт, 7 мая 2024 г. в 15:17, Андрей Лобов :

> And another related question - how to hook on agent shutdown in order to
> properly release the resources.
>
> Thanks,
> Andrey
>
> пн, 6 мая 2024 г. в 18:03, Андрей Лобов :
>
>> He everyone,
>>
>> I write subagent, referring to the guide
>> http://www.net-snmp.org/wiki/index.php/TUT:Writing_a_Subagent
>> So far so good - I'm able to get the simple scalar metric.
>> Now I need to use some parameters, which should be loaded from
>> configuration files.
>> From what I got I need to use register_config_handler, but what I do not
>> quite get - what should be the right place to call it and when the config
>> file will actually be read, as I need to make sure somehow I've got all the
>> parameters at the agent startup.
>> Is the same Netsnmp_Node_Handler function OK to use or are there any
>> other handlers I could use to hook on agent initialization?
>>
>> Thank you in advance
>>
>> Regards,
>> Andrey
>>
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: what is right place to load subagent configuration

[Андрей Лобов]

And another related question - how to hook on agent shutdown in order to
properly release the resources.

Thanks,
Andrey

пн, 6 мая 2024 г. в 18:03, Андрей Лобов :

> He everyone,
>
> I write subagent, referring to the guide
> http://www.net-snmp.org/wiki/index.php/TUT:Writing_a_Subagent
> So far so good - I'm able to get the simple scalar metric.
> Now I need to use some parameters, which should be loaded from
> configuration files.
> From what I got I need to use register_config_handler, but what I do not
> quite get - what should be the right place to call it and when the config
> file will actually be read, as I need to make sure somehow I've got all the
> parameters at the agent startup.
> Is the same Netsnmp_Node_Handler function OK to use or are there any other
> handlers I could use to hook on agent initialization?
>
> Thank you in advance
>
> Regards,
> Andrey
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

what is right place to load subagent configuration

[Андрей Лобов]

He everyone,

I write subagent, referring to the guide
http://www.net-snmp.org/wiki/index.php/TUT:Writing_a_Subagent
So far so good - I'm able to get the simple scalar metric.
Now I need to use some parameters, which should be loaded from
configuration files.
>From what I got I need to use register_config_handler, but what I do not
quite get - what should be the right place to call it and when the config
file will actually be read, as I need to make sure somehow I've got all the
parameters at the agent startup.
Is the same Netsnmp_Node_Handler function OK to use or are there any other
handlers I could use to hook on agent initialization?

Thank you in advance

Regards,
Andrey
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Tutorial not responding correctly

[Johnnie W Adams]

Hi,

 I'm working through the SNMPv3 Options tutorial and finding that the
commands are not returning the correct results. For instance:

snmpgetnext -v 3 -n "" -u noAuthUser -l noAuthNoPriv test.net-snmp.org
sysUpTime

snmpgetnext: Timeout (Sub-id not found: (top) -> sysUpTime)

Thanks,

 John A
-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Creating Local User for Web login on the HPE MSR954 Router

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: Creating Local User for Web login on the HPE MSR954 Router

Good day from Singapore,

Author: Mr. Turritopsis Dohrnii Teo En Ming
Country: Singapore
Date: 12 Apr 2024 Friday

Reference guide: Quick Start Configuration Guide for Accessing the Web 
Interface of a Device Without a Default IP
Link: https://www.h3c.com/en/d_202206/1619529_294551_0.htm

system-view
[HPE]local-user admin
[HPE-luser-manage-admin]password simple password2024!
Updating user information. Please wait... ...
[HPE-luser-manage-admin]service-type https
[HPE-luser-manage-admin]authorization-attribute user-role network-admin
[HPE-luser-manage-admin]quit

Save the configuration settings.

[HPE]save

>From now on, you will be able to configure all the router settings using the 
>web interface.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems







___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Teo En Ming's Notes on Upgrading Firmware on HPE MSR954 Router and Enabling Web Interface - Version 1

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: Teo En Ming's Notes on Upgrading Firmware on HPE MSR954 Router and 
Enabling Web Interface - Version 1

Author: Mr. Turritopsis Dohrnii Teo En Ming
Country: Singapore
Date of Action: 11 Apr 2024 Thursday
Time: 8.30 PM to 11.00 PM

Step 1: Configuring IP address on router port GE1 to prepare for TFTP operation
===

Startup configuration file does not exist.
Performing automatic configuration... Press CTRL_D to break.

Automatic configuration attempt: 1.
Not ready for automatic configuration: no interface available.
Waiting for the next...

Automatic configuration attempt: 2.
Interface used: Vlan-interface1.
Enable DHCP client on Vlan-interface1.
Vlan-interface1 failed to obtain IP address.
Waiting for the next...
Automatic configuration is aborted.
Line con0 is available.


Press ENTER to get started.

system-view

[HPE]interface Vlan-interface 1

[HPE-Vlan-interface1]ip address 192.168.1.1 255.255.255.0

[HPE-Vlan-interface1]end

show ip int br
*down: administratively down
(s): spoofing  (l): loopback
InterfacePhysical Protocol IP Address  Description
GE0/0down down --  --
GE0/5down down --  --
Vlan1up   up   192.168.1.1 --

Step 2: Download and install Open TFTP Server and Configure Management 
Workstation
=

Download Open TFTP Server from https://sourceforge.net/projects/tftp-server/

Install Open TFTP Server Installer.

Configure IP address of management workstation as 192.168.1.2/24

Copy LATEST firmware image file MSR954-CMW710-R6728P27.ipe to C:\OpenTFTPServer

Double click RunStandAloneMT.bat

Turn off GlassWire firewall.

Turn off Windows Defender firewall.

Step 3: TFTP Operation for the firmware


tftp 192.168.1.2 get MSR954-CMW710-R6728P27.ipe

The following attempt at installing the latest firmware failed because of 
insufficient space on the flash memory.

boot-loader file flash:/MSR954-CMW710-R6728P27.ipe main
Verifying the file flash:/MSR954-CMW710-R6728P27.ipe on the device...Done.
HPE MSR954 images in IPE:
  msr954-cmw710-boot-r6728p27.bin
  msr954-cmw710-system-r6728p27.bin
  msr954-cmw710-wifidog-r6728p27.bin
  msr954-cmw710-wwd-r6728p27.bin
  msr954-cmw710-security-r6728p27.bin
  msr954-cmw710-voice-r6728p27.bin
  msr954-cmw710-data-r6728p27.bin
This command will set the main startup software images. Continue? [Y/N]:y
Add images to the device.
No sufficient storage space on the device.

Step 4: Delete unnecessary files on the flash memory to free up space 
=

delete flash:/msr954*.bin
Delete flash:/msr954-cmw710-boot-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-boot-r0306p30.bin... Done.
Delete flash:/msr954-cmw710-data-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-data-r0306p30.bin... Done.
Delete flash:/msr954-cmw710-security-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-security-r0306p30.bin... Done.
Delete flash:/msr954-cmw710-system-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-system-r0306p30.bin... Done.
Delete flash:/msr954-cmw710-voice-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-voice-r0306p30.bin... Done.
Delete flash:/msr954-cmw710-wifidog-r0306p30.bin? [Y/N]:y
Deleting file flash:/msr954-cmw710-wifidog-r0306p30.bin... Done.


delete flash:/logfile/*
Delete flash:/logfile/logfile1.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile1.log.gz... Done.
Delete flash:/logfile/logfile10.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile10.log.gz... Done.
Delete flash:/logfile/logfile2.log? [Y/N]:y
Deleting file flash:/logfile/logfile2.log... Done.
Delete flash:/logfile/logfile2.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile2.log.gz... Done.
Delete flash:/logfile/logfile3.log? [Y/N]:y
Deleting file flash:/logfile/logfile3.log... Done.
Delete flash:/logfile/logfile4.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile4.log.gz... Done.
Delete flash:/logfile/logfile5.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile5.log.gz... Done.
Delete flash:/logfile/logfile6.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile6.log.gz... Done.
Delete flash:/logfile/logfile7.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile7.log.gz... Done.
Delete flash:/logfile/logfile8.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile8.log.gz... Done.
Delete flash:/logfile/logfile9.log.gz? [Y/N]:y
Deleting file flash:/logfile/logfile9.log.gz... Done.

dir flash:/
Directory of flash:
   0 -rw-93636608 Jan 01 2011 00:29:51   MSR954-CMW710-R6728P27.ipe
   1 drw-   - Jan 01 2011 00:00:10   diagfile
   2 -rw- 735 Jan 01 2011 00:07:25   hostkey
   3 -rw- 228 Jan 01 2011 00:12:54   ifindex.dat
   4 drw-   

HPE MSR954 Router Console Bootup Messages and Show Version

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: HPE MSR954 Router Console Bootup Messages and Show Version

Good day from Singapore,

I have bought a refurbished/second hand/used HPE MSR954 router at Canberra Road 
for $30 on 30 Mar 2024 Saturday at about 10 pm.

Serial Number: CN11DB

MAC address: 4CAEA37BD937

Console bootup messages below
=

a▒▒▒Fh▒▒f▒▒CC▒▒▒ѕ▒▒is starting...
Press Ctrl+D to access BASIC-BOOTWARE MENU
Booting Normal Extend BootWare


*  *
*   HPE MSR954 BootWare, Version 1.30  *
*  *

Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP

Compiled Date   : May 16 2016
CPU ID  : 0xa
CPU L1 Cache: 32KB
CPU L2 Cache: 256KB
Memory Type : DDR3 SDRAM
Memory Size : 1024MB
Flash Size  : 256MB
PCB Version : 2.0


BootWare Validating...
Press Ctrl+B to access EXTENDED-BOOTWARE MENU...
Loading the main image files...
Loading file flash:/msr954-cmw710-system-r0306p30.bin...
.Done.
Loading file flash:/msr954-cmw710-security-r0306p30.bin...Done.
Loading file flash:/msr954-cmw710-voice-r0306p30.bin...Done.
Loading file flash:/msr954-cmw710-data-r0306p30.bin..Done.
Loading file flash:/msr954-cmw710-wifidog-r0306p30.bin...Done.
Loading file flash:/msr954-cmw710-boot-r0306p30.bin..Done.

Image file flash:/msr954-cmw710-boot-r0306p30.bin is self-decompressing.








..Done.
System image is starting...
Cryptographic algorithms tests passed.

Startup configuration file does not exist.
Performing automatic configuration... Press CTRL_D to break.

Automatic configuration attempt: 1.
Not ready for automatic configuration: no interface available.
Waiting for the next...

Automatic configuration attempt: 2.
Not ready for automatic configuration: no interface available.
Waiting for the next...
Automatic configuration is aborted.
Line con0 is available.


Press ENTER to get started.
%Jan  1 00:02:12:518 2011 HPE SHELL/5/SHELL_LOGIN: Console logged in from 
con0.

show version output


show version
HPE Comware Software, Version 7.1.059, Release 0306P30
Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP
HPE MSR954 uptime is 0 weeks, 0 days, 0 hours, 2 minutes
Last reboot reason : Reset button reboot
Boot image: flash:/msr954-cmw710-boot-r0306p30.bin
Boot image version: 7.1.059P21, Release 0306P30
  Compiled Jun 08 2016 16:00:00
System image: flash:/msr954-cmw710-system-r0306p30.bin
System image version: 7.1.059, Release 0306P30
  Compiled Jun 08 2016 16:00:00
Feature image(s) list:
  flash:/msr954-cmw710-wifidog-r0306p30.bin, version: 7.1.059
Compiled Jun 08 2016 16:00:00
  flash:/msr954-cmw710-security-r0306p30.bin, version: 7.1.059
Compiled Jun 08 2016 16:00:00
  flash:/msr954-cmw710-voice-r0306p30.bin, version: 7.1.059
Compiled Jun 08 2016 16:00:00
  flash:/msr954-cmw710-data-r0306p30.bin, version: 7.1.059
Compiled Jun 08 2016 16:00:00

CPU ID: 0xa
1G bytes DDR3 SDRAM Memory
10M bytes Flash Memory
PCB   Version:  2.0
CPLD  Version:  0.0
BasicBootWare Version:  1.30
Extended BootWare Version:  1.30
[SLOT  0]CON   (Hardware)2.0,   (Driver)1.0,   (CPLD)0.0
[SLOT  0]GE0/0 (Hardware)2.0,   (Driver)1.0,   (CPLD)0.0
[SLOT  0]4GSW  (Hardware)2.0,   (Driver)1.0,   (CPLD)0.0
[SLOT  0]SFP0/5(Hardware)2.0,   (Driver)1.0,   (CPLD)0.0
[SLOT  0]CELLULAR0/0   (Hardware)2.0,   (Driver)1.0,   (CPLD)0.0
[SLOT  0]CELLULAR0/1   (Hardware)2.0,   (Driver)1.0,   (CPLD)0.0



Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems.








___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or 

Teo En Ming's Notes on Basic Configuration of Cisco ASA 5516-X Firewall - Version 1

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: Teo En Ming's Notes on Basic Configuration of Cisco ASA 5516-X 
Firewall - Version 1

Good day from Singapore,

Author: Mr. Turritopsis Dohrnii Teo En Ming
Country: Singapore
Date of Publication: 20 March 2024 Wednesday
Document Version: 1

I have bought this refurbished/second hand/used Cisco ASA 5516-X firewall with 
FirePOWER Services for SGD$100 at Bukit Panjang Ring Road on 17 Mar 2024 Sunday 
at about 8.30 PM Singapore Time.

On 19 March 2024 Tuesday, I have completed basic configuration of this firewall.

Configuration Start: 19 March 2024 Tuesday, 9.22 PM

Configuration End: 19 March 2024 Tuesday, 11.33 PM

Below are my notes on configuring the Cisco ASA 5516-X firewall (basic).

Part 1: Factory reset the Cisco ASA 5516-X firewall
===

Reference guide: Clearing, resetting or erasing configuration on Cisco ASA
Link: 
https://www.linkedin.com/pulse/clearing-resetting-erasing-configuration-cisco-asa-darko-raki%C4%87?utm_source=share_medium=member_android_campaign=share_via

cisco> en
Password: *

cisco# conf t
cisco(config)#

* NOTICE *

Help to improve the ASA platform by enabling anonymous reporting,
which allows Cisco to securely receive minimal error and health
information from the device. To learn more about this feature,
please visit: http://www.cisco.com/go/smartcall

Would you like to enable anonymous error reporting to help improve
the product? [Y]es, [N]o, [A]sk later: Y

Enabling anonymous reporting.
Adding "call-home reporting anonymous" to running configuration...
Creating trustpoint "_SmartCallHome_ServerCA" and installing certificate...

Trustpoint CA certificate accepted.

Please remember to save your configuration.

cisco(config)# configure factory-default
Based on the inside IP address and mask, the DHCP address
pool size is reduced to 250 from the platform limit 256

WARNING: The boot system configuration will be cleared.
The first image found in disk0:/ will be used to boot the
system on the next reload.
Verify there is a valid image on disk0:/ or the system will
not boot.

Begin to apply factory-default configuration:
Clear all configuration
Executing command: !
Executing command: interface Management1/1
Executing command:  management-only
Executing command:  no nameif
Executing command:  no security-level
Executing command:  no ip address
Executing command:  no shutdown
Executing command:  exit
Executing command: !
Executing command: interface GigabitEthernet1/1
Executing command:  nameif outside
INFO: Security level for "outside" set to 0 by default.
Executing command:  security-level 0
Executing command:  ip address dhcp setroute
Executing command:  no shutdown
Executing command:  exit
Executing command: !
Executing command: interface GigabitEthernet1/2
Executing command:  nameif inside
INFO: Security level for "inside" set to 100 by default.
Executing command:  security-level 100
Executing command: ip address 192.168.1.1 255.255.255.0
Executing command:  no shutdown
Executing command:  exit
Executing command: !
Executing command: object network obj_any
Executing command: subnet 0.0.0.0 0.0.0.0
Executing command: nat (any,outside) dynamic interface
Executing command: exit
Executing command: !
Executing command: http server enable
Executing command: http 192.168.1.0 255.255.255.0 inside
Executing command: !
Executing command: dhcpd auto_config outside
Executing command: dhcpd address 192.168.1.5-192.168.1.254 inside
Executing command: dhcpd enable inside
Executing command: !
Executing command: logging asdm informational
Executing command: !
Executing command: !
Executing command: !
Factory-default configuration is completed

ciscoasa(config)# reload
System config has been modified. Save? [Y]es/[N]o:  y
Cryptochecksum: 200435a9 cee9c848 4fb5e91d ac201631

3250 bytes copied in 0.150 secs
Proceed with reload? [confirm]
ciscoasa(config)#


***
*** --- START GRACEFUL SHUTDOWN ---
Shutting down isakmp
Shutting down webvpn
Shutting down sw-module
Shutting down License Controller
Shutting down File system



***
*** --- SHUTDOWN NOW ---
Process shutdown finished
Rebooting... (status 0x9)
..
INIT: Sending processes the TERM signal
Deconfiguring network interfaces... done.
Sending all processes the TERM signal...
Sending all processes the KILL signal...
Deactivating swap...
Unmounting local filesystems...
Rebooting...


Part 2: Basic Configuration of Cisco ASA 5516-X Firewall
=

Reference guide: Basic Cisco ASA 5506-x Configuration Example
Link: 
https://www.speaknetworks.com/basic-cisco-asa-5506-x-configuration-example/

ciscoasa> en
Password:
ciscoasa#

ciscoasa# show bootvar

BOOT variable =
Current BOOT variable =
CONFIG_FILE variable =
Current CONFIG_FILE variable =

Step 1: Configure ASA interfaces and assign appropriate security levels
===

Trap on delta difference

[Gowtham]

Hi

I need to raise a mteTrigger trap when the IF-MIB::ifInErrors per
minute go beyond 10 on all the interfaces. So tried the below config
in snmpd.conf

monitor -S -D -r 60  "Network inErrors" ifInErrors 9 10

This sends a mteTriggerRising trap if the ifInErrors increase by 10 in
the last 60 seconds and a mteTriggerFalling trap when the delta falls
below 9.

This works alright but when the snmpd is restarted, there is one
mteTriggerFalling trap sent for every interface though the ifInErrors
is 0. Can we skip sending the mteTriggerFalling at the start of snmpd?
Or is there any other way we can achieve this?

Regards,
Gowtham


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

TCP trapsink snmpd.conf causes error

[Atkins, Brian via Net-snmp-users]

I reported this back in 2020, but I think there was confusion caused by my 
response.  Snmpd definitely throws an error if a trapsink contains a TCP 
transport specifier:

# cat /etc/snmp/snmpd.conf

rocommunity public
trapsink tcp:10.224.4.161 public

# snmpd -f -Le
snmpd: netsnmp_create_notification_session:
/etc/snmp/snmpd.conf: line 3: Error: cannot create sink: tcp:10.224.4.161
net-snmp: 1 error(s) in config file(s)
NET-SNMP version 5.9

Here is some additional debugging, in case it helps:

# snmpd -f -Le -Dtdomain,snmp_sess
registered debug token tdomain, 1
registered debug token snmp_sess, 1
tdomain: netsnmp_tdomain_init() called
tdomain: domain_list -> { iso.3.6.1.6.1.9, "dtlsudp/dtls/dtlsudp6/dtls6" } -> { 
iso.3.6.1.6.1.8, "tlstcp/tls" } -> { iso.3.6.1.2.1.100.1.2, 
"udp6/ipv6/udpv6/udpipv6" } -> { iso.3.6.1.2.1.100.1.6, "tcp6/tcpv6/tcpipv6" } 
-> { iso.3.6.1.6.1.1, "udp" } -> { iso.3.6.1.2.1.100.1.5, "tcp" } -> { 
iso.3.6.1.4.1.8072.3.3.7, "alias" } -> { iso.3.6.1.2.1.100.1.13, "unix" } -> 
[NIL]
snmp_sess: opening transport: 0
snmp_sess: done opening transport: 20
snmp_sess_add: fd 3
tdomain: tdomain_transport_spec("snmptrap", "tcp:10.224.4.161", 0, "[NIL]", 
"[NIL]", "[NIL]")
tdomain: Found domain "tcp" from specifier "tcp"
tdomain: trying domain "tcp" address "10.224.4.161" default address ":162"
snmpd: netsnmp_create_notification_session:
/etc/snmp/snmpd.conf: line 3: Error: cannot create sink: tcp:10.224.4.161
net-snmp: 1 error(s) in config file(s)
tdomain: tdomain_transport_spec("snmp", "", 1, "[NIL]", "[NIL]", "[NIL]")
tdomain: checking for host specific config hosts/
tdomain: Use application default domains "udp" "udp6"
tdomain: Found domain "udp" from specifier "udp"
tdomain: trying domain "udp" address "" default address ":161"
snmp_sess: opening transport: 20
snmp_sess_add: fd 6
snmp_sess_add: limiting session rcv size (2147483647) to transport max (65507)
snmp_sess_add: limiting session snd size (2147483647) to transport max (65507)
NET-SNMP version 5.9

I'm using the generic Debian 11 snmpd distribution

# dpkg -l snmpd
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name   VersionArchitecture Description
+++-==-==--
ii  snmpd  5.9+dfsg-4+deb11u1 amd64SNMP (Simple Network 
Management Protocol) agents
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: snmpwalk v3 returns timeout whilst v1 works just fine.

[Mariano Eduardo]

Disregard, it was the -n (context) switch, removed it and it worked!

On Wed, Mar 6, 2024 at 10:16 PM Mariano Eduardo 
wrote:

>
> *NET-SNMP version:  5.6.2.1*
> *OS: MacOS Catalina*
>
>
> Hello everyone! So given the subject of this email, I believe the issue
> lies in the authentication settings most likely?
>
> I'm simply running sudo snmpwalk -v3 -t 10 -u testuser -a MD5 -A
> password123 -l authNoPriv -n v3context -x DES 127.0.0.1 system
>
> only to receive the following error:
>
> sess_process_packet: resending message id#1238060702 reqid#1528862053
> rp_reqid#1528862053 rp_msgid#1238060702 len 141
> transport:send: 141 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]:0
> trace: netsnmp_udpbase_send(): transports/snmpUDPBaseDomain.c, 333:
> netsnmp_udp: send 141 bytes from 0x7f9a4b809973 to UDP:
> [127.0.0.1]:161->[0.0.0.0]:0 on fd 3
> trace: snmp_sess_select_info2_flags(): snmp_api.c, 6328:
> sess_select: for all sessions: 3 (to in 1709773839.024516 sec)
> verbose:sess_select: timer due in 1.62 sec
> verbose:sess_select: setting timer to 1.62 sec, clear block (was 1)
> trace: snmp_synch_input(): snmp_client.c, 176:
> snmp_synch: Response (ReqID: 1528862053 - Cmd 161)
> Timeout: No Response from 127.0.0.1
>
>
> I've googled to no avail but I can't simply get to the bottom of this
> issue.
>
> At some point I've noticed something about the Engine-ID, I have no idea
> how to retrieve this (all attempts from Google examples returned the same
> timeout error).
>
> As you can see, I've also tried increasing the timeout period, but that
> did not work.
>
> Any points would be greatly appreciated!
>
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpwalk v3 returns timeout whilst v1 works just fine.

[Mariano Eduardo]

*NET-SNMP version:  5.6.2.1*
*OS: MacOS Catalina*


Hello everyone! So given the subject of this email, I believe the issue
lies in the authentication settings most likely?

I'm simply running sudo snmpwalk -v3 -t 10 -u testuser -a MD5 -A
password123 -l authNoPriv -n v3context -x DES 127.0.0.1 system

only to receive the following error:

sess_process_packet: resending message id#1238060702 reqid#1528862053
rp_reqid#1528862053 rp_msgid#1238060702 len 141
transport:send: 141 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]:0
trace: netsnmp_udpbase_send(): transports/snmpUDPBaseDomain.c, 333:
netsnmp_udp: send 141 bytes from 0x7f9a4b809973 to UDP:
[127.0.0.1]:161->[0.0.0.0]:0 on fd 3
trace: snmp_sess_select_info2_flags(): snmp_api.c, 6328:
sess_select: for all sessions: 3 (to in 1709773839.024516 sec)
verbose:sess_select: timer due in 1.62 sec
verbose:sess_select: setting timer to 1.62 sec, clear block (was 1)
trace: snmp_synch_input(): snmp_client.c, 176:
snmp_synch: Response (ReqID: 1528862053 - Cmd 161)
Timeout: No Response from 127.0.0.1


I've googled to no avail but I can't simply get to the bottom of this issue.

At some point I've noticed something about the Engine-ID, I have no idea
how to retrieve this (all attempts from Google examples returned the same
timeout error).

As you can see, I've also tried increasing the timeout period, but that did
not work.

Any points would be greatly appreciated!
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

net-snmp compatibility with openssl3x

[Ambika Cp]

Hi Team,

I am looking for a net-snmp version which is compatible with openssl3x.
Could you please let me know if we have the net-snmp that goes with
openssl3x?

Regards
Ambika
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: SIGHUP for changing snmpv3 context

[Bill Fenner]

Hi Vivek,

There are some types of configuration that can only be applied with a
restart, because the option to change them has not yet been implemented.
There is nothing fundamental that prevents this from being implemented, but
it is not a simple fix, which is why it hasn't been done yet.

  Bill


On Tue, Jan 9, 2024 at 1:58 AM Vivek Aditya  wrote:

> Hi Team,
>
> I want the snmpv3 context to change without snmpd restart. When I checked
> with SIGHUP, looks like adding a new snmpv3 context, SIGHUP works; But
> deleting the context and sending a SIGHUP, the context does not get deleted
> and still able to perform walk with that context.
>
> Is there a way to do it or has this issue already been resolved? Any help
> would be appreciated
>
> --
> Warm Regards,
> Vivek Aditya
> ___
> Net-snmp-coders mailing list
> net-snmp-cod...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpget and dtlsudp/dtls domain issue

[Vincent Gilson via Net-snmp-users]

Hi !

I've trouble to make work snmpget (running on Linux Mint) to initiate DTLS 
connection with an agent.
Hostname "tboxvincent" is correctly set in 'hosts' file, and it's working fine 
when I ping it.
It seems snmpget has trouble with dtlsudp or dtls transport domain (tried 
both), returning message like : "tdomain: Found no domain from specifier 
"dtlsudp"" (see below), but I don't know why :

My command :
snmpget -d -DALL -v 3 -l authPriv -n "" -u vincent -a MD5 -A "myPwdPhrase" -x 
DES -X "myPrivPhrase" -T localCert=vincent -T trust_cert=TBox_CA -T 
their_hostname=tboxvincent dtlsudp:tboxvincent:10161 sysContact.0

Returning on terminal :
trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 652:
tdomain: tdomain_transport_spec("snmp", "dtlsudp:tboxvincent:10161", 0, 
"udp,udp6", "[NIL]", "[NIL]")
trace: find_tdomain(): snmp_transport.c, 607:
tdomain: Found no domain from specifier "dtlsudp"
trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 738:
tdomain: Use user specified default domain "udp,udp6"
trace: find_tdomain(): snmp_transport.c, 601:
tdomain: Found domain "udp" from specifier "udp"
trace: netsnmp_lookup_default_target(): snmp_service.c, 413:
defaults: netsnmp_lookup_default_target("snmp", "udp") -> ":161"
trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 791:
tdomain: trying domain "udp" address "dtlsudp:tboxvincent:10161" default 
address ":161"
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 65:
netsnmp_sockaddr_in: addr 0x7ffd345bab90, inpeername 
"dtlsudp:tboxvincent:10161", default_target ":161"
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 65:
netsnmp_sockaddr_in: addr 0x7ffd345bab90, inpeername ":161", default_target 
"[NIL]"
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 122:
netsnmp_sockaddr_in: check user service 161
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 181:
netsnmp_sockaddr_in: return { AF_INET, 0.0.0.0:161 }
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 122:
netsnmp_sockaddr_in: check user service tboxvincent:10161
trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 136:
netsnmp_sockaddr_in: servname not numeric
trace: find_tdomain(): snmp_transport.c, 601:
tdomain: Found domain "udp6" from specifier "udp6"
trace: netsnmp_lookup_default_target(): snmp_service.c, 413:
defaults: netsnmp_lookup_default_target("snmp", "udp6") -> ":161"
trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 791:
tdomain: trying domain "udp6" address "dtlsudp:tboxvincent:10161" default 
address ":161"
trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 206:
netsnmp_sockaddr_in6_2: addr 0x7ffd345bab80, peername 
"dtlsudp:tboxvincent:10161", default_target ":161"
trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 206:
netsnmp_sockaddr_in6_2: addr 0x7ffd345bab80, peername ":161", default_target 
"[NIL]"
trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 244:
netsnmp_sockaddr_in6_2: totally numeric: 161
trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 480:
netsnmp_sockaddr_in6_2: return { AF_INET6, [::]:161 }
trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 381:
netsnmp_sockaddr_in6_2: hostname(?) with port suffix :10161
trace: netsnmp_getaddrinfo(): system.c, 866:
dns:getaddrinfo: looking up "dtlsudp:tboxvincent" with hint ({ ... })
trace: _sess_open(): snmp_api.c, 1662:
_sess_open: couldn't interpret peername
snmpget: Unknown host (dtlsudp:tboxvincent:10161) (Invalid argument)

My /etc/snmp.conf file :
mibdirs /usr/share/snmp/mibs
persistentDir /usr/snmp/persist
tempFilePattern /usr/temp/snmpdXX
defContext none
defVersion 3
defAuthType MD5
defAuthPassphrase myPwdPhrase
defSecurityModel tsm
defSecurityName vincent
defSecurityLevel authPriv

Any help/ideas will be very appreciated, many thanks !

Vincent
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Fwd: snmpd agent does not want to reply

[wim delvaux]

HI all,

I have a 5.7.3 server and 5.9.1 clients running on different computers.

The problem is the client does not get any answers from the server
when running with the -d option I see
a send and a receive of one packet (I presume authentication)
and then a set of sends but not receives
and finally
Timeout: No Response from synology1.

So connection is possible.

On the server side I see the inverse
receive and send
and then receives with the correct interpretation of the request (a GET)
but no replies

What could be wrong ?

W
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: SIGHUP for changing SNMP agent Port

[Feroz]

IMO we need to revert this patch, as it would cause issues in production.
This is a partial fix.

-Feroz

On Tue, Jan 9, 2024 at 2:35 PM Vivek Aditya  wrote:

> Thanks for quick response
>
> I am working on this feature and able to achieve partial success. There is
> one use case where it does not work. It's a pretty small code
> change. Please take a look at the commit message for the logic and to
> understand the exact use-case where it isn't working. Any help or
> suggestion is appreciated.
>
> review link - https://github.com/net-snmp/net-snmp/pull/769
>
>
> On Mon, 8 Jan 2024 at 22:52, Wes Hardaker 
> wrote:
>
>> Vivek Aditya  writes:
>>
>> > I want the SNMP to start listening on a new agent port without restart.
>> > Just sending SIGHUP to snmpd does not work.
>> >
>> > Is there a way to do it or has this issue already been fixed? Any help
>> > would be appreciated.
>>
>> That's a good feature request, but I don't think we handle that now
>> you're right.
>> --
>> Wes Hardaker
>> Please mail all replies to net-snmp-cod...@lists.sourceforge.net
>>
>
>
> --
> Warm Regards,
> Vivek Aditya
> ___
> Net-snmp-coders mailing list
> net-snmp-cod...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>


-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: SIGHUP for changing SNMP agent Port

[Wes Hardaker via Net-snmp-users]

Vivek Aditya  writes:

> I want the SNMP to start listening on a new agent port without restart.
> Just sending SIGHUP to snmpd does not work. 
> 
> Is there a way to do it or has this issue already been fixed? Any help
> would be appreciated.

That's a good feature request, but I don't think we handle that now
you're right.
-- 
Wes Hardaker
Please mail all replies to net-snmp-cod...@lists.sourceforge.net


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: hrMemorySize and hrStorageTable are missing

[Dan Langille]

On Wed, Dec 27, 2023, at 8:43 PM, Dan Langille wrote:
> Hello,
>
> I'm trying to configure net-snmp-5.9.1 on FreeBSD 14.0
>
> I've succeeded with a fresh install (in a FreeBSD jail) and now I'm 
> trying to configure the hosts. What's missing on the hosts is 
> hrMemorySize and hrStorageTable.
>
> Hosts are running: /usr/local/sbin/snmpd -f -Lo -Dhost -c 
> /usr/local/etc/snmpd.conf -a -r
>
> /usr/local/etc/snmpd.conf looks similar on working and non-working hosts.
>
> The files in /usr/local/share/snmpd seem to match.
>
> I can see hrMemorySize here:
>
> [1:40 r730-01 dvl /usr/local/share/snmp] % grep -r hrMemorySize *
> mibs/HOST-RESOURCES-MIB.txt:   hrMemorySize, hrStorageSize, 
> hrStorageAllocationFailures,
> mibs/HOST-RESOURCES-MIB.txt:hrMemorySize OBJECT-TYPE
> mibs/HOST-RESOURCES-MIB.txt:hrMemorySize, hrStorageIndex, 
> hrStorageType,
>
> So I'm not sure where to start checking next. Thanks for any clues.

Earlier today, I resolved this.  The build in question was created with:

NET_SNMP_WITHOUT_MIB_MODULE_LIST+=  host
NET_SNMP_WITHOUT_MIB_MODULE_LIST+=  ucd-snmp/memory
CONFIGURE_ARGS+=--without-kmem-usage

Thanks.

-- 
  Dan Langille
  d...@langille.org


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

hrMemorySize and hrStorageTable are missing

[Dan Langille]

Hello,

I'm trying to configure net-snmp-5.9.1 on FreeBSD 14.0

I've succeeded with a fresh install (in a FreeBSD jail) and now I'm trying to 
configure the hosts. What's missing on the hosts is hrMemorySize and 
hrStorageTable.

Hosts are running: /usr/local/sbin/snmpd -f -Lo -Dhost -c 
/usr/local/etc/snmpd.conf -a -r

/usr/local/etc/snmpd.conf looks similar on working and non-working hosts.

The files in /usr/local/share/snmpd seem to match.

I can see hrMemorySize here:

[1:40 r730-01 dvl /usr/local/share/snmp] % grep -r hrMemorySize *
mibs/HOST-RESOURCES-MIB.txt:   hrMemorySize, hrStorageSize, 
hrStorageAllocationFailures,
mibs/HOST-RESOURCES-MIB.txt:hrMemorySize OBJECT-TYPE
mibs/HOST-RESOURCES-MIB.txt:hrMemorySize, hrStorageIndex, 
hrStorageType,

So I'm not sure where to start checking next. Thanks for any clues.

-- 
  Dan Langille
  d...@langille.org


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Kurt Tay Foo Wei is Targeted Individuals Singapore

[Kurt Tay Foo Wei]

Subject: Kurt Tay Foo Wei is Targeted Individuals Singapore

Kurt Tay Foo Wei is a Targeted Individual in Singapore.

Kurt Tay Foo Wei has probably criticized/badmouthed the Singapore
Government, Minister Mentor Lee Kuan Yew, Prime Minister Lee Hsien Loong,
Ho Ching and/or other cabinet ministers in Singapore. That's why the
Singapore Government targeted, persecuted, marked and blacklisted Kurt Tay
Foo Wei.

Tens of thousands of people in Singapore hate Kurt Tay Foo Wei to the core
and these haters target Kurt Tay Foo Wei every day, every minute. These
tens of thousands of haters of Kurt Tay Foo Wei wanted to get into the Good
Books of the Singapore Government, for better job prospects and monetary
incentives from the Singapore Government.

Mr. Turritopsis Dohrnii Teo En Ming is also a Targeted Individual in
Singapore.

According to The Straits Times newspaper in Singapore, there are 70,000
people in Singapore with mental illness. This means that there are 70,000
Targeted Individuals in Singapore. This is because mental illness is a
government invention, designed to punish and torture people who criticize
the government.

Millions of Targeted Individuals in the Americas, Europe, Australia, New
Zealand, India, Russia, China, Japan, South Korea, and all the other
countries in the world are now arguing that government(s) invented mental
illness to punish and torture people who criticize the government.

Government(s) develop psychotronic weapons, mind control technology,
satellite communications, cell towers and nanotechnology chip implants in
the brain to induce mental illness in millions of people.

And government(s) are very scared to let the world/mass population know of
such a technology capable of inducing mental illness in millions of people.
Because there will be massive outcry and uprisings in every country all
over the world.


Virus-free.www.avg.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

I have confirmed that the latest Sophos Firewall SFOS version 20.0.0 GA-Build222 is using open source Snort as its Intrusion Prevention System (IPS)

[Turritopsis Dohrnii Teo En Ming via Net-snmp-users]

Subject: I have confirmed that the latest Sophos Firewall SFOS version 20.0.0 
GA-Build222 is using open source Snort as its Intrusion Prevention System (IPS)

Good day from Singapore,

I have started installing Sophos Firewall SFOS version 20.0.0 GA-Build222 on my 
Intel Celeron J3160 (4 GB DDR3L RAM + 64 GB SSD) on 16 Nov 2023 Thursday at 
11.00 PM. Initially I had wanted to install Sophos Firewall on my newest Intel 
Celeron J4125 (8 GB DDR4 + 64 GB SSD) but the Linux Kernel version 4.14.302 
wasn't able to detect Intel Ethernet Controller I225-V 2.5 GbE network 
interface cards. To workaround the problem, I had to install pfSense firewall 
version 2.7.0 on my Intel Celeron J4125 firewall appliance and then install 
Sophos Firewall on my Intel Celeron J3160 firewall appliance. Both pfSense and 
Sophos Firewall use open source Snort as its Intrusion Prevention System (IPS).

When I was installing Sophos Firewall on my Intel Celeron J3160 firewall 
appliance, I opened up the terminal and traversed the Linux filesystem. I saw 
the directory snort inside the /etc/ directory. This confirmed that the latest 
version of Sophos Firewall is indeed using open source Snort as its Intrusion 
Prevention System (IPS).

Regarding my Sophos Firewall, I have only performed a Basic Setup/Configuration 
at the moment. But I have also turned on IPS and ensured that Admin Services 
(HTTPS and SSH) are restricted to the LAN zone only. Further exploration of the 
(1) network interfaces and (2) firewall policies/rules inside Sophos Firewall 
will be done later when I have more time.

It is good to know that major firewall vendors like Sophos and pfSense 
(netgate) are using open source Snort as its Intrusion Prevention System (IPS). 
This goes to show that Snort is a rock solid and top notch IPS which is well 
supported by the world's networking leader Cisco. 

I am still unable to determine if Fortigate firewalls are using Snort as its 
IPS because Fortinet has extensively modified the Linux operating system for 
its FortiOS.

I have finished installing Sophos Firewall (Basic Setup and Configuration only) 
on my Intel Celeron J3160 firewall appliance on 17 Nov 2023 Friday at 1.00 AM. 
I have managed to sleep at about 2.00 AM and woke up in the morning at about 
7.00 AM on 17 Nov 2023 Friday.

I do notice that my Sophos Firewall is a bit slow and lags. Perhaps it is 
because my Intel Celeron J3160 firewall appliance only has 4 GB of RAM. I will 
need to increase the amount of memory in the future.

Fortigate, pfSense and Sophos firewalls support SNMP.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems.




Sent with Proton Mail secure email.


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

[UPDATE 3] [Thunderbird email client] Composing email: Clicking Options > Delivery Status Notification Does Not Work At All!!!

[Turritopsis Dohrnii Teo En Ming]

Subject: [UPDATE 3] [Thunderbird email client] Composing email:
Clicking Options > Delivery Status Notification Does Not Work At
All!!!

Good day from Singapore,

Today is 13 November 2023 Monday Singapore Time 7 PM.

Recently I have installed Thunderbird email client version 115.4.1
(64-bit) SUPERNOVA in Windows 11 Home version 22H2 in my home desktop
computer.

I have numerous Gmail email account(s). I do not know whether GMAIL is
using Postfix or EXIM Mail Transfer Agent (MTA).

I have composed and SENT emails with the Subject: "Singaporean man who
previously attempted to contest in the 2023 Singapore Presidential
Elections has applied for refugee status/political asylum in the UK on
23 Oct 2023" to the following international news media outlets, mainly
British, American and Hong Kong:

[01] BBC News (UK)

[02] The Guardian (UK)

[03] The Observer (UK)

[04] The Daily Telegraph (UK)

[05] The Sunday Telegraph (UK)

[06] The Washington Post (USA)

[07] The New York Times (USA)

[08] CNN (USA)

[09] Yahoo News

[10] Wired.com (USA)

[11] Vice.com (USA)

[12] Mothership (Singapore)

[13] Must Share News (Singapore)

[14] The Independent (Singapore)

[15] Goodyfeed (Singapore)

[16] Sky News (UK)

[17] The Times (UK)

[18] The Independent (UK)

[19] Channel 4 News (UK)

[20] Daily Mail (UK)

[21] The Sun (UK)

[22] The Mirror (UK)

[23] South China Morning Post (Hong Kong)

[24] Financial Times (UK)

[25] Reuters (UK) - I have managed to contact Reuters using contact
submission form on its official website.

[26] Agence France-Press (France) - I have managed to contact Agence
France-Press using contact submission form on its official website.

[27] Associated Press (USA) - I have managed to contact Associated
Press using contact submission form on its official website.

Before sending each email, I will click Options > Delivery Status
Notification in Thunderbird email client. I will ENSURE this option is
clicked, besides clicking Return Receipts.

However, I have NEVER received any Delivery Status Notification for
the emails that I have sent. Not even once. Though I have received
Return Receipts, but they are very FEW.

Questions:

[1] Is there a bug with Thunderbird email client?

---OR---

[2] Did the Singapore Government have unfettered access and absolute
control of all my email accounts? Were my outgoing emails to the above
international news media outlets intercepted and deleted by the
Singapore Government before they reach their recipients? Hence the
above-mentioned international news media outlets have NEVER received
my emails???

Many years ago, I think it was during General Election 2011 in
Singapore, I think it was Mr. Tan Jee Say, who told me that the
Singapore Government has secret/covert access to all the email
accounts of all Singaporeans.

Why is the Singapore Government so scared to let the whole world know
that Singapore Citizen Mr. Teo En Ming has flown from Singapore to
London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed
refugee status / political asylum in the United Kingdom on 23 Oct
2023?

After the British Government has fully paid for my free Singapore
Airlines SQ321 flight (because I only have about/approximately
SGD$2400 in my bank accounts on 23 Oct 2023) and sent me back to
Singapore from London Heathrow Airport (I was transferred from London
Gatwick Airport to London Heathrow Airport) on a 12-hour flight on 23
Oct 2023, I saw someone (not me) had created a forum thread/topic at
Hardwarezone Singapore Eat-Drink-Man-Woman (EDMW) forums with the
title, something like:

"BREAKING Teo En Ming has claimed refugee in the UK on 23 Oct 2023..."

However, after 5 pages of forum discussion (I think), the
administrators or moderators of Hardwarezone Singapore forums had
QUICKLY deleted the above forum thread/topic. Maybe due to pressure
from the Singapore Government. Maybe due to pressure from the
Singapore Government.

I didn't see the actual forum thread/topic itself. What I saw was the
Google Cache of the deleted forum topic. But now the Google Cache is
also gone, I think.

Why is the Singapore Government so scared to let the whole world know
that Singapore Citizen Mr. Teo En Ming has flown from Singapore to
London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed
refugee status / political asylum in the United Kingdom on 23 Oct
2023?

Or is it a bug with Thunderbird email client that I have never
received any Delivery Status Notification for the emails that I have
sent out to the above international news media outlets?

Or was there a problem with the GMAIL SMTP servers?? Problem with
Postfix MTA? Problem with Exim MTA? Problem with Sendmail MTA?

Why is the Singapore Government so scared to let the whole world know
that Singapore Citizen Mr. Teo En Ming has flown from Singapore to
London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed
refugee status / political asylum in the United Kingdom on 23 Oct
2023?

Mr. Teo En Ming has previously 

net-snmp 'invents' extraneous varbindings for sub-agent

[Pobinger, Gerhard]

Hi, *

we use net-snmp as the SNMP v3 demon that forwards requests to certain MIBs to 
our self-written, locally running SNMPv1 sub-agent.

We have noticed that when the SNMP client issues a GETBULK request that cannot 
be completely fulfilled (e.g. there are less entries in the table than 
requested), then the response

  * contains the Var-bindings that are available, but
  * has set error-status to nosuchname
  * has set error-index to 1
  * contains an additional varbinding (with same OID as the last available) 
with value Null
  * contains another varbinding (with same OID) with value endOfMibView

(This may be related to this (relatively old) posting 
https://sourceforge.net/p/net-snmp/mailman/message/30509710/)

When the subagent runs as v2c, everything works correctly. So we have a 
workaround for now.

Any ideas why net-snmp invents the additional varbindings or sets the 
error-status/index?

BR,

Gerhard Pobinger


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

[World Wide Announcement] Mr. Teo En Ming has configured, setup, and deployed 22 Fortigate firewalls for 20 companies in Singapore so far

[Turritopsis Dohrnii Teo En Ming]

Subject: [World Wide Announcement] Mr. Teo En Ming has configured,
setup, and deployed 22 Fortigate firewalls for 20 companies in
Singapore so far

Good day from Singapore,

Ever since Mr. Turritopsis Dohrnii Teo En Ming joined his present IT
Solutions Provider company the American Defense Information Systems
Agency (DISA) (fictitious company name used instead of real company
name) on 15 June 2020, he has configured, setup, and deployed 22
Fortigate firewalls for 20 companies / organizations in Singapore so
far. Information is accurate as of 21 Oct 2023 Sat Singapore Time.

In addition, Mr. Teo En Ming has also provided guidance and mentoring
to his colleague Danial Robinson (fictitious individual name used
instead of real name) on configuring 2 Fortigate firewalls for 2
closely-affiliated companies at Tagore Lane Singapore, on 26 Sep 2023
and 17 Oct 2023 respectively.

Mr. Teo En Ming also has a pfSense Community Edition version 2.7.0
firewall appliance (SGD$222) at home, which is based on the rock solid
and top notch FreeBSD operating system. FreeBSD ROCKS!!!

Another thing to note: Mr. Teo En Ming has also maintained a list of
achievements / accomplishments / IT projects completed since 27 Nov
2017, which is 5 years 10 months and 24 days ago. Mr. Teo En Ming
first properly began his career as an IT Support Engineer on 27 Nov
2017, at the age of 39 years old. Before 39 years old, Mr. Teo En Ming
did not have a proper job and frequently gets fired from his jobs for
about 10 years after graduation from the National University of
Singapore (NUS) with a Bachelor of Mechanical Engineering with
Aerospace Option (2nd Class Lower Honors) degree in December 2006. For
about 10 years since 2007, Mr. Teo En Ming is extremely under-employed
(because he frequently gets fired from his jobs) due to
Government-Induced Mental Illness (millions of people all over the
world say schizophrenia was invented) / government persecution. Mr.
Teo En Ming was subjected to government persecution for the past 16
years because he had offended the all-powerful Singapore Minister
Mentor Lee Kuan Yew in the year 2007 with disparaging remarks. As a
result of government persecution and the fact that he frequently gets
fired from jobs for about 10 years, Mr. Teo En Ming has Extremely
Little personal bank savings and
MEDIOCRE/PEANUTS/NEGLIGIBLE/INSIGNIFICANT CPF savings account.

As of 21 Oct 2023, Mr. Teo En Ming's total combined bank balance is SGD$3,395.

As of 21 Oct 2023, Mr. Teo En Ming's CPF account breakdown is as follows:

CPF Ordinary Account $44,735
CPF Special Account $30,122
CPF Medisave Account $7,366
CPF Investments $26,323

Total Combined CPF savings: SGD$108,546

The Singapore Government had also cheated Mr. Teo En Ming's family of
a HDB flat. Mr. Teo En Ming's parents have lost ownership of a 3-room
HDB flat at Bedok Reservoir Road Singapore in the year 2011. Mr. Teo
En Ming has no choice but to rent a HDB RENTAL flat from HDB under the
Public Housing Rental Scheme in Singapore. The Public Housing Rental
Scheme is meant for Extremely Poor families in Singapore.

Besides Extreme Poverty, Mr. Teo En Ming also has numerous
Government-Induced Medical Problems (GIMP). Maybe Mr. Teo En Ming will
not be able to live past 50 years old. He will deal with this in
another post.

It is hoped that governments in Western Liberal Democracies will
accept Mr. Teo En Ming and not reject him when he applies for refugee
status / political asylum VERY SOON.

It is long overdue that Mr. Teo En Ming should be flying out of
Singapore to apply for refugee status / political asylum in developed
countries such as in Europe, North America, Japan, South Korea,
Australia or New Zealand.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
21 Oct 2023 Saturday Singapore Time 1.53 PM


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Tutorials for Intermediate Table and trap notifications

[Prankur Chauhan]

Dear SNMP team,

Referring to the mib2c mfd tutorial for IF-MIB was helpful to understand
the read-only attributes/columns of the IF-MIB::ifTable.

What I also wanted to understand the setting of values / adding new rows
(as you guys mentioned in the Intermediate table tutorial) but I could not
find this tutorial anywhere.

For sending traps notifications, is there also some example / Tutorial code
?

-- 
Cheers
Prankur
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: [EXTERNAL EMAIL] Re: snmpwalk doesn't always translate OIDs

[Wes Hardaker via Net-snmp-users]

Jan Andersen  writes:

> That gives me the desired output - but why the difference from the
> version without '-mALL'?

Hi Jan,

This tutorial page should help you:

http://www.net-snmp.org/wiki/index.php/TUT:Using_and_loading_MIBS

-- 
Wes Hardaker
USC/ISI


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: [EXTERNAL EMAIL] Re: [EXTERNAL EMAIL] Re: snmpwalk doesn't always translate OIDs

[Feroz]

Can you please check, if snmptranslate helps you.

https://linux.die.net/man/1/snmptranslate

-Feroz

On Thu, Aug 24, 2023 at 5:39 PM Jan Andersen  wrote:

> Thx, Feroz - got it!
>
> On a completely different note; do you know how snmpwalk et al figure
> out which numerical OID matches which text OID? I've started looking at
> the MIB files, and while they are very informative, I haven't spotted
> that connection. Yet.
>
> /jan
>
> On 23/08/2023 16:56, Feroz wrote:
> > I'm not sure if your custom MIB has an extension of ".mib" or ".txt".
> > e.g:
> > IF-MIB.txt
> >
> > All the MIB's that come with the net-snmp package have a ".txt"
> extension.
> >
> > Try to change your mib file extension to "netgear-MIB.txt" and copy it
> > in the location where you have "IF-MIB.txt"..
> > See if it solves.
> >
> > On Wed, Aug 23, 2023 at 8:50 PM Jan Andersen  > > wrote:
> >
> > That gives me the desired output - but why the difference from the
> > version without '-mALL'?
> >
> > Also, in the man page it looks like '-mALL' only lists the MIBs that
> > are
> > listed in the local MIB files and therefore may leave something out
> > that
> > the appliance might supply - or have I got that wrong?
> >
> > /jan
> >
> > On 23/08/2023 16:05, Feroz wrote:
> >  > can you try with
> >  >
> >  > snmpwalk -v 2c -c netgear netgear1 -mALL
> >  >
> >  > Make sure you copied mib file in appropriate directory.
> >  >
> >  >
> >  >
> >  > On Wed, Aug 23, 2023 at 8:05 PM Jan Andersen  > 
> >  > >> wrote:
> >  >
> >  > I have a curious problem with snmpwalk in debian 11 - if I run
> >  > something
> >  > like:
> >  >
> >  > root@vogon:~# snmpwalk -v 2c -c netgear netgear1
> > SNMPv2-MIB::sysORID
> >  >
> >  > I get OIDs translated to text:
> >  >
> >  > SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96
> >  > SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2
> >  > SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1
> >  > SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29
> >  > SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5
> >  > SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78
> >  > SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72
> >  > SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154
> >  > SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30
> >  > SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76
> >  > SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43
> >  > SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623
> >  > SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795
> >  > SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2
> >  > SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6
> >  > SNMPv2-MIB::sysORID.16 = OID:
> SNMPv2-SMI::enterprises.4526.11.61
> >  > SNMPv2-MIB::sysORID.17 = OID:
> SNMPv2-SMI::enterprises.4526.11.43
> >  > SNMPv2-MIB::sysORID.18 = OID:
> SNMPv2-SMI::enterprises.4526.11.31
> >  > SNMPv2-MIB::sysORID.19 = OID:
> SNMPv2-SMI::enterprises.4526.11.100
> >  > SNMPv2-MIB::sysORID.20 = OID:
> SNMPv2-SMI::enterprises.4526.11.37
> >  >
> >  > However, if I run this:
> >  >
> >  > root@vogon:~# snmpwalk -v 2c -c netgear netgear1
> >  >
> >  > I get them untranslated:
> >  >
> >  > iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port
> Gigabit
> >  > Ethernet Smart Managed Pro Switch with 2 SFP Ports"
> >  > iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54
> >  > iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days,
> > 14:27:55.00
> >  > iso.3.6.1.2.1.1.4.0 = ""
> >  > iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1"
> >  > iso.3.6.1.2.1.1.6.0 = STRING: "Network rack"
> >  > iso.3.6.1.2.1.1.7.0 = INTEGER: 2
> >  > iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00
> >  > iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96
> >  > iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2
> >  > ...
> >  >
> >  >
> >  > I have installed the same packages on my laptop, also Debian
> 11:
> >  >
> >  > root@vogon:~# dpkg -l | grep -i -E 'snmp'
> >  > ii  libnet-snmp-perl  6.0.1-6
> >  >   all
> >  > Script
> >  > SNMP connections
> >  > ii  libsnmp-base
> > 5.9+dfsg-4+deb11u1
> >  >   all
> >SNMP
> >  > configuration script, MIBs and documentation
> >  > ii  libsnmp40:amd64
> >   5.9+dfsg-4+deb11u1
> >  >

Re: [EXTERNAL EMAIL] Re: snmpwalk doesn't always translate OIDs

[Jan Andersen]

That gives me the desired output - but why the difference from the 
version without '-mALL'?


Also, in the man page it looks like '-mALL' only lists the MIBs that are 
listed in the local MIB files and therefore may leave something out that 
the appliance might supply - or have I got that wrong?


/jan

On 23/08/2023 16:05, Feroz wrote:

can you try with

snmpwalk -v 2c -c netgear netgear1 -mALL

Make sure you copied mib file in appropriate directory.



On Wed, Aug 23, 2023 at 8:05 PM Jan Andersen > wrote:


I have a curious problem with snmpwalk in debian 11 - if I run
something
like:

root@vogon:~# snmpwalk -v 2c -c netgear netgear1 SNMPv2-MIB::sysORID

I get OIDs translated to text:

SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2
SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1
SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29
SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5
SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78
SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72
SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154
SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30
SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76
SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43
SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623
SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795
SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2
SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6
SNMPv2-MIB::sysORID.16 = OID: SNMPv2-SMI::enterprises.4526.11.61
SNMPv2-MIB::sysORID.17 = OID: SNMPv2-SMI::enterprises.4526.11.43
SNMPv2-MIB::sysORID.18 = OID: SNMPv2-SMI::enterprises.4526.11.31
SNMPv2-MIB::sysORID.19 = OID: SNMPv2-SMI::enterprises.4526.11.100
SNMPv2-MIB::sysORID.20 = OID: SNMPv2-SMI::enterprises.4526.11.37

However, if I run this:

root@vogon:~# snmpwalk -v 2c -c netgear netgear1

I get them untranslated:

iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port Gigabit
Ethernet Smart Managed Pro Switch with 2 SFP Ports"
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54
iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days, 14:27:55.00
iso.3.6.1.2.1.1.4.0 = ""
iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1"
iso.3.6.1.2.1.1.6.0 = STRING: "Network rack"
iso.3.6.1.2.1.1.7.0 = INTEGER: 2
iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00
iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96
iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2
...


I have installed the same packages on my laptop, also Debian 11:

root@vogon:~# dpkg -l | grep -i -E 'snmp'
ii  libnet-snmp-perl                              6.0.1-6
                                                      all 
Script

SNMP connections
ii  libsnmp-base                                  5.9+dfsg-4+deb11u1
                                                      all          SNMP
configuration script, MIBs and documentation
ii  libsnmp40:amd64                               5.9+dfsg-4+deb11u1
                                                      amd64        SNMP
(Simple Network Management Protocol) library
ii  snmp                                          5.9+dfsg-4+deb11u1
                                                      amd64        SNMP
(Simple Network Management Protocol) applications
ii  snmp-mibs-downloader                          1.5
                                                      all
install and manage Management Information Base (MIB) files


On my laptop, I always get text-OIDs. I cloned the repo
(https://github.com/net-snmp/net-snmp
) and tried to figure out from
the
source what makes the difference, but it is a bit complex; what
should I
look for?




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net

Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users




--
Regards,
Feroz Ahmed



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: snmpwalk doesn't always translate OIDs

[Feroz]

can you try with

snmpwalk -v 2c -c netgear netgear1 -mALL

Make sure you copied mib file in appropriate directory.



On Wed, Aug 23, 2023 at 8:05 PM Jan Andersen  wrote:

> I have a curious problem with snmpwalk in debian 11 - if I run something
> like:
>
> root@vogon:~# snmpwalk -v 2c -c netgear netgear1 SNMPv2-MIB::sysORID
>
> I get OIDs translated to text:
>
> SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96
> SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2
> SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1
> SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29
> SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5
> SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78
> SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72
> SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154
> SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30
> SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76
> SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43
> SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623
> SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795
> SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2
> SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6
> SNMPv2-MIB::sysORID.16 = OID: SNMPv2-SMI::enterprises.4526.11.61
> SNMPv2-MIB::sysORID.17 = OID: SNMPv2-SMI::enterprises.4526.11.43
> SNMPv2-MIB::sysORID.18 = OID: SNMPv2-SMI::enterprises.4526.11.31
> SNMPv2-MIB::sysORID.19 = OID: SNMPv2-SMI::enterprises.4526.11.100
> SNMPv2-MIB::sysORID.20 = OID: SNMPv2-SMI::enterprises.4526.11.37
>
> However, if I run this:
>
> root@vogon:~# snmpwalk -v 2c -c netgear netgear1
>
> I get them untranslated:
>
> iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port Gigabit
> Ethernet Smart Managed Pro Switch with 2 SFP Ports"
> iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54
> iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days, 14:27:55.00
> iso.3.6.1.2.1.1.4.0 = ""
> iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1"
> iso.3.6.1.2.1.1.6.0 = STRING: "Network rack"
> iso.3.6.1.2.1.1.7.0 = INTEGER: 2
> iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00
> iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96
> iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2
> ...
>
>
> I have installed the same packages on my laptop, also Debian 11:
>
> root@vogon:~# dpkg -l | grep -i -E 'snmp'
> ii  libnet-snmp-perl  6.0.1-6
>  all  Script
> SNMP connections
> ii  libsnmp-base  5.9+dfsg-4+deb11u1
>  all  SNMP
> configuration script, MIBs and documentation
> ii  libsnmp40:amd64   5.9+dfsg-4+deb11u1
>  amd64SNMP
> (Simple Network Management Protocol) library
> ii  snmp  5.9+dfsg-4+deb11u1
>  amd64SNMP
> (Simple Network Management Protocol) applications
> ii  snmp-mibs-downloader  1.5
>  all
> install and manage Management Information Base (MIB) files
>
>
> On my laptop, I always get text-OIDs. I cloned the repo
> (https://github.com/net-snmp/net-snmp) and tried to figure out from the
> source what makes the difference, but it is a bit complex; what should I
> look for?
>
>
>
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>


-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpwalk doesn't always translate OIDs

[Jan Andersen]

I have a curious problem with snmpwalk in debian 11 - if I run something 
like:


root@vogon:~# snmpwalk -v 2c -c netgear netgear1 SNMPv2-MIB::sysORID

I get OIDs translated to text:

SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2
SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1
SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29
SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5
SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78
SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72
SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154
SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30
SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76
SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43
SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623
SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795
SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2
SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6
SNMPv2-MIB::sysORID.16 = OID: SNMPv2-SMI::enterprises.4526.11.61
SNMPv2-MIB::sysORID.17 = OID: SNMPv2-SMI::enterprises.4526.11.43
SNMPv2-MIB::sysORID.18 = OID: SNMPv2-SMI::enterprises.4526.11.31
SNMPv2-MIB::sysORID.19 = OID: SNMPv2-SMI::enterprises.4526.11.100
SNMPv2-MIB::sysORID.20 = OID: SNMPv2-SMI::enterprises.4526.11.37

However, if I run this:

root@vogon:~# snmpwalk -v 2c -c netgear netgear1

I get them untranslated:

iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port Gigabit 
Ethernet Smart Managed Pro Switch with 2 SFP Ports"

iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54
iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days, 14:27:55.00
iso.3.6.1.2.1.1.4.0 = ""
iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1"
iso.3.6.1.2.1.1.6.0 = STRING: "Network rack"
iso.3.6.1.2.1.1.7.0 = INTEGER: 2
iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00
iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96
iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2
...


I have installed the same packages on my laptop, also Debian 11:

root@vogon:~# dpkg -l | grep -i -E 'snmp'
ii  libnet-snmp-perl  6.0.1-6 
all  Script 
SNMP connections
ii  libsnmp-base  5.9+dfsg-4+deb11u1 
all  SNMP 
configuration script, MIBs and documentation
ii  libsnmp40:amd64   5.9+dfsg-4+deb11u1 
amd64SNMP 
(Simple Network Management Protocol) library
ii  snmp  5.9+dfsg-4+deb11u1 
amd64SNMP 
(Simple Network Management Protocol) applications
ii  snmp-mibs-downloader  1.5 
all 
install and manage Management Information Base (MIB) files



On my laptop, I always get text-OIDs. I cloned the repo 
(https://github.com/net-snmp/net-snmp) and tried to figure out from the 
source what makes the difference, but it is a bit complex; what should I 
look for?





___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Net-SNMP 5.9.4 available

[Wes Hardaker via Net-snmp-users]

We're happy to announce the release of version 5.9.4 of Net-SNMP!

  The NET-SNMP Development Team

Contents of this announcement
-
  - What has Changed recently?
  - Where can I get it?
  - Are there binaries available?
  - What operating systems does it run on?
  - Which versions of the SNMP protocol are supported in this package?
  - I've found a bug or have a suggestion, how do I tell you about it?

What has Changed recently?
---

  The NEWS file snippits from these releases are as follows.  See the
  CHANGES and ChangeLog files for increasing levels of detail.

*5.9.4*:

IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
in this release with various versions of OpenSSL and will be fixed
in a future release.

libsnmp:
  - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not
used in the Net-SNMP code base.
  - DISPLAY-HINT fixes
  - Miscellanious improvements to the transports
  - Handle multiple oldEngineID configuration lines 
  - fixes for DNS names longer than 63 characters

agent:
  - Added a ignoremount configuration option for the HOST-MIB
  - disallow SETs with a NULL varbind
  - fix the --enable-minimalist build

apps:
  - snmpset: allow SET with NULL varbind for testing
  - snmptrapd: improved MySQL logging code

general:
  - configure: Remove -Wno-deprecated as it is no longer needed
  - miscellanious ther bug fixes, build fixes and cleanups

Where can I get it?
--

  Download:
- https://www.net-snmp.org/download.html
  Web page:
- https://www.net-snmp.org/
  Github source code:
- https://github.com/net-snmp/net-snmp
  Older Sourceforge Project page:
- https://www.net-snmp.org/project/net-snmp/

Are there binaries available?


  - Binaries do appear on our download site, but often are published a
bit later than the normal source code.  Most of the binaries that
are available have been linked with the OpenSSL package so you'll
need a copy of it installed in order to use them.  If you don't
have OpenSSL installed and don't want it installed, please get the
net-snmp source release instead and built it yourself (but you'll
loose support for SNMPv3 with SHA1 authentication and both DES and
AES encryption).

What operating systems does it run on?
-

  Both the applications and the agent have been reported as running
  (at least in part) on the following operating systems for at least
  one version of Net-SNMP:

* Linux (kernels 4.17 to 1.3)
* Solaris/SPARC (11 to 2.3), Solaris/Intel (10, 9) -- see 
  README.solaris
* HP-UX (11.31 to 9.01) -- see README.hpux11
* Mac OS X (10.5 to 10.1) -- see README.osX
* NetBSD (2.0 to 1.0)
* FreeBSD (7.0 to 2.2)
* OpenBSD (4.0 to 2.6)
* BSDi (4.0.1 to 2.1)
* AIX (6.1, 5.3, 5.2, 5.1, 4.3.3, 4.1.5, 3.2.5) -- see README.aix
* IRIX (6.5 to 5.1)
* OSF (4.0, 3.2 and Tru64 Unix 5.1B) -- see README.tru64
* SunOS 4 (4.1.4 to 4.1.2)
* Ultrix (4.5 to 4.2)
* Dynix/PTX 4.4
* QNX 6.2.1A

  See our FAQ at http://www.net-snmp.org/wiki/index.php/FAQ for more
  details on portability of the Net-SNMP package.

Which versions of the SNMP protocol are supported in this package?
-

  SNMPv1, SNMPv2c, and SNMPv3, including:

* user-based (USM) support
* an alpha implementation of kerberos-based and ssh-based support
* HMAC-SHA-2 Authentication Protocols (RFC 7860) SHA-224, SHA-256,
  SHA-384 and SHA-512
* AES-192 and AES-256 privacy protocols from draft-blumenthal-aes-usm-04


* TLS and DTLS-based support in 5.9.4 is currently problematic due
  (most likely) to changes in OpenSSL APIs and will be addressed
  in future versions.

I've found a bug or have a suggestion, how do I tell you about it?
-

  Please submit the bug to our bug-tracking system at:

http://www.net-snmp.org/bugs/

  Please submit patches (for features or bugs) to our patch-tracking
  system.  (You don't need to submit a big report as well, just a patch)

http://www.net-snmp.org/patches/

 


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: New version of net-snmp v5.9.4

[Wes Hardaker via Net-snmp-users]

"Andrei Cristea -X (acristea - ENDAVA DOO at Cisco) via Net-snmp-users"
 writes:

> Does anyone know when the version v5.9.4 will be released ?

Hi Andrei,

Sorry for the delay.  We've been discussing a bug in the TLS
implementation that we've only just decided we can't fix quickly and
plan to release 5.9.4 this week without a fix (I had hoped to get it out
the door yesterday but failed to get it done).

-- 
Wes Hardaker
USC/ISI


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

New version of net-snmp v5.9.4

[Andrei Cristea -X (acristea - ENDAVA DOO at Cisco) via Net-snmp-users]

Hello,

Does anyone know when the version v5.9.4 will be released ?

I understand that this version contains the fix for  
#474 and 
#475.

Regards,
Andrei
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

usmStatsUnknownUserNames error with Blank ContextName

[Arvind Uniyal]

Hi,

Objective: Create a snmpv3 user with blank contextName.

I have netsnmp library code and I create a snmpv3 user with below lines in
snmpd.conf file

group grpSample usm User123

view snmp_view included .1

access grpSample "" any priv exact snmp_view snmp_view none

engineIDType 3

createUser User123 MD5 "Auth_pass" DES "PrivPass"

Now when I contact the printer I get and error saying
Excerpt of response on Mib Browser
Security model: USM
1: usmStatsUnknownUserNames.0 (Counter32) 5

and from command prompt
>snmpget -v3 -l authPriv -u User123 -a MD5 -A "Auth_pass" -x DES -X
"PrivPass" -n ""  
snmpget: Unknown user name


I added some logs and can see that the function usm_get_user_from_list()
returns NULL.

In the function usm_get_user_from_list, the control never enters the for
loop. So, I guess the usm Userlist is NULL.

Any input would be appreciated.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

usmStatsUnknownUserNames Error with Blank ContextName

[Arvind Uniyal]

Hi,

Objective: Create a snmpv3 user with blank contextName.

I have netsnmp library code and I create a snmpv3 user with below lines in
snmpd.conf file

group grpSample usm User123

view snmp_view included .1

access grpSample ContextSample any priv exact snmp_view snmp_view none

engineIDType 3

createUser User123 MD5 "Auth_pass" DES "PrivPass"

Now when I contact the printer I get and error saying
Excerpt of response on Mib Browser
Security model: USM
1: usmStatsUnknownUserNames.0 (Counter32) 5

and from command propmt
>snmpget -v3 -l authPriv -u User123 -a MD5 -A "Auth_pass" -x DES -X
"PrivPass" -n ""  
snmpget: Unknown user name


I added some logs and can see that the function usm_get_user_from_list()
returns NULL.

In function usm_get_user_from_list, the control never enters the for loop.
So, I guess the usm Userlist is NULL.

Any input would be appreciated.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpd as proxy v3

[Mohsen Pahlevanzadeh]

Hello,
I have the following scenario:
I have a Host P as snmpd
I have a CoreSwitch as pool of vlan.
Then I have a host p and q.
P has o do snmp on CoreSwitch and collect data.  Then p and q do snmpd
on P host.
All of them must be snmpv3 .

Can I implement it with snmpd? Specially V3.

--Regards
Mohsen


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

IPv6 default routes go unreported in inetCidrRouteTable?

[Charles Polisher]

Hello, list.

I hope the wide format of the text below isn't spoiled by my
mail client or yours. If it is, I've posted the identical text
to https://pastebin.com/raw/RH4RVLht .

I hope someone can explain why IPv6 default routes are omitted from
net-snmp ver 5.9.3 fetch of IP-FORWARD-MIB:inetCidrRouteTable, which 
numerically is


    $ snmptranslate -On IP-FORWARD-MIB:inetCidrRouteTable
    .1.3.6.1.2.1.4.24.7

The issue:

Looking for the default IPv6 route(s) using command:

    "snmptable -Ci localhost IP-FORWARD-MIB:inetCidrRouteTable"

is expected to display the default IPv6 route, identified by its 
destination of ::/0.


The actual results:

 $ snmptable -Ci localhost IP-FORWARD-MIB:inetCidrRouteTable | cat 
-n | cut -b 1-168


 1  SNMP table: IP-FORWARD-MIB::inetCidrRouteTable
 2
3 index inetCidrRouteIfIndex inetCidrRouteType
4 ipv4."0.0.0.0".0.2.0.0.ipv4."192.168.1.1" 2    remote
5 ipv4."127.0.0.0".8.3.0.0.1.ipv4."0.0.0.0" 1 local
6 ipv4."192.168.1.0".24.3.0.0.2.ipv4."0.0.0.0" 2 local
 7 
ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:01".128.3.0.0.4.ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00" 
1 local
 8 
ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:01".128.3.0.0.7.ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00" 
1 local
 9 
ipv6."fe:80:00:00:00:00:00:00:00:00:00:00:00:00:00:00".64.3.0.0.5.ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00" 
2 local
    10 
ipv6."fe:80:00:00:00:00:00:00:ee:a8:6b:ff:fe:f8:33:94".128.3.0.0.8.ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00" 
2 local
    11 
ipv6."ff:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00".8.3.0.0.9.ipv6."00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00" 
2 local


The route exists in the low-level route table (third line of results):

    $ cat /proc/net/ipv6_route
    0001 80 
 00  
0100 0001  0001   lo
    fe80 40 
 00  
0100 0001  0001 eth0
     00 
 00  
 0001  00200200   lo
    0001 80 
 00  
 0004  8021   lo
    fe80eea86bfffef83394 80 
 00  
 0002  8021 eth0
    ff00 08 
 00  
0100 0002  0001 eth0
     00 
 00  
 0001  00200200   lo



Comparison results from netstat command, which _does_ display the 
default IPv6 route (at line 9):


 $ netstat -6rn | cat -n

 1  Kernel IPv6 routing table
 2  Destination    Next Hop Flag Met Ref Use If
 3  ::1/128    :: U    256 1 0 lo
 4  fe80::/64  :: U    256 1 0 eth0
 5  ::/0   :: !n   -1  1 0 lo
 6  ::1/128    :: Un   0   4 0 lo
 7  fe80::eea8:6bff:fef8:3394/128  :: Un   0   2 0 eth0
 8  ff00::/8   :: U    256 2 0 eth0
-->  9  ::/0   :: !n   -1  1 0 lo


Comparison results from "ip route" command:

 $ ip -6 route show table all | cat -n

 1  ::1 dev lo proto kernel metric 256 pref medium
 2  fe80::/64 dev eth0 proto kernel metric 256 pref medium
 3  local ::1 dev lo table local proto kernel metric 0 pref medium
 4  local fe80::eea8:6bff:fef8:3394 dev eth0 table local proto 
kernel metric 0 pref medium
 5  multicast ff00::/8 dev eth0 table local proto kernel metric 256 
pref medium


All three commands were expected to show a default IPv6 route.
Only "netstat -6rn" showed the expected results.
I'm at a loss to explain this behavior.

The net-snmp version is 5.9.3:

    $ snmpwalk localhost .1 | grep 'hrSWInstalledName.*net-snmp'
    HOST-RESOURCES-MIB::hrSWInstalledName.1658 = STRING: 
"net-snmp-5.9.3-x86_64-1_slack15.0"


Slackware 15 compiles net-snmp from a vanilla 5.9.3 source tree.

I see the same issue on CentOS release 6.10,

    $ snmpwalk wiki.foo.peecee3.com .1 | grep 'hrSWInstalledName.*net-snmp'
    HOST-RESOURCES-MIB::hrSWInstalledName.209 = STRING: 
"net-snmp-libs-5.5-60.el6_10.2"
    HOST-RESOURCES-MIB::hrSWInstalledName.759 = STRING: 
"net-snmp-5.5-60.el6_10.2"
    HOST-RESOURCES-MIB::hrSWInstalledName.1145 = STRING: 
"net-snmp-utils-5.5-60.el6_10.2"


Given the same behavior between versions 5.5-60 and 

EVIDENCE: Singapore Government could read my mind, knows all of my passwords and attempted to login to my LinkedIn account on the morning of 23 Apr 2023 Sunday

[Turritopsis Dohrnii Teo En Ming]

Subject: EVIDENCE: Singapore Government could read my mind, knows all
of my passwords and attempted to login to my LinkedIn account on the
morning of 23 Apr 2023 Sunday

Good day from Singapore,

At exactly 11:18 am on 23 Apr 2023 Sunday (Singapore Time GMT+8), I
received a SMS OTP from LinkedIn. But I did not login to LinkedIn at
all during this time period. I was having early lunch at 566 Serangoon
Road coffee shop (near Beatty Road). My lunch consisted of fish tail +
green leafy vegetables + rice. All for SGD$6. This PROVES that the
Singapore Government could read my mind and knows all of my passwords.
This also PROVES that mental illness (schizophrenia) was INVENTED by
government(s) to punish and torture people who criticize the
government. With Mind Control Technology, governments could read our
minds/thoughts, see through our eyes and hear through our ears.

Receiving a SMS OTP from LinkedIn has proven beyond reasonable doubt
that the secret government agent at his desk knows my password and has
entered my password correctly at the LinkedIn login page. Otherwise,
how would I be able to receive a SMS OTP from LinkedIn? Remember
earlier I said that I did not attempt to login to LinkedIn during this
time period. If I did not remember wrongly, I have not login to
LinkedIn for 1 or 2 years already. I have neglected my LinkedIn
account for so long.

The Singapore Government is purposely and deliberately attempting to
login to my LinkedIn account this morning to REMIND me that they could
read my mind and knows all of my passwords.

There are external human forces at play here even though a Targeted
Individual has "mental illness". I am a Targeted Individual. Do not
naively assume nobody will mess with you when you have "mental
illness". EVENTS DO NOT HAPPEN SOLELY IN YOUR MIND ONLY. Secret
government agents will be hacking into your laptops, desktop
computers, smartphones and your computer network to piss you off.
After all, mental illness was invented by government(s) to punish and
torture people who criticize the government. Using Mind Control
Technology, the government could read your mind/thoughts, see through
your eyes and hear through your ears.

When I reached Farrer Park MRT station at 11.53 AM on the same day, I
told 3 police officers at the train platform everything (what I have
mentioned above).

I shall FOREVER remind myself of this overwhelming evidence. That
mental illness was invented by government(s) and they could read our
minds and know all our passwords.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmptrap v3 authentication

[Simon Chamlian]

Hi,

The snmptrap v3 authentication does not seem to be working.

I am using Version:  5.9.1

>From my agent, I issue:

snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
"" coldStart.0

I do receive the trap on my Trap Receiver even if I didn't specify a
Username and Authentication password in the MIB browser (on 172.27.37.227 )
!

I was NOT expecting to receive any traps until I set up the Username and
Authentication!?!

Any explanation?

Thanks,
S
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

I have figured out how to configure SD-WAN, Link Aggregation, Virtual IPs and IP Pools on Fortigate 200F and 201F Firewalls

[Turritopsis Dohrnii Teo En Ming]

Subject: I have figured out how to configure SD-WAN, Link Aggregation,
Virtual IPs and IP Pools on Fortigate 200F and 201F Firewalls

Good day from Singapore,

I have figured out how to configure SD-WAN, Link Aggregation, Virtual
IPs and IP Pools on Fortigate 200F and 201F Firewalls, today, 30 Mar
2023 Thursday Singapore Time.

I have reviewed the existing configuration of Fortigate 200D firewall
for a wine company today. Subsequently I have also reviewed the
existing configuration of Fortigate 201F firewall for an investment
company today. The Fortigate 201F firewall has SD-WAN configured. I am
reviewing the configuration of existing Fortigate firewalls in
preparation for setting up brand new Fortigate 200F firewall in April
2023, if I have the opportunity to do so.

This is the reference guide on how to configure SD-WAN in Fortigate firewalls.

Article: Configuring the SD-WAN interface
Link: 
https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/218559/configuring-the-sd-wan-interface

This is the reference guide on how to configure Link aggregation (IEEE
802.3ad) in Fortigate firewalls.

Article: Aggregation and redundancy
Link: 
https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/567758/aggregation-and-redundancy

Regarding firewall policies (aka firewall rules)


A. Virtual IPs

Virtual IPs are needed for port forwarding.

If the direction of the traffic is from WAN to any other physical
interface, you are configuring port forwarding. Before you can
configure port forwarding, you must configure Virtual IPs. After
configuring Virtual IPs, you can proceed to configure firewall
policies (firewall rules) for port forwarding.

B. IP Pools

If your company/business/organization has many public static IPv4
addresses, you can force a server in your internal network to take on
a specific public static IPv4 address. This is known as masquerading.
IP Pool is applied in firewall policies for the direction of the
traffic from LAN to WAN, for example, from your mail server to the
internet. This direction of the traffic is known as outgoing internet
access.

I have become reasonably seasoned in configuring Fortigate firewalls,
after having configured Fortigate firewalls of various sizes for 8
different companies/organizations in Singapore. I have also configured
SSL VPN in Cisco ASA 5506-X firewall for an investment company in
Singapore previously (I think 2-3 years ago).

That's all folks. Please feel free to correct me if I am wrong. Hehe.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems.


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Python 3 snmp set operations fail with octet strings with values >= 0x80

[Bill Fenner]

The API has to deal with both DisplayString (underlying type OCTETSTR) and
actual octet strings.  It makes sense for a DisplayString to be utf-8
encoded, but, it doesn't make sense for actual octet strings.

Python 3 does have two different types that can very usefully be used for
this: a string could be treated as being utf-8 encoded, assuming it's a
DisplayString, and a bytes value could be treated as a series of bytes.

Unfortunately, get() would have to return bytes only, as consulting the MIB
is the only way to tell whether a given incoming OCTETSTR is a
DisplayString or not.

I don't have cycles to work on this, unfortunately.

  Bill


On Thu, Feb 2, 2023 at 4:10 PM Steve Hollywood 
wrote:

> Net-SNMP v5.9.3 with python 3.6.3.
>
>
>
> I’m not sure if this has only become an issue since the move of strings
> from bytes to Unicode in Python 3 but I cannot set an OID value to an octet
> string containing octets >=128.
>
> I am trying to set a MAC address in an OID.
>
>
>
> macAddress = '\x02\0\0\0\x80\xff'
>
> varbind = netsnmp.Varbind(oidSvcMacNameAddr, iid, macAddress,
> 'OCTETSTR')
>
>
>
> The python bindings convert everything to strings in the Varbind object.
>
>
>
> class Varbind(object):
>
> def __init__(self, tag=None, iid=None, val=None, type_arg=None):
>
> self.tag = STR(tag)
>
> self.iid = STR(iid)
>
> self.val = STR(val)
>
> self.type = STR(type_arg)
>
>
>
> The result on the wire of the performing an SNMP set on using the values
> above is:
>
>
>
> variable-bindings: 2 items
>
>
> TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49
> (1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49):
> 0200c280c3bf
>
> Object Name:
> 1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49
> (TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49)
>
> Value (OctetString): 0200c280c3bf
>
>
> TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49
> (1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49):
> 02007f55
>
> Object Name:
> 1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49
> (TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49)
>
> Value (OctetString): 02007f55
>
>
>
> As a result an error is returned because the octet string is 8 bytes
> rather than 6.
>
> Note: Setting values <0x80 works without issue. The second variable
> binding is using a macAddress = ‘\x02\0\0\0\x7f\x55’ is correct and when
> used without the 1st binding sets the value.
>
>
>
> Within the library bindings, the val attribute is read using the function
> py_netsnmp_attr_string, which calls PyUnicode_AsUTF8AndSize function
> which returns a UTF8 encoded char buffer. The value sent on the wire is the
> UTF-8 encoded string.
>
>
>
> >>> macAddress = '\x02\0\0\0\x80\xff'
>
> >>> macAddress
>
> '\x02\x00\x00\x00\x80ÿ'
>
> >>> macAddress.encode('utf8')
>
> b'\x02\x00\x00\x00\xc2\x80\xc3\xbf'
>
>
>
> UTF8 encoding is probably a poor choice for encoding octet strings. I
> believe that if the string was encoded as latin-1 (which is the same as
> iso-8859-1) within the bindings the problem wouldn’t occur.
>
>
>
> >>> macAddress.encode('latin-1')
>
> b'\x02\x00\x00\x00\x80\xff'
>
>
>
> Does anyone have any idea of how to cleverly work around this or failing
> that patch the bindings?
>
>
> The content of this email (including any attachments) is intended for the
> addressee only, is confidential and may be legally privileged. If you’ve
> received this email in error, you shouldn’t read it - please contact me
> immediately, destroy it, and do not copy or use any of the content of this
> email . No confidentiality or privilege is waived or lost by any
> mis-transmission or error. This communication does not designate an
> information system for the purposes of Part 4 of the Contract and
> Commercial Law Act 2017. Although we have taken reasonable precautions to
> ensure no viruses are present in this email, we cannot accept
> responsibility for any loss or damage arising from the use of this email or
> its attachments.
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Python 3 snmp set operations fail with octet strings with values >= 0x80

[Steve Hollywood]

Net-SNMP v5.9.3 with python 3.6.3.

I'm not sure if this has only become an issue since the move of strings from 
bytes to Unicode in Python 3 but I cannot set an OID value to an octet string 
containing octets >=128.
I am trying to set a MAC address in an OID.

macAddress = '\x02\0\0\0\x80\xff'
varbind = netsnmp.Varbind(oidSvcMacNameAddr, iid, macAddress, 
'OCTETSTR')

The python bindings convert everything to strings in the Varbind object.

class Varbind(object):

def __init__(self, tag=None, iid=None, val=None, type_arg=None):
self.tag = STR(tag)
self.iid = STR(iid)
self.val = STR(val)
self.type = STR(type_arg)

The result on the wire of the performing an SNMP set on using the values above 
is:

variable-bindings: 2 items
TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49 
(1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49): 
0200c280c3bf
Object Name: 
1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49 
(TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49)
Value (OctetString): 0200c280c3bf
TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49 
(1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49): 
02007f55
Object Name: 
1.3.6.1.4.1.6527.3.1.2.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49 
(TIMETRA-GLOBAL-MIB::tmnxSRObjs.4.2.59.1.4.10.83.84.69.45.80.79.76.84.48.49)
Value (OctetString): 02007f55

As a result an error is returned because the octet string is 8 bytes rather 
than 6.
Note: Setting values <0x80 works without issue. The second variable binding is 
using a macAddress = '\x02\0\0\0\x7f\x55' is correct and when used without the 
1st binding sets the value.

Within the library bindings, the val attribute is read using the function 
py_netsnmp_attr_string, which calls PyUnicode_AsUTF8AndSize function which 
returns a UTF8 encoded char buffer. The value sent on the wire is the UTF-8 
encoded string.

>>> macAddress = '\x02\0\0\0\x80\xff'
>>> macAddress
'\x02\x00\x00\x00\x80ÿ'
>>> macAddress.encode('utf8')
b'\x02\x00\x00\x00\xc2\x80\xc3\xbf'

UTF8 encoding is probably a poor choice for encoding octet strings. I believe 
that if the string was encoded as latin-1 (which is the same as iso-8859-1) 
within the bindings the problem wouldn't occur.

>>> macAddress.encode('latin-1')
b'\x02\x00\x00\x00\x80\xff'

Does anyone have any idea of how to cleverly work around this or failing that 
patch the bindings?

The content of this email (including any attachments) is intended for the 
addressee only, is confidential and may be legally privileged. If you've 
received this email in error, you shouldn't read it - please contact me 
immediately, destroy it, and do not copy or use any of the content of this 
email . No confidentiality or privilege is waived or lost by any 
mis-transmission or error. This communication does not designate an information 
system for the purposes of Part 4 of the Contract and Commercial Law Act 2017. 
Although we have taken reasonable precautions to ensure no viruses are present 
in this email, we cannot accept responsibility for any loss or damage arising 
from the use of this email or its attachments.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Need Help with my Table Iterator Sub-Agent

[Ian C via Net-snmp-users]

 RESOLVED BY implementing make_data_context 


    iinfo->make_data_context = context_convert_function;
. . .

    void * context_convert_function( void *loop_context, netsnmp_iterator_info 
*iinfo )    {        Context_Data *datactx = SNMP_MALLOC_TYPEDEF(Context_Data); 
       if (!datactx)        return NULL;        strncpy( datactx->L1line, 
L1.front().c_str(), 1000 );        datactx->len = L1.front().length();
        return datactx;    }


On Thursday, January 5, 2023 at 02:28:49 p.m. EST, Ian C via Net-snmp-users 
 wrote:  
 
 


I have a sub-agent which I'm hoping will handle snmpwalk requests.  Presently 
what is happening is that my get_first_data_point() reads a file (a QNX PPS 
object to be specific), each line in the file represents on table row. Each 
line is json-formatted and gets parsed to the field level.  Reading of the 
entire file happens once in get_first_data_point(), each line in that file then 
becomes a element within a std::list


    typedef struct context_data_s {
    char L1line[1000];
    int len;
    } context_data;

    std::list L1;

    void readL1PpsData()
    {
      ... For each line read do a 
      ... L1.push_back( line )
      ... all fine here
    }

    netsnmp_variable_list *
    inputSourcesInfoTable_get_first_data_point(void **my_loop_context,
      void **my_data_context,
      netsnmp_variable_list *put_index_data,
      netsnmp_iterator_info *mydata)
    {
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() before 
populate L1 size %d \n", (int)L1.size()));
    context_data * L1ctx = SNMP_MALLOC_TYPEDEF(context_data);
    readL1PpsData( L1 );
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() after 
populate L1 size %d \n", (int)L1.size()));
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() front() 
|%s| \n", L1.front().c_str()));
    strncpy( L1ctx->L1line, L1.front().c_str(), 1000 );
    L1ctx->len = L1.front().length();
    L1_set_index_value( put_index_data );
    *my_loop_context = L1ctx;
    *my_data_context = L1ctx->L1line;
    return put_index_data;
    }

    netsnmp_variable_list *
    inputSourcesInfoTable_get_next_data_point(void **my_loop_context,
      void **my_data_context,
      netsnmp_variable_list *put_index_data,
      netsnmp_iterator_info *mydata)
    {
    DEBUGMSGTL(("SourcesInfoTable", "N_th get_next_data_point() L1 size %d 
\n", (int)L1.size()));
    if( L1.size() == 0 ) {
    /* End of routes.  stop here by returning NULL */
    //SNMP_FREE(position);
    *my_loop_context = NULL;
    *my_data_context = NULL;
    return NULL;
    }
    context_data * L1ctx = (context_data*)*my_loop_context;
    L1.pop_front();
    strncpy( L1ctx->L1line, L1.front().c_str(), 1000 );
    L1ctx->len = L1.front().length();
    L1_set_index_value( put_index_data );
    *my_loop_context = L1ctx;
    *my_data_context = L1ctx->L1line;
    return put_index_data;
    }


The issue that I'm having is that once my handler gets called it only has empty 
strings as data_context.

    int
    inputSourcesInfoTable_handler(
    netsnmp_mib_handler   *handler,
    netsnmp_handler_registration  *reginfo,
    netsnmp_agent_request_info    *reqinfo,
    netsnmp_request_info  *requests) {

    netsnmp_request_info   *request;
    netsnmp_table_request_info *table_info;

    std::string s = L1.front();
    DEBUGMSGTL(("SourcesInfoTable", "entering handler() request (%d)\n", 
reqinfo->mode ));
    switch (reqinfo->mode) {
    /*
     * Read-support (also covers GetNext requests)
     */
        case MODE_GET:
        for ( request = requests; request; request = request->next ) {
        char *data_context = 
(char*)netsnmp_extract_iterator_context( request );
        std::string sDbg;
        if( data_context == NULL ) {
        DEBUGMSGTL(("SourcesInfoTable", " handler() 
data_context NULL"));
        continue;
        }
        else {
        char dbg[40];
        memset( dbg, 0, 40 );
        strncpy( dbg, data_context, 39 );
        DEBUGMSGTL(("SourcesInfoTable", " handler() dbg is 
|%s|\n", dbg)); // < HERE always || 
        }

        table_info  = netsnmp_extract_table_info( request );
        switch (table_info->colnum) {
            . . . SNIP! . . .

Q: How am I screwing up the data_context?
Q: Is it normal for the handler to only get called once get_next_data_point 
returns NULL?


Thanks for the help

Ian

Ps. Note that I've 

Need Help with my Table Iterator Sub-Agent

[Ian C via Net-snmp-users]

I have a sub-agent which I'm hoping will handle snmpwalk requests.  Presently 
what is happening is that my get_first_data_point() reads a file (a QNX PPS 
object to be specific), each line in the file represents on table row. Each 
line is json-formatted and gets parsed to the field level.  Reading of the 
entire file happens once in get_first_data_point(), each line in that file then 
becomes a element within a std::list


    typedef struct context_data_s {
    char L1line[1000];
    int len;
    } context_data;

    std::list L1;

    void readL1PpsData()
    {
      ... For each line read do a 
      ... L1.push_back( line )
      ... all fine here
    }

    netsnmp_variable_list *
    inputSourcesInfoTable_get_first_data_point(void **my_loop_context,
      void **my_data_context,
      netsnmp_variable_list *put_index_data,
      netsnmp_iterator_info *mydata)
    {
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() before 
populate L1 size %d \n", (int)L1.size()));
    context_data * L1ctx = SNMP_MALLOC_TYPEDEF(context_data);
    readL1PpsData( L1 );
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() after 
populate L1 size %d \n", (int)L1.size()));
    DEBUGMSGTL(("SourcesInfoTable", "1st get_first_data_point() front() 
|%s| \n", L1.front().c_str()));
    strncpy( L1ctx->L1line, L1.front().c_str(), 1000 );
    L1ctx->len = L1.front().length();
    L1_set_index_value( put_index_data );
    *my_loop_context = L1ctx;
    *my_data_context = L1ctx->L1line;
    return put_index_data;
    }

    netsnmp_variable_list *
    inputSourcesInfoTable_get_next_data_point(void **my_loop_context,
      void **my_data_context,
      netsnmp_variable_list *put_index_data,
      netsnmp_iterator_info *mydata)
    {
    DEBUGMSGTL(("SourcesInfoTable", "N_th get_next_data_point() L1 size %d 
\n", (int)L1.size()));
    if( L1.size() == 0 ) {
    /* End of routes.  stop here by returning NULL */
    //SNMP_FREE(position);
    *my_loop_context = NULL;
    *my_data_context = NULL;
    return NULL;
    }
    context_data * L1ctx = (context_data*)*my_loop_context;
    L1.pop_front();
    strncpy( L1ctx->L1line, L1.front().c_str(), 1000 );
    L1ctx->len = L1.front().length();
    L1_set_index_value( put_index_data );
    *my_loop_context = L1ctx;
    *my_data_context = L1ctx->L1line;
    return put_index_data;
    }


The issue that I'm having is that once my handler gets called it only has empty 
strings as data_context.

    int
    inputSourcesInfoTable_handler(
    netsnmp_mib_handler   *handler,
    netsnmp_handler_registration  *reginfo,
    netsnmp_agent_request_info    *reqinfo,
    netsnmp_request_info  *requests) {

    netsnmp_request_info   *request;
    netsnmp_table_request_info *table_info;

    std::string s = L1.front();
    DEBUGMSGTL(("SourcesInfoTable", "entering handler() request (%d)\n", 
reqinfo->mode ));
    switch (reqinfo->mode) {
    /*
     * Read-support (also covers GetNext requests)
     */
        case MODE_GET:
        for ( request = requests; request; request = request->next ) {
        char *data_context = 
(char*)netsnmp_extract_iterator_context( request );
        std::string sDbg;
        if( data_context == NULL ) {
        DEBUGMSGTL(("SourcesInfoTable", " handler() 
data_context NULL"));
        continue;
        }
        else {
        char dbg[40];
        memset( dbg, 0, 40 );
        strncpy( dbg, data_context, 39 );
        DEBUGMSGTL(("SourcesInfoTable", " handler() dbg is 
|%s|\n", dbg)); // < HERE always || 
        }

        table_info  = netsnmp_extract_table_info( request );
        switch (table_info->colnum) {
            . . . SNIP! . . .

Q: How am I screwing up the data_context?
Q: Is it normal for the handler to only get called once get_next_data_point 
returns NULL?


Thanks for the help

Ian

Ps. Note that I've used mib2c.iterate.conf to generate priliminary code and 
then modified as per HostsTable & RouteTable examples.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

SELinux Permissions

[Palmer, Hil S. via Net-snmp-users]

Hello,

I had been fighting getting the details from hrPartition when SELinux is 
enforcing.  Does net-snmp create the SELinux permission rules, or would that be 
the distro?

Thank you,
Hil

This message and accompanying documents are covered by the Electronic 
Communications Privacy Act, 18 U.S.C. sections 2510-2521, and contain 
information intended for the specified individual(s) only. This information is 
confidential. If you are not the intended recipient or an agent responsible for 
delivering it to the intended recipient, you are hereby notified that you have 
received this document in error and that any review, dissemination, copying, or 
the taking of any action based on the contents of this information is strictly 
prohibited. If you have received this communication in error, please notify us 
immediately by e-mail, and delete the original message.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

inetCidrRouteIfIndex + large routing table

[Undro]

Hello.

My linux router has a large routing table.
"ip r | wc -l" shows almost 3 million lines.
Process snmpd stops responding if send a request:
inetCidrRouteIfIndex = "1.3.6.1.2.1.4.24.7.1.7"
Checked on the latest version snmpd: 5.9.1

Does this problem have a solution?
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: ucd-snmp-3.5.3.tar.gz

[Art via Net-snmp-users]

Blessings Magnus!

Google "ucd-snmp-3.5.3"  <-- WITH the quotation marks

This is an FTP repository ... not a "tar.gz", but all of the sources??? 
 I'm NOT a developer.


"Index of /afs/qatar.cmu.edu/system/src/ng/ucd-snmp/001"

http://www.cs.cmu.edu/afs/qatar.cmu.edu/system/src/ng/ucd-snmp/001/

Blessings in abundance, all the best,
Art in Carlisle, PA USA


On 11/16/22 9:08 AM, Magnus Fromreide wrote:

Hello!

I am doing some software archeology and for that I have found that I need
the distribution tar file for ucd-snmp-3.5.3.
I am sadly not able to find that tar file on the internet - maybe it is just
a case of my google karma beeing bad - so I am humbly asking if anyone here
happens to have it lying about somewhere?

/MF


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

ucd-snmp-3.5.3.tar.gz

[Magnus Fromreide]

Hello!

I am doing some software archeology and for that I have found that I need
the distribution tar file for ucd-snmp-3.5.3.
I am sadly not able to find that tar file on the internet - maybe it is just
a case of my google karma beeing bad - so I am humbly asking if anyone here
happens to have it lying about somewhere?

/MF


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

[net-snmp 5.9] trapHandler does not support run_shell_command

[Jacques Samoun]

Hello,
trying to define a trap handler as follows:

OS: Linux 5.4.56 / Arm

net-snmp5.9 package from buildroot

/etc/snmp/snmptrapd.conf

traphandle default /sbin/print_trap.sh
traphandle SNMPv2-MIB::coldStart/sbin/print_trap cold

Then, i am sending a test trap using snmptrap utility (v2c trap) as follows:
snmptrap -v 2c -c public -d -Lo localhost '' 1.3.6.1.4.1.8072.2.3.0.1
1.3.6.1.4.1.8072.2.3.2.1 i 123456

I think that the trap is correctly sent to the snmptrad daemon, but my
handling script is not starting.
The following error messages appear in syslog:

Jan  1 23:55:31 UTC 2000 NIDPlug+ snmptrapd[242]: 2000-01-01 23:55:31
localhost [UDP: [127.0.0.1]:52549->[127.0.0.1]:162] (via 0.0.0.0[0.0.0.0]):
.#012#011Cold Start Trap (0) Uptime: 0:00:00.00#012SNMPv2-MIB::sysUpTime.0
= Timeticks: (39460) 0:06:34.60#011SNMPv2-MIB::snmpTrapOID.0 = OID:
SNMPv2-SMI::enterprises.8072.2.3.0.1#011SNMPv2-SMI::enterprises.8072.2.3.2.1
= INTEGER: 123456
Jan  1 23:55:31 UTC 2000 NIDPlug+ snmptrapd[242]: support for
run_shell_command not available

Browsing the net-snmp code, it seems that the macro
USING_UTILITIES_EXECUTE_MODULE is guarding this section of code. but is not
defined.
I can also see that it is defined in Win32 tree ... but am using Linux
(this is an embedded plateform)

Is this a known issue ?
Thanks,
Jacques
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

I have identified and resolved LAN IP address conflicts and solved the issue of connecting to SAP server over Fortigate firewall site to site IPsec VPN tunnel on 3 Nov 2022 Thursday

[Turritopsis Dohrnii Teo En Ming]

Subject: I have identified and resolved LAN IP address conflicts and solved
the issue of connecting to SAP server over Fortigate firewall site to site
IPsec VPN tunnel on 3 Nov 2022 Thursday

Good day from Singapore,

I have identified and resolved LAN IP address conflicts and solved the
issue of connecting to SAP server over Fortigate firewall site to site
IPsec VPN tunnel on 3 Nov 2022 Thursday.

HQ LAN network 192.168.44.0
Branch Office LAN network 192.168.42.0

JW had reported she couldn't access shared folders on the Windows Server
Domain Controller in their branch office. Her office desktop computer has
both LAN and Wi-Fi connection. I remoted into her office computer and
discovered that there are IP address conflicts in their Local Area Network
(LAN) by running Advanced IP Scanner on the Domain Controller. There is
another device with the same IP address but different MAC address. To
address the issue, I have changed JW's IP address from 192.168.42.63 to
192.168.42.201.

For SL, her office desktop computer also has the same IP address with a HP
ProCurve Network Switch 2510G-24 which has a different MAC address. To
address the issue, I have changed SL's IP address from 192.168.42.62 to
192.168.42.202.

The IP addresses of their office computers are configured statically, and
not managed using DHCP auto configuration.

My client had another issue. They could not connect to the SAP server on
the HQ LAN network. To address this issue, I have accessed their Fortigate
firewall and restarted (bring down and then bring up) the site to site
IPsec VPN tunnel. This simple solution solved the SAP connection issue.

My client's branch office is located near Orchard Road, Singapore.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Undefined reference errors with net-snmp-5.7.2-49.el7_9.2 version make

[Suchetha p]

Hi,

We are using the latest net-snmp-5.7.2-49.el7_9.2 version available in RHEL7.

When we try to compile this version of net-snmp library I am getting
the below error:


net-snmp-5.7.2/agent/snmpd.c:457: undefined reference to
`netsnmp_sd_listen_fds'

Thanks,
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: snpmset error seen after upgrading to net-snmp-5.9.1

[Suchetha p]

Hi,

The below error is also seen but only once after upgrading net-snmp from
5.7.2 to 5.9.1.

snmpd: send_trap: Unknown engine ID (Sub-id not found: (top) ->
snmperrErrMessagg
e) (Network is unreachable)

SNMP set failure can be related to this ?

snmpset -v 3  -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1

Error in packet.

Reason: notWritable (That object does not support modification)

Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1

Any inputs/suggestions would be appreciated.

Thanks,


On Fri, Sep 30, 2022 at 4:50 PM Suchetha p  wrote:

> Hi,
>
> We have upgraded net-snmp library from 5.7.2 to 5.91. recently.
>
> After upgrading to this latest version of net-snmp 5.9.1 version facing
> issues with the SNMP set command.
>
> SNMP set command fails with the below error for all the OID’s:
>
>
>
>  snmpset -v 3  -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i
> 1
>
> Error in packet.
>
> Reason: notWritable (That object does not support modification)
>
> Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1
>
>
>
> I checked the OID and they have RW permission.
>
> Could you please suggest what can be the issue?
>
>
>
> *Note:-* SNMP Walk and SNMP get command works fine.
>
> No issue observed.
>
> Also in /var/log/snmpd.log these errors are logged  continuously.
>
> error on subcontainer 'systemstats_autocreate' insert (-1)
> error on subcontainer 'systemstats_autocreate' insert (-1)
> error on subcontainer 'systemstats_autocreate' insert (-1)
> error on subcontainer 'systemstats_autocreate' insert (-1)
> error on subcontainer 'systemstats_autocreate' insert (-1)
>
> Can you please let me  know what could be the issue ?
> We are using RHEL 7 with version 9.
>
> Thanks,
>
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

How to Configure Aruba 7005 Wireless Controller with ArubaOS 8.9.0.3

[Turritopsis Dohrnii Teo En Ming]

Subject: How to Configure Aruba 7005 Wireless Controller with ArubaOS 8.9.0.3

Teo En Ming's Learning Notes - 7 Sep 2022 Wednesday


PHASE 1 - LEARNING PHASE
=

Information Gathering
=

0. Look for DHCP Server in the network.

192.168.1.1

1. Need to get serial number of the 2 access points. Use the serial
number as the password to login to the access points.

---snipped---
---snipped---

2. Get the following information for the Aruba 7005 wireless controller.

a. IP address: 192.168.1.7
b. Subnet mask: 255.255.255.0
c. Default gateway 192.168.1.1

3. Copy the license keys from ArubaOS 6.5.4.23

Policy Enforcement Firewall (PEF) license key: ---snipped---
Access Point (AP) license key: ---snipped---
RF Protect (RFP) license key: ---snipped---

4. Find out the AP groups. AP Group: Internal, not using default AP group

AP Name, AP Group, AP IP, AP Type, AP MAC Address, AP Serial Number
Finance Dept, Internal, 192.168.1.9, 335, ---snipped---, ---snipped---
Near Entrance, Internal, 192.168.1.10, 335, ---snipped---, ---snipped---

5. Find out SSID and wireless password.

SSID: Teo En Ming Corporation Wi-Fi
Password: password
NEED TO HIDE SSID

6. Check if using RADIUS server or ClearPass.

Not using RADIUS authentication.

7. Check how many VLANs.

Only got 1 VLAN. VLAN: 1

SECTION 1 - FACTORY RESET THE ARUBA INSTANT IAP-335 ACCESS POINTS
==

Youtube video: Aruba Controller: Access Point Configuration and Setup
Link: https://www.youtube.com/watch?v=j-rpge_g_ho

To factory reset INSTANT AP


Putty to Console port on Aruba Instant AP

Hit  to stop autoboot:

Commands:

factory_reset
saveenv
boot

Login to the web UI of the Aruba Instant AP using its IP address.

Username: admin
Password: admin

Click on Maintenance.

Click Convert tab.

Convert one or more Access Points to:
Campus APs managed by a Mobility Controller

Hostname or IP Address of Mobility Controller: 192.168.1.7

Click Convert Now.

It will download the image from the controller.

To factory reset a CAMPUS AP
=

Putty to console port of the Campus AP.

Hit  to stop autoboot:

Commands:

purgeenv
saveenv
boot

=

Need to ensure there is DHCP server in the network, so that the APs
can obtain IP addresses after factory reset.



SECTION 2 - CONFIGURE THE STANDALONE CONTROLLER


Youtube video: AOS8.0 Setup on Standalone Mobility Controller
Link: https://www.youtube.com/watch?v=vsfCnkBC590

Gather the following information for the Aruba 7005 wireless controller.

1. IP address
2. Subnet mask
3. Default gateway

==

Get the license keys and key in below.

Configuration > System > Licensing > Installed Licenses

==

Configuration > System > Licensing > Usage

Enable PEF and RF Protect

===

Disable Control Plane Security as below.

Configuration > System > CPSEC



Provision Access Points FIRST

===

THEN Create WLANs

- Find out the SSID
- Find out the wireless password



Youtube video: Aruba Wireless controller | Basic Installation and
Configuration | AOS 8.8
Link: https://www.youtube.com/watch?v=Ig8hrn6ITME

Section 3 - Configure Control Plane Security from above Youtube video (OPTIONAL)
=

configure t

control-plane-security

auto-cert-prov

cpsec-enable

end

show control-plane-security

write memory

show control-plane-security

Other controller commands:

==

show ap database



show version



Section 4 - GOOD YOUTUBE VIDEO TO WATCH
=

Youtube video: ArubaOS 8.9 Series – Part 1 – Virtual Mobility Controller (VMC)
Link: https://www.youtube.com/watch?v=U0A2747YY7c

PHASE 2 - ACTUAL IMPLEMENTATION PHASE - IMPLEMENTED ON 22 SEP 2022
THUR AT CUSTOMER SITE
===

Step 1. There is NO NEED to factory reset the 2 units of Aruba access points.

Step 2. Login to the web GUI of ArubaOS 6.5.4.23.

Step 3. Upgrade the firmware to version 8.9.0.3 straight away.

Step 4. Aruba 7005 wireless controller will reboot.

Step 5. Perform factory reset of the Aruba 7005 wireless controller
using ArubaOS 8.9.0.3. You must connect to the console port.

configure t

write erase

The controller will reboot again.

Step 6. Perform initial configuration of the Aruba 7005 wireless
controller using the console port. This can only be done through the
console port.

(a) full-setup

(b) standalone

Step 7. Login to the web GUI of ArubaOS 8.9.0.3.

Step 8. Activate the AP, PEF and RFP license keys.

Step 9. You need to approve the 2 

snpmset error seen after upgrading to net-snmp-5.9.1

[Suchetha p]

Hi,

We have upgraded net-snmp library from 5.7.2 to 5.91. recently.

After upgrading to this latest version of net-snmp 5.9.1 version facing
issues with the SNMP set command.

SNMP set command fails with the below error for all the OID’s:



 snmpset -v 3  -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1

Error in packet.

Reason: notWritable (That object does not support modification)

Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1



I checked the OID and they have RW permission.

Could you please suggest what can be the issue?



*Note:-* SNMP Walk and SNMP get command works fine.

No issue observed.

Also in /var/log/snmpd.log these errors are logged  continuously.

error on subcontainer 'systemstats_autocreate' insert (-1)
error on subcontainer 'systemstats_autocreate' insert (-1)
error on subcontainer 'systemstats_autocreate' insert (-1)
error on subcontainer 'systemstats_autocreate' insert (-1)
error on subcontainer 'systemstats_autocreate' insert (-1)

Can you please let me  know what could be the issue ?
We are using RHEL 7 with version 9.

Thanks,
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: snmptrap + tables

[Cyrus]

Thanks to Dave Shield for having the patience to explain this 10 years ago:

https://sourceforge.net/p/net-snmp/mailman/message/28774933/

With the explanation and hints, I could fix my MIB file definition.
Now moving to the implementation. :)

Regards,
CI.-

El dom, 11 sept 2022 a las 21:49, Cyrus () escribió:
>
> Hello!,
>
> I'm trying to integrate LibreNMS with a northbound manager through
> SNMP traps using snmptrap@net-snmp.
>
> The way notifications work in that tool is that you can have a
> notification event, which has several faults (event interface errors
> that applies to 4 ports out of the 48 a device may have).
> Notifications are not per port, but per alarm rule on a device.
>
> I'm writing a MIB file to implement that trap, but I see traps don't
> allow tables since validation fails with:
>
> Error (level 3), line 284: [notification-object-type] object
> `daFaultTable' of notification `daEvent' must be a scalar or column
>
> Events may have N faults, with N starting in 0 (CLEAR events) or any
> other number depending on affected entities within a node.
>
> What would be the best approach to send that multientry object table
> (faults) in a trap with a parent entity (event)?
>
> For reference, current version of the MIB file:  https://pastebin.com/CZE0FYEU
>
> Regards,
> CI.-



-- 
Ciro Iriarte
http://iriarte.it
--


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmptrap + tables

[Cyrus]

Hello!,

I'm trying to integrate LibreNMS with a northbound manager through
SNMP traps using snmptrap@net-snmp.

The way notifications work in that tool is that you can have a
notification event, which has several faults (event interface errors
that applies to 4 ports out of the 48 a device may have).
Notifications are not per port, but per alarm rule on a device.

I'm writing a MIB file to implement that trap, but I see traps don't
allow tables since validation fails with:

Error (level 3), line 284: [notification-object-type] object
`daFaultTable' of notification `daEvent' must be a scalar or column

Events may have N faults, with N starting in 0 (CLEAR events) or any
other number depending on affected entities within a node.

What would be the best approach to send that multientry object table
(faults) in a trap with a parent entity (event)?

For reference, current version of the MIB file:  https://pastebin.com/CZE0FYEU

Regards,
CI.-


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: SHA Version

[Wes Hardaker via Net-snmp-users]

Feroz  writes:

> On net-snmp 5.8, with the following configuration in snmpd.conf file, which
> version of SHA (i.e SHA1/SHA-192/SHA-256/SHA-284/SHA-512) is used?
> 
> createUser feroz SHA feroz123 AES feroz123
> rwuser feroz priv

If you specify SHA generically, that's an alias for SHA1.  Instead, use
SHA256 for example to get a stronger token.
-- 
Wes Hardaker
Please mail all replies to net-snmp-cod...@lists.sourceforge.net


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: ./libtool: line 1702: func_options: command not found

[Bart Van Assche]

On 8/29/22 19:11, nur syahirah syafinaz wrote:
* -L./CfgMgr -lCfgMgr -L./ClntAddrMgr -lClntAddrMgr -L./IfaceMgr 
-lIfaceMgr -L./AddrMgr -lAddrMgr -L./poslib -lPoslib -L./nettle 
-lNettle -L./Options -lOptions -L./Messages -lMessages -lOptions 
-lMessages -L./Port-linux -lLowLevel -L./Misc -lMisc -lClntOptions 
-lOptions

./libtool: line 1702: func_options: command not found
libtool: link: you must specify an output file
libtool: link: Try `libtool --help --mode=link' for more information.
make[3]: *** [Makefile:629: dibbler-client] Error 1
make[2]: *** [Makefile:1263: client] Error 2
make[1]: *** [do.mk:292 : .cv22-dibbler-done] Error 2
make: *** [Makefile:198: cv22_dibbler] Error 2*


I'm not sure what is going on. Please run 'git status' and check whether 
any of the files generated by autoconf have perhaps been regenerated 
accidentally. You may want to run the following command to prevent that 
these files are regenerated accidentally:


export NOAUTODEPS=y

Bart.

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

./libtool: line 1702: func_options: command not found

[nur syahirah syafinaz]

* -L./CfgMgr -lCfgMgr -L./ClntAddrMgr -lClntAddrMgr -L./IfaceMgr -lIfaceMgr
-L./AddrMgr -lAddrMgr -L./poslib -lPoslib -L./nettle -lNettle -L./Options
-lOptions -L./Messages -lMessages -lOptions -lMessages -L./Port-linux
-lLowLevel -L./Misc -lMisc -lClntOptions -lOptions ./libtool: line 1702:
func_options: command not foundlibtool: link: you must specify an output
filelibtool: link: Try `libtool --help --mode=link' for more
information.make[3]: *** [Makefile:629: dibbler-client] Error 1make[2]: ***
[Makefile:1263: client] Error 2make[1]: *** [do.mk:292 :
.cv22-dibbler-done] Error 2make: *** [Makefile:198: cv22_dibbler] Error 2*

Hi,
Do you have any experience with this error?


Regards,
Syahirah
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: No rule to make target 'snmptop.1', needed by 'maninstall' issue

[nur syahirah syafinaz]

Yess! It helps me to solve the error. Thanks a lot!


Regards,
Syahirah

On Fri, Aug 26, 2022 at 8:50 AM Bart Van Assche  wrote:

> On 8/24/22 23:49, nur syahirah syafinaz wrote:
>
>
>
>
>
> *make[3]: *** No rule to make target 'snmptop.1', needed by 'maninstall'.
> Stop. make[3]: *** Waiting for unfinished jobs make[2]: ***
> [Makefile:992: installsubdirs] Error 1 make[1]: *** [do.mk:498
> : .cv22-net_snmp-done] Error 2 make: *** [Makefile:198:
> cv22_net_snmp] Error 2*
>
> Hi,
> Any of you guys have any idea why I got this error and how to solve this?
>
> Does this change help:
> https://github.com/net-snmp/net-snmp/commit/5f2cb7bf8aeab83365a77d8d9dd0745d37f8a995
> ?
>
> Bart.
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: No rule to make target 'snmptop.1', needed by 'maninstall' issue

[Bart Van Assche]

On 8/24/22 23:49, nur syahirah syafinaz wrote:

*make[3]: *** No rule to make target 'snmptop.1', needed by 'maninstall'.  Stop.
make[3]: *** Waiting for unfinished jobs
make[2]: *** [Makefile:992: installsubdirs] Error 1
make[1]: *** [do.mk:498 : .cv22-net_snmp-done] Error 2
make: *** [Makefile:198: cv22_net_snmp] Error 2*
*
*
Hi,
Any of you guys have any idea why I got this error and how to solve this?


Does this change help: 
https://github.com/net-snmp/net-snmp/commit/5f2cb7bf8aeab83365a77d8d9dd0745d37f8a995
 ?

Bart.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

No rule to make target 'snmptop.1', needed by 'maninstall' issue

[nur syahirah syafinaz]

*make[3]: *** No rule to make target 'snmptop.1', needed by 'maninstall'.
Stop.make[3]: *** Waiting for unfinished jobsmake[2]: ***
[Makefile:992: installsubdirs] Error 1make[1]: *** [do.mk:498
: .cv22-net_snmp-done] Error 2make: *** [Makefile:198:
cv22_net_snmp] Error 2*

Hi,
Any of you guys have any idea why I got this error and how to solve this?
Thanks in advance!

Regards,
Syahirah
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[murali sarali]

Hi,

This snmp set issue is seen only after upgrading the net-snmp library to
latest version 5.9.1( although SNMP get is working fine ).
snmpset -v 3  -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
Error in packet.
Reason: notWritable (That object does not support modification)
Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1
However  no issue is seen with the SNMP get command with the net-snmp
library 5.9.1 version.
With the previous version of net-snmp 5.7.2 we haven't seen an issue with
the snmp set command. The snmpd.conf file remains the same for both the
versions of net-snmp 5.9.1 and 5.7.2.

Thanks

On Mon, Aug 15, 2022 at 1:38 PM murali sarali 
wrote:

> Hi,
>
> SNMP set command:
>
> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>
> snmpd.conf file :
> 
>
> rwuser FMS noauth
> syslocation localhost
> syscontact Root root@localhost
> master  agentx
> sysobjectid  1.3.6.1.4.1.1751.2.117
> AgentXTimeout 60
> oldEngineID 0x06D70A0D4704
> createUser FMS  MD5 "mypassword" DES
> #createUser FMS  MD5 "mypassword" DES
> #iquerySecName FMS
> #agentSecName FMS
> defaultMonitors yes
> #linkUpDownNotifications yes
> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
> ifOperStatus
> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
> ifOperStatus
>
> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>
> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>
> Thanks,
>
> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>
>> Make sur the user/community has read-write access in snmpd.conf file.
>>
>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command is failing with this error :
>>> Error in packet.
>>>
>>> Reason: notWritable (That object does not support modification)
>>>
>>> Failed object:
>>> Can you please help.
>>>
>>> Thanks,
>>>
>>> ___
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Libtool issue

[nur syahirah syafinaz]

*/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
.libs/snmptrapd_handlers.o: in function
`command_handler':snmptrapd_handlers.c:(.text+0x508): undefined reference
to
`convert_v1pdu_to_v2'/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
snmptrapd_handlers.c:(.text+0x5b0): undefined reference to
`run_shell_command'/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
.libs/snmptrapd_handlers.o: in function
`axforward_handler':snmptrapd_handlers.c:(.text+0x638): undefined reference
to
`send_v2trap'/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
.libs/snmptrapd_auth.o: in function
`netsnmp_trapd_auth':snmptrapd_auth.c:(.text+0x8c): undefined reference to
`convert_v1pdu_to_v2'/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
snmptrapd_auth.c:(.text+0x164): undefined reference to
`vacm_check_view_contents'/usr/local/gcc-10.2-2020.11-aarch64/bin/../lib/gcc/aarch64-none-linux-gnu/10.2.1/../../../../aarch64-none-linux-gnu/bin/ld:
.libs/snmptrapd_auth.o: in function
`init_netsnmp_trapd_auth':snmptrapd_auth.c:(.text+0x1bc): undefined
reference to `init_vacm_config_tokens'collect2: error: ld returned 1 exit
statusmake[3]: *** [Makefile:363: libnetsnmptrapd.la
] Error 1make[2]: *** [Makefile:674: subdirs]
Error 1make[1]: *** [do.mk:497 : .cv22-net_snmp-done]
Error 2make: *** [Makefile:198: cv22_net_snmp] Error 2*

Hi Bart,

I need your advice on this error. I managed to solve the previous issue but
I got this error this time.
Thanks a lot in advance.

On Fri, Aug 12, 2022 at 9:27 PM Bart Van Assche  wrote:

> Hi Syahirah,
>
> Please do not run autoreconf but instead use the configure script included
> in the Net-SNMP source tree. While the included configure script has been
> tested thoroughly, running autoreconf may create a broken configure script.
>
> This is how I cross-compile Net-SNMP for ARM:
>
> ./configure --enable-ipv6 --prefix=... --with-defaults
> --enable-new-features --with-perl-modules --with-default-snmp-version=2
> --with-systemd --enable-blumenthal-aes --with-python-modules
> --host=arm-suse-linux-gnueabi ...
> make
>
>
> As one can see when using --host=... it is not necessary to set CC, STRIP,
> RANLIB, etc.
>
> Best regards,
>
> Bart.
>
> On 8/11/22 22:22, nur syahirah syafinaz wrote:
>
> Hi Bart, thank you so much for your help. I managed to fix the libtool and
> PKG-CONFIG-PATH issue.
> However, I am facing another issue where 'config_net_snmp_config_h' files
> are gone every time I try to build after the net-snmp upgrade.
>
>
>
>
>
>
> *cd net-snmp; autoreconf -i --force; CC="ccache
> /usr/local/gcc-10.2-2020.11-aarch64/bin/aarch64-none-linux-gnu-gcc"
> CXX="ccache
> /usr/local/gcc-10.2-2020.11-aarch64/bin/aarch64-none-linux-gnu-g++"
> STRIP=aarch64-none-linux-gnu-strip AR=aarch64-none-linux-gnu-ar
> LD=aarch64-none-linux-gnu-ld RANLIB=aarch64-none-linux-gnu-ranlib
> DUMPBIN=aarch64-none-linux-gnu-dumpbin LINK=aarch64-none-linux-gnu-link
> NM=aarch64-none-linux-gnu-nm ./configure --host=aarch64-none-linux-gnu
> --prefix=/workspaces/external_repo/build/cv22 --with-default-snmp-version=3
> --with-sys-contact="avigilon" --with-sys-location="unknown"
> --with-logfile="/tmp/snmpd.log"
> --with-persistent-directory="/root/config/dynamic" --disable-embedded-perl
> --without-perl-modules --with-sysroot=/workspaces/external_repo/build/cv22
> --disable-debugging --with-transports=UDP --without-kmem-usage
> --enable-minimialist
> --with-mibdirs=/root/config/dynamic/.snmp/mibs:/usr/local/share/snmp/mibs
> --with-openssl=internal CFLAGS="-march=armv8-a -mcpu=cortex-a53+crypto
> -mlittle-endian -Os" aclocal: error: configure.ac:54
> : file 'configure.d/config_net_snmp_config_h' does
> not exist autoreconf: aclocal failed with exit status: 1 /bin/sh: 1:
> ./configure: not found make[1]: *** [do.mk:494 :
> .cv22-net_snmp-done] Error 127 make: *** [Makefile:198: cv22_net_snmp]
> Error 2*
>
>
> Regards,
> Syahirah Syafinaz
>
>
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

SNMP table question

[Mostafa Kassem]

Greetings,

I inherited an SNMP table with the following definition. Before I open my mouth 
and complain and make a fool of myself, I would like to know from the experts 
that the table definition is correct and perhaps it is the way I used mib2c to 
compile it that is the problem. BTW, I used mib2c.iterate_access.conf.

Thanks,

Mostafa

TableEntry ::= SEQUENCE {
rowIndex  Integer32  not-accessible
column1   Integer32  read-create
column2   Integer32  read-create
column3   Integer32  read-create
column4   Integer32  read-create
column5   Integer32  read-only
column6   Integer32  read-only
column7   Integer32  read-only
column8   Integer32  read-only
column9   Integer32  read-only
column10Integer32  read-only
tableRowStatus  RowStatus}


Would the SNMP manager be able to create table rows based on the 
above-mentioned table definition knowing that some columns are read only?

If I execute the bash script listed below to set row 1 create-read columns only 
($snmpV3Params contains all snmpV3 required authentication and privacy 
parameters),  I only get an error with the last statement that performs the 
create and go. I am guessing that the read only columns are causing the problem.

Error in packet.
Reason: inconsistentValue (The set value is illegal or unsupported in some way)
Failed object: set tableRowStatus.1

/* The last part of the bash script 
**/
set()
{
snmpset $snmpV3Params $ip "$@"
}

# Delete row 1
set tableRowStatus.1 i 6

# Populate the columns that can be created
set column1.1 i 1
set column2.1 i 32
set column3.1 i 1
set column4.1 i 2

# create & go
set tableRowStatus.1 i 4




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Feroz]

Looks like the OID itself is not writable. Can you try with other OID's.

SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1

-Feroz

On Tue, Aug 16, 2022 at 9:23 AM murali sarali 
wrote:

> Hi,
>
> I have modified snmpd.conf by replacing oldEngineID with :
>
> *engineID  8000b85c03d0672649a01e*
>
> Or
>
> exactEngineID 0xf5717f06fdc6db4a4600
>
> But still I am getting the same error.
>
> Error in packet.
> Reason: notWritable (That object does not support modification)
> Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1
>
>
> On Mon, Aug 15, 2022 at 7:49 PM Feroz  wrote:
>
>> This is wrong.
>>
>> oldEngineID 0x06D70A0D4704
>>
>> Should be
>>
>> *engineID  8000b85c03d0672649a01e*
>>
>> Or
>>
>> exactEngineID 0xf5717f06fdc6db4a4600
>>
>>
>> On Mon, 15 Aug, 2022, 1:38 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command:
>>>
>>> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i
>>> 1
>>>
>>> snmpd.conf file :
>>> 
>>>
>>> rwuser FMS noauth
>>> syslocation localhost
>>> syscontact Root root@localhost
>>> master  agentx
>>> sysobjectid  1.3.6.1.4.1.1751.2.117
>>> AgentXTimeout 60
>>> oldEngineID 0x06D70A0D4704
>>> createUser FMS  MD5 "mypassword" DES
>>> #createUser FMS  MD5 "mypassword" DES
>>> #iquerySecName FMS
>>> #agentSecName FMS
>>> defaultMonitors yes
>>> #linkUpDownNotifications yes
>>> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
>>> ifOperStatus
>>> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
>>> ifOperStatus
>>>
>>> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
>>> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>>>
>>> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
>>> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>>>
>>> Thanks,
>>>
>>> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>>>
 Make sur the user/community has read-write access in snmpd.conf file.

 On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
 wrote:

> Hi,
>
> SNMP set command is failing with this error :
> Error in packet.
>
> Reason: notWritable (That object does not support modification)
>
> Failed object:
> Can you please help.
>
> Thanks,
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>


-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[murali sarali]

Hi,

I have modified snmpd.conf by replacing oldEngineID with :

*engineID  8000b85c03d0672649a01e*

Or

exactEngineID 0xf5717f06fdc6db4a4600

But still I am getting the same error.

Error in packet.
Reason: notWritable (That object does not support modification)
Failed object: SNMPv2-SMI::enterprises.1751.2.117.20.1.1.3.1


On Mon, Aug 15, 2022 at 7:49 PM Feroz  wrote:

> This is wrong.
>
> oldEngineID 0x06D70A0D4704
>
> Should be
>
> *engineID  8000b85c03d0672649a01e*
>
> Or
>
> exactEngineID 0xf5717f06fdc6db4a4600
>
>
> On Mon, 15 Aug, 2022, 1:38 pm murali sarali, 
> wrote:
>
>> Hi,
>>
>> SNMP set command:
>>
>> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>>
>> snmpd.conf file :
>> 
>>
>> rwuser FMS noauth
>> syslocation localhost
>> syscontact Root root@localhost
>> master  agentx
>> sysobjectid  1.3.6.1.4.1.1751.2.117
>> AgentXTimeout 60
>> oldEngineID 0x06D70A0D4704
>> createUser FMS  MD5 "mypassword" DES
>> #createUser FMS  MD5 "mypassword" DES
>> #iquerySecName FMS
>> #agentSecName FMS
>> defaultMonitors yes
>> #linkUpDownNotifications yes
>> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
>> ifOperStatus
>> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
>> ifOperStatus
>>
>> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
>> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>>
>> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
>> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>>
>> Thanks,
>>
>> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>>
>>> Make sur the user/community has read-write access in snmpd.conf file.
>>>
>>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>>> wrote:
>>>
 Hi,

 SNMP set command is failing with this error :
 Error in packet.

 Reason: notWritable (That object does not support modification)

 Failed object:
 Can you please help.

 Thanks,

 ___
 Net-snmp-users mailing list
 Net-snmp-users@lists.sourceforge.net
 Please see the following page to unsubscribe or change other options:
 https://lists.sourceforge.net/lists/listinfo/net-snmp-users

>>>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Feroz]

This is wrong.

oldEngineID 0x06D70A0D4704

Should be

*engineID  8000b85c03d0672649a01e*

Or

exactEngineID 0xf5717f06fdc6db4a4600


On Mon, 15 Aug, 2022, 1:38 pm murali sarali,  wrote:

> Hi,
>
> SNMP set command:
>
> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>
> snmpd.conf file :
> 
>
> rwuser FMS noauth
> syslocation localhost
> syscontact Root root@localhost
> master  agentx
> sysobjectid  1.3.6.1.4.1.1751.2.117
> AgentXTimeout 60
> oldEngineID 0x06D70A0D4704
> createUser FMS  MD5 "mypassword" DES
> #createUser FMS  MD5 "mypassword" DES
> #iquerySecName FMS
> #agentSecName FMS
> defaultMonitors yes
> #linkUpDownNotifications yes
> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
> ifOperStatus
> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
> ifOperStatus
>
> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>
> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>
> Thanks,
>
> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>
>> Make sur the user/community has read-write access in snmpd.conf file.
>>
>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command is failing with this error :
>>> Error in packet.
>>>
>>> Reason: notWritable (That object does not support modification)
>>>
>>> Failed object:
>>> Can you please help.
>>>
>>> Thanks,
>>>
>>> ___
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Feroz]

For auth-priv the setcmd would be as follows:
Check the man pages, for *auth-no-priv *and *no-auth-no-priv *options.

snmpset -v3 -u FSM -a MD5 -A user123 -x AES -X user123 -l *authPriv *127.0.0.1
IF-MIB::ifAdminStatus.3 i 1

On Mon, Aug 15, 2022 at 1:38 PM murali sarali 
wrote:

> Hi,
>
> SNMP set command:
>
> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>
> snmpd.conf file :
> 
>
> rwuser FMS noauth
> syslocation localhost
> syscontact Root root@localhost
> master  agentx
> sysobjectid  1.3.6.1.4.1.1751.2.117
> AgentXTimeout 60
> oldEngineID 0x06D70A0D4704
> createUser FMS  MD5 "mypassword" DES
> #createUser FMS  MD5 "mypassword" DES
> #iquerySecName FMS
> #agentSecName FMS
> defaultMonitors yes
> #linkUpDownNotifications yes
> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
> ifOperStatus
> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
> ifOperStatus
>
> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>
> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>
> Thanks,
>
> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>
>> Make sur the user/community has read-write access in snmpd.conf file.
>>
>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command is failing with this error :
>>> Error in packet.
>>>
>>> Reason: notWritable (That object does not support modification)
>>>
>>> Failed object:
>>> Can you please help.
>>>
>>> Thanks,
>>>
>>> ___
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>>

-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Feroz]

looks like createUser is causing a problem.

Try this

*For auth-priv:*
createUser testuser MD5 user@123 AES user@123
rwuser testuser priv

or

*For no-auth-no-priv:*
createuser user123
rwuser user123 noauth

or

*For auth-no-priv:*
createUser FSM SHA passwd123
rwuser FSM auth


On Mon, Aug 15, 2022 at 1:38 PM murali sarali 
wrote:

> Hi,
>
> SNMP set command:
>
> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>
> snmpd.conf file :
> 
>
> rwuser FMS noauth
> syslocation localhost
> syscontact Root root@localhost
> master  agentx
> sysobjectid  1.3.6.1.4.1.1751.2.117
> AgentXTimeout 60
> oldEngineID 0x06D70A0D4704
> createUser FMS  MD5 "mypassword" DES
> #createUser FMS  MD5 "mypassword" DES
> #iquerySecName FMS
> #agentSecName FMS
> defaultMonitors yes
> #linkUpDownNotifications yes
> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
> ifOperStatus
> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
> ifOperStatus
>
> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>
> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>
> Thanks,
>
> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>
>> Make sur the user/community has read-write access in snmpd.conf file.
>>
>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command is failing with this error :
>>> Error in packet.
>>>
>>> Reason: notWritable (That object does not support modification)
>>>
>>> Failed object:
>>> Can you please help.
>>>
>>> Thanks,
>>>
>>> ___
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>>

-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Paul Herring]

> 1.3.6.1.4.1.1751.2.117.20.1.1.3.1

How does the MIB describe that point? (Google isn't showing anything past
1.3.6.1.4.1.1751.2.X , with 117 not
being an X, and I don't recognise what they are.)

I suspect it's not writable (at the moment) - at least that's certainly
what the error message indicates.

On Mon, Aug 15, 2022 at 9:10 AM murali sarali 
wrote:

> Hi,
>
> SNMP set command:
>
> snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1
>
> snmpd.conf file :
> 
>
> rwuser FMS noauth
> syslocation localhost
> syscontact Root root@localhost
> master  agentx
> sysobjectid  1.3.6.1.4.1.1751.2.117
> AgentXTimeout 60
> oldEngineID 0x06D70A0D4704
> createUser FMS  MD5 "mypassword" DES
> #createUser FMS  MD5 "mypassword" DES
> #iquerySecName FMS
> #agentSecName FMS
> defaultMonitors yes
> #linkUpDownNotifications yes
> #notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
> ifOperStatus
> #notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
> ifOperStatus
>
> #monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
> #monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
>
> #trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
> trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16
>
> Thanks,
>
> On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:
>
>> Make sur the user/community has read-write access in snmpd.conf file.
>>
>> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
>> wrote:
>>
>>> Hi,
>>>
>>> SNMP set command is failing with this error :
>>> Error in packet.
>>>
>>> Reason: notWritable (That object does not support modification)
>>>
>>> Failed object:
>>> Can you please help.
>>>
>>> Thanks,
>>>
>>> ___
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>


-- 
PJH
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[murali sarali]

Hi,

SNMP set command:

snmpset -v 3 -u FMS -n FMS 127.0.0.1 1.3.6.1.4.1.1751.2.117.20.1.1.3.1 i 1

snmpd.conf file :


rwuser FMS noauth
syslocation localhost
syscontact Root root@localhost
master  agentx
sysobjectid  1.3.6.1.4.1.1751.2.117
AgentXTimeout 60
oldEngineID 0x06D70A0D4704
createUser FMS  MD5 "mypassword" DES
#createUser FMS  MD5 "mypassword" DES
#iquerySecName FMS
#agentSecName FMS
defaultMonitors yes
#linkUpDownNotifications yes
#notificationEvent  linkUpTraplinkUp   ifIndex ifAdminStatus
ifOperStatus
#notificationEvent  linkDownTrap  linkDown ifIndex ifAdminStatus
ifOperStatus

#monitor  -r 60 -e linkUpTrap   "Generate linkUp"   ifOperStatus != 2
#monitor  -r 60 -e linkDownTrap "Generate linkDown" ifOperStatus == 2

#trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:162
trapsess -Ci -v3 -u FMS -n FMS 100.74.128.84:16

Thanks,

On Mon, Aug 15, 2022 at 11:09 AM Feroz  wrote:

> Make sur the user/community has read-write access in snmpd.conf file.
>
> On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
> wrote:
>
>> Hi,
>>
>> SNMP set command is failing with this error :
>> Error in packet.
>>
>> Reason: notWritable (That object does not support modification)
>>
>> Failed object:
>> Can you please help.
>>
>> Thanks,
>>
>> ___
>> Net-snmp-users mailing list
>> Net-snmp-users@lists.sourceforge.net
>> Please see the following page to unsubscribe or change other options:
>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Problem with SNMP set command

[Feroz]

Make sur the user/community has read-write access in snmpd.conf file.

On Sun, 14 Aug, 2022, 10:03 pm murali sarali, 
wrote:

> Hi,
>
> SNMP set command is failing with this error :
> Error in packet.
>
> Reason: notWritable (That object does not support modification)
>
> Failed object:
> Can you please help.
>
> Thanks,
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Problem with SNMP set command

[murali sarali]

Hi,

SNMP set command is failing with this error :
Error in packet.

Reason: notWritable (That object does not support modification)

Failed object:
Can you please help.

Thanks,
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

SHA Version

[Feroz]

Hi,
On net-snmp 5.8, with the following configuration in snmpd.conf file, which
version of *SHA *(i.e SHA1/SHA-192/SHA-256/SHA-284/SHA-512) is used?

createUser feroz *SHA *feroz123 AES feroz123
rwuser feroz priv

-- 
Regards,
Feroz Ahmed
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Libtool issue

[Bart Van Assche]

  
  
Hi Syahirah,


Please do not run autoreconf but
  instead use the configure script included in the Net-SNMP source
  tree. While the included configure script has been tested
  thoroughly, running autoreconf may create a broken configure
  script.


This is how I cross-compile Net-SNMP
  for ARM:



  ./configure
  --enable-ipv6 --prefix=... --with-defaults
  --enable-new-features --with-perl-modules
  --with-default-snmp-version=2 --with-systemd
  --enable-blumenthal-aes --with-python-modules
  --host=arm-suse-linux-gnueabi ...
  make



As one can see when using --host=... it
  is not necessary to set CC, STRIP, RANLIB, etc.



Best regards,



Bart.


On 8/11/22 22:22, nur syahirah syafinaz
  wrote:


  
  Hi Bart, thank you so much for your help. I managed
to fix the libtool and PKG-CONFIG-PATH issue. 
However, I am facing another issue where
  'config_net_snmp_config_h' files are gone every time I try to
  build after the net-snmp upgrade. 


cd net-snmp; autoreconf -i
  --force; CC="ccache
  /usr/local/gcc-10.2-2020.11-aarch64/bin/aarch64-none-linux-gnu-gcc"
  CXX="ccache
  /usr/local/gcc-10.2-2020.11-aarch64/bin/aarch64-none-linux-gnu-g++"
  STRIP=aarch64-none-linux-gnu-strip
  AR=aarch64-none-linux-gnu-ar LD=aarch64-none-linux-gnu-ld
  RANLIB=aarch64-none-linux-gnu-ranlib
  DUMPBIN=aarch64-none-linux-gnu-dumpbin
  LINK=aarch64-none-linux-gnu-link
  NM=aarch64-none-linux-gnu-nm ./configure
  --host=aarch64-none-linux-gnu
  --prefix=/workspaces/external_repo/build/cv22
  --with-default-snmp-version=3
  --with-sys-contact="avigilon"
  --with-sys-location="unknown"
  --with-logfile="/tmp/snmpd.log"
  --with-persistent-directory="/root/config/dynamic"
  --disable-embedded-perl --without-perl-modules
  --with-sysroot=/workspaces/external_repo/build/cv22
  --disable-debugging --with-transports=UDP
  --without-kmem-usage --enable-minimialist
--with-mibdirs=/root/config/dynamic/.snmp/mibs:/usr/local/share/snmp/mibs
  --with-openssl=internal CFLAGS="-march=armv8-a
  -mcpu=cortex-a53+crypto -mlittle-endian -Os"
  aclocal: error: configure.ac:54: file
  'configure.d/config_net_snmp_config_h' does not exist
  autoreconf: aclocal failed with exit status: 1
  /bin/sh: 1: ./configure: not found
  make[1]: *** [do.mk:494:
  .cv22-net_snmp-done] Error 127
  make: *** [Makefile:198: cv22_net_snmp] Error 2





Regards,
Syahirah Syafinaz
  


  


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: snmpwalk: Unknown user name

[Larry Hayes]

You will need to create the SNMP V3 user.

See:
https://net-snmp.sourceforge.io/wiki/index.php/TUT:SNMPv3_Options for a
tutoria on configuration setup.

You might also want to check your access control:
https://net-snmp.sourceforge.io/wiki/index.php/Vacm


On Tue, Aug 9, 2022 at 3:48 AM 김동휘  wrote:

> I am now implement a snmp agent based on the unbuntu/net-snmp[ver
> 5.0.11.2].
>
>
>
> -SNMP v3
>
> -SNMP Manager IP : 192.168.10.171[for agent test], SNMP Agent IP
> : 192.168.10.180
>
>
>
> My snmpd.conf file is like the following
>
> =
>
> com2sec   andytest  localhost   public
>
> com2sec   mynetwork192.168.10.0/24   enseirb
>
>
>
> group MyRWGroup v1 andytest
>
> group MyRWGroup v2candytest
>
> group MyRWGroup usmandytest
>
> group MyROGroup v1 mynetwork
>
> group MyROGroup v2cmynetwork
>
> group MyROGroup usmmynetwork
>
>
>
> #view systemview   included .1.3.6.1.2.1.1
>
> #view systemview   included .1.3.6.1.2.1.25.1.1
>
> view allincluded .1
> 80
>
>
>
> access MyROGroup ""  any   noauthexact  systemviewnone
> none
>
> access MyRWGroup ""  any   noauthexact  allallnone
>
> =
>
>
>
> The MIB file is simple for testing.
>
> =
>
> ENSEIRB-MIB DEFINITIONS ::= BEGIN
>
>
>
> IMPORTS
>
>enterprises
>
>   FROM SNMPv2-SMI,
>
>MODULE-IDENTITY
>
>   FROM SNMPv2-SMI
>
>MODULE-COMPLIANCE,
>
>OBJECT-GROUP
>
>   FROM SNMPv2-CONF;
>
>
>
> --
>
> -- A brief description and update information about this mib.
>
> --
>
> enseirb MODULE-IDENTITY
>
>   LAST-UPDATED "010401Z" -- 01 Apr 2001, midnight
>
>   ORGANIZATION "ENSEIRB"
>
>   CONTACT-INFO "
>
>  Author: Patrice Kadionik
>
>  phone: +33-5-56-84-65-00
>
>   "
>
>   DESCRIPTION "MIB for remote control by SNMP"
>
>::= { enterprises 9362 }
>
>
>
> leds OBJECT IDENTIFIER::= { enseirb 1 }
>
>
>
>
>
> --
>
> -- LED 0 connected to the PC parallel port
>
> --
>
> led0 OBJECT-TYPE
>
>   SYNTAX Integer32 (0..1)
>
>   MAX-ACCESS read-write
>
>   STATUS current
>
>   DESCRIPTION
>
>   "Led 0 connected to bit 0 of the PC parallel port."
>
>   DEFVAL { 0 }
>
>::= { leds 1 }
>
>
>
>
>
> END
>
> =
>
>
>
> When I try to access the agent[192.168.10.180] using snmpwalk(snmpwalk -v
> 3 -u andytest  192.168.10.180 system),
>
> “snmpwalk: Unknown user name” message is displayed.
>
>
>
>
>
> The agent log file is like the following
>
> =
>
>  Recv Part 
>
> trace: snmp_parse_var_op(): snmp.c, 151
>
> dumph_recv: Name
>
> dumpx_recv:  06 06 2B 06 01 02 01 01
>
> dumpv_recv:ObjID: SNMPv2-MIB::system
>
> trace: snmp_pdu_parse(): snmp_api.c, 4241
>
> dumph_recv: Value
>
> trace: _snmp_parse(): snmp_api.c, 3967
>
> snmp_parse: Parsed SNMPv3 message (secName:andytest,
> secLevel:noAuthNoPriv): USM unknown security name (no such user exists)
>
>
>
>  Send Part 
>
> trace: snmp_realloc_rbuild_var_op(): snmp.c, 427
>
> dumph_send: Name
>
> dumpx_send:  06 0A 2B 06 01 06 03 0F 01 01 03 00
>
> dumpv_send:ObjID:
> SNMP-USER-BASED-SM-MIB::usmStatsUnknownUserNames.0
>
> =
>
>
>
> I have looked into the source code of the parsing the manager data.
>
> The usm_get_user_from_list() is called, but any valid data is not returned
> because there is not a user information in the userList.
>
>
>
> Why there isn’t a valid data in the userList?
>
> I think that the usm_add_user() and usm_save_users() functions save the
> information of user into the userList.
>
> But two function are never called when the snmpd(agent) is initialized.
>
>
>
> What could I clear this problem?
>
>
>
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
___
Net-snmp-users 

snmpwalk: Unknown user name

[김동휘]

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: net-snmpd crash

[김동휘]

Dear Munuswamy.

 

I am now implement a net-snmp agent and have many questions and problems.

But I don't know anyone who help me.

 

So I have tried to ask that site a question by sending an e-mail to 
'Net-snmp-users@lists.sourceforge.net'

but the title of the mail is only displayed on that site, the mail content 
isn't.

 

Could you let me know how to ask a question at the net-snmp 
mailing-list[Sourceforge].

 

I have never found a solution to clear my problem.

Please help me.

 

Your emails to tell me how to ask questions will be a lot of strength for me.

 

Best regards.

 

 

=

 

 

From: Velu Munuswamy [mailto:velumunusw...@gmail.com] 
Sent: Thursday, July 28, 2022 8:27 PM
To: net-snmp-users@lists.sourceforge.net
Subject: Reg: net-snmpd crash

 

Hi,

 We are getting a segmentation fault  in "run_config_handler" which is 
in net_snmpd library code. core dump is not consistent to reproduce the issue.

Using net-snmp version 5.8.  Below is the backtrace.

 

<< 

(gdb) bt
#0  0x in ?? ()
#1  0x7ff35d9e4286 in run_config_handler (lptr=0x7ff2d0005840, 
lptr@entry=0x7ff29c0009d0,
token=token@entry=0x7ff2c77fb490 "sysobjectid", 
cptr=cptr@entry=0x7ff29c01c34c ".1.3.6.1.4.1.39762.1.5",
when=when@entry=0) at read_config.c:558
#2  0x7ff35d9e4def in read_config (filename=filename@entry=0x7ff2c77fc990 
"/tmp//snmpd.conf",
line_handler=0x7ff29c0009d0, when=when@entry=0) at read_config.c:977
#3  0x7ff35d9e5d8c in read_config_files_in_path (path=path@entry=0x28c737d 
"/tmp/:/tmp/pers",
ctmp=ctmp@entry=0x7ff29c000940, when=when@entry=0, 
perspath=perspath@entry=0x7ff29c01b550 "/tmp/pers",
persfile=persfile@entry=0x0) at read_config.c:1324
#4  0x7ff35d9e6172 in read_config_files_of_type (when=when@entry=0, 
ctmp=ctmp@entry=0x7ff29c000940)
at read_config.c:1420
#5  0x7ff35d9e6233 in read_config_files (when=when@entry=0) at 
read_config.c:1448
#6  0x7ff35d9e6384 in read_configs () at read_config.c:1060
#7  0x0045f05f in SnmpdTask::run (this=0x7ff2a4000ff0) at 
src/snmpd_task.cpp:501
#8  0x0045f3ad in snmpd_ep (arg=) at 
src/snmpd_task.cpp:559
#9  0x7ff34f33bea5 in start_thread () from /lib64/libpthread.so.0
#10 0x7ff34e3fdb0d in clone () from /lib64/libc.so.6
(gdb) 

 

>> 

Not sure what is the reason for coredump. 

 

Need help on answering these questions!

Thanks in advance.

 

Regards,

Velu

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Libtool issue

[김동휘]

Dear All.

I am now implement a net-snmp agent and have many questions and problems.
But I don't know anyone who help me.

So I have tried to ask that site a question by sending an e-mail to 
'Net-snmp-users@lists.sourceforge.net'
but the title of the mail is only displayed on that site, the mail content 
isn't.

Could you let me know how to ask a question at the net-snmp 
mailing-list[Sourceforge].

I have never found a solution to clear my problem.
Please help me.

Your emails to tell me how to ask questions will be a lot of strength for me.

Best regards.

=


-Original Message-
From: Bart Van Assche [mailto:bvanass...@acm.org] 
Sent: Friday, July 29, 2022 12:54 PM
To: nur syahirah syafinaz ; 
Net-snmp-users@lists.sourceforge.net
Subject: Re: Libtool issue

On 7/28/22 19:04, nur syahirah syafinaz wrote:
> I am trying to upgrade the netsmp lib to v5.9.1 and whenever I try to 
> compile, it fails.
> It has the "libtool not found" error even though it has been installed.

That's unexpected. How do you build Net-SNMP?

Bart.




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Libtool issue

[Bart Van Assche]

On 7/28/22 19:04, nur syahirah syafinaz wrote:
I am trying to upgrade the netsmp lib to v5.9.1 and whenever I try to 
compile, it fails.

It has the "libtool not found" error even though it has been installed.


That's unexpected. How do you build Net-SNMP?

Bart.




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Libtool issue

[nur syahirah syafinaz]

Hi,

I am trying to upgrade the netsmp lib to v5.9.1 and whenever I try to
compile, it fails.
It has the "libtool not found" error even though it has been installed.

Does anyone have the same issue as mine? Need help on this.
Thanks in advance.

Regards,
Syahirah
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reg: net-snmpd crash

[Velu Munuswamy]

Hi,
 We are getting a segmentation fault  in "run_config_handler" which
is in net_snmpd library code. core dump is not consistent to reproduce the
issue.
Using net-snmp version 5.8.  Below is the backtrace.

<<
(gdb) bt
#0  0x in ?? ()
#1  0x7ff35d9e4286 in run_config_handler (lptr=0x7ff2d0005840,
lptr@entry=0x7ff29c0009d0,
token=token@entry=0x7ff2c77fb490 "sysobjectid",
cptr=cptr@entry=0x7ff29c01c34c
".1.3.6.1.4.1.39762.1.5",
when=when@entry=0) at read_config.c:558
#2  0x7ff35d9e4def in read_config (filename=filename@entry=0x7ff2c77fc990
"/tmp//snmpd.conf",
line_handler=0x7ff29c0009d0, when=when@entry=0) at read_config.c:977
#3  0x7ff35d9e5d8c in read_config_files_in_path (path=path@entry=0x28c737d
"/tmp/:/tmp/pers",
ctmp=ctmp@entry=0x7ff29c000940, when=when@entry=0,
perspath=perspath@entry=0x7ff29c01b550 "/tmp/pers",
persfile=persfile@entry=0x0) at read_config.c:1324
#4  0x7ff35d9e6172 in read_config_files_of_type (when=when@entry=0,
ctmp=ctmp@entry=0x7ff29c000940)
at read_config.c:1420
#5  0x7ff35d9e6233 in read_config_files (when=when@entry=0) at
read_config.c:1448
#6  0x7ff35d9e6384 in read_configs () at read_config.c:1060
#7  0x0045f05f in SnmpdTask::run (this=0x7ff2a4000ff0) at
src/snmpd_task.cpp:501
#8  0x0045f3ad in snmpd_ep (arg=) at
src/snmpd_task.cpp:559
#9  0x7ff34f33bea5 in start_thread () from /lib64/libpthread.so.0
#10 0x7ff34e3fdb0d in clone () from /lib64/libc.so.6
(gdb)

>>
Not sure what is the reason for coredump.

Need help on answering these questions!
Thanks in advance.

Regards,
Velu
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Please check my attachment.

[김동휘]

Dear All,

I don’t know how to ask a question at this site.
I can't find how to do.

Could anyone let me know it?

I send my question to Net-snmp-users@lists.sourceforge.net.
But only the title of my email is displayed, not question content.

Sorry
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: How could I leave a message?

[Paul Herring]

You've already spammed three to the list.

Perhaps ask your question instead of sending test messages?

On Mon, 25 Jul 2022, 07:37 김동휘,  wrote:

>
>
>
>
> =
>
>
>
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

How could I leave a message?

[김동휘]

Dear All,

I don’t know how to leave a question at this site.
So I check whether this mail is right for asking a question.

Sorry
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Q Test

[김동휘]

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

net snmp q

[김동휘]

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Replay traps received from snmptrapd

[Matt Hughes]

I'm looking to capture/log traps on one machine via snmptrapd and then
"replay" them back at a later time with snmptrap with a little help.

I run snmptrapd -f -Lod -n -OnqX on the capture machine.

And then I try to take one of those lines and run the parameters into
snmptrap.  However, snmptrapd output doesn't include the type in the "oid
type value" format.  Instead, I just have oid value.  Even assuming support
for just ints/longs/strings, is this possible?  Just looking to sanity
check some messages in development that I am receiving on another server.
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Making an Agent

[Wes Hardaker via Net-snmp-users]

Cameron Dziama  writes:

> I am currently trying to make an agent for a cross-platform use case
> (RHEL7 and Windows). I've tried to dig through some of the
> documentation on agents and it seems like I need to compile my MIB
> module into the master agent while building the source. As I
> understand it right now, this would require me to spin off a separate
> demon process to handle requests from the client--this would cause
> problems with my Windows solution.

Actually, you can compile net-snmp and include your code into the main
(master) agent if you wish instead.  A sub-agent is one option, but is
not the only one.  I'm not familiar enough myself with compiling on
windows, but with mingw32 you should be able to run configure and add
the --with-mib-modules flag to include your code files.

-- 
Wes Hardaker
USC/ISI


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Making an Agent

[Cameron Dziama]

Hello,

I am currently trying to make an agent for a cross-platform use case (RHEL7
and Windows). I've tried to dig through some of the documentation on agents
and it seems like I need to compile my MIB module into the master agent
while building the source. As I understand it right now, this would require
me to spin off a separate demon process to handle requests from the
client--this would cause problems with my Windows solution.

Is there any way to implement the agent strictly in my C code without
spinning off a separate process? Ideally I would be able to have my C agent
code monitor for SNMP requests, then handle them as needed. I couldn't seem
to find an example of this if it is possible--do any exist?

I appreciate any guidance.

Thanks,
Cameron
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpwalk command

[Turritopsis Dohrnii Teo En Ming]

Subject: snmpwalk command

Good day from Singapore,

Just sharing this snmpwalk command.

snmpwalk -v3 -u [username] -l authPriv -a SHA -A [authentication
password] -x AES -X [encryption password] localhost

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
7 July 2022 Thursday
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: net-snmp-create-v3-user on Debian 11

[John Bize]

Thanks Paul,

It looks like the Debian fix will change the current behavior and break 
my installation (when I delete SNMP v3 users).  I guess I'll cross that 
bridge when the updated version is released into stable.



On 23-Jun-2022 8:52 AM, Paul Herring wrote:
It seems to have already been reported: 
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1969623


(In particular, in the Description and comment #4)


On Thu, Jun 23, 2022 at 1:46 PM John Bize  wrote:

In a recent thread, Wes mentioned using "net-snmp-config
--create-snmpv3-user" to create SNMP v3 users.  I recently started
using
net-snmp on Debian 11 (bullseye) and discovered that the installed
/usr/bin/net-snmp-create-v3-user script had an undefined variable
(datarootdir).

My workaround is to "export datarootdir='/usr/share'", but I
wanted to
reach out and determine if this is a known bug, or if I'm doing
something wrong.

I've always invoked net-snmp-create-v3-userdirectly, but invoking
"net-snmp-config  --create-snmpv3-user" still fails.

Shall I report this as a bug to the Debian maintainers?




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users



--
PJH



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: net-snmp-create-v3-user on Debian 11

[Paul Herring]

It seems to have already been reported:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1969623

(In particular, in the Description and comment #4)


On Thu, Jun 23, 2022 at 1:46 PM John Bize  wrote:

> In a recent thread, Wes mentioned using "net-snmp-config
> --create-snmpv3-user" to create SNMP v3 users.  I recently started using
> net-snmp on Debian 11 (bullseye) and discovered that the installed
> /usr/bin/net-snmp-create-v3-user script had an undefined variable
> (datarootdir).
>
> My workaround is to "export datarootdir='/usr/share'", but I wanted to
> reach out and determine if this is a known bug, or if I'm doing
> something wrong.
>
> I've always invoked net-snmp-create-v3-userdirectly, but invoking
> "net-snmp-config  --create-snmpv3-user" still fails.
>
> Shall I report this as a bug to the Debian maintainers?
>
>
>
>
> ___
> Net-snmp-users mailing list
> Net-snmp-users@lists.sourceforge.net
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>


-- 
PJH
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

net-snmp-create-v3-user on Debian 11

[John Bize]

In a recent thread, Wes mentioned using "net-snmp-config 
--create-snmpv3-user" to create SNMP v3 users.  I recently started using 
net-snmp on Debian 11 (bullseye) and discovered that the installed 
/usr/bin/net-snmp-create-v3-user script had an undefined variable 
(datarootdir).


My workaround is to "export datarootdir='/usr/share'", but I wanted to 
reach out and determine if this is a known bug, or if I'm doing 
something wrong.


I've always invoked net-snmp-create-v3-userdirectly, but invoking 
"net-snmp-config  --create-snmpv3-user" still fails.


Shall I report this as a bug to the Debian maintainers?




___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Securing snmpd.conf files

[Wes Hardaker via Net-snmp-users]

Craig Small  writes:

> Is there a way to encrypt passwords in the snmpd.conf file? Currently, 
> when we open
> snmpd.conf file we can look at passwords in plaintext format, is there a 
> way to
> store those passwords in encrypted form. Does net-snmp support any 
> encryption/
> decryption of passwords while reading from snmpd.conf?
> 
> The snmpusm manpage describes a way of making SNMP v3 users. 
> The passwords are, I believe, stored as MD5 HMAC and not cleartext.

Good answer and thanks for noting this.

Even more importantly: they're not only stored as a MAC, but also stored
in a way that is isolated to just that machine and localized with an
engineid.

Specifically, the snmpd.conf manual page about the createUser line says:

 This directive  should  be  placed  into  the  /var/net-snmp/sn‐
 mpd.conf file instead of the other normal locations.  The reason
 is that the information is read from the file and then the  line
 is  removed  (eliminating the storage of the master password for
 that user) and replaced with the key that is  derived  from  it.
 This  key is a localized key, so that if it is stolen it can not
 be used to access other agents.  If the password is stolen, how‐
 ever, it can be.

Thus the createUser line should *never* be put in a global config file
that is not where the agent stores it's data in the first place.  The
manual page also talks about how to use the net-snmp-config tool to help
with this:

 Instead  of  figuring out how to use this directive and where to
 put it  (see  below),  just  run  "net-snmp-config  --create-sn‐
 mpv3-user"  instead,  which  will  add one of these lines to the
 right place.


-- 
Wes Hardaker
Please mail all replies to net-snmp-cod...@lists.sourceforge.net


___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Re: Discovery of network map or topology without switch or router

[Michael Schwartzkopff via Net-snmp-users]

On 21.06.22 01:42, Hugo I. Reyes wrote:

Hello,

Can NET-SNMP be used to discover the network map or network topology
without switch or router?

Is it possible to configure all nodes in a network as snmp managers and
still discover the network map or networ topology?

Thanks in advance for any help on answering these questions!

Kind regards



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users



Yes. But its complicated.


Mit freundlichen Grüßen,

--

[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64

Schleißheimer Straße 26/MG,80333 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263

Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users