Hi Dave, Thanks for the input. I didn't know what "rocommunity global" does and I will try retesting with rocommunity removed and post the results.
But, it does not look like the results match the function of "vacm mask", isn't it. My understanding of the mask is "1 means that the oid tree is in view and "0" means not in view. Another colleague told me that "1" means that we need an exact match and "0" means the view does not care about the "oid" tree. That is why we started the test and the results are not conclusive. Thanks, Fatima On Tue, Mar 23, 2010 at 4:08 AM, Dave Shield <[email protected]> wrote: > On 22 March 2010 15:20, Fatima Peter <[email protected]> wrote: >> # sec.name source community >> com2sec test1 10.10.0.0/16 global >> >> rocommunity global > > If you are running view tests using the community name "global", > then it's not really sensible to configure full access for this > community string! > > Try deleting the "rocommunity" entry. > > >> # (A) subtree: 1.3.6.1.2.1 (mask: 1 1 1 1 1 1) >> # (B) subtree: 1.3.6.1.2.1.1.1 (mask: 1 1 1) >> # (C) subtree: 1.3.6.1.2.1.2 (mask: none) <= actually a mask of '0' >> # (D) subtree: 1.3.6.1.2.1.1 (mask: 1 1 0 1 0 1 1) >> # (E) subtree: 1.3.6.1.2.1.2 (mask: 1 1 0 1 0) >> # (F) subtree: 1.3.6.1.2.1 (mask: 1 1 0 1 0 1) > > > Applying these masks gives the following subtrees: > > A: 1.3.6.1.2.1 (all of mib2) > B: 1.3.6 (essentially the whole tree) > C: . (the whole tree) > D: 1.3.x.1.x.1.1 (matches system group) > E: 1.3.x.1 (essentially the whole tree) > F: 1.3.x.1.x.1 (mib-2 (1.3.6.1.2.1) plus enterprises > (1.3.6.1.4.1)) > > > With the "rocommunity" line removed, I get around 15,000 lines for cases > A,B,C,E and F, which is effectively the complete output of the agent. > Case D gives 32 lines of output - just the system group. > This group is the only one that matches the specified pattern > i.e. where the sixth and seventh subidentifiers are both 1 > > That seems to be working correctly. > > Note that in case C, a mask of 0 gives a different result from omitting > the mask altogether. > > Dave > ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Net-snmp-coders mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
