There are two machines acting as SNMP managers:

1: RedHat Enterprise Linux: net-snmp 5.1.2 installed.
I run snmpget to 10.0.1.48:
[EMAIL PROTECTED] snmpget -v 1 10.0.1.48 -c public system.sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: IBM OS/400 V5R3M0
I run snmpget to 10.10.1.31:
[EMAIL PROTECTED] ~]# snmpget -v 1 10.10.1.31 -c public system.sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: SNMPv3 agent version 1.0 with DPI version 
2.0


2: CentOS 4.4:  net-snmp 5.1.2 installed.
I run snmpget to 10.0.1.48: 
snmpget -v 1 10.0.1.48 -c public system.sysDescr.0
Timeout: No Response from 10.0.1.48.
I run snmpget to 10.10.1.31:
[EMAIL PROTECTED] ~]# snmpget -v 1 10.10.1.31 -c public system.sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: SNMPv3 agent version 1.0 with DPI version 
2.0

I've run wireshark on each machine to see what tpackets are being sent and 
received,

On rhe RHEL machine, to 10.0.1.48, there's an SNMP get-request, followed 
immediately by a get-response.

On the CentOS machine, there's an  SNMP get-request, followed immediately 
by a get-response, followed immediately by an ICMP to the port the 
get-response came from.

Wireshark on both machines sees the responses relevant to that machine, 
and neither machine is running a firewall.

David Ingoldsby

Office +353 1 602 2396
Mobile +353 87 274 5355



[EMAIL PROTECTED] wrote on 08/12/2006 16:41:05:

> On 08/12/06, David Ingoldsby <[EMAIL PROTECTED]> wrote:
> > I ran snmpget on both boxes Looking at the traffic with wireshark, on
> > RHEL4 I see an SNMP get-request followed by a get-response. On CentOS 
i I
> > see an SNMP get-request followed by a get-response, followed by an 
ICMP
> > packet which appears to be resending the get-response back to the 
AS/400.
> > The ICMP packet has flag setting saying "destination unreachable, host
> > administratively prohibited".
> 
> Where are you querying these two agents from?
> The same box that the agent is running on?
> Or some other system on the network?  What O/S is this running?
> 
> This sounds suspiciously like firewall or iptables-style settings on the
> *client* side - the agent is sending back a response, but the client
> machine is refusing to accept it.
> 
> Check any firewall-style settings on this client system.
> 
> Dave

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to