Hi All,

First of all, i'm a new subscriber to this list. I have tried to go
through the archives for the problem i'm facing, but couldn't find any.
So if this question has already been answered before, please bear with
me.

Secondly, i'm a TOTAL newbie to Net-SNMP, SNMP in general, and linux
itself. I'm having to post here as i have been given a job to do and not
doing it is not an option for me. So please put on your kid-gloves! :-)
I am just trying this out on my desktop before i implement this in a
production environment, so i guess i can change many OS related settings
if required. (1 note - i am using runit on debian (not the default
init), and i have configured the snmpd daemon to run as a system service
using a startup script with the main command as:

> # exec snmpd -c /usr/local/share/snmp/snmpd.conf -f -D -A
> -Lf /var/log/snmpd/snmpd.log <My IP>:161

        Please let me know if this is correct).

Now, on to the actual issue. I've downloaded the source for Net-SNMP,
compiled it with pretty much the default options, installed it , and
used the snmpconf perl script to configure it (following the
instructions to the best of my understanding).

When i try to use the simple utilities like snmpget, snmpwalk etc., the
only result i get is:

> <command>: Timeout

Of course since SNMP uses UDP i cannot telnet to check if the ports are
open. However, there are a couple of pointers that may help:
1. a netstat shows *NOTHING* in the socket state column for the SNMP
daemons.

# netstat -Naup

> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address           Foreign Address         State     
>         PID/Program name
> udp        0      0 127.0.0.1:32768         127.0.0.1:syslog        
> ESTABLISHED       3731/spamd child
> udp        0      0 127.0.0.1:32769         127.0.0.1:syslog        
> ESTABLISHED       3732/spamd child
> udp        0      0 127.0.0.1:32770         127.0.0.1:syslog        
> ESTABLISHED       3607/perl
> udp        0      0 0.0.0.0:32771           0.0.0.0:*                         
>         3603/snmpd
> udp        0      0 0.0.0.0:32772           0.0.0.0:*                         
>         3603/snmpd
> udp        0      0 0.0.0.0:32773           0.0.0.0:*                         
>         3603/snmpd
> udp        0      0 0.0.0.0:32774           0.0.0.0:*                         
>         3603/snmpd
> udp        0      0 127.0.0.1:32921         127.0.0.1:syslog        
> ESTABLISHED       4198/spamd child
> udp        0      0 127.0.0.1:32922         127.0.0.1:syslog        
> ESTABLISHED       4178/perl
> udp        0      0 <MY IP>:snmp          0.0.0.0:*                           
> 3603/snmpd
> udp        0      0 0.0.0.0:sunrpc          0.0.0.0:*                         
>         3311/portmap

        Can anybody tell me what are these other sockets associated with snmpd
(the ones bound to 0.0.0.0)? And why the socket bound to the default
snmp port (UDP 161) doesn't show an ESTABLISHED state?

2. i tried to use nmap locally to determine the state of the ports. this
is what i got:


> # nmap -sU <MY IP>
> 
> Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-01-02 12:02
> Interesting ports on <MY FQDN> (<MY IP>):
> Not shown: 1481 closed ports
> 
> PORT      STATE         SERVICE
> 111/udp   open|filtered rpcbind
> 161/udp   open|filtered snmp
> 32771/udp open|filtered sometimes-rpc6
> 32772/udp open|filtered sometimes-rpc8
> 32773/udp open|filtered sometimes-rpc10
> 32774/udp open|filtered sometimes-rpc12

And according to the nmap man page "Nmap reports the state combinations
open|filtered and closed|filtered when it cannot determine which of the
two states describe a port." But when i run nmap for TCP Ports, it
shows the proper ports open (besides, i don't even have any firewall
running):


# nmap <MY IP>
> 
> Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-01-02 12:06
> Interesting ports on <MY HOSTNAME> (<MY IP>):
> Not shown: 1673 closed ports
> 
> PORT    STATE SERVICE
> 22/tcp  open  ssh
> 25/tcp  open  smtp
> 80/tcp  open  http
> 110/tcp open  pop3
> 111/tcp open  rpcbind
> 143/tcp open  imap
> 389/tcp open  ldap

So does anyone have any idea WHAT is going on here? Am i even on the
right track? Please help! Please let me know if any more info is
needed.

- Thanks and regards,
Siddharth.


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to