On Mon, May 11, 2020, at 10:46 AM, Dan Langille wrote:
> Hello,
> 
> I'm told that line 00374 at 
> http://www.net-snmp.com/dev/agent/snmp__parse__args_8c-source.html is 
> an example of how net-snmp hides sensitive data supplied on the command 
> line.
> 
> I'm trying to figure out why this is not occurring on the hosts I've 
> been looking at, running FreeBSD 12. I can see the passphrases, e.g.
> 
> $ ps auwwx | egrep -e 'snmpget|snmpbulkwalk'
> www     97729  0.0  0.0      0    16  -  REJ  18:49   0:00.07 
> /usr/local/bin/snmpget -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u 
> roUsers -x AES -X x2rRs3B35Mntnb2p -Oqv -M /usr/local/www/librenms/mibs 
> udp:knew.example.org:161 .1.3.6.1.4.1.7465.20.2.9.1.2.1.3.1.2
> www     97730  0.0  0.0  21552  9800  -  RJ   18:49   0:00.04 
> /usr/local/bin/snmpbulkwalk -v3 -l authPriv -n -a SHA -A 
> UJ3RAYUc3Gh8AQjf -u roUsers -x AES -X x2rRs3B35Mntnb2p -OQUst -m IF-MIB 
> -M /usr/local/www/librenms/mibs udp:knew.example.org:161 ifInDiscards
> $
> 
> [the passphrases shown above have been modified before pasting]
> 
> Is this a known issue related to FreeBSD?

Checking my notes, I have seen this redaction on FreeBSD.  I forgot about that. 
 Sorry.  Sometimes it is redacted, sometimes it is not. I think this is a race 
condition.

-- 
  Dan Langille
  d...@langille.org


_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to