Re: SNMP proxy timeout lockup other requests
François Isabelle writes: > I just want to being your attention to the issue reported on GitHub > https://github.com/net-snmp/net-snmp/issues/147 and the corresponding > pull-request I submitted. Coincidentally I merged this patch yesterday, and just now found this message. -- Wes Hardaker Please mail all replies to net-snmp-coders@lists.sourceforge.net ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
SNMP proxy timeout lockup other requests
Hi. I just want to being your attention to the issue reported on GitHub https://github.com/net-snmp/net-snmp/issues/147 and the corresponding pull-request I submitted. Thanks Regards. Frank ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
snmp proxy
I am having problems with getting proxying to work on net-snmp version 5.8 that I built for Windows 10. I followed the proxy guidelines at http://net-snmp.sourceforge.net/wiki/index.php/Snmpd_proxy and set up the attached snmpd.conf file where I am using test.net-snmp.org as the "switch" in the example. Note that I am proxying the entire tree of test.net-snmp.org to 1.4 as well as using context to proxy the entire tree, using the instructions in the proxy documentation page. Proxying the entire tree works as expected: C:\Users\markw>snmpgetnext -v 2c -c public localhost 1.4 iso.4.6.1.2.1.1.1.0 = STRING: "test.net-snmp.org" I attached proxy-entire-tree.txt for the snmpd debug output. Proxying using contexts does not work as expected: C:\Users\markw>snmpgetnext -v 2c -c cmty_myswitch localhost 1.3 Timeout: No Response from localhost. I attached proxy-using-context-mapping.txt for the snmpd debug output. Any ideas of what I'm doing wrong? Thanks. Mark. C:\Users\markw>snmpd -d -Dnetsnmp_udp_parse_security,netsnmp_udp6_parse_security,netsnmp_unix_parse_security,tls,tsm. registered debug token netsnmp_udp_parse_security, 1 registered debug token netsnmp_udp6_parse_security, 1 registered debug token netsnmp_unix_parse_security, 1 registered debug token tls, 1 registered debug token tsm., 1 netsnmp_udp_parse_security: <"public", 0.0.0.0/0.0.0.0> => "comm3" netsnmp_udp_parse_security: <"private", 0.0.0.0/0.0.0.0> => "comm4" netsnmp_udp_parse_security: <"cmty_myswitch", 0.0.0.0/0.0.0.0> => "notConfigUser" NET-SNMP version 5.8 Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. Received 41 byte packet from UDP: [127.0.0.1]:64530->[127.0.0.1]:161 : 30 27 02 01 01 04 0D 63 6D 74 79 5F 6D 79 73 770'.cmty_mysw 0016: 69 74 63 68 A1 13 02 02 6E A5 02 01 00 02 01 00itch¡...n¥.. 0032: 30 07 30 05 06 01 2B 05 00 0.0...+.. snmpd.conf Description: Binary data C:\Users\markw>snmpd -d -Dnetsnmp_udp_parse_security,netsnmp_udp6_parse_security,netsnmp_unix_parse_security,tls,tsm. registered debug token netsnmp_udp_parse_security, 1 registered debug token netsnmp_udp6_parse_security, 1 registered debug token netsnmp_unix_parse_security, 1 registered debug token tls, 1 registered debug token tsm., 1 netsnmp_udp_parse_security: <"public", 0.0.0.0/0.0.0.0> => "comm3" netsnmp_udp_parse_security: <"private", 0.0.0.0/0.0.0.0> => "comm4" netsnmp_udp_parse_security: <"cmty_myswitch", 0.0.0.0/0.0.0.0> => "notConfigUser" NET-SNMP version 5.8 Received 34 byte packet from UDP: [127.0.0.1]:58693->[127.0.0.1]:161 : 30 20 02 01 01 04 06 70 75 62 6C 69 63 A1 13 020 .public¡.. 0016: 02 69 A3 02 01 00 02 01 00 30 07 30 05 06 01 2C.i£..0.0..., 0032: 05 00 .. Sending 38 bytes to UDP: [192.94.214.205]:161->[0.0.0.0]:0 : 30 24 02 01 01 04 0A 64 65 6D 6F 70 75 62 6C 690$.demopubli 0016: 63 A1 13 02 02 6B FE 02 01 00 02 01 00 30 07 30c¡...k_..0.0 0032: 05 06 01 2B 05 00...+.. Received 62 byte packet from UDP: [192.94.214.205]:161->[0.0.0.0]:58694 : 30 3C 02 01 01 04 0A 64 65 6D 6F 70 75 62 6C 690<.demopubli 0016: 63 A2 2B 02 02 6B FE 02 01 00 02 01 00 30 1F 30c¢+..k_..0.0 0032: 1D 06 08 2B 06 01 02 01 01 01 00 04 11 74 65 73...+.tes 0048: 74 2E 6E 65 74 2D 73 6E 6D 70 2E 6F 72 67 t.net-snmp.org Sending 58 bytes to UDP: [127.0.0.1]:58693->[127.0.0.1]:161 : 30 38 02 01 01 04 06 70 75 62 6C 69 63
The best way to write snmp proxy with cache
I want to write an snmp proxy with cache to a network device D that works in this way: - it snmpwalk device D every m minutes and stores the results in a local database. - when someone sends a read snmp request, it finds and returns the response by querying the database. -(optionaly) when someone sends a write snmp request, it sends the same request to device D, and change the local database, if the set request has been done successfully. - I am not very familiar with snmpt, but so far, I realized there these 2 relevant works: 1- defining a proxy in snmpd.conf: the problem is that this option does not allow me to have a cache. proxy -Cn ctx_remote -v 1 -c public 192.168.1.1 .1.3 [REF]: http://www.net-snmp.org/wiki/index.php/Snmpd_proxy 2- extending snmpd using perl: in this method, one can register a handler sub, that is called when a request wants to access a specific OID. Inside the handler function, I can write some code to give the request to the snmp agent on the target device, and have my desired caching implemented. The problem is that, I want to register the handler function only for a specific context(eg ctx_remote) so, first of all, I don't miss the original local MIB, secendly, I can register multiple handlers corresponding to multiple devices. --- I am wondering what would be the best way to solve the problem -- HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions Find What Matters Most in Your Big Data with HPCC Systems Open Source. Fast. Scalable. Simple. Ideal for Dirty Data. Leverages Graph Analysis for Fast Processing Easy Data Exploration http://www.hpccsystems.com___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
activating snmp proxy during run-time
Hello all. I would like to use net-snmp proxy code to activate snmp proxy to a given OID during run-time (not only on startup). It appears that calling the function proxy_parse_config in proxy.c with the compatible params is good enough (though it works only on an exact OID and not on subtree). However, deactivating the proxy and returnning to regular operation mode is not working properly. From the code it appears that function proxy_free_config should do the job, but it doesn't. It appears that proxy_free_config totaly erases the mib registration and doesn't reestablish the former registration. Can anyone advise ? Asaf Henig MRV communications - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: activating snmp proxy during run-time
On tis, 2008-05-13 at 14:37 +0300, Asaf Henig wrote: Hello all. I would like to use net-snmp proxy code to activate snmp proxy to a given OID during run-time (not only on startup). Edit the config file to add the new proxy. Send the agent a SIGHUP to make it reread the config. It appears that calling the function proxy_parse_config in proxy.c with the compatible params is good enough (though it works only on an exact OID and not on subtree). However, deactivating the proxy and returnning to regular operation mode is not working properly. From the code it appears that function proxy_free_config should do the job, but it doesn't. It appears that proxy_free_config totaly erases the mib registration and doesn't reestablish the former registration. Can anyone advise ? The purpose of proxy_free_config is to clear the old proxy config in preparation for a reread of the config file. Thus, when proxy_free_config is called all proxy entries should be cleared and that is what seems to happen. During a configuration reread proxy_parse_config will be called on every line and reestablish all the proxy entries. I would'n depend on those functions as I would doubt that they really were intended to be public at all. /MF - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
RE: activating snmp proxy during run-time
Hello Magnus. Thanks for replying my mail. It appers I didn't explain my self enough. I don't want to use the proxy functions by rereading the config file I simply calling them from another function I wrote and send them the proper args. Anyhow I think I found my bug. The proxy functions that were written were not intended to be read in runtime. In order to use them in run time one needs to add unregister_mib calls before registring with the proxy. Morover In order to erase proxy configuration and use the mib regularly one needs to add regiser_mib call after calling proxy_free_config. -Original Message- From: Magnus Fromreide [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 13, 2008 10:29 PM To: Asaf Henig Cc: net-snmp-coders@lists.sourceforge.net Subject: Re: activating snmp proxy during run-time On tis, 2008-05-13 at 14:37 +0300, Asaf Henig wrote: Hello all. I would like to use net-snmp proxy code to activate snmp proxy to a given OID during run-time (not only on startup). Edit the config file to add the new proxy. Send the agent a SIGHUP to make it reread the config. It appears that calling the function proxy_parse_config in proxy.c with the compatible params is good enough (though it works only on an exact OID and not on subtree). However, deactivating the proxy and returnning to regular operation mode is not working properly. From the code it appears that function proxy_free_config should do the job, but it doesn't. It appears that proxy_free_config totaly erases the mib registration and doesn't reestablish the former registration. Can anyone advise ? The purpose of proxy_free_config is to clear the old proxy config in preparation for a reread of the config file. Thus, when proxy_free_config is called all proxy entries should be cleared and that is what seems to happen. During a configuration reread proxy_parse_config will be called on every line and reestablish all the proxy entries. I would'n depend on those functions as I would doubt that they really were intended to be public at all. /MF - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmp proxy settings.
On Thu, 10 May 2007 10:29:44 +0530 Siva wrote: SPRG but I am getting an error like. SPRG SPRG /etc/snmp/snmpd.conf: line 48: Error: bad source address SPRG /etc/snmp/snmpd.conf: line 49: Error: bad source address SPRG net-snmp: 3 error(s) in config file(s) SPRG SPRG Here line 48 means com2sec -Cn ctx_remotehost1 notConfigUser SPRG defaultcmty_remotehost1 SPRG And line 49 means com2sec -Cn ctx_remotehost2 notConfigUser SPRG defaultcmty_remotehost2 I'm guessing that you are using an older release, and one which does not support the community string/context mapping. Try a newer release (at least 5.3.x). - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmp proxy settings.
On Fri, 4 May 2007 16:33:53 +0530 Siva wrote: SPRGI just want to know, whether I can use context name for SPRG snmp verion 1 and 2, because some documents are telling, context name is SPRG supported by snmpv3 only. That is correct. Net-snmp has a feature to map a given v1/v2 community name to a context. See this wiki page: http://www.net-snmp.org/wiki/index.php/Snmpd_proxy - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
RE: snmp proxy settings.
Hi! Thank you very much for replying I am using net-snmp version 5.1.2, I have read a lots of documents for proxy settings, but no use of it. My requirement is there are 3BPL modems , they dehaves as subagents, they are having same OIDS, I am trying to retrives the values from the same OID's, And my configuration file shows Below. # # Here we define the access control details about the agent # First, map the community name public into a security name # sec.name source community com2sec notConfigUser default public com2sec ConfigUserdefault private com2sec -Cn modemhost1 remhost1 10.10.1.10/255.255.255.255public com2sec -Cn modemhost2 remhost2 10.10.1.20/255.255.255.255public com2sec -Cn modemhost3 remhost3 10.10.1.30/255.255.255.255public # Second, map the security name into a group name: # groupName securityModelsecurityName group notConfigGroup v1 notConfigUser group notConfigGroup v2c notConfigUser group ConfigGroup v1 ConfigUser group ConfigGroup v2c ConfigUser group remotehost1v1 remhost1 group remotehost1v2c remhost1 group remotehost2v1 remhost2 group remotehost2v2c remhost2 group remotehost3v1 remhost3 group remotehost3v2c remhost3 # Third, create a view for us to let the group have rights to: # name incl/excl subtree mask(optional) view systemview included.1.3.6 view systemview includedmib-2 view systemview includedsnmpV2 view systemview included.1.3.6.1.4.1.2021.9 view systemview included.1.3.6.1.4.1.2021.10 view systemview included.1.3.6.1.4.1.13995 view systemview included.1.3.6.1.4.1.6798 # Finally, grant the group read-only access to the systemview view. # group context sec.model sec.level prefixread write notif access notConfigGroup any noauthexact systemview nonenone access notConfigGroup any noauthexact systemview nonenone access ConfigGroup any noauthexact systemview systemview none access ConfigGroup any noauthexact systemview systemview none access remotehost1 modemhost1 any noauthexact systemview nonenone access remotehost2 modemhost2 any noauthexact systemview nonenone access remotehost3 modemhost3 any noauthexact systemview nonenone proxy -Cn modemhost1 -v 2c -c public remotehost1 1.3.6.1.4.1.6798 proxy -Cn modemhost2 -v 2c -c public remotehost2 1.3.6.1.4.1.6798 proxy -Cn modemhost3 -v 2c -c public remotehost2 1.3.6.1.4.1.6798 If I run the agent with above mentioned snmpd configuration file I am getting an error like. /etc/snmp/snmpd.conf: line 48: Error: bad source address /etc/snmp/snmpd.conf: line 49: Error: bad source address /etc/snmp/snmpd.conf: line 50: Error: bad source address net-snmp: 3 error(s) in config file(s) Here line 48 means com2sec -Cn modemhost1 remhost1 10.10.1.10/255.255.255.255public And line 49 means com2sec -Cn modemhost2 remhost1 10.10.1.20/255.255.255.255public And line 50 means com2sec -Cn modemhost3 remhost1 10.10.1.20/255.255.255.255public I don't know when to use context name even I don't know where things are going wrong . Please help me out from this problem, Can I get any good document regarding proxy settings with example . With Regards. G.Siva Prakash Reddy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Shield Sent: Thursday, May 03, 2007 3:51 AM To: Siva Prakash Reddy G Cc: net-snmp-coders@lists.sourceforge.net Subject: Re: snmp proxy settings. On 27/04/07, Siva Prakash Reddy G [EMAIL PROTECTED] wrote: I am very new to Net-snmp,How to write proxy settings ( snmpd.conf ) for multiple agents. if anybody knows. please do let me know. Can you be a little more explicit about exactly what you mean by this. What exactly are you trying to monitor? Which version of the code are you working with? Which version(s) of SNMP can you use? I suspect that the thread Proxy questions on the users list (starting on 26th April) may be of some use to you. Dave The information contained in, or attached to, this e-mail, contains confidential information and is intended solely for the use of the individual or entity to whom they are addressed and is subject to legal privilege. If you have received
Re: snmp proxy settings.
On 04/05/07, Siva Prakash Reddy G [EMAIL PROTECTED] wrote: If I run the agent with above mentioned snmpd configuration file I am getting an error like. /etc/snmp/snmpd.conf: line 48: Error: bad source address /etc/snmp/snmpd.conf: line 49: Error: bad source address /etc/snmp/snmpd.conf: line 50: Error: bad source address net-snmp: 3 error(s) in config file(s) Here line 48 means com2sec -Cn modemhost1 remhost1 10.10.1.10/255.255.255.255public And line 49 means com2sec -Cn modemhost2 remhost1 10.10.1.20/255.255.255.255public And line 50 means com2sec -Cn modemhost3 remhost1 10.10.1.20/255.255.255.255public What happens if you try with com2sec -Cn modemhost1 remhost1 10.10.1.10 public com2sec -Cn modemhost2 remhost2 10.10.1.20 public com2sec -Cn modemhost3 remhost3 10.10.1.30 public ? Dave - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
RE: snmp proxy settings.
Hi! Thanks once again for replying still I am getting same errors, I just want to know, whether I can use context name for snmp verion 1 and 2, because some documents are telling, context name is supported by snmpv3 only. If I can use, tell how to use it. If not, tell me how to do proxy settings for snmp version 1 and 2, if I want to retrive the values from different subagents containing same OID's. please help me out from this problem. With Regards. G.Siva Prakash Reddy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Shield Sent: Friday, May 04, 2007 2:17 PM To: Siva Prakash Reddy G Cc: net-snmp-coders@lists.sourceforge.net Subject: Re: snmp proxy settings. On 04/05/07, Siva Prakash Reddy G [EMAIL PROTECTED] wrote: If I run the agent with above mentioned snmpd configuration file I am getting an error like. /etc/snmp/snmpd.conf: line 48: Error: bad source address /etc/snmp/snmpd.conf: line 49: Error: bad source address /etc/snmp/snmpd.conf: line 50: Error: bad source address net-snmp: 3 error(s) in config file(s) Here line 48 means com2sec -Cn modemhost1 remhost1 10.10.1.10/255.255.255.255public And line 49 means com2sec -Cn modemhost2 remhost1 10.10.1.20/255.255.255.255public And line 50 means com2sec -Cn modemhost3 remhost1 10.10.1.20/255.255.255.255public What happens if you try with com2sec -Cn modemhost1 remhost1 10.10.1.10 public com2sec -Cn modemhost2 remhost2 10.10.1.20 public com2sec -Cn modemhost3 remhost3 10.10.1.30 public ? Dave The information contained in, or attached to, this e-mail, contains confidential information and is intended solely for the use of the individual or entity to whom they are addressed and is subject to legal privilege. If you have received this e-mail in error you should notify the sender immediately by reply e-mail, delete the message from your system and notify your system manager. Please do not copy it for any purpose, or disclose its contents to any other person. The views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of the company. The recipient should check this e-mail and any attachments for the presence of viruses. The company accepts no liability for any damage caused, directly or indirectly, by any virus transmitted in this email. www.aztecsoft.com - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmp proxy settings.
On 04/05/07, Siva Prakash Reddy G [EMAIL PROTECTED] wrote: I am using net-snmp version 5.1.2 ... [and] am getting an error like. /etc/snmp/snmpd.conf: line 48: Error: bad source address etc I've just tried this line with the 5.3.x and current development code, and both of them seem quite happy with it. I don't have a version of the 5.1.x line to hand, and this code is very old now (and no longer being supported). Can you try using the same setup with a more recent release. I wouldn't be at all surprised if this functionality was added more recently than the 5.1.x line. Dave - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmp proxy settings.
On 27/04/07, Siva Prakash Reddy G [EMAIL PROTECTED] wrote: I am very new to Net-snmp,How to write proxy settings ( snmpd.conf ) for multiple agents. if anybody knows. please do let me know. Can you be a little more explicit about exactly what you mean by this. What exactly are you trying to monitor? Which version of the code are you working with? Which version(s) of SNMP can you use? I suspect that the thread Proxy questions on the users list (starting on 26th April) may be of some use to you. Dave - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
snmp proxy settings.
Hi! I am very new to Net-snmp,How to write proxy settings ( snmpd.conf ) for multiple agents. if anybody knows. please do let me know. With Regards, G.Siva Prakash reddy. The information contained in, or attached to, this e-mail, contains confidential information and is intended solely for the use of the individual or entity to whom they are addressed and is subject to legal privilege. If you have received this e-mail in error you should notify the sender immediately by reply e-mail, delete the message from your system and notify your system manager. Please do not copy it for any purpose, or disclose its contents to any other person. The views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of the company. The recipient should check this e-mail and any attachments for the presence of viruses. The company accepts no liability for any damage caused, directly or indirectly, by any virus transmitted in this email. www.aztecsoft.comattachment: Pie_Charts_Bkgrd.JPG - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Help on snmp proxy
Hi all, I have 3 hosts named host1 supporting snmpv3 host2 supporting snmpv3 host3 supporting snmpv2 host2 is used as proxy for host1 and host3 For host2 I have myuser as the username and mypassword as the password. For host3 I have a community name configured as v2community. i.e rocommunity v2community rwcommunity v2community In host2 I have configured the proxy settings as follows. proxy -Cn myContext -v 2c -c v2community host3 .1.3 host1 tries to talk to host3 through host2 proxy i.e when I execute a command like snmpget -v 3 -u myuser -n myContext -l authNoPriv -a MD5 -A mypassword host2 system.sysName.0 it fails and the output is as follows. Error in packet Reason: authorizationError (access denied to that object) What is wrong here? Is there any command to set my context name? Thanks in advance. Regards, RSR SASKEN RATED THE BEST EMPLOYER IN THE COUNTRY by the BUSINESS TODAY Mercer Survey 2004 SASKEN BUSINESS DISCLAIMER This message may contain confidential, proprietary or legally Privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, Disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. Any views expressed in this message are those of the individual sender unless otherwise stated. Nothing contained in this message shall be construed as an offer or acceptance of any offer by Sasken Communication Technologies Limited (Sasken) unless sent with that express intent and with due authority of Sasken. Sasken has taken enough precautions to prevent the spread of viruses. However the company accepts no liability for any damage caused by any virus transmitted by this email --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: Help on snmp proxy
On Thu, 2005-08-25 at 13:06 +0530, [EMAIL PROTECTED] wrote: For host2 I have myuser as the username and mypassword as the password. What is the access control setup on host2 ? For host3 I have a community name configured as v2community. i.e rocommunity v2community rwcommunity v2community Nooo!! **WHY** do people insist on duplicating community settings like this. If you've got a read-write community setting, you don't need a read-only directive with the same community name. read-write access *includes* read access. That's what the word read means [Sorry - but you pushed a button!] when I execute a command like snmpget -v 3 -u myuser -n myContext -l authNoPriv -a MD5 -A mypassword host2 system.sysName.0 it fails Which host is rejecting the request? Is host2 passing it on to host3 (which then rejects it), or does host2 reject it before it ever gets to host3? If you run the agent on host3 using something like snmpd -f -Le -d you should see packet dumps for all traffic in and out. This should indicate whether the requests are getting that far or not. Dave SASKEN BUSINESS DISCLAIMER This message may contain confidential, proprietary or legally Privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, Disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. This message contains no confidential, proprietary or legally Privileged information (regardless Of Any unconventional Capitalisation). In case you are not the original Intended recipient Of The message, you may, Use, disclose, Distribute, or liberally, sprinkle with excessive: and () unnecessary punctuation; any part of this message that you may find useful. If not, then feel free to delete it, but don't bother informing the sender about such trivia. --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: Help on snmp proxy
Hi, I dont see any dump on host3 when I run snmpd -f -L -d. This means the request is not flowing to host3 and host2 is not proxying the request. The access control setup on host2 is as follows. # sec.name source community com2sec myuser default public # Second, map the security name into a group name: # groupName securityModel securityName group myusergroupusm myuser # Third, create a view for us to let the group have rights to: # name incl/excl subtree mask(optional) viewmyuserview included .1 # Finally, grant the group read-only access to the systemview view. # group context sec.model sec.level prefix read write notif access myusergroup any noauthexact myuserview none none ### #Proxy proxy -Cn myContext -v 2c -c v2community host3 .1 ### rwuser myuser -snmpd.conf ends Is any additional configuration need to be done here?? Thanks Regards, Ravi R.S On Thu, 2005-08-25 at 13:06 +0530, [EMAIL PROTECTED] wrote: For host2 I have myuser as the username and mypassword as the password. What is the access control setup on host2 ? For host3 I have a community name configured as v2community. i.e rocommunity v2community rwcommunity v2community Nooo!! **WHY** do people insist on duplicating community settings like this. If you've got a read-write community setting, you don't need a read-only directive with the same community name. read-write access *includes* read access. That's what the word read means [Sorry - but you pushed a button!] when I execute a command like snmpget -v 3 -u myuser -n myContext -l authNoPriv -a MD5 -A mypassword host2 system.sysName.0 it fails Which host is rejecting the request? Is host2 passing it on to host3 (which then rejects it), or does host2 reject it before it ever gets to host3? If you run the agent on host3 using something like snmpd -f -Le -d you should see packet dumps for all traffic in and out. This should indicate whether the requests are getting that far or not. Dave - Hi all, I have 3 hosts named host1 supporting snmpv3 host2 supporting snmpv3 host3 supporting snmpv2 host2 is used as proxy for host1 and host3 For host2 I have myuser as the username and mypassword as the password. For host3 I have a community name configured as v2community. i.e rocommunity v2community rwcommunity v2community In host2 I have configured the proxy settings as follows. proxy -Cn myContext -v 2c -c v2community host3 .1.3 host1 tries to talk to host3 through host2 proxy i.e when I execute a command like snmpget -v 3 -u myuser -n myContext -l authNoPriv -a MD5 -A mypassword host2 system.sysName.0 it fails and the output is as follows. Error in packet Reason: authorizationError (access denied to that object) What is wrong here? Is there any command to set my context name? Thanks in advance. Regards, RSR SASKEN RATED THE BEST EMPLOYER IN THE COUNTRY by the BUSINESS TODAY Mercer Survey 2004 SASKEN BUSINESS DISCLAIMER This message may contain confidential, proprietary or legally Privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, Disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. Any views expressed in this message are those of the individual sender unless otherwise stated. Nothing contained in this message shall be construed as an offer or acceptance of any offer by Sasken Communication Technologies Limited (Sasken) unless sent with that express intent and with due authority of Sasken. Sasken has taken enough precautions to prevent the spread of viruses. However the company accepts no liability for any damage caused by any virus transmitted by this email --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: Help on snmp proxy
On Thu, 2005-08-25 at 17:11 +0530, [EMAIL PROTECTED] wrote: I dont see any dump on host3 when I run snmpd -f -L -d. This means the request is not flowing to host3 and host2 is not proxying the request. Yup. Sounds like it. So it's host2 that's rejecting the request. The access control setup on host2 is as follows. # group context sec.model sec.level prefix read write notif access myusergroup any noauthexact myuserview none none That's the problem. You've configured access for the default context (), but you haven't configured access for myContext So host2 is rejecting the request. rwuser myuser Grrr... You're duplicating access control again! *Either* use group/view/access *or* use r[ow]user but NOT BOTH! I don't think the short-cut forms support non-default contexts, so delete the rwuser line, and concentrate on the other settings. The easiest way to fix this is probably to tweak the prefix field of the access line to read prefix (rather than exact). That should then match *any* context. Alternatively, duplicate the above access line, and change the context field to read myContext (instead of ) Dave --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: Context name in SNMP Proxy
On Mon, 18 Jul 2005 17:46:39 +0530 Ravi, wrote: RRS I came across a proxy configuration in Net-Snmp's snmpd.conf file and it RRS reads as RRS RRS proxy [-Cn CONTEXTNAME] [SNMPCMD ARGS] HOST OID [REMOTEOID] RRS RRS What is this CONTEXTNAME and how it is configured. Can somebody explain RRS briefly how to configure this CONTEXTNAME? SNMPv3 introduced the concept of contexts, which allow the agent to return different data for the same OID. If you have machineA configured to proxy all OIDs for machineB with a context of 'abc', then snmpget -v 3machineA sysDescr.0 = machineA snmpget -v 3 -n abc machineA sysDescr.0 = machineB -- NOTE: messages sent directly to me, instead of the lists, will be deleted unless they are requests for paid consulting services. Robert Story; NET-SNMP Junkie Support: http://www.net-snmp.org/ irc://irc.freenode.net/#net-snmp Archive: http://sourceforge.net/mailarchive/forum.php?forum=net-snmp-coders You are lost in a twisty maze of little standards, all different. --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Context name in SNMP Proxy
Hi All, I came across a proxy configuration in Net-Snmp's snmpd.conf file and it reads as proxy [-Cn CONTEXTNAME] [SNMPCMD ARGS] HOST OID [REMOTEOID] What is this CONTEXTNAME and how it is configured. Can somebody explain briefly how to configure this CONTEXTNAME? Thanks in Advance. Regards, RSR --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
