Re: Is there a standard type Unsigned64 or Interger64?
Dave Shield d.t.shi...@liverpool.ac.uk writes: I know this looks like a counter, but it's not really Anything to add, Wes? Nope, that sums it up perfectly. Until you want to *write* a 64-bit datatype. Then you really need to use one of the other bogus-types. Or a text string. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP v3 User Administration from custom app
Bob O'Neil bon...@cinci.rr.com writes: This application also implements an SNMP subagent, so has access to the running agent through the network connection between them. Well, sort of. SNMP subagents are really there for the master to query the subagent through. There is very little the subagent can ask the master agent for. This custom application is required to allow via a web interface administration of SNMP v3 users, which would mean the addition and deletion of USM users with security credentials, and modifying credentials of existing users. Right now, there is no external interface that could be used to programatically mess with the user table *except* through SNMP itself. I am considering the following: 1. Direct manipulation of the SNMP snmpd.conf files followed by an snmpd reload. Hacky and sort of problematic, but doable. 2. The use of subagent accessible APIs to accomplish this task (if available). That won't work, unfortunately. 3. Making sytem calls in my application (such as net-snmp-create-v3-user after stopping the service, then restarting it). Similar to #1 Option 4 would be to manipulate the user table through the usmUserTable SNMP interface, which would be the cleanest of them all but would require you implement all the right SNMP SETs to make it happen. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: ask some helps on one function
zhufei zhu...@macrosan.com writes: int usm_parse_config_usmUser(const char *token, char *line) ; this function has two parameters, but I don't understand what is the meaning of these two parameters. Can you tell me how to use this function, or how to create snmpv3 user using net-snmp api? That API is used for parsing configuration file lines that match the usmUser token in the persistent-storage snmpd.conf files. Generally it's not meant to be a public function for injecting users, but you could. The 'token' is simply expected to be 'usmUser', and 'line' is the rest of the usmUser configuration line without the leading 'usmUser' token. However, if you really want to create usm users it would be better to create a user in a 'struct usmUser' and then use usm_add_user() to add it to the user database. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: stash cache usage
Norman Rädke normanrae...@gmx.de writes: In order to resolve this problem i need a shadow copy of table columns after successfull read by client application. If the 'live_counter' called i inform every collumn and calculate the new value as followed: new_value = act_value - shadow_value; shadow_value = 0; There is various types of caching that might be able to help you, but it would be easiest to create your own rather than use a full stash_cache, though you certainly could. But the real issue is that the design of when this variable is read, do something isn't safe. Consider the case where the manager sends the GET request, the column is read and the RESPONSE is sent back to the manager. But is dropped along the way, so the manager re-issues the GET request and the results are now affected. You should probably be using a 'SET' to reset things instead. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Extending snmpd: how to create rows dynamically on custom tables, and perform other procedures?
helcio silva sunnywheathe...@gmail.com writes: I've found some pages learning how to create either scalar variables or static tables. But I want to create rows dynamically, and performs another tasks. Where can I find info about to extend snmpd in order to to those things? The tutorials actually do cover writable tables. http://www.net-snmp.org/wiki/index.php/TUT:Writing_a_MIB_Module -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: A simple interface to simulate SNMP devices?
Hrvoje Prgeša hrvoje.prg...@gmail.com writes: Does net-snmp (or any net-snmp open source based project) currently contains any simple means to fully simulate a SNMP enabled device/MIB? I've always had this emulator project in the back of my mind, but have never found anyone willing to donate the money to my company so I can make it happen (almost did once). But, there is some very basic rudimentary support for at least inserting some data into the mib tree easily. See the override token in the snmpd.conf file man page. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.7.2.rc1
Net-SNMP 5.7.2.rc1 is now available for testing (and actually, ahem, it has been for a number of days now). Please give it a whirl and let us know how it works on your system. http://www.net-snmp.org/download.html If you have patches to suggest before the final release, please post them to http://www.net-snmp.org/patches/ -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: securityEngineId problem in 5.7.1
Stone, Thomas thomas.st...@safenet-inc.com writes: I'm cross-compiling for 32-bit embedded environment. After modifying the configure file sufficiently so that the application builds and starts, the initial trap that should get sent to the SNMP server isn't going out. Does your 'trapsess' line contain the -u flag? It's pretty much mandatory. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: snmptrapd with TLS or DTLS?
M L nunch...@hotmail.com writes: I have seen that net-snmp has support for (D)TLS for the snmpd agent. I've tried to find an example to do the same for the snmptrap daemon.For example, where to specify the server certificate to use for snmptrapd? The same configuration tokens that work inside snmpd.conf will work in snmptrapd.conf for specifying certificates. So, yes, it works and we've tested it. In fact, the testing/fulltests/tls directory contains tests to make sure it's working. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP and non ASCII characters
Octavi Fullana ofull...@central.aplitec.com writes: I have tried to add the -Oa switch in the SNMPDOPTS line inside the /etc/init.d/snmpd script, but it is ignored. Does anybody know how to force the output to be ASCII for all snmp items? The applications use the isprint() function to determine if a character is printable. Which means that the locale environment needs to be set up properly so that isprint() returns true for non-ascii characters that are, indeed, printable. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-snmp 5.7.1: trouble with SNMPv3 INFORM's configured via MIBs, via config files ok
Patrick Rogier patrick.rog...@sioux.eu writes: /var/net-snmp/snmpd.conf (dynamic snmpd.conf): createUser my_rwuser MD5 setup_rw_passphrase createUser my_rouser MD5 setup_ro_passphrase createUser my_inform_user MD5 setup_inform_passphrase The last line needs to create the user in the user table with the engineID of the inform receiver. So you'd need to use the -e switch to createUser in order to set the engineID to the inform sink. -- Wes Hardaker SPARTA, Inc. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Received response for SNMPv3 inform; but Agent still sending inform for the number of retries configured.
Suresh kumar skjaiswa...@hotmail.com writes: 1. Engine ID discovered correctly during discovery; but Agent still incrementing usmStatsUnknownEngineIDs.0 (See EngineIDErrorPkt.pcap) 2. Also sending report SNMP-USER-BASED-SM-MIB::usmStatsNotInTimeWindows.0 (See EngineIDErrorPkt.pcap). updated System time on Agent; still error received. These are actually normal. In the process of engineID discovery (and time discovery) the agent will receive a message with the wrong engineID, so the agent increments the count and sends back the real one. That's actually how engineID discovery works. -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Can we create a session with SNMP Manger using net-snmp agent?
Suresh kumar skjaiswa...@hotmail.com writes: Can we create a session with SNMP Manger using net-snmp agent? For example, we have configured certain IP addresses that are allowed to access the agent. Is there a way we can create and maintain sessions with those managers? SNMP doesn't typically operate over network sessions unless you're using SNMP over TCP. So there isn't a way to easily detect (or destroy) a session from the agent side of things. -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Issue with ipSystemStatsTable
nagendra dhulgond nagendra.m...@gmail.com writes: I am working on ipSystemStatsTable but when I run snmpget command on following attirbutes:- Not every object is supported on every operating system. It depends on whether someone has made the agent's code report values for those variables. What OS is this for? [the other answer, of course, would be: you may not have access to those variables. I'm assuming you've given yourself complete read-access to the entire tree though] -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: how delete entire row from table .
Suresh kumar skjaiswa...@hotmail.com writes: [first, please don't send your message multiple times. Everyone that answers on this list is a volunteer and they can't always get to every question very quickly, especially when they're long or complex] [second, please don't write to both mailing lists; if you're just a user of the Net-SNMP code, APIs, or applications, just write to the -users list] a. how create a row if row cotain 20 colums You'll need to create the row in your internal structures given the data in the incoming requests. If there aren't as many columns in the incoming data that you need, you'll either have to fill in the appropriate defaults, reject the request (if the rowstatus object was createAndGo), or (if createAndWait) create a template row with missing data and wait for the manager to fill in the rest before setting the row to active. b. What will be index of that colum for creating new row. The index value depends on the MIB. If without index is it possible?. It is not legal for rows to exist without an index, so no. Like during update in set we have to pass index of that colums snmpset -v 2c -c private 192.168.101.177 1.3.6.1.4.1..2.1.1.1.1.1000 s NewGenName1.3.6.1.4.1..2.1.1.1.21.1000 i 25 and its is working fine for valide index. c. how we delete entire row from table?. is this we requere index for table. d. how to delete single row. Since the iterate mechanism that you're using is designed to loop through another data source, you'll need to go through that data source (memory, file, etc) and remove the related rows from those structures. 2.Secondly we want to our net-snmp give responde only request is coming from some specific IP. How we rid this in net-snmp. You didn't specify what version of SNMP you're using. If you're using (the insecure) SNMPv1 or SNMPv2c versions, the com2sec configuration directives allow you to specify hostnames/ranges to accept traffic from. Net-SNMP's SNMPv3 support doesn't provide an internal firewall for SNMPv3 (since the protocol itself is much more secure), and thus you'll need to add an external firewall to drop requests from other addresses. 3- Is any difference between mib object having MAX-ACCESS read-write or MAX-ACCESS read-create read-create objects are designed to be created when new rows are created, where as read-write means the manager isn't allow to create new objects there and con only modify existing ones. -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: UDS
On Fri, 10 Feb 2012 16:22:11 +0200, shay naveh shayna...@gmail.com said: sn 1. Does SNMP ( any version ) support abstract names? if so, from which sn version? and how they are configured? sn Note: UDS abstract name is a UDS socket which is opened in the process sn memory rather than as a file path. Our current code is only written to support file-based unix domain sockets. However, it shouldn't be that hard to add new transport types. sn 2. snmpd opens /etc/snmptrap UDS. What is the reason for this socket sn and how can one disable it? Out of the box our code doesn't open that file, as we don't open anything in /etc. I'd have to see the configuration options given to your compiled code. -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.7.1.rc3 is available for testing
You can pick it up here: https://sourceforge.net/projects/net-snmp/files/net-snmp/5.7.1-pre-releases/ This should, hopefully, be the final RC before the final release next week. -- Wes Hardaker SPARTA, Inc. -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2dcopy1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP daemon stops responding
On Thu, 01 Sep 2011 14:42:38 +0530, Nisha P K nish...@tataelxsi.co.in said: NPK But whenever I query for HOST-RESOURCES-MIB (hrSWInstalledTable OID NPK - 1.3.6.1.2.1.25.6.3), it gets hanged and then the agent does not NPK respond to any queries further. I have to restart the snmpd to make NPK the agent working. That particular table is frequently very large and thus not fast. Can you try something for me: query it again using a large timeout (-t 120 -r 0 will let it try for 120 seconds to answer and will only query it once). I suspect that the issue may be the agent is still trying to answer the questions asked and it's taking too long. Then another (retry) query gets to it, and after it finally answers the first it starts thinking about the second. If you look at 'top' output or another similar tool, I bet you'll find the agent is simply thinking. -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
When backpacking in the Sierras and SNMP collide
You get this: https://plus.google.com/102459657085454157956/posts/Q2cqS9rPc7h Thanks very much to the kind person that left the note in the dust on my car. (This is actually the second time this has happened). It always brings a smile to my face to find such unexpected SNMP references where you least expect it. My fellow backpackers got a good kick out of it too! Now, if only I could remember who you are... -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Strange problem with msgAuthoritativeEngineTime
On Wed, 24 Aug 2011 15:30:54 +0200, Michael Schwartzkopff mi...@schwartzkopff.org said: MS No comments on this problem? Unfortunately, many of us simply don't have the time to respond daily with free advice. I just happened to read the list (finally) today, which is the day you posted your above question. Sometimes you just need to be patient. MS 3) Manager - Agent MS get-request for the OID MS msgAuthoritativeEngineID is the one from the agent. MS msgAuthoritativeEngineBoots is equal to the number in packet 2) MS msgAuthoritativeEngineTime is 3437939 MS the time differs the the time of the agent by 87965 seconds, which MS is roughly 24,4 hours. MS Any idea why my manager uses a different time than the one reported by the MS Agent? Wow, no, not if it is our management stack too. It should be using a correct seconds value, except for one of a few possible possibilities: 1) the clocks are indeed off, but he manager should resync assuming not hugely off. 2) If there is an engineID conflict somewhere on the network such that two agents have the same engineID, this could happen as well. This is very very bad (TM) and needs to be fixed. After that, you probably need to point a debugger at the library. -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Fetching system UUID using SNMP
On Tue, 30 Aug 2011 12:31:45 +0100, Dave Shield d.t.shi...@liverpool.ac.uk said: DS One problem is what do you mean by the system UUID? There are private MIBs to do such things, but nothing public that I know of (but I don't know them all) and Dave's right: there is likely many UUIDs for a system. Multiple software components may have them, certainly many linux systems have a UUID per disk, etc. -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: community delete at run-time
On Wed, 24 Aug 2011 15:00:15 +0530, ashok kumar ashok.s...@gmail.com said: ak I have a requirement to add / delete community at run-time. (with out ak restarting snmpd) ak I am using vacm_parse_rocommunity or vacm_parse_rwcommunity for adding ak a new community and it is working. I want to delete the created view, ak Can you please suggest me any API for that. What you're looking for is the SNMP-COMMUNITY-MIB, which we don't support at this time. -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: SNMPv3 EngineID Changed to Random Format?
On Wed, 10 Aug 2011 09:20:56 -0600, Gary Dunlap gary.dun...@dothill.com said: GD I did notice in experimenting with this, that if the engineIDType 3 GD statement itself were not present, on restart snmpd would use the GD random format. It will do that if you don't have persistent storage at all. Otherwise the oldEngineID line should make it read the previous engineID even if the engineIDType line is missing. -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.7.1.rc1 available for testing
You can grab the latest copy of bug fixes over the 5.7 release here: https://sourceforge.net/projects/net-snmp/files/net-snmp/5.7.1-pre-releases/ In particular, I actually think the 5.7.1.rc1 release is better than the 5.7 release, so I'd strongly suggest switching to it. That way you'll get the improved code *and* be able to help us test it :-) -- Wes Hardaker SPARTA, Inc. -- Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free Love Thy Logs t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: How to use Snmpget.exe for broadcast(IPv4)/multicast(IPv6)
On Wed, 17 Aug 2011 20:10:46 +0530, Kamaraj P pkama...@ssdi.sharp.co.in said: KP I am running the Snmpget.exe with IPv4 broadcast address, but I am KP getting the response from only one node. The tools don't support broadcast addresses at this time. -- Wes Hardaker SPARTA, Inc. -- Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: VACM configuration for proxy multiple JVMs but still showing system MIB
On Wed, 17 Aug 2011 02:32:44 -0400, Alan Evans alanwev...@gmail.com said: AE I am using net-snmp 5.3.2.2 (excuse me if there are extra decimals in AE there) that's the version redhat calls it. FYI, that version is beyond our support range. AE snmpwalk -v2c -c public-jvm1 localhost .1.3.6.1.4.1.42.2.145 AE # Return Java Management MIB from JVM 1 AE snmpwalk -v2c -c public-jvm2 localhost .1.3.6.1.4.1.42.2.145 AE # Return Java Management MIB from JVM 2 You'll need to configure the VACM manually and use the com2sec directive with the -Cn flag to map a community name (such as public-jvm1) into a SNMPv3 context name (such as jvm1). Then on the proxy line, use -Cn as well to proxy the jvm1 context to one host, and a different context to the other. -- Wes Hardaker SPARTA, Inc. -- Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: choosing the correct container for CONTAINER_INSERT in _cache_load()
On Tue, 16 Aug 2011 19:06:44 -0700, Malathi Panyam malathi_pan...@net.com said: MP Container.c in snmplib lists few containers like binary array, MP linked list and sorted linked list. Should I assume binary array will MP be chosen by default for the table container? Is there a way that we MP can choose a different container type for mib2c generated tables? The mib2c output by default requests a 'table_container' to store the data in, which is a binary array. If you wish to change it, simply change the registration line like: netsnmp_container_find(yourTable:table_container); in your yourTable_interface.c file. MP We are facing some issues with the tables with large number of rows MP and we could see most of the time is being spent in inserting the row MP indexes on cache timeout. We tried to increase the timeout, but didn't MP help much. So would like to know is there any way that we can speed up MP inserting the indexes on_ cache_load(). Above question comes from one MP of such efforts. I'm going to hope that Robert can answer that. There probably is a more efficient way to do bulk insertions, but I'd have to go look myself. -- Wes Hardaker SPARTA, Inc. -- Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Question on Trap/inform filtering and statistics
On Tue, 16 Aug 2011 23:01:12 +0530, anand anand hianandh...@gmail.com said: aa - We have sub-agents A,B and C sending traps/informs to Net-Snmp ( aa on AgentX ). Is it possible to configure Net-snmp in way that it aa discards all traps/informs from B. ? If user wants to enable aa receiving traps from B at a later stage can it be enabled ? If yes, aa then how ? You can possibly do it via setting parameters up in the snmpNotifyFilterTable. aa - Does Net-Snmp maintains a list of traps or informs which it has aa received ? If yes, then which object should be queried to get these aa stats. Not currently, no. The NOTIFICATION-LOG-MIB needs to be implemented within the agent, but it's currently not. AA Thanks Regards aa -anand aa -- aa uberSVN's rich system and user administration capabilities and model aa configuration take the hassle out of deploying and managing Subversion and aa the tools developers use with it. Learn more about uberSVN and get a free aa download at: http://p.sf.net/sfu/wandisco-dev2dev aa ___ aa Net-snmp-users mailing list aa Net-snmp-users@lists.sourceforge.net aa Please see the following page to unsubscribe or change other options: aa https://lists.sourceforge.net/lists/listinfo/net-snmp-users -- Wes Hardaker SPARTA, Inc. -- Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: starting snmpd on a different port
On Wed, 10 Aug 2011 16:49:27 +0530, anand anand hianandh...@gmail.com said: aa We have a requirement wherein we should be able to change the SNMP port ( aa 161 ) to a new value at runtime without restarting the agent. aa After the change Net-Snmp agent should run only on the new port. aa Is this possible with net-snmp ? If yes, then how this can be aa achieved ? Any API's or examples which can be used for the same. It's probably possible, but it hasn't been done before. You should look at init_master_agent() in agent/snmp_agent.c to see how to open new transports, for example. -- Wes Hardaker SPARTA, Inc. -- uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: agentxTimeout between agent and subagent
On Tue, 9 Aug 2011 22:12:39 -0700, Malathi Panyam malathi_pan...@net.com said: MP I would like to know the scenarios in which agent can close the MP communication with subagent(infact kill the process) other than MP exceeding the agentXTimeout seconds configured in snmpd.conf. snmpd will never kill the subagent. It may sever the connection, but it won't kill the subagent. It's likely that your subagent has a different problem somewhere in the code. -- Wes Hardaker SPARTA, Inc. -- uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Reg. run_alarms() in agent_check_and_process()
On Tue, 9 Aug 2011 10:55:35 +0530, ESWAR RAO eswar7...@gmail.com said: ER Please let me know why run_alarms(); is used in ER agent_check_and_process(); Because there are a lot of the internals to the library that require occasional callbacks. And in the process of dealing with incoming packets, the library must also do other things that were registered to be done at particular intervals. In fact, the time to sleep while waiting for packets is affected by the alarm statuses and thus if run_alarms() wasn't called the agent_check_and_process() would always return immediately because the timeout for the select would be none. -- Wes Hardaker SPARTA, Inc. -- uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: SNMPv3 EngineID Changed to Random Format?
On Thu, 4 Aug 2011 15:56:10 -0600, Gary Dunlap gary.dun...@dothill.com said: GD Hi. I have Net-SNMP v5.6.1 configured to generate engine IDs in the GD MAC format, using the snmpd.conf statement engineIDType 3. However, GD I've noticed some systems configured this way actually running with GD engineIDs in Net-SNMP's random format. When I tried to debug this GD by restarting snmpd with more debug tokens, it returned to using the GD MAC format. Are other areas of the configuration being picked up properly? I'm wondering if your config file isn't being read. Also, Net-SNMP's agent will *keep* the engineID that it knows it used in the past, regardless of what the settings say to do (long story, but this is actually a good thing). If you ever started it up in the past before changing the .conf file, you'll need to manually wipe out the 'oldEngineID' line from /var/net-snmp/snmpd.conf. -- Wes Hardaker SPARTA, Inc. -- uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Cannot set values in example-demon Subagent
On Fri, 15 Jul 2011 10:57:46 +0200, Emanuele Scalco e.sca...@gds.com said: ES Error in packet. ES Reason: (badValue) The value given has the wrong type or length. ES Failed object: NET-SNMP-TUTORIAL-MIB::nstAgentSubagentObject.0 Odd... Can you try this instead: snmpset localhost NET-SNMP-TUTORIAL-MIB::nstAgentSubagentObject.0 i 5 ^ ^ ^ And see if it makes any difference? -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: questions about the pass-persist
On Thu, 14 Jul 2011 10:01:24 -0700, chi.g...@l-3com.com said: CG In the snmpd.conf, I add a line: CGpass_persist .1.3.6.1.4.1.3231.101.5.1.101.0.1.0 python /work/snmp/persist_test.py Can you try this instead: run: chmod a+x /work/snmp/persist_test.py And then change the config line to: pass_persist .1.3.6.1.4.1.3231.101.5.1.101.0.1.0 /work/snmp/persist_test.py -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Patching with a Diff file on windows
On Tue, 12 Jul 2011 10:57:02 -0500, keith.abb...@pattersoncompanies.com said: ka Cound someone provide the steps, or point me to documentation that ka explains how to use a Diff file to apply a NetSNMP patch? I'm running on ka a windows XP platform. If you install any of the gnu environments for windows, you'll likely get the 'patch' program installed too. Then you can run it as follows (from a cmd terminal): cd net-snmp-source patch -p0 file (the -p0 may need to be something else (like -p1), depending on the patch file in question) -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: snmptrapd - unable to receive traps
On Tue, 12 Jul 2011 14:15:59 +, Joan Landry joan.lan...@overturenetworks.com said: JL In the sending unit I have snmpd.conf JL trapsess -r 3 -t 1500 -Ci -e 0x8523010a0b0cab -l authPriv -u jlnewuser -a M JL D5 -A abcdefgh -x DES -X abcdefgh 10.11.12.32 But there you're adding both the -e and the -Ci option (and based on your original message, you don't want the -Ci because you want to use traps). JL In the trap receiver (snmptrapd) in snmptrapd.conf I have JL createUser -e 0x8523010a0b0cab jlnewuser MD5 abcdefgh DES abcdefgh But with INFORMs it won't work, because the USM agent will only accept engineIDs that are it's own when it's authoritative (which it is in the case of an INFORM). So, either: 1) remove the -e's and use INFORMs 2) remove the -Ci and use TRAPs (note that you don't need the -e on the trapsess line if you use the same engineID as the agent, which it'll use by default; you just need to tell snmptrapd to create a user with the snmpd agent's engineid). -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: solaris 11 (net-snmp 5.4.1) intermittent snmpgetnext failure.
On Mon, 11 Jul 2011 12:35:21 -0700 (PDT), Chilukuri Murali murali_...@yahoo.com said: CM I am facing strange issue with net-snmp 5.4.1 on solaris 11. CM I have configured a v3 user. CM When I do a series of snmpgetnext, after sometime, snmpget next is failing. CM Sometimes first one or two snmpgetnext succeeds and then an error occurs. CM I could see the following error message in /var/log/snmpd.log CM CM send response: USM authentication failure (incorrect password or key) CM CM All the set requests are succeeding. That's certainly odd if nothing else is going on as well. You might try snmpget with a longer timeout. I'm having a hard time believing the USM keys are the issue. Are you sure there are no other requests going to the system that might be triggering the above log message? -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Memory leak when using monitor
On Thu, 07 Jul 2011 12:55:48 +0100, Chris Down chris.d...@alcor-communications.co.uk said: CD Just for info, this memory leak seems to have been fixed for 5.7. Thanks for the report! It's always nice when people respond to themselves saying they've found a solution! -- Wes Hardaker SPARTA, Inc. -- AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on Lean Startup Secrets Revealed. This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.7 released! And we've moved to using Git!
I'm happy to announce the release of version 5.7 of Net-SNMP! The NET-SNMP Development Team Important Announcement About the Net-SNMP Project: SVN - GIT - The Net-SNMP project has switched this last week from our previous Subversion (SVN) code repository to a new Git repository. If you were tracking our previous code development through the use of SVN you'll need to switch to pulling our updates from git instead. Further information and instructions can be found at: http://www.net-snmp.org/wiki/index.php/Git The short answer to what do I type now? is: git clone git://net-snmp.git.sourceforge.net/gitroot/net-snmp/net-snmp Contents of this announcement - - What has Changed recently? - Where can I get it? - Are there binaries available? - What operating systems does it run on? - Which versions of the SNMP protocol are supported in this package? - I've found a bug or have a suggestion, how do I tell you about it? - What's the difference between UCD-SNMP and Net-SNMP? What has Changed recently? --- The NEWS file snippits from these releases are as follows. See the CHANGES and ChangeLog files for increasing levels of detail. The following shows the NEWS file contents for the 5.7 release: *5.7* snmpd: - Delivery of data via regularily scheduled notifications. (see Data Delivery via Notfiications in snmpd.conf) - Many time-based config options can take (m)ins, (h)ours, ... arguments (see the snmpd.conf manual page) - The PING and TRACEROUTE MIBs now compile and work-ish on linux http://www.net-snmp.org/wiki/index.php/DISMAN - Mib handlers can now implement a data_clone function for cloning the myvoid structure variable to avoid dangling pointers - Fixed persistent storage of VACM MIB configuration - Multi-homed agents send UDP responses from the proper IP address - the hrStorageTable implementation now supports large filesystems better - optimizations for large route tables - Added a deliveryByNotify config token for regular data delivery (see the snmpd.conf manual page and the NET-SNMP-PERIODIC-NOTIFY-MIB) - Patch 3141462: fix agentx subagent issues with multiple-object requests - [PATCH 3057093]: linux uses libpci for creating useful ifDescr strings - patch 3131397: from takevos: huge speedups of the TCP/UDP Tables libnetsnmp: - Removed the older CMU compatibility support - the SSH transport is now configurable TLS/DTLS support: - The SNMP over DTLS transport now properly supports IPv6 - Introduced new configuration tokens: localCert/peerCert (deprecating serverCert, clientCert, defX509ServerPub, defX509ClientPub) - Various fixes for the TLS/DTLS transports apss: - Added a per-variable timed output support to snmpwalk using -CT - snmpinform now correctly uses the local engineID for informs - A number of mib2c bug fixes - new snmp.conf tokens for timeouts and retries building: - New flags to reduce the amount of compiled code to bare minimums. This is provided by a new generic feature marking/selection mechanism. http://www.net-snmp.org/wiki/index.php/Feature_Marking_and_Selection - It's now possible to build without SNMPv3/USM (e.g., if you only want TLS/DTLS with SNMPv3/TSM) - It's possible to build the suite with no SET support configure using --enable-read-only - It's possible to build the agent as a notify-only agent configure using --enable-notify-only - Added a script to test memory usage with various config options (see the local/minimalist/sizetests script) - Net-SNMP can now be built to perform local DNSSEC validation (install DNSSEC-Tools' libval and use --with-local-dnssec-validation) testing: - a number of new API unit-tests have been added to the suite (to run the tests: cd testing ./RUNFULLTESTS -g unit-tests) - The unit tests can be more easily run under valgrind (See http://bit.ly/jsgRnv for details) openbsd: - Support for updating the routing table via SNMP win32: - the testing suite works better under win32 environments - Many building fixes for the win32 environment(s) solaris: - Net-SNMP now supports the SCTP-MIB DragonFlyBSD, FreeBSD8 - Net-SNMP should now work on DragonFlyBSD and FreeBSD8 And of course: - Many other bug fixes. See the CHANGES and ChangeLog for details. Where can I get it? -- Download: - http://www.net-snmp.org/download.html Web page: - http://www.net-snmp.org/ Sourceforge Project page: - http://www.net-snmp.org/project/net-snmp/ Are there binaries available? -
Re: RFC1213-MIB vs IF-MIB, ifType and -mALL
On Tue, 21 Jun 2011 16:04:08 +0200, Peter Valdemar Mørch pe...@morch.com said: PVM # snmpwalk -M$DIRS -mALL -v2c -c$COMMUNITY $IP ifType | head -n 1 PVM RFC1213-MIB::ifType.1 = INTEGER: 53 PVM # snmpwalk -M$DIRS -mALL -mIF-MIB -v2c -c$COMMUNITY $IP ifType | head -n 1 PVM IF-MIB::ifType.1 = INTEGER: propVirtual(53) PVM But then one can't access anything from any other mib as this shows: PVM # snmpwalk -M$DIRS -mALL -mIF-MIB -v2c -c$COMMUNITY $IP lmTempSensorsTable PVM lmTempSensorsTable: Unknown Object Identifier (Sub-id not found: (top) - PVM lmTempSensorsTable) PVM # snmpwalk -M$DIRS -mALL -v2c -c$COMMUNITY $IP lmTempSensorsTable PVM LM-SENSORS-MIB::lmTempSensorsTable = No Such Object available on this agent PVM at this OID PVM (yeah, there is no such instance on the equipment, but snmpwalk could find PVM the OID) PVM So, given that RFC1213-MIB is in ./mibs/, is there any way I can use -mALL PVM or the perl equivalent and still get the (newer) ifTable definition from PVM IF-MIB? You could edit the snmplib/parse.c file to add in the missing duplicates into the 'struct module_compatability module_map[]' definition list. That might fix it more permanently. You could also not use ALL. It's a hack too ;-) The reason I suspect it's still around is two-fold: 1) when we originally started not everything had been replaced and we've never deleted it. 2) deleting it might cause 3rd-party mibs that still import it to break loading. Maybe we need a 'mibignore' config option ;-) -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Looking for a way to persist SNMPv3 user configuration
On Thu, 23 Jun 2011 10:34:41 +0200, Boris Zweimueller boris.zweimuel...@gmail.com said: BZ Is there a way that users which have been configured with the BZ *snmpusm *command dynamically still exist after restarting the BZ agent? BZ Can the content of these tables be saved somehow? By default, in the Net-SNMP agent, they are saved dynamically so they should persist across agent reboots. BZ Now, restarting the device should not fallback to the default BZ password. The saving-routines are registered in snmplib/snmpusm.c's init_usm_conf() function (which is called from the agent's mib modules). Note the 'usm_store_users()' callback that is registered. See that function, also in snmplib/snmpusm.c, for where the usm users get saved at shutdown. -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Snmp proxy: how to react to 'default' context.
On Wed, 22 Jun 2011 17:01:02 +0200, Boris Zweimueller bo...@zweimueller.ch said: BZ Can I do this with the proxy ? I think you could, yes, but it'd be more efficient to get snmptrapd to register under a different context. Really, we should make this configurable instead of hard coding it, but right now if you change the snmptrapd tokens in apps/snmptrapd.c to it'll register under the default context instead. Specifically, change the line that looks like this: netsnmp_ds_set_string(NETSNMP_DS_APPLICATION_ID, NETSNMP_DS_NOTIF_LOG_CTX, snmptrapd); from snmptrapd to . -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: MIB change questions
On Wed, 22 Jun 2011 08:38:18 -0500, Wendy McGowen wen...@pivot3.com said: WM We have a set of traps that include a field indicating the location of WM the device as an integer(currently slot); in the next release, the WM location will be need to be returned as a string. So I'm guessing that WM we need to mark the old traps as deprecated, and create new traps that WM include the string instead of the integer value. Is that the correct WM way to do this? Yes-ish. You can add new data to notifications without a problem [just don't expect old agents to send it], but to remove the older one you need to deprecate the entire notification, yes. WM Also, it's okay to add a new location field to the existing device WM table and mark the original slot table entry as deprecated, as WM opposed to creating a whole new table, right? But then do I still WM populate it with a value, or does that leave a gap in the table when WM someone walks the entire table? You can deprecate a column that isn't an index without recreating the table, yes. If it's an index this won't work, however. And yes, if a manager walks a table where a column doesn't have any values, it'll get holes. Most managers these days deal with this ok, but in the way distant past there was fears this would cause some managers problems. -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: duplicate libtool link reference to snmpusm.o
On Wed, 8 Jun 2011 17:44:02 -0400, timothy.sto...@transport.alstom.com said: ts --with-openssl=internal --with-security-modules=usm --with-defaults; \ ^^^ That one is the default and is auto-included (and the configure script doesn't properly check for duplicates at the moment). So with that flag present you'll get it twice, which is the error you're seeing. -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: permanent snmpNotifyTable entries
On Thu, 9 Jun 2011 20:30:26 -0400, Jeff Lange jlange6...@gmail.com said: JL Is it possible to create named permanent entries in the snmpNotifyTable? I JL would like to create 2 simple entries named trap and inform that I JL can guarantee will always be valid. By default, our implementation should save created rows to the persistent storage system, yes. (assuming the agent has permission to write to /var/net-snmp/snmpd.conf, which is the default location). -- Wes Hardaker Cobham Analytic Solutions -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense.. http://p.sf.net/sfu/splunk-d2d-c1 ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.7.rc1 released for testing
Net-SNMP 5.7.rc1, the first release candidate for the 5.7 line, has been released and is now available for testing. Please let us know of any show stoppers by mailing critical issues to the -coders list. Where can I get it? === Grab it from: http://www.net-snmp.org/download.html Important Announcement == About the same time as the 5.7 release, we'll be moving our source code control from SVN to GIT. More details will be distributed near the time of the final 5.7 release. A list of NEWS worthy items to date: *5.7* snmpd: - Delivery of data via regularily scheduled notifications. (see Data Delivery via Notfiications in snmpd.conf) - Many time-based config options can take (m)ins, (h)ours, ... arguments (see the snmpd.conf manual page) - The PING and TRACEROUTE MIBs now compile and work-ish on linux http://www.net-snmp.org/wiki/index.php/DISMAN - Mib handlers can now implement a data_clone function for cloning the myvoid structure variable to avoid dangling pointers - Fixed persistent storage of VACM MIB configuration - Multi-homed agents send UDP responses from the proper IP address - the hrStorageTable implementation now supports large filesystems better - optimizations for large route tables - Added a deliveryByNotify config token for regular data delivery (see the snmpd.conf manual page and the NET-SNMP-PERIODIC-NOTIFY-MIB) - Patch 3141462: fix agentx subagent issues with multiple-object requests - [PATCH 3057093]: linux uses libpci for creating useful ifDescr strings - patch 3131397: from takevos: huge speedups of the TCP/UDP Tables libnetsnmp: - Removed the older CMU compatibility support - the SSH transport is now configurable TLS/DTLS support: - The SNMP over DTLS transport now properly supports IPv6 - Introduced new configuration tokens: localCert/peerCert (deprecating serverCert, clientCert, defX509ServerPub, defX509ClientPub) - Various fixes for the TLS/DTLS transports apss: - Added a per-variable timed output support to snmpwalk using -CT - snmpinform now correctly uses the local engineID for informs - A number of mib2c bug fixes - new snmp.conf tokens for timeouts and retries building: - New flags to reduce the amount of compiled code to bare minimums. This is provided by a new generic feature marking/selection mechanism. http://www.net-snmp.org/wiki/index.php/Feature_Marking_and_Selection - It's now possible to build without SNMPv3/USM (e.g., if you only want TLS/DTLS with SNMPv3/TSM) - It's possible to build the suite with no SET support configure using --enable-read-only - It's possible to build the agent as a notify-only agent configure using --enable-notify-only - Added a script to test memory usage with various config options (see the local/minimalist/sizetests script) - Net-SNMP can now be built to perform local DNSSEC validation (install DNSSEC-Tools' libval and use --with-local-dnssec-validation) testing: - a number of new API unit-tests have been added to the suite (to run the tests: cd testing ./RUNFULLTESTS -g unit-tests) - The unit tests can be more easily run under valgrind (See http://bit.ly/jsgRnv for details) openbsd: - Support for updating the routing table via SNMP win32: - the testing suite works better under win32 environments - Many building fixes for the win32 environment(s) solaris: - Net-SNMP now supports the SCTP-MIB DragonFlyBSD, FreeBSD8 - Net-SNMP should now work on DragonFlyBSD and FreeBSD8 And of course: - Many other bug fixes. See the CHANGES and ChangeLog for details. -- Wes Hardaker Cobham Analytic Solutions -- EditLive Enterprise is the world's most technically advanced content authoring tool. Experience the power of Track Changes, Inline Image Editing and ensure content is compliant with Accessibility Checking. http://p.sf.net/sfu/ephox-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: snmpset and DISPLAY-HINT
On Thu, 19 May 2011 09:03:49 +0200, Giuseppe Modugno g.modu...@elettronika.it said: GM snmpset -v2c -c private agent PRIVATE-MIB::myVar.0 = 23.4V GM to send to the agent the request to set a the new value 23.4V for GM myVar. On the wire, the value should be the integer 234. GM Is it possible? I tried, but without success. Unfortunately, no. We don't currently have the ability to the inverse parsing of a DISPLAY-HINT. -- Wes Hardaker Cobham Analytic Solutions -- What Every C/C++ and Fortran developer Should Know! Read this article and learn how Intel has extended the reach of its next-generation tools to help Windows* and Linux* C/C++ and Fortran developers boost performance applications - including clusters. http://p.sf.net/sfu/intel-dev2devmay ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: need document of sub-agent interface.
On Wed, 20 Apr 2011 12:03:56 -0700, chi.g...@l-3com.com said: CG 1. How do I (call) interface another sub-agent from a main CG sub-agent. If you have two subagents that need to talk to each other, that's something that the libraries themselves don't have a direct solution for. You'll need to work out the IPC for the subagents themselves. They can both register under the master agent just fine though. CG 2. How do I do use a third party mib from the sub-agent. CG Are there any document online? The Net-SNMP tutorials show how to register any MIB using the subagent code... It doesn't matter who owns the MIB itself. -- Wes Hardaker Cobham Analytic Solutions -- Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: How to implement my own iteration methods for a MIB?
On Thu, 2 Dec 2010 15:09:30 -0600, Andrés Odio andreso...@gmail.com said: AO I would like to know how to iterate through my data elements without using AO helpers such as table_iterator, table_data_set, etc. The highest level code example that uses the least amount of overhead handlers can be found in the agent/mibgroup/testhandler.c file. You might look at it (specifically, I think the multiplication table example). -- Wes Hardaker Cobham Analytic Solutions -- Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Commercial Use
On Thu, 2 Dec 2010 13:28:29 +0200, merve t mervet2...@gmail.com said: mt is net-snmp tools and api free for commercial use? mt i read a bit of license but can get nothing. The licenses were designed to allow for commercial use, but in order to protect yourself legally you should always consult a lawyer to get their opinion on the subject. -- Wes Hardaker Cobham Analytic Solutions -- Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: ASN_PRIV_IMPLIED_OCTET_STR
On Thu, 2 Dec 2010 03:30:04 -0800 (PST), Dejan Bojic b.de...@ymail.com said: DB In the SourceForge bug database is this bug, with open status - what that DB means - correction for this bug is not included in the any public DB release? If the bug is still open, then the bug likely still exists unless it was fixed in the code but the tracker wasn't updated (which would be bad, but happens sometimes) -- Wes Hardaker Cobham Analytic Solutions -- Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: how to stop continuoulsy unauthorized access
On Tue, 29 Mar 2011 11:24:11 -0700, sunaina mangla sunaina.man...@gmail.com said: sm Is there anyway by which SNMP agent can come to know about an sm unauthorized access ? if yes, then probably I can send this info to sm some other process which can block (using IPtables rules) this IP to sm access the system. ? snmpd doesn't have a IP address filtering mechanism built in. You can use iptables or /etc/hosts.deny to filter out machines that are causing you problems. [we don't want to duplicate exiting technologies] -- Wes Hardaker Cobham Analytic Solutions -- Create and publish websites with WebMatrix Use the most popular FREE web apps or write code yourself; WebMatrix provides all the features you need to develop and publish your website. http://p.sf.net/sfu/ms-webmatrix-sf ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: SNMP request size
On Wed, 16 Mar 2011 18:17:02 +0800, ronri...@gmail.com said: r Is it possible to check the SNMP GET request packet size and split the r request to an acceptable size before it gets sent? r I'm currently sending the request using VarList but the request dies r when the packet length exceeds the transport maximum. r Any inputs to get around this limitation is highly appreciated. It's something that you're only going to be able to do on your side. It's sort of impossible to do generically. You can try and estimate the number of requests you can put in a GET packet and that should be somewhat estimatable. However, trying to determine the size of the RESPONSE that comes back will be significantly trickier. Consider the sysLocation.0 scaler, for example, which someone could configure a device to report nowhere vs We're located on the 5th floor of the computer science building at 1600 Alberta street in northern Alberta, which is obviously in Canada, which is hopefully obviously in north America. Both are unfortunately legal answers that will greatly affect the size of the returned packet. You won't know it's size until you query it. -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: How to add user without showing non-encrypted password in conf file
On Tue, 15 Mar 2011 12:14:50 +0200, Naama Bar Menachem naama.barmenac...@novelsat.com said: NBM Which means I need to hold the password not encrypted. Am I correct? It is worth noting that the way SNMPv3 with USM works is that you *must* store a copy of the user's localized key on the device in a way that snmpd can read it. This means you will always ended up with some form of unencrypted secret on the device (though the secret, if stolen, will only let you access the device itself and not other devices). -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Replacing an apt-get installation, with a custome compiled version.
On Sun, 13 Mar 2011 17:32:30 +0200, Daniel Leicht daniel.lei...@c4-security.com said: DL Is there an easy way to move the compiled version to these boxes without DL compiling anything there? (its the exact same hardware and os as the box DL that I compiled on here). I'd consider getting the original .deb source directory (debian) and repackaging it as you need it, then pushing your newer .deb files to the remote machines and installing those. -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: HP-SNMP-AGENTS with 5.6.1 on RH6
On Thu, 10 Mar 2011 11:55:54 -0500, Robinson, Jayson A jayson.a.robin...@jpmchase.com said: RJA but upon walking the agent oids I get no such oid available: RJA snmpwalk -v2c localhost:16161 .enterprises.232 RJA SNMPv2-SMI::enterprises.232 = No Such Object available on this agent RJA at this OID RJA If I use the version of net-snmp that came with RHEL6 ( 5.5 ) - same RJA snmpd.conf, I get the following in the logs: ... RJA and then walking the oids on .232 works just fine. That simply indicates that the agent for RHEL6 was compiled with MIBs under that part of the OID tree, and when you compiled it yourself you didn't include the same set of options. I suggest getting the RHEL RPM source specification and starting with the configure flags from it. -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: netsnmp
On Thu, 10 Mar 2011 14:23:42 +0530, geetha ramani geetha...@gmail.com said: gr how to install a snmp agent and mibs for a device. See the INSTALL file that comes with the package. -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Snmpd and snmptrapd are lost
On Mon, 7 Mar 2011 11:42:01 +0100, Authier, Christelle christelle.auth...@capgemini.com said: AC Hi, AC In the project I am working on, during the execution, sometimes the AC snmp daemon or/and the snmptrap daemon. It not happened all the AC times. We work with Net-Snmp version 5.3.3.2 and RedHat Enterprise AC Linux (RHEL) 5.5 . AC Is it the first time you face this problem or there is a solution in a AC more recent version of net-snmp ? It's impossible to tell exactly what your problem is without running it in a debbuger to figure out what's going on. Thus, we suggest you do just that: http://www.net-snmp.org/wiki/index.php/Debugger [optionally, you can load a corefile (if you had one created) into the debugger after it dies when it wasn't running directly in a debugger] -- Wes Hardaker Cobham Analytic Solutions -- Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: jobs list?
On Tue, 22 Feb 2011 20:08:38 -0800, Joel Thompson j...@rhinosystemsinc.com said: JT I'M SORRY FOR THE SPAM, but there didn't seem to be an appropriate JT email distribution for SNMP related jobs. I hope I don't upset too JT many... Sorry. We don't want to start this trend... You'll note that even the core developers haven't done this, and I know for a fact some of them have been out of work or needed more work at various times. -- Wes Hardaker Cobham Analytic Solutions -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Disk OID renumbering
On Thu, 17 Feb 2011 17:28:40 -0800, Vikas Aggarwal vika...@netplex-tech.com said: VA We are finding that rebooting or remounting disks on a Unix system renumbers VA the SNMP OIDs. You don't specify which MIB you're talking about and there are multiple MIBs that support disks. But, generically, it doesn't surprise me. It's not trivial to keep indexes stable across reboots and it takes work, and I don't think this work has been done for the host-resources-mib which I'm *guessing* that you're talking about. -- Wes Hardaker Cobham Analytic Solutions -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Translating OIDs to readable text format
On Thu, 17 Feb 2011 19:44:21 +0530 (IST), John Trivolta ohio2...@yahoo.com said: JT But all the OIDs that processed through this PERL program are also JT getting translated. I don’t want this to happen. I want the JT translation to happen only for the statements in which I invoke JT translateObj method. I think you want to look at the settings in the SNMP package variables and functions section of the man page, which has useful settings for you. Like use_numeric and use_long_names. -- Wes Hardaker Cobham Analytic Solutions -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Fwd: queries to only one table
On Thu, 17 Feb 2011 15:22:04 +0300, Egor reader.of.dr...@gmail.com said: E It can question for coders archive, but, if i made a line of tables by E mib2c.mfd.conf and make snmpwalk question to first table, all other tables E answers too, but it is not displayed in my query. So, how can I make that E Second Table didn't answer the getnext request if it is coming from table E before this table? Or is there way to find a solution for asking only one E table? The way a GETNEXT works a table *must* be able to answer for any OID that is before the table itself. So when the very last GETNEXT comes in to query the last column from the last row of a previous table, an agent MUST continue query into the next section of the MIB tree looking for an answer to return (eg, into the next table). There is no way to prevent this and stay legal to the SNMP specification. -- Wes Hardaker Cobham Analytic Solutions -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: send traps to 2 different servers
On Thu, 17 Feb 2011 12:54:31 +0100, Alan James Caruana ajcaru...@gmail.com said: AJC I would like to set up my servers to send some SNMP traps to a particular AJC OM server, and other SNMP traps to a different OM server. The reason is AJC that I would be monitoring different aspects of the servers on the two AJC different OM servers. Yes, you can use the notification filtering support to do this. However, the configuration directives don't exist to set this up so you must perform SNMP SETs to the TARGET-MIB and NOTIFICATION-MIB to get it set up. -- Wes Hardaker Cobham Analytic Solutions -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: obtaining ip address
On Tue, 15 Feb 2011 16:13:39 +, th exterit thexte...@gmail.com said: te Does net-snmp provide a way to grab the IP address from whoever sent a te trap Generally this is discouraged, because the trap: 1) have been forwarded from somewhere else 2) may have been received over a transport that doesn't have an IP address Generally, we try not to use IP addresses because they're not actually very dependable. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP Wiki is Down
On Tue, 15 Feb 2011 14:26:37 +, Dave Shield d.t.shi...@liverpool.ac.uk said: DS SourceForge did a major web-overhaul recently which broke the wiki. DS Wes is currently working on trying to get things back working again. As of a few minutes ago I think I fixed all the brokenness. It should be working now. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP-Wiki
On Tue, 15 Feb 2011 08:23:06 +, Dave Shield d.t.shi...@liverpool.ac.uk said: DS Once Wes has managed to sort out the necessary changes, DS all the content should be visible again. Fixed! No content should be lost. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Tutorials and Wiki down?
On Tue, 15 Feb 2011 04:58:51 -0500, Daniel Savard daniel.sav...@gmail.com said: DS Many other wikis hosted on SourceForge are impacted as well. I then DS suppose SourceForge is awared and is working as well on this problem. Oh, and the wiki is now fixed. I hope. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Tutorials and Wiki down?
On Tue, 15 Feb 2011 04:58:51 -0500, Daniel Savard daniel.sav...@gmail.com said: DS Many other wikis hosted on SourceForge are impacted as well. I then DS suppose SourceForge is awared and is working as well on this problem. There are sourceforge hosted wikis and project hosted wikis (IE, roll-your-own) We're using the second because we did it long before they offered to host them themselves, and the original version of theirs put a huge banner across the top that took up most of the screen real estate. Anyway, anyone that self-hosted their own is likely in the same boat but it's not SF that has to fix it. Each project does as SF doesn't actually care about broken web-pages it seems. We got no notice that the upgrade was going to happen or the chance to test it before it went live. On the upside, it is an improvement and the goals were good ones. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Can not get remote engineTime.
On Tue, 15 Feb 2011 09:31:17 -0800, Zongjun qizong...@gmail.com said: *I am using netsnmp 5.3.1. I am trying to get the authoritative engine time by calling to get_enginetime(), but the function always fails. Z *Is there a configuration option to the NET-SNMP Agent in order to Z *expose* this information? If you're doing it from within the API to retrieve the local engineID for the engine you're using is: char buf[SNMP_MAXBUF]; int actual_length; actual_length = snmpv3_get_engineID(buf, SNMP_MAXBUF); But your description doesn't really show what you're trying to accomplish, so I'm only guessing at what you actually want to do. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Send TRAP
On Mon, 14 Feb 2011 18:27:07 +0100, Luis QuaggaSnmp quaggas...@gmail.com said: LQ I only want to send a IP-address variable, and I don´t know what values I LQ have to put in enterprise, generic and specific. The enterprise/generic/specific attributes refer to the trap you want to send. If you're trying to create a generic one, then you'll need to write your own MIB (after getting an enterprise number assigned to you or by temporarily using some random space within the netSnmpPlaypen space). LQ And in version 2c, I have the same problem. SNMPv2c uses OIDs to point to the trap type you want to send instead. This page will be highly helpful to you: http://www.net-snmp.org/wiki/index.php/TUT:snmptrap -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Can not get remote engineTime.
On Tue, 15 Feb 2011 13:01:02 -0800, Zongjun qizong...@gmail.com said: Z I am trying to get the engine time (esp. the engineBoots) of the remote Z agent, by using get_enginetime_ex api. The api call fails. Hmm.. I thought that the enginetime was copied into the session structure, but it may be only copied into the internal one... You should check that first. Otherwise, sending a GET query to snmpEngine.0 is another way to go. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Net-SNMP-Wiki
On Mon, 14 Feb 2011 09:07:50 -0500, wolfram...@aol.com said: w on the website the wiki doesn't work. Yep. SourceForge did a major web-overhaul which broke our wiki. I worked on it Friday, but nothing I did helped. Today I'll be trying again (starting with an upgrade). -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: beginner questions
On Tue, 8 Feb 2011 15:11:33 -0200, Friedrich Locke friedrich.lo...@gmail.com said: FL i have just installed net-snmp in my debian linux box and would like FL to query information about UDP protocol. How could i fetch such FL information? Do i need to install udp MIB or it comes with the default FL installation (via synaptic)? The tools use the MIBS to help display data that you query from a remote agent (or the local agent). The agent must implement those MIBs to be able to return the data to you (ours does implement the UDP-MIB, but not everything does; though most do). You might start looking at our tutorials: http://www.net-snmp.org/tutorials/ Generally you'll want to snmpwalk host udpMIB once you get the authentication options set correctly. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: beginner questions
On Tue, 8 Feb 2011 16:49:10 -0200, Friedrich Locke friedrich.lo...@gmail.com said: FL Does SNMPv3 support kerberos authentication ? There is experimental support for it in the Net-SNMP package and people at the IETF have talked about making a standardized version of it, but I don't believe anyone supports any form of Kerberos yet but us. (and when the standard comes out, it's likely to be different too, unfortunately). -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: need help
On Tue, 1 Feb 2011 13:25:05 +0700, Chandra Gupta chandr...@techno9indonesia.com said: CG I have install net-snmp on Redhat Enterprise Linux 5.5 using command CG $ ./configure CG $ make CG $ make install CG And I can't found snmp service on Redhat Enterprise Linux after CG installing,I've tried command like By default the snmpd service isn't installed using the source tar-balls. The RPMs available for RHEL will have it (but will have an older version of Net-SNMP too). You can probably copy the dist/snmpd-init.d to /etc/init.d/snmpd to install the service file. -- Wes Hardaker Cobham Analytic Solutions -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Support for SHA-2 family of hash functions (i.e., SHA-224, SHA-256, SHA-384 and SHA-512)
On Fri, 28 Jan 2011 13:35:14 +, Dave Shield d.t.shi...@liverpool.ac.uk said: DS Please see DS http://net-snmp.sourceforge.net/wiki/index.php/Strong_Authentication_or_Encryption DS In particular, note the final paragraph I actually just amended that page as it was out of date. Quick, re-read it! -- Wes Hardaker Cobham Analytic Solutions -- Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: declaring the global variable in net-snmp-5.4.2.1
Global variables are declared in one file above any functions as: int my_variable; and used in the other as: extern int my_variable; -- Wes Hardaker Cobham Analytic Solutions -- Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Snmp_sess_open failure on net-snmp 5.3.1
S Hi All, With net-snmp version 5.3.1 calling snmp_sess_open with a S peername = :200 throws an exception saying unable to identify S hostname. But a similar error is not thrown on net-snmp version S 5.5. Can somebody point me to the bug / patch which has resulted in S this change in behaviour. I'm not sure what caused the chaneg, but I assume you probably want to open a udp:200 peername instead to fix the issue. :200 is fairly generic and doesn't specify the actual port type you want, so IPv4 was probably assumed. But that's not really safe behavior (especially as IPv4 slowly goes away). -- Wes Hardaker Cobham Analytic Solutions -- Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: mem leak in agent,
On Tue, 25 Jan 2011 10:12:44 +, Pavan Kumar Kakunoori kpava...@gmail.com said: PKK are there any agent mem leak issues with using libraries prior than PKK net-snmp5.5? do you recommend if we use the net-snmp5.5, the problems will PKK go way? The best way to check for memory leaks is using something like valgrind, as documented here: http://www.net-snmp.org/wiki/index.php/Debugger -- Wes Hardaker Cobham Analytic Solutions -- Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: snmp monitoring tool
MS I`m looking for monitoring tool which can monitor over 20 000 MS units. Does your software suports this number, or can You make MS advice what software to use. The best will by linux based but ... Our software is a toolkit that can be used to create monitoring systems, but the programs that are distributed with Net-SNMP (for example, snmpwalk) probably aren't sufficient to do what you need. That being said, there are many other open source monitoring systems that are designed to scale to 20k systems and some of them use our code as a building block (my company has written an open source product that used Net-SNMP under the hood and was designed to scale to numbers that big). I suggest you look at some of the other listing services (freshmeat.net) fro projects designed to do what you wish. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: static linking on Linux,
On Wed, 19 Jan 2011 05:22:03 +, Pavan Kumar Kakunoori kpava...@gmail.com said: PKK Considering target file `-Wl,-static'. That's the GCC flag for performing passing options (like -static) to the linker. Since your compiler is complaining about it I suspect your compile isn't recognizing that flag or it's in the wrong place on the command line option once everything is expanded. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: SNMP v3 Proxy to SNMP v1 host
On Tue, 18 Jan 2011 08:42:10 +, Dave Shield d.t.shi...@liverpool.ac.uk said: DS That's exactly the problem that contexts were designed to address. Quick additional notes to the topic: 1) does the software on host1 allow setting contextEngineIDs instead of contextnames? 2) any chance you can get the software provider for host1 to fix their v3 implementation so they'll support contextNames? 3) The other way to do it is to have host2 run with multiple IP addresses where each one has a separate attached snmpd instance attached to just that IP address with specific configuration to proxy to the remote address. This is, unfortunately, very ugly and won't scale but it would at least work. Whoops... you could also do it using different ports, which would be simpler and I bet your software at least allows you to specify the port number? It'll still won't scale well unless host2 has lots of memory. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Response size needed to get too big error response
On Mon, 17 Jan 2011 11:15:34 +0100, JORDI LOPEZ jordi.lo...@imagoscreens.com said: JL I gather from your answer that there is no easy way to limit the JL output response buffer in net-snmp, is it? Not via configuration, no. You can do it by not sending big requests to the agent :-) -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Monitoring CPU steal?
On Fri, 14 Jan 2011 11:29:43 -0800, Krisztian Mizser kmiz...@scea.com said: KM However, the CPU steal parameter I was mainly interested in should be KM in the UCD-SNMP MIB (under systemStats) which is as far as I know KM maintained by the net-snmp project :) What would be the way to get KM that MIB amended and the extra OID implemented? Submit a patch to our patch tracker with a patch to the MIB and a patch to the code! That's about it. But, make sure you don't break backwards compatibility. This means you can't modify the existing definitions, but appending new ones is perfectly legal. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Pass the port number to an extension command in snmpd.conf
VC pass_persist .1.3.6.1.4.1.1206 /usr/bin/custom_app 5200 VC What I want to do is pass the port number that the request came in on to VC custom_app as a parameter, instead of 5200 above. Unfortunately, you can't do that. In fact, the transport system is designed *not* to pass that type of information all over the place. And although a number of use cases for wanting it may be valid, in the general case it's actually problematic. There are times, for instance, when there is no port number as a request may have come in over a transport that doesn't have one (eg, via AgentX, via the disman event-mib support, via appletalk, ...). So we don't generally pass the transport address that received the information down into the lower layers because it's not really safe to assume you can get it. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Monitoring CPU steal?
On Thu, 13 Jan 2011 11:01:19 -0800, Krisztian Mizser kmiz...@scea.com said: KM Pardon my ignorance, but who's responsible for changing the MIBs to KM support new features as technology advances? That's ok! MIBs that exist in the enterprise space are private, or appropriately, controlled by the author. This is the case for all the MIBs under the enterprise tree (like where net-snmp has a mib node it controls everything else, as does hp, sun, linksys, etc...). Then the IETF controls MIBs that are published in the standardized RFCs. To get them updated it takes a fairly complicated process to get multiple vendors, etc, to agree on the standard way to do it. No one, that I know of, has put forth the effort to get the standardized host resources mib updated with modern notions like multiple cores, etc. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Response size needed to get too big error response
On Wed, 12 Jan 2011 13:42:09 +0100, JORDI LOPEZ jordi.lo...@imagoscreens.com said: JL Actually I'm getting +7000 bytes responses without problems but, I JL must pass a set of conformance tests and one of them is sending a JL tooBig error if responses are bigger than 1500 bytes. Well... the Net-SNMP agent is limited by memory mostly. Ideally, yes we should have a tooBig response at some point but we don't. It's a feature or a bug depending on how you think about it :-) -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Convert SNMPv1 traps to SNMPv3
KK We have a requirement of SNMPv3 communications on our network. Yay! KK We have recently acquired some software from a vendor that currently KK only supports v1 traps. Boo! KK My plan was to have it send to the loopback or some other secondary KK IP and have a Perl script receive the trap and recode it into V3 and KK send it to the final destination. KK Is there any mechanism in Net-SNMP for this already? Has anyone KK seen such a program in the wild? Does anyone have a better KK solution? Good news! The solution is already available to you. Yes, sending them through the loopback to a local application and having that re-encode it is the right thing to do. The more recent versions of the snmptrapd application are able to forward things. The bad news is that it's forwarding things using the exact same version as the original (which isn't really as helpful as I thought it was). However, there is still a solution. There is a special agentx target that will forward things through the agentx protocol. So, until there is a better forwarding option here's a hack that should work: lo agentx device-snmpd -- snmptrapd --- net-snmp snmpd And then have 'trapsess' directives in the snmpd.conf file for the net-snmp snmpd agent to redirect those into snmpv3 traps. (in fact, you have it passed on to multiple locations by setting multiple trap destinations as well). Anyway, this would require a net-snmp snmpd running on the device too (but you could build a fairly stripped down one), and it'll obviously have to run on a different port and be an agentx master agent. But it should actually work! hack hack hack -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Objects for huge configuration on snmpd.
hs I would like to perform an huge configuration on NET-SNMP agent hs (snmpd), using Set PDUs carried by SNMP messages. I would like to use hs the HOST RESOURCES MIB for that, but it does not contain much hs ReadWrite objects. hsCan someone show me what are the MIBs used to configure snmpd my hs means of SNMP messages? In effect, I'm looking for objects that can be hs settled using messages, not directives. A large number of important objects are not writable, unfortunately. SNMP configuration does work quite well for controlling the SNMP aspects of a device itself (access control settings, where to send traps too..), along with a number of other basic network things (routing tables, etc). But much of a device's configuration is somewhat proprietary and OS dependent and can't be set over SNMP. If you're looking for things, I'd start by reading the mibs in the mibs directory and finding the ones that have writable objects you're interested in and then seeing if our agent supports them. -- Wes Hardaker Cobham Analytic Solutions -- Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Problem in snmp_synch_response
RK I am trying to send SNMP GET. RK When I use int status = snmp_synch_response(ss, pdu, response); RK status is 1 and response in NULL. My OID, Destination IP addresss and RK community name all are correct. RK I think packet is not reaching Destination. If it works with snmpget (which is based on the Net-SNMP library) and not your code, then it's likely how your code is calling the library. That'd be step one: narrowing down that you can pass the same parameters to snmpget (or snmpwalk) and ensuring it works that way. -- Wes Hardaker Cobham Analytic Solutions -- Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.6.1.rc2 available for testing
Get it at: https://sourceforge.net/projects/net-snmp/files/net-snmp/5.6.1-pre-releases/ This should be the final release-candidate before 5.6.1 early next week, assuming no show-stoppers to get in the way. Changes: V5.6.rc1 - V5.6.1.rc2 2010-12-29 01:41 hardaker * configure: autoconf using the right version 2010-12-29 01:40 hardaker * FAQ, README, configure, configure.ac, dist/Makefile, dist/net-snmp.spec: Version number update 2010-12-29 01:37 hardaker * agent/mibgroup/agentx/protocol.c: NEWS: snmpd: Patch 3141462: from fenner: fix agentx subagent issues with multiple-object requests 2010-12-29 01:33 hardaker * snmplib/vacm.c: NEWS: snmpd: Patch from Niels to fix VACM persistant storage. 2010-12-21 16:33 hardaker * CHANGES: fixed the NEWS file to mention 5.6.1 instead of 5.7 2010-12-21 16:32 hardaker * NEWS: fixed the NEWS file to mention 5.6.1 instead of 5.7 2010-12-21 15:50 hardaker * CHANGES: version update -- Wes Hardaker Cobham Analytic Solutions -- Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: delay in receiving cold start trap from net-snmpd daemon..
ma I am invoking the net snmpd daemon in one of my startup script as follows: ma snmpd -f -c /etc/snmpd.conf ma soon after this my process executes which registers itself as a snmp ma subagent and sends a version 2 trap. I have configured ip address for ma trap2sink in snmpd.conf. ma What i am observing is that on bootup, i am not seeing my version 2 trap. Do this in slow sequence: 1) start snmpd 2) wait for the coldStart trap 3) wait 5 seconds 4) then start your application that sends a trap through the subagent 5) time how long until your trap arrives I suspect what's happening is that your subagent is trying to register too fast and the snmpd agent isn't accepting registrations yet. So 30 seconds later the subagent tries again and connects. But it's a guess. A debugger may be necessary here :-) -- Wes Hardaker Cobham Analytic Solutions -- Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Fwd: Re: Net-SNMP 5.6.rc1 available for testing
On Wed, 22 Dec 2010 09:54:13 +0600, Mishustin Kirill mishus...@eltex.nsk.ru said: The issue you describe is most likely completely independent of Net-SNMP. MK It looks like it's dependent. Code, that was working perfectly with MK Net-SNMP 5.4.2.1, after being transfered to 5.5(without a single change) MK started to have problems with threads, same as Kishore described. MK Threads just stop. Well, you're trying to mix threading into an application stack (Net-SNMP) that is *not* thread safe. When you do this a simple version change could very well produce entirely different behavior just because of timing delays in code execution as new things are added (or removed) from the calling sequences. So though it may *look* dependent on the version number, that doesn't mean it's the codes fault. Well... it *is* the codes fault since *no* version of Net-SNMP is safe to use with threads on the agent side of things. -- Wes Hardaker Cobham Analytic Solutions -- Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Net-SNMP 5.6.rc1 available for testing
We've released Net-SNMP 5.6.1.rc1 which contains bug fixes over the 5.6 release. Please give it a whirl and let us know how it works for you! https://sourceforge.net/projects/net-snmp/files/net-snmp/5.6.1-pre-releases/ Note: the NEWS file in the .tar.gz and .zip files list 5.7; they should say (but don't): *5.6.1* General: - Many Bug Fixes (see the CHANGES and ChangeLog files for full details) -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: snmpv3 context question
I have a binary that is collecting stats from this agent on port 1161 and another running on port 161. I figured this may be because both the agents use default context, so to the agent with the above config I tried adding context based on an earlier e-mail thread as below. If you have two agents on the same machine you can use contexts to attach them to a single port, but not just by changing the snmpd.conf file. You'd need to: 1) run the second agent as a sub-agent to the first (on port 161) if the second agent supports running as agentX instead (which it will if you're using our agent). The second agent will need to register it's information using a non-default context. 2) Keep one agent running on both ports and proxy to the second agent from the first using a context. This is discussed in the proxy section of the snmpd.conf manual page. -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: mib structure subtable problem
On Tue, 21 Dec 2010 10:47:10 +0100, Joel Hansell joel.hans...@gmail.com said: JH Please don't put a table within a table. I'm pretty sure it's not a JH legal MIB construct, and it would certainly break a lot of things. For the record: you're right, it's not legal :-) -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Problem in init_snmp in visual c++ (and Qt)
init_snmp(foo) bootstraps the net-snmp library. It's very required. The foo argument names the application, and most specifically tells it to look for foo.conf files. -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: Traphandle for multiple traps -sometimes drops or delay
On Sun, 12 Dec 2010 11:00:19 +0800, Sateesh Hegde sateesh.he...@gmail.com said: SH What I have seen is that either some traps are dropped or a long delay in SH processing. I have a very high volume of incoming traps. Would appreciate SH your advise. My best guess is that the traps are coming in faster than your handles can be executed. Embedded perl would certainly speed things up because it won't require the execution of an external application. You might want to see the snmp.conf manual pages on the clientRecvBuf. Setting this up higher might help cache more of the incoming traps. -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: help :- Problems with snmp agent NetSNMP-5.5 version while creating/spawning new thread (using pthread library interface)
On Tue, 21 Dec 2010 17:31:22 +0530, Borra, Kishore Babu kishorebabu.bo...@te.com said: BKB Still I haven't got any info on this. It would be good, if there is BKB atleast some view point on the issue mentioned. I've noticed you've sent your questions about once a day to the list. Please refrain from doing that and send them just once. The very kind people that are answering questions for free aren't able to do so every day (because we're not being paid!). Send your questions only once and wait. Continuing to send the multiple times will only result in being banned from the list (which we've fortunately never had to do yet because most people understand the above request). -- Wes Hardaker Cobham Analytic Solutions -- Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
Re: cmnMacChangedNotification trap not triggering traphandle
On Wed, 8 Dec 2010 09:09:18 -0500, James Donn james...@gmail.com said: JD Is there a way to trace a single trap OID? Run snmptrapd with -d -Ddump,snmptrapd which should help at least... -- Wes Hardaker Cobham Analytic Solutions -- Oracle to DB2 Conversion Guide: Learn learn about native support for PL/SQL, new data types, scalar functions, improved concurrency, built-in packages, OCI, SQL*Plus, data movement tools, best practices and more. http://p.sf.net/sfu/oracle-sfdev2dev ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users