Re: Net-SNMP 5.10.pre1 released for testing

2025-03-19 Thread Craig Small via Net-snmp-coders
On Sat, 8 Mar 2025 at 10:50, Wes Hardaker via Net-snmp-coders < net-snmp-coders@lists.sourceforge.net> wrote: > only be used for bug fixes at this point. Please give 5.10.pre1 a > whirl -- it certainly won't be perfect yet. > I've built 5.10~pre1 using the Debian package setup, was a few patches

Re: (Previous email had a weird formatting) Custom Mib returning wrong values when Magic number is larger than 255

2024-10-11 Thread Craig Small via Net-snmp-coders
ID entries and > would love to get any help on this issue. > > Is there another way to use more than 255 custom OID's? > > Thank You to anyone looking into this matter. > > - Neeraj > > On Mon, 29 Jul 2024 at 14:26, Craig Small wrote: > >> On Fri, 12 Jul 2024

Re: Reconfigure snmpd listening ports

2024-09-18 Thread Craig Small via Net-snmp-coders
On Mon, 16 Sept 2024 at 22:44, Teus Benschop wrote: > The daemon kept the same ports open as before editing the snmpd.conf even > in case some agentaddress entries were removed from snmpd.conf. > Some changes to the configuration file can be enabled with a reload or HUP and some things need a com

Re: (Previous email had a weird formatting) Custom Mib returning wrong values when Magic number is larger than 255

2024-07-29 Thread Craig Small via Net-snmp-coders
On Fri, 12 Jul 2024 at 08:31, Neeraj Bansal wrote: > We recompile everything and install no problem, but instead of fixing our > problem it caused net-snmp-5.9.3 to not be able to start. The error it gives > is: Bad user id, which could be a red herring. example below: > [root@testboard: /root#

Re: Unable to compile net-snmp due to netlink API change

2024-04-03 Thread Craig Small via Net-snmp-coders
On Wed, 3 Apr 2024 at 16:05, Bart Van Assche wrote: > Something else must be going on. This is the code from configure.ac that > checks for libnl-3: > > if test "x$ac_cv_header_netlink_netlink_h" = xyes; then > AC_EGREP_HEADER([nl_socket_free], [netlink/socket.h], >

Re: Unable to compile net-snmp due to netlink API change

2024-04-02 Thread Craig Small via Net-snmp-coders
On Wed, 3 Apr 2024 at 02:19, Bart Van Assche wrote: > Can you please check the configure script logs to see why libnl-3 was > not detected? > libnl-3 was detected: configure:27875: $PKG_CONFIG --exists --print-errors "libnl-3.0" configure:27878: $? = 0 configure:27936: result: yes But libnl-rout

Unable to compile net-snmp due to netlink API change

2024-04-02 Thread Craig Small via Net-snmp-coders
3 and libnl-route-3 development packages and remove --without-nl from the configure options if necessary. | ^ - Craig -- Craig Small https://dropbear.xyz/ csmall at : dropbear.xyz Debian GNU/Linuxhttps://www.debian.org/ <http://www.debian.org/> csmall at : deb

Updating the LM-SENSORS MIB (Issue #752)

2024-03-26 Thread Craig Small via Net-snmp-coders
ub.com/net-snmp/net-snmp/issues/752 -- Craig Small https://dropbear.xyz/ csmall at : dropbear.xyz Debian GNU/Linuxhttps://www.debian.org/ <http://www.debian.org/> csmall at : debian.org GPG fingerprint: 5D2F B320 B825 D939 04D2 0519 393

Re: Getting listening port number while processing request

2023-09-08 Thread Craig Small via Net-snmp-coders
On Tue, 5 Sept 2023 at 22:16, Teus Benschop wrote: > I could not find a way to display the port number, also not using the > various debug tokens. > I ran snmpd as snmpd -f -Le -Dnetsnmp_udp 2000,3000 and got netsnmp_udp: recvfrom fd 6 got 41 bytes (from UDP: [127.0.0.1]:36600->[127.0.0.1]:2000)

Re: Net-SNMP 5.9.4.rc1 available for final testing

2023-07-12 Thread Craig Small via Net-snmp-coders
I asked the same thing a few weeks ago. Wes said he put the key on the mit servers. I haven't checked that (or rc1 either). Both are on my to-do list. - Craig On Wed, 12 July 2023, 19:12 Alexander Bergmann via Net-snmp-coders, < net-snmp-coders@lists.sourceforge.net> wrote: > Hi Wes / everyon

Re: snmptrap v3 authentication

2023-04-25 Thread Craig Small via Net-snmp-coders
On Sat, 15 Apr 2023 at 11:12, Simon Chamlian wrote: > > snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 > "" coldStart.0 > > I do receive the trap on my Trap Receiver even if I didn't specify a > Username and Authentication password in the MIB browser (on 172.27.37.227 )

Re: Diffie-Hellman Key

2022-09-06 Thread Craig Small via Net-snmp-coders
Hi Simon, My understanding is the only way of adding the key is with the snmpusm command. Except it doesn't work for me. $ snmpusm -v3 -u simon -l authPriv -a SHA1 -A simon-pass -x AES128 -X simon-priv localhost changekey simon snmpusm: Can't get diffie-helman exchange from the agent (maybe it

Security fixes in net-snmp 5.9.3

2022-07-28 Thread Craig Small
Craig -- Craig Small https://dropbear.xyz/ csmall at : dropbear.xyz Debian GNU/Linuxhttps://www.debian.org/ <http://www.debian.org/> csmall at : debian.org GPG fingerprint: 5D2F B320 B825 D939 04D2 0519 3938 F96B DF50 FEA5

Re: Integrating Debian patches

2022-07-25 Thread Craig Small
On Fri, 22 Jul 2022 at 17:54, Magnus Fromreide wrote: > 06_extramibs.patch - which adds the Gnome MIB - touches on something I have > pondering - how should a distribution add MIBs? > > On Debian we have this patch. > > On RedHat Net-SNMP ships one heap of MIBs and libsmi ships another, > slightl

Integrating Debian patches

2022-07-21 Thread Craig Small
hey're the easiest for me). I wasn't planning on sending all 43 and grouping some similar ones up, starting with the simplest/least controversial ones. - Craig 1: https://salsa.debian.org/debian/net-snmp/-/tree/master/debian/patches -- Craig Small https://dropbear.xyz/

Re: Net-SNMP 5.9.3 published

2022-07-19 Thread Craig Small
On Thu, 14 Jul 2022 at 07:42, Wes Hardaker via Net-snmp-coders < net-snmp-coders@lists.sourceforge.net> wrote: > > So a 5.9.3 release has now been pushed to: > Debian net-snmp packages 5.9.3-1 have also been built and uploaded. No major issues, I'm hoping to reduce some of the patches I'm carrying

Re: snmpv3 poll

2022-07-13 Thread Craig Small
On Thu, 14 Jul 2022 at 00:29, Paban Agarwalla wrote: > when we configure v3 users. Some of the algorithm combinations failed. > That's an odd result. It's like the authentication key length is having an effect on the authentication key length you can use. If the auth key is smaller than the priv

Re: publishing 5.9.3 immediately

2022-07-05 Thread Craig Small
On Wed, 6 Jul 2022 at 01:54, Bart Van Assche wrote: > How about also fixing the other two issues reported during the last 24 > hours by Craig before announcing 5.9.3.rc1? > While I am always happy to have fewer patches in the Debian source (and I'm going to try to get some more into the upstream)

Re: Securing snmpd.conf files

2022-06-14 Thread Craig Small
On Tue, 14 Jun 2022 at 21:12, Vivek Aditya wrote: > Is there a way to encrypt passwords in the snmpd.conf file? Currently, > when we open snmpd.conf file we can look at passwords in plaintext format, > is there a way to store those passwords in encrypted form. Does net-snmp > support any encrypti

Re: snmpwalk timeout

2022-05-05 Thread Craig Small
Hi, The default setup with 5 retries and 1 second delay would work if the function works across requests. My guess is that the third request cannot use the data from the first request. The timeline would be something like (with a second gap between each line) T0 - Request #1 - function #1 starts

Re: multiple subagent with same set of oid.

2022-04-26 Thread Craig Small
On Wed, 27 Apr 2022 at 12:30, Paban Agarwalla wrote: > Would you please share some examples of context? > > snmpd.examples has some good, well, examples but a way of using contexts for overlapping OIDs is below. This is for two agents using the proxy method as its easier to see the results. This

Re: Net-SNMP 5.9.2.pre1 published for testing

2022-04-12 Thread Craig Small
Hello again, The issue was tied up with libtool and how Debian's is slightly different. link_all_deplibs is set to no so you explicitly need to put the libraries. Anyway, the change was to add $(AGENTLIB) to the linker line for libnetsnmptrapd in apps/Makefile.in The result is I can Debian packa

Re: Net-SNMP 5.9.2.pre1 published for testing

2022-04-11 Thread Craig Small
On Thu, 7 Apr 2022 at 07:11, Craig Small wrote: > I'll run the source code through a standard Debian pbuilder and one with > OpenSSL v3 added as well to check it works with both versions. > Standard Debian sid pbuilder came up with this error below. convert_v1pdu_to_v2() and sen

Re: Net-SNMP 5.9.2.pre1 published for testing

2022-04-06 Thread Craig Small
On Wed, 6 Apr 2022, 10:09 Wes Hardaker via Net-snmp-coders, < net-snmp-coders@lists.sourceforge.net> wrote: > > Net-SNMP 5.9.2.pre1 has been published for testing as available at: > I can confirm that the compile issues with OpenSSL v3 are fixed with this. I'll run the source code through a stan

net-snmp and openssl v3

2022-03-22 Thread Craig Small
and might miss some subtle but important patch. - Craig 1: https://github.com/net-snmp/net-snmp/commits/V5-9-patches -- Craig Small https://dropbear.xyz/ csmall at : dropbear.xyz Debian GNU/Linuxhttps://www.debian.org/ <http://www.debian.org/> csmall at

Is snmptls still used?

2021-10-28 Thread Craig Small
ned on the Wiki either. - Craig -- Craig Small https://dropbear.xyz/ csmall at : dropbear.xyz Debian GNU/Linuxhttps://www.debian.org/ <http://www.debian.org/> csmall at : debian.org GPG fingerprint: 5D2F B320 B825 D939 04D2 051

Re: Varbind orfer in SNMP TRAP's

2021-10-28 Thread Craig Small
On Fri, 29 Oct 2021 at 05:14, Feroz wrote: > hi, > Is it necessary to maintain any specific order in SNMP TRAP for varbinds? > For the first two, yes. > e.g: "sysUpTime.0" should be the first one followed by "snmpTrapOID.0" > then the actual data varbinds. > RFC 1905[1] section 4.2.6: "The firs

Re: Difference between AES192 and AES192C

2021-09-20 Thread Craig Small
ion(3) dod(6) > internet(1) private(4) enterprise(1) cisco(9) > .1.3.6.1.4.1.14832.1.3 : iso(1) org(3) dod(6) internet(1) private(4) > enterprise(1) esoConsortiumMIB(14832) > > > > > On Thu, Sep 16, 2021 at 5:07 AM Craig Small wrote: > >> Hi Pushpa, >> It

Re: Difference between AES192 and AES192C

2021-09-15 Thread Craig Small
ol and use the same method for both values, but they don't. - Craig On Wed, 15 Sept 2021 at 15:44, Pushpa Thimmaiah wrote: > Hi Craig Small, > > Thank you . This is really helpful. > If AES192 and AES192C are AES standard from different entity then are > they interchan

Re: Difference between AES192 and AES192C

2021-09-14 Thread Craig Small
Hi Pushpa, As you have discovered, there are two AES192 standards. When you select AES192 (with no C) this is the IETF draft Blumenthal standard. When you select AES192C this is the Cisco "standard". What is the actual difference? As far as I can tell, it comes down to the OID used for some of

Re: Could be SNMP daemon ported in multi-threads mode?

2021-07-19 Thread Craig Small
On Mon, 19 Jul 2021, 20:28 Roberto A. Foglietta, < roberto.foglie...@gmail.com> wrote: > I have been reported that the bottleneck is due to the single-thread > nature of SNMP. > The bottleneck is about 1 SNMP call served per second. > That sounds like asynchronous SNMP calls. The delay is due to

Re: MIB search path

2021-03-25 Thread Craig Small
Hi Simon, net-snmp-config is a shell script that literally prints $HOME/.snmp/mibs snmpinform (or actually the snmp library) is a little more complicated with a bunch of overrides. So I'm trying to get what you see with: # HOME=/home/root snmpinform -v 2c -c public -m blahmib 127.0.0.1 1 blahoi

Re: Compiling Net-SNMP with TLS and DTLS Support

2021-02-28 Thread Craig Small
On Wed, 24 Feb 2021 at 01:59, Simon Chamlian wrote: > When these flags (--with-security-modules and --with-transports) are not > specified, what does snmpv3 uses by default? > The default set of security modules is defined in configure.d/config_modules_security_modules and is just usm. USM is th

Re: NOOB Question - Adding Enterprise MIBs to an Agent

2021-02-28 Thread Craig Small
On Fri, 26 Feb 2021 at 10:38, Michael Klett wrote: > We have decided to use Linux for our next project so I’m working on > learning Linux at the same time that I’m tasked with adding our Enterprise > MBs to the firmware of the new project. I have been Google-ing for days > and my Google-Fu is si

Re: snmp5.9 v3 issues with initial user.

2021-02-01 Thread Craig Small
The snmp create user command put this line in my /var/lib/snmp/snmpd.conf createUser myuser MD5 "my_password" DES "" I got in my logs: Feb 02 11:44:02 floyd snmpd[1401586]: Error: passphrase chosen is below the length requirements of the USM (min=8). Feb 02 11:44:02 floyd snmpd[1401586]: /var/lib/

Re: A simple C program which sends v2c informs do not make retries in case of unavailable destination

2021-01-27 Thread Craig Small
Hi, Maybe have a look at the source to snmptrap to see how its done there? snmp_send seems to be a fire and forget. You probably want snmp_synch_response or to look how it does the select, read and timeout functions and copy that. - Craig On Thu, 28 Jan 2021 at 01:35, wrote: > Hello! > >

Re: A manager using a single socket and multiple agents?

2021-01-10 Thread Craig Small
he end result is "all outbound UDP use same SRC > port". > > > On Wed, Jan 6, 2021, 5:28 AM Craig Small wrote: > >> On Wed, 6 Jan 2021 at 10:01, Ed Fair wrote: >> >>> Thanks for the reply. The Simple_Async_Application in your link uses >>> one

Re: A manager using a single socket and multiple agents?

2021-01-06 Thread Craig Small
On Wed, 6 Jan 2021 at 10:01, Ed Fair wrote: > Thanks for the reply. The Simple_Async_Application in your link uses one > session/socket/SRC port per agent. I've compiled and run this sample > successfully, but I haven't been able to modify it to use a single > session/socket/SRC port. > It migh

Re: A manager using a single socket and multiple agents?

2021-01-05 Thread Craig Small
Hi, Wouldn't asynchronous queries do what you need? See http://net-snmp.sourceforge.net/wiki/index.php/TUT:Simple_Async_Application I've written something similar but was using pysnmp and it seemed to do the job. The trick is you also have to make sure you don't hammer the agent; most agents ar

Re: net-snmp-5.5.0-2.x64.exe Questions

2020-12-01 Thread Craig Small
Hello Josh, I am only the Debian packager of net-snmp not the "owner" of the software. In fact it would be difficult to get one voice on the "owner" as there are many including several organisations. So, this is coming from a non-US citizen who hasn't written a line of net-snmp but has written ot

Re: Net-SNMP 5.9 release announcement

2020-08-21 Thread Craig Small
Hi, Even though the signature checks out, the archive seems to be corrupted. $ tar tfz ~/Downloads/net-snmp-5.9.tar.gz >/dev/null gzip: stdin: decompression OK, trailing garbage ignored tar: Child returned status 2 tar: Error is not recoverable: exiting now - Craig _

Re: Net-SNMP 5.9 release announcement

2020-08-21 Thread Craig Small
On Fri, 21 Aug 2020 at 20:11, Craig Small wrote: > gzip: stdin: decompression OK, trailing garbage ignored > tar: Child returned status 2 > tar: Error is not recoverable: exiting now I don't even know how vi does this, but: net-snmp-5.9/ci/perl.bat net-snmp-5.9/ci/build.sh gzip

Re: Disable snmpv2 and v1, and enable snmpv3.

2020-06-17 Thread Craig Small
On Wed, 17 Jun 2020 at 16:33, SURYA T S wrote: > Please help me to disable snmpv1 and v2 and enable only snmpv3. > Can we do this from snmpd.conf? > Just don't define any snmp v1/v2c (lines like rocommunity and rwcomunity) and use the SNMP user commands instead. > Observed NETSNMP_DISABLE_SNMPV

Re: snmptrapd SNMP V3 support

2020-06-10 Thread Craig Small
On Thu, 11 Jun 2020 at 04:13, Yefetluzzatto, Inbal wrote: > ../include/net-snmp/library/snmpAAL5PVCDomain.h:18:17: fatal error: atm.h: > No such file or directory > atm.h is a system library header. In Debian, you would find this in libatm1-dev package which you would need to have installed for n

tmpfs ignores

2020-05-26 Thread Craig Small
Hi, I'm following up Debian bug report 685877 The main issue is tmpfs is part of the HRFS_ignores array and so all tmpfs filesystems are ignored and not displayed. This was added by Niels Baggesen back in 2004 with commit 2dfdd7cb73ec8bc670888939568f2bfa49f73943 which seems to be just an update