Re: A question on net-snmp-5.4.3

2010-12-01 Thread Wes Hardaker
Generally the Net-SNMP parser tries to be more lenient than strict. Mostly because we like to try and load and use even broken MIBs to help the end-users. However, MIB developers are very encouraged to make use of a strict checker like smilint from the libsmi package when writing MIBs. -- Wes H

A question on net-snmp-5.4.3

2010-12-01 Thread Hu Ruoheng
Dear all: The function getVarbinds(in parse.c) do not check the VB correct or not, why? Thanks. -- Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get m

RE: question on net-snmp privacy

2010-02-17 Thread Szudy Brett-CBS035
17, 2010 3:19 AM To: Szudy Brett-CBS035 Cc: Net-SNMP coders Subject: Re: question on net-snmp privacy [ First - *please* don't mail me privately, without copying any responses to the mailing list. I don't have the time or inclination to offer private, unpaid, SNMP c

Re: question on net-snmp privacy

2010-02-17 Thread Dave Shield
[ First - *please* don't mail me privately, without copying any responses to the mailing list. I don't have the time or inclination to offer private, unpaid, SNMP consultancy. Keep discussions to the list, where others can both learn and offer advice. Thanks. ] On 16 F

Re: question on net-snmp privacy

2010-02-16 Thread Wes Hardaker
> On Tue, 16 Feb 2010 14:45:50 +, Dave Shield > said: DS> This is a local policy decision - it's not inherent in the SNMP protocol. And to make sure you understand completely: You can also configure the VACM to only allow authenticated *and* encrypted packets. Note that the USM/VA

Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 16 February 2010 14:11, Bell, Adam wrote: > So if vacm is enabled - it should reject unauthenticated read and writes? The agent should accept/reject requests based on whatever the access control configuration specifies. If VACM is configured to allow unauthenticated requests, then the age

RE: question on net-snmp privacy

2010-02-16 Thread Bell, Adam
Bell, Adam Cc: Szudy Brett-CBS035; [email protected] Subject: Re: question on net-snmp privacy On 16 February 2010 13:41, Bell, Adam wrote: > That is a huge security hole.  In fact knowing this, we will have to > add some kind of extension to explicitely disallow Any pac

RE: question on net-snmp privacy

2010-02-16 Thread Bell, Adam
Subject: Re: question on net-snmp privacy On 15 February 2010 23:48, Szudy Brett-CBS035 wrote: >  It > looks like in the code that in a message received the sec level bits > only matter for validation when they are set --in ot

Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 16 February 2010 13:41, Bell, Adam wrote: > That is a huge security hole.  In fact knowing this, we will have to add some > kind of extension to explicitely disallow Any packet that is not > authenticated. Why? If you configure the agent using "rouser" then this will reject any unauthent

Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 15 February 2010 23:48, Szudy Brett-CBS035 wrote: >  It looks > like in > the code that in a message received the sec level bits only matter for > validation when they are set --in other words, privacy & auth protocols > are only

question on net-snmp privacy

2010-02-15 Thread Szudy Brett-CBS035
I have a question, and I found it asked before but not answered satisfactorily. Can anyone shed some light on this for me? It looks like in the code that in a message received the sec level bits only matter for validation when they are set --in other words, privacy & auth protocols are only checked

Re: question on net-snmp

2007-09-17 Thread Dave Shield
On 17/09/2007, Ashwin Gokhale <[EMAIL PROTECTED]> wrote: > I'm using net-snmp5.4.1 for implementing/supporting > . both tables and scalars, > . I was wondering if it is possible to use the > same set of iterator (get/get-next) and handler > functions for multiple OIDs. The iterator hel

question on net-snmp

2007-09-17 Thread Ashwin Gokhale
Hi, I'm using net-snmp5.4.1 (with AgentX/SubAgent feature turned on) and mib2c for implementing/supporting an Enterprise MIB. My MIB has both tables and scalars, and the managed data resides outside the agent's context. I was wondering if it is possible to use the same set of iterator (get/get-nex