Re: Unstable tests

2018-04-05 Thread Lee 
On 4/5/18, Keith Mendoza  wrote:
> So again, at what point do we stop adding code to net-snmp because
> ISP's are messing around as if they're doing us a favor by letting us
> use their services?

Since people don't read the docs, how about adding a test to see if
dns is borked; if it is link to a faq entry for possible ways to fix
it.

verizon 'opt out of dns assistance' link:
  
https://www.verizon.com/support/residential/internet/home-network/settings/opt-out-of-dns-assist

Regards,
Lee

> On Wed, Apr 4, 2018 at 7:13 PM, Bart Van Assche  wrote:
>> On 04/04/18 09:30, Keith Mendoza wrote:
>>>
>>> I actually found no.such.address in line 79 of T070com2sec_simple.
>>> That host has been hijacked by barefruit.co.uk who "generates highly
>>> targeted traffic for ISPs by replacing DNS and HTTP errors with
>>> relevant advertising"; which is now causing the test case to fail.
>>> Attempting to talk HTTP to the IP gave the the impression that either
>>> my ISP is cahoots with this company; or they're intercepting the IP
>>> back to their advertisement page. On the upside, Google's and
>>> cloudflare's DNS are not resolving; but, that still means point your
>>> network to use those nameservers :(
>>
>>
>> That means that your ISP is doing something dubious. Anyway, we could add
>> a
>> workaround for broken ISP DNS configurations using the same approach as
>> for
>> the domain names onea.net-snmp.org and twoa.net-snmp.org.
>>
>> Bart.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Re: Does Net-SNMP support AES192 or AES256?

2018-04-05 Thread Keith Mendoza 
Simon,
Those options have to be enabled in the configure options. I suggest
building with the following configure options:
--with-transports="DTLSUDP" --with-security-modules="tsm"

There might be other configure options that you need to make it work.

Just note though that SNMPv3 RFC _does not_ specify AES192 and AES256;
they specified some older algorithms that were "latest and greatest"
at the time it was being drafted :(

Thanks,
Keith
Thanks,
Keith


On Thu, Apr 5, 2018 at 1:54 PM, Simon Chamlian  wrote:
>
>
>
> Hi,
>
> Does Net-SNMP support AES192 or AES256?
>
> According to this link
>
> http://www.net-snmp.org/wiki/index.php/Strong_Authentication_or_Encryption
>
> The short answer is Yes, starting with release 5.8 AES193 and AES256 are an
> optional configure option.
>
> So I downloaded version 5.8.pre2 and tried:
>
>
>   createUser user2  SHA "passwrd-00" AES192 "default-00"
>   rwuser   user2
>
>   createUser user3  SHA "passwrd-00" AES256 "default-00"
>   rwuser   user3
>
>
> Does not work. I get an error:
>   snmpd.conf: line 27: Error: unknown privProtocol
>   snmpd.conf: line 31: Error: unknown privProtocol
>
> Any insight will be highly appreciated.
>
> S.
>
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> Net-snmp-coders mailing list
> Net-snmp-coders@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Fwd: Does Net-SNMP support AES192 or AES256?

2018-04-05 Thread Simon Chamlian 
Hi,

Does Net-SNMP support AES192 or AES256?

According to this link

http://www.net-snmp.org/wiki/index.php/Strong_Authentication_or_Encryption

The short answer is Yes, starting with release 5.8 AES193 and AES256 are an
optional configure option.
So I downloaded version 5.8.pre2 and tried:


  createUser user2  SHA "passwrd-00" AES192 "default-00"
  rwuser   user2

  createUser user3  SHA "passwrd-00" AES256 "default-00"
  rwuser   user3


Does not work. I get an error:
  snmpd.conf: line 27: Error: unknown privProtocol
  snmpd.conf: line 31: Error: unknown privProtocol

Any insight will be highly appreciated.

S.
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

snmpd log file

2018-04-05 Thread Simon Chamlian 
Hi,

I am seeing some weird messages in the log file generated by snmpd.

Example:

Sending 194 bytes to UDP: [172.27.37.227]:60682->[172.27.42.214]:161
: 30 81 BF 02  01 03 30 0D  02 01 0A 02  02 05 C0 040.0.
0016: 01 01 02 01  03 04 2E 30  2C 04 0D 80  00 1F 88 80...0,...
0032: 23 29 E6 83  5A C5 2C 68  02 01 0A 02  01 48 04 05#)..Z.,h.H..
0048: 41 64 6D 69  6E 04 0C 8D  14 AF 4A EF  E3 C7 E0 13hello.J.
0064: 8D 33 96 04  00 30 7B 04  0D 80 00 1F  88 80 23 29.3...0{...#)
0080: E6 83 5A C5  2C 68 04 00  A2 68 02 01  0A 02 01 00..Z.,h...h..
0096: 02 01 00 30  5D 30 17 06  0F 2B 06 01  04 01 A2 70...0]0...+.p
0112: 02 03 04 01  01 01 02 08  40 04 C0 03  01 FD 30 17@.0.
0128: 06 0F 2B 06  01 04 01 A2  70 02 03 04  01 01 01 02..+.p...
0144: 08 40 04 C0  03 01 FD 30  13 06 0F 2B  06 01 04 01.@.0...+
0160: A2 70 02 03  04 01 01 01  03 08 04 00  30 14 06 0F.p..0...
0176: 2B 06 01 04  01 A2 70 02  03 04 01 01  01 04 08 02+.p.
0192: 01 02 ..


Received 192 byte packet from UDP:
[172.27.37.227]:60682->[172.27.42.214]:161



How can I disable these messages?

I cannot even find them in source code to comment them out.

Thanks,
S
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Re: Unstable tests

2018-04-05 Thread Keith Mendoza 
So again, at what point do we stop adding code to net-snmp because
ISP's are messing around as if they're doing us a favor by letting us
use their services?

Thanks,
Keith
Thanks,
Keith


On Wed, Apr 4, 2018 at 7:13 PM, Bart Van Assche  wrote:
> On 04/04/18 09:30, Keith Mendoza wrote:
>>
>> I actually found no.such.address in line 79 of T070com2sec_simple.
>> That host has been hijacked by barefruit.co.uk who "generates highly
>> targeted traffic for ISPs by replacing DNS and HTTP errors with
>> relevant advertising"; which is now causing the test case to fail.
>> Attempting to talk HTTP to the IP gave the the impression that either
>> my ISP is cahoots with this company; or they're intercepting the IP
>> back to their advertisement page. On the upside, Google's and
>> cloudflare's DNS are not resolving; but, that still means point your
>> network to use those nameservers :(
>
>
> That means that your ISP is doing something dubious. Anyway, we could add a
> workaround for broken ISP DNS configurations using the same approach as for
> the domain names onea.net-snmp.org and twoa.net-snmp.org.
>
> Bart.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

SET phases for multiple varbind on table objects

2018-04-05 Thread Madhusudhana R 
Hi Coders,

I need to know all possible SET phases for multiple varbind on table objects.

MODE_SET_RESERVE10
MODE_SET_RESERVE21
MODE_SET_ACTION2
MODE_SET_COMMIT  3
MODE_SET_FREE 4
MODE_SET_UNDO   5

On scalar objects, for example 3 varbind in single request follows :  reserve1 
-> reserve1 -> reserve1  | reserve2-> reserve2-> reserve2 | 
setaction->setaction->setaction | setcommit-> setcommit->setcommit

The above is for successful SET request on scalar objects.

I need to know the phases of SET on table objects for 3 varbind in single 
request.

Kindly help on this.

Regards,
Madhu

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders