Re: DTLS trap not sending or being recieved.

2020-04-03 Thread Anders Wallin
Hi Jason, There are some bugs in DTLS, but at least I get traps on the latest 5.8 (master branch). I append a tarball of the config files I used. Regards Anders Wallin On Thu, Apr 2, 2020 at 8:12 PM Jason Farrar wrote: > We're attempting to receive DTLS Traps with our own softwa

Re: Adding timestamp in snmpd.log

2020-03-20 Thread Anders Wallin
It's explained in the manual, see https://linux.die.net/man/1/snmpcmd Anders Wallin On Fri, Mar 20, 2020 at 8:03 AM Krishna Vivek Vitta < krishna.vivekvi...@citrix.com> wrote: > Hi Anders > > > > Is there a mechanism to enable/control log level ? What are the options &

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2020-01-07 Thread Anders Wallin
Hi Bart, this is a good start, but we also need to add code for the newer version of TLS if we should apply to the RFC's. For the moment I don't have any time to work on it. The DTLS/TLS stuff also have some major bugs/design issues that needs to be fixed. Regards Anders Wallin On S

Re: Adding timestamp in snmpd.log

2019-12-02 Thread Anders Wallin
on't need the "[snmp]" If you want to set it by default you need to dig into the net-snmp code > > > Is there option as part of execution in snmpd or is there any change that > can be included in source code ? > > > > > > > > Thank you > &

Re: Adding timestamp in snmpd.log

2019-11-29 Thread Anders Wallin
add "[snmp] logTimestamp 1" in snmpd.conf Regards Anders Wallin On Fri, Nov 29, 2019 at 3:57 PM Krishna Vivek Vitta < krishna.vivekvi...@citrix.com> wrote: > Hi team, > > > > We have a snmpd agent running in a Freebsd box. > > > > The f

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2019-11-27 Thread Anders Wallin
Hi Larry, I see the same problem! You should think more then twice before using TLS/DTLS. The code is full of bugs and design issues (like sending traps before checking hostnames etc) and it's using deprecated version of TLS. Regards Anders Wallin On Wed, Nov 27, 2019 at 9:33 PM Larry

Re: How to add SNMP-TSM-MIB to snmpd

2019-11-14 Thread Anders Wallin
Hi Larry, you need to use "-v 3", there is no TLS support in "2c" Regards Anders Wallin On Thu, Nov 14, 2019 at 9:18 PM Larry Hayes wrote: > I am using 5.8.r0 net-snmp. > > I have build the net-snmp library and snmpd with the flags for TSM: > > &g

Re: How to reduce agent x reconnect time

2019-09-06 Thread Anders Wallin
see https://sourceforge.net/p/net-snmp/bugs/2926/ Anders Wallin On Sat, Sep 7, 2019 at 6:39 AM Deepak Sachan wrote: > Hi all > I am using 5.7.2 in my application. After made any change in snmpd.conf I > have to restart agent to reread the snmpd.conf. after restarting it shows -

Re: Re: Re: snmptrap v3 how to specify source IP

2019-05-27 Thread Anders Wallin
o dig into the issue later this week.... Regards Anders Wallin On Sat, May 25, 2019 at 5:13 AM ww wrote: > Hi,Anders > > I am Chinese,and the website was blocked by the government. > You know the "996.icu".. > When I login the website,it will prompt that: > The

Re: Re: snmptrap v3 how to specify source IP

2019-05-24 Thread Anders Wallin
changing the route src settings. > For example, if you have eth0 in 192.168.0.0/24 and eth1 in 192.168.1.0/24 > and you want any traffic to > have source of 192.168.0.0/24, then change eth1 subnet route like: > > ip route change 192.168.1.0/24 dev eth1 src 192.168.0.1 > > if

Re: snmptrap v3 how to specify source IP

2019-05-22 Thread Anders Wallin
You can use "clientaddr" in snmp.conf or snmpd.conf, https://linux.die.net/man/5/snmp.conf In 5.8 you also have the possibility to use "-s" with trapsess, but I did not found any documentation on it. but check the test code, testing/fulltests/default/T184trapsesssource_si

Re: Trap server address in snmpd.conf

2019-05-20 Thread Anders Wallin
I think that syntax will give you the octal value of "010", which will be decimal 8, so it will try to send to 192.168.1.8 Regards Anders Wallin On Mon, May 20, 2019 at 3:58 PM Deepak Sachan wrote: > Heĺlo > In snmpd.conf trap server address is defined as > Trap2sink 192.

Re: NET-SNMP 5.7.2 - SNMPv3 inform does not work

2019-05-07 Thread Anders Wallin
" to get debug messages. It will be a lot of messages so I suggest to log it to file, e.g. "snmtrapd -Lf /tmp/smptrapd.log -DALL -d .." Regards Anders Wallin On Sun, May 5, 2019 at 2:41 PM Mathew wrote: > Hi Team, > > I am trying to get SNMPv3 informs to work with Ci

Re: Problems upgrading 5.7.3 to 5.8

2019-03-07 Thread Anders Wallin
Hi Dave, check if the snmpd log file gives you any hint Regards Anders Wallin On Thu, Mar 7, 2019 at 11:20 PM Dave C wrote: > Hello, > > I have a device (debien/arm) that has been running fine under > net-snmp 5.7.3. An external audit recommended upgrading to 5.8, so wanting

Re: snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Anders Wallin
this case, but I have some other tests using this Regarding the RFC's I have no clue Regards Anders Wallin On Thu, Feb 28, 2019 at 6:24 PM Dag Bakke wrote: > Hi Anders. > > Thank you for answering. > > Is the engineID actually ever *negotiated*? > I had the understanding

Re: snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Anders Wallin
but Junos does not set it at all engineID= Regards Anders Wallin On Thu, Feb 28, 2019 at 2:02 PM Dag B wrote: > Hi. > > I am trying to convince snmptrapd to receive snmp v3 informs from Junos > (Juniper Networks' BSD-variant on switches and firewalls). The idea was > to

Re: AgentX reconnect time

2019-02-22 Thread Anders Wallin
https://sourceforge.net/p/net-snmp/bugs/2926/ Anders Wallin On Fri, Feb 22, 2019 at 2:08 PM Mostafa Kassem wrote: > Thank you, sir. You are a gentleman and a scholar. > > > > I am using 5.8 > > > > All the best, > > > > Mostafa > > > > *From:*

Re: AgentX reconnect time

2019-02-21 Thread Anders Wallin
It's not working in 5.7.3 either and w/o the possibility to us "-c" option for the agent. So it's broken!! Regards Anders Wallin On Fri, Feb 22, 2019 at 7:44 AM Anders Wallin wrote: > Hi Mostafa, > > which version of net-snmp are you using? > In 5.8 you can

Re: AgentX reconnect time

2019-02-21 Thread Anders Wallin
to the agentx master agent (/var/agentx/master): 2019-02-22 07:41:54 Warning: Failed to connect to the agentx master agent (/var/agentx/master): I will check 5.7.3 and be back with more information Regards Anders Wallin On Thu, Feb 21, 2019 at 10:43 PM Mostafa Kassem wrote: > Thank you

Re: AgentX reconnect time

2019-02-20 Thread Anders Wallin
Hi Mostafa, you need to set it in the config file for your agentx(e.g agentx.conf), not in snmpd.conf Regards Anders Wallin On Thu, Feb 21, 2019 at 1:22 AM Mostafa Kassem wrote: > When we restart the snmpd, the agent detects that the snmpd is no longer > running and disconnects, wa

Invalid default target

2018-11-05 Thread Anders Wallin
Using "trapsess" in snmpd config file gives "Invalid default target" messages in the logfiles Simple test; $ export SNMP_SAVE_TMPDIR=yes $ ./RUNFULLTESTS -g default -r T031snmpv3dynamictrap_simple $ grep Invalid /tmp/snmp-test-T031snmpv3dynamictrap_simple-*/snmp*.log /tmp/snmp-test-T031snmpv3dynami

Re: Cannot inject 'cache_handler' before 'table_container

2018-04-26 Thread Anders Wallin
It was a bug in snmpTlstmCertToTSNTable.c >From dbed5e5687c942381c5e7cc0dfddf1cc30904f14 Mon Sep 17 00:00:00 2001 Message-Id: < dbed5e5687c942381c5e7cc0dfddf1cc30904f14.1524756095.git.walli...@gmail.com> From: Anders Wallin Date: Thu, 26 Apr 2018 17:21:21 +0200 Subject: [PATCH 1/1]

Cannot inject 'cache_handler' before 'table_container

2018-04-26 Thread Anders Wallin
handlers are: bulk_to_next serialize scalar instance snmpTlstmCertToTSNCount Turning on AgentX master support. NET-SNMP version 5.8.pre2 Regards Anders Wallin -- Check out the vibrant tech community on one