Re: Enterprise subtree problem...

2007-06-05 Thread cnelson
... If I can see the subtree using snmptranslate, but not snmpwalk, ... As I understand it, snmptranslate processes the MIB files on your local system but snmpwalk talks to the remote agent. You can have MIB files for all sorts of MIBs that aren't implemented in the agent.

Does disman require IPv6?

2007-04-05 Thread cnelson
I'm trying to add DISMAN MIB support to an existing configuration, cross-compiling Net-SNMP v5.2.2 from Intel Linux to ARM Linux. I configure like this: export CROSS_COMPILE=arm-linux ac_cv_CAN_USE_SYSCTL=no \ export CFLAG=-I/opt/denx/arm/usr/include/linux ./configure --prefix=/usr \

Re: Does disman require IPv6?

2007-04-05 Thread cnelson
On 05/04/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Does disman require ipv6? No. Thanks. Or is pingCtrTable.h not sufficiently parameterized with #ifdef stuff to disable ipv6 when ipv6 isn't to be used? The DisMan code in general is

Re: Does disman require IPv6?

2007-04-05 Thread cnelson
On 05/04/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: ... Isn't the monitor directive part of disman? It's part of the DisMan Event MIB, yes. But that's only one of a collection of MIBs produced by the DisMan working group. That's what I really want. Then all you need is

Re: Monitoring disk usage

2007-03-27 Thread cnelson
On 23/03/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I can't get these traps to fire. Then again, when I try to walk dskTable, I get a failiure response so maybe that MIB isn't in my agent. But I tried with memTotalFree and nothing happens. /usr/share/snmpd/snmpd.conf contains:

Re: Monitoring disk usage

2007-03-23 Thread cnelson
On 22/03/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The other possibility would be to set up a monitor entry on dskUsed. Slightly forced, but a delta monitor compared against 0 might fo the trick. That sounds great but I admit the snmpd.conf man page isn't sufficiently clear

Monitoring disk usage

2007-03-22 Thread cnelson
I've seen and experimented with the disk directive in snmpd.conf but it's not quite doing what I need and I'm hoping someone can suggest a way to use it or another method to accomplish what I need. I have several programs which log to /var/log. Generally, there are links there that point to

Re: Monitoring disk usage

2007-03-22 Thread cnelson
... The other possibility would be to set up a monitor entry on dskUsed. Slightly forced, but a delta monitor compared against 0 might fo the trick. That sounds great but I admit the snmpd.conf man page isn't sufficientlyclear to me for me to do that. Got any examples?

Re: Monitoring disk usage

2007-03-22 Thread cnelson
On 22/03/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The other possibility would be to set up a monitor entry on dskUsed. Slightly forced, but a delta monitor compared against 0 might fo the trick. That sounds great but I admit the snmpd.conf man page isn't sufficiently clear

MIBs for IEEE compliance?

2007-01-04 Thread cnelson
I'm reviewing the PICS for 802.1Q-2005 and trying to relate it to SNMP MIB entries. Section A.14 is all about management. Some of the items are fairly clear to me; for MGT-3, I can see that the sysDescr seems to satisfy the requirement. But some are quite unclear; does any standard MIB support

unknown value

2006-07-13 Thread cnelson
In various MIBs I see unknown sometimes as the lowest value and sometimes as the highest. ipv6IfNetToMediaState OBJECT-TYPE SYNTAX INTEGER { reachable(1), -- confirmed reachability ... unknown(6)-- state can not be determined

Can I get snmptranslate to tell me where it's finding MIBs?

2006-07-11 Thread cnelson
When I run snmptranslate, it finds things that aren't in /usr/share/snmp/mibs/*.txt. Where else is it looking? Can I get it to tell me its search path? - Using Tomcat but need to do more? Need to support web services,

Identifier scoping in MIBs

2006-07-11 Thread cnelson
OK, I'm a little slow today. Sorry for harrassing the list. What is the scope of identifers in MIBs. If I do: pppTable OBJECT-TYPE SYNTAX SEQUENCE OF PppEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION A list of interface entries. ::= {

Renaming a MIB entity

2006-06-27 Thread cnelson
I was a little short sighted in creating a MIB a year or so ago. I have an entity with too-restictive a name. I'd like to revise the MIB so that with the new one in place users can use symbolic names to get the entity with a more meaninful name. Basically, I've got a branch in my MIB tree

Fwd: Re: One table, two agents?

2006-05-16 Thread cnelson
I don't believe I got any feedback on this. (Maybe I deleted it in an overzealous SPAM purge.) I'd really appreciate some input on this. The best I've come up with is to take the ifTable structure and graft it onto my enterprise MIB but that seems kludgey. ---BeginMessage--- Can I have two

Re: One table, two agents?

2006-05-11 Thread cnelson
Can I have two subagents each responsible for a diferent range of recordin a table? ... Well, I've half answered my own question. Section 4.1 of RFC 2741 (AgentX) says: An entity acting in a subagent role performs the following functions: ... - Registers MIB regions with the

Re: One table, two agents?

2006-05-11 Thread cnelson
... This section discusses several typical usage scenarios. ... 2) Subagents implement rows in a simple table. A simple table is one in which row creation is not specified, and for which the MIB does not define an object that counts entries in the table. Examples of

MIBs for RS232 and PPP

2006-05-10 Thread cnelson
In case someone else cares, I'm in the process of implementing MIBs for RS232-like devices (RFC 1317) and PPP (several RFCs, not sure which I'll get to). I'm targeting Linux and New-SNMP and hope to release the implementation as an open source AgentX subagent. I've had some interest from the

One table, two agents?

2006-05-10 Thread cnelson
Can I have two subagents each responsible for a diferent range of record in a table? RFC 1471 says that the RS232 interface underlying a PPP link should have an entry in ifTable but I've got an existing subagent that deals with my real network interfaces and I'd rather not clutter it with PPP

Which MIBs for PPP?

2006-05-01 Thread cnelson
RFC 1473 is pretty clear on its applicability: This document specifies the following group: The PPP IP Group The PPP IP Group contains configuration, status, and control variables that apply to the operation of IP over PPP. Implementation of this group is mandatory for all

MIB warnings I don't understand

2006-04-14 Thread cnelson
I'm trying to add to an existing, private MIB and I'm having no end of trouble. I was previously pointed to the MIB lint sort of tool at http://www.ibr.cs.tu-bs.de/bin/smitools.cgi and it's very nice. I cleaned up quite a few little things that have been in my MIB for some time. However, I'm

Re: What's Too Long mean? - resolved

2006-02-03 Thread cnelson
My client appears to have been built with bad headers. I maintain two builds: one for a big-endian system, one for a little-endian system and somehow something didn't get completely updated when I switched. I did a thorough cleaning this morning, rebuild for the problem platform and it works

Re: What's Too Long mean?

2006-01-31 Thread cnelson
On Mon, 2006-01-30 at 16:32 -0500, [EMAIL PROTECTED] wrote: I have an application based on Net-SNMP v5.2 which I build for PPC and Arm. On PPC it works fine. On Arm [it] gives GetSysValues: Too Long in the log. Can someone help me understand what that's about? ... Try

Re: What's Too Long mean?

2006-01-31 Thread cnelson
On Tue, 2006-01-31 at 08:25 -0500, [EMAIL PROTECTED] wrote: But I ran _snmpd_ with -Dsess_async_send and I think this is reported by the client. Did you mean to run the client with -D? It could be either. It might be the agent receiving the request, but being unable to return a

Re: What's Too Long mean?

2006-01-31 Thread cnelson
On Tue, 2006-01-31 at 08:07 -0500, [EMAIL PROTECTED] wrote: Strangely, I can get the desired values with snmpwalk from another system, it's the function which does on-node access for the UI that fails. That uses a different community but why that should lead to Too long is a mystery.

What's Too Long mean?

2006-01-30 Thread cnelson
I have an application based on Net-SNMP v5.2 which I build for PPC and Arm. On PPC it works fine. On Arm, status = snmp_synch_response(ss, pdu, response); ... if (status == STAT_SUCCESS) snmp_log(LOG_ERR, Error in packet. Reason: %s\n,

How to perform long-running task in subagent

2005-12-14 Thread cnelson
I seem to recall seeing something like this on the list before but I had trouble picking keywords to search the archive and the hits I did find, didn't answer my question. I want to use SNMP to trigger a long-running process, mostly during testing, not in production. For example, I want to set a

What am I going wrong with mib2c?

2005-12-05 Thread cnelson
I know I've done this before with success -- on this MIB -- but today after adding another column to a table in my private MIB, mib2c refuses to see my table. [root] # head `which mib2c` #!/usr/bin/perl #!/usr/bin/perl # # $Id: mib2c,v 5.57 2004/09/10 12:30:15 dts12 Exp $ #

Ownership of agent persistent stores

2005-11-30 Thread cnelson
In http://sourceforge.net/mailarchive/message.php?msg_id=9547341 I asked how to set ownership of persistent files. I must have gotten an answer (or figured it out) because my v5.1.1-based system has been working for ages. But I'm trying to move to v5.2.2 now and I'm seeing the same problem. The

Re: Ownership of agent persistent stores

2005-11-30 Thread cnelson
In http://sourceforge.net/mailarchive/message.php?msg_id=9547341 I askedhow to set ownership of persistent files. I must have gotten an answer (or figured it out) because my v5.1.1-based system has been working forages. But I'm trying to move to v5.2.2 now and I'm seeing the same

No traps in v5.2.2.rc6?

2005-11-28 Thread cnelson
This is a preliminary report -- I'm still trying to prove I'm not doing something wrong -- but I can't get any traps out of v5.2.2 rc6. I've rebuilt my whole system against v5.5.2 headers and libraries and my configuration definitely calls for authorization traps and my subagent sends link

Re: Re-reading a persistent store

2005-11-10 Thread cnelson
On Wed, 2005-11-09 at 14:11 -0500, [EMAIL PROTECTED] wrote: I found code in the agent to re-read configuration when a SIGHUP is received but changing my-subagent.conf and issuing SIGHUP to snmpd didn't reread the persistent store. That should have triggered the main snmpd agent to

Re: Re-reading a persistent store

2005-11-10 Thread cnelson
On Thu, 2005-11-10 at 07:37 -0500, [EMAIL PROTECTED] wrote: I thought . that on shutdown the agent tells the subagent to save its persistent values. Hmmm... that's an idea, I suppose. In general, the administration side of the AgentX protocol is very much driven by

Re-reading a persistent store

2005-11-09 Thread cnelson
I'm using v5.1.1 (soon to upgrade to v5.2.2) and I have a sub-agent which stores data in a persisent store (/var/net-snmp/my-subagent.conf). In my subagent, I have: // // Handle persistent storage of per-port link up/down trap enable // The

Can't disable authentication traps

2005-11-07 Thread cnelson
I'm using v5.1.1 and I find that I can't disable generation of authentication traps. I've used snmpget to verify that the setting is disabled and I've looked at the persistent store in snmpd.conf and verified that pauthenabled is 2 (disabled). Looking for authentication as a keyword for any bug

Tracing SNMPD activity

2005-11-02 Thread cnelson
I imagine I'm being stupid this morning but I can't figure this out. I appreciate any pointers. I'm using Net-SNMP v5.1.1 and I have an SNMP subagent that's crapping out with a segfault but I can't narrow down what object it's handling when it dies. I do an snmpwalk and the output ends with:

Debugging illegal instruction in v5.1.1 when sending traps

2005-08-11 Thread cnelson
As suggested here recently, I got my application in a debugger and recreated the problem. I'm running gdbserver on PPC (the target host) with Insight on x86 Linux (the development environment). When the problem occurs, the Source Window of Insight says, Select a function name to disassemble the

Threading and Net-SNMP

2005-08-11 Thread cnelson
I'm still having trouble finding my illegal instruction error and I've gotten to thinking about threads. I have a multi-threaded program that sends traps from one thread and acts as a sub-agent in another thread. Traps are asychronous and don't require any kind of session or state so this is all

Re: Illegal instruction when sending traps in v5.1.1

2005-08-10 Thread cnelson
On Fri, 05 Aug 2005 10:33:17 -0400 [EMAIL PROTECTED] wrote: CRC template_v2pdu-command = sink-pdutype; CRC send_trap_to_sess(sink-sesp, template_v2pdu); CRC CRC the last executable line in that (sending with template_v2pdu) CRC is where my program crashes. can

Illegal instruction when sending traps in v5.1.1

2005-08-05 Thread cnelson
I wrote a few weeks ago about a problem I was having in send_v2trap(). I've narrowed it down but while I continue to research, I'd appreciate any feedback or insight members of this list have. In agent_trap.c, toward the end of netsnmp_send_traps(), I find: /* * Now loop through the

Re: Illegal instruction when sending traps in v5.1.1

2005-08-05 Thread cnelson
printf(%s:%d, sink-version:%d\n, __FILE__, __LINE__, sink-version); between the for and the if, the value printed is 193. OK. So I see that 193 is AGENTX_VERSON_BASE | 0x1. I guess that's valid. I'll dig deeper. --- SF.Net email is

IP address in com2sec directive?

2005-08-01 Thread cnelson
I have a configuration tool which uses SNMP locally to talk to the agent and retrieve and set some data. I've recently run into a problem where mis-configured networking prevented host resolution (`ping localhost` hung). I'd like to convert my utility to connect to 127.0.0.1 (which will always

Illegal instruction in send_v2trap(), any thoughts?

2005-07-05 Thread cnelson
I realize this is a long shot, that I'm behind revisions, and all that but have a little pity on me, please, I'm working with an old embedded system. Recently, I've seen a problem in send_v2trap() that's fairly easy to reproduce (though with a sequence that's very specific to my system and I

Passing extra data to table handlers

2005-06-21 Thread cnelson
I used mib2c to create a subagent which handles dot1dBridge MIB entries. Specifically, I am now working on dot1dTpFdbTable. My main program knows about something that the get_dot1dTpFdb*() routines need to know to get data. I could make it a global, but that's so grody. ;-) I started down the

Re: Slightly OT: Can I _set_ interface speed via a standard MIB?

2005-06-08 Thread cnelson
On Tue, 07 Jun 2005 11:17:08 -0400 [EMAIL PROTECTED] wrote: CRC I see RFC1213-MIB::ifSpeed is read-only. Is there a MIB entry CRC that will allow me to force a specific speed for an interface? No, but some OS support configuring it in snmpd.conf (see interface directivein man page).

Slightly OT: Can I _set_ interface speed via a standard MIB?

2005-06-07 Thread cnelson
I see RFC1213-MIB::ifSpeed is read-only. Is there a MIB entry that will allow me to force a specific speed for an interface? --- This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput a projector? How fast can you ride

What's dot1qForwardAllTable for?

2005-04-13 Thread cnelson
I've read RFC 2674 and Q-BRIDGE-MIB, I've taken a look at section 12 of IEEE 802.1Q and I still don't get what dot1qForwardAllTable is for. I look at the description of dot1qForwardAllPorts and I see: The complete set of ports in this VLAN to which all multicast group-addressed frames

Q-BRIDGE-MIB::dot1qTpFdbTable entry format

2005-04-12 Thread cnelson
I think I've seen a discussion of this sort of thing before -- I may even have been in it -- but I can't remember the solution. I'm using Net-SNMP 5.1.1 and I've used mib2c to generate a template for the 802.1Q MIB. I've filled in a lot of the table but I'm getting back unreadable entry OIDs:

Re: Table iterators and mydata

2005-04-10 Thread cnelson
On Fri, 08 Apr 2005 16:09:00 -0400 [EMAIL PROTECTED] wrote: ... CRC I take it from the my in mydata that Net-SNMP doesn't dereference it CRC and try to access fields on a netsnmp_iterator_info structure CRC but I'm not CRC 100% sure. Is it true that Net-SNMP won't dereferenced mydata?

Table iterators and mydata

2005-04-08 Thread cnelson
I've looked at mib2c generated code and in table_iterator.h and don't feel I have a clear idea of this yet. mib2c created functions like: netsnmp_variable_list * ifTable_get_first_data_point(void **my_loop_context, void **my_data_context,

Formatting of TpFdbTable entries

2005-03-30 Thread cnelson
I'm sure this has worked for me before and I don't know what may have changed to cause this problem. Today when I try to walk the TpFdbTable (.1.3.6.1.2.1.17.4.3), I get gibberish: $ snmpwalk -v 2c -c public 10.93.0.15 .1.3.6.1.2.1.17.4.3 | more BRIDGE-MIB::dot1dTpFdbAddress.'..' =

Re: Non-standard interfaces in ifTable

2005-02-15 Thread cnelson
... As far as future compatibility goes, getting the kernel to recognize your interfaces is the best option. If that's not possible, then you'll have to maintain proprietary patches against net-snmp. Robert, I know you're the expert here but I've got non-standard Interfaces working

Re: Timeout with local connection to snmpd

2005-02-15 Thread cnelson
On Mon, 14 Feb 2005 14:58:24 -0500 [EMAIL PROTECTED] wrote: CRC session.peername = localhost; CRC session.retries = 3; CRC session.version = SNMP_VERSION_2c; CRC session.community = private; CRC session.community_len = strlen(session.community); CRC CRC ss =

Re: Timeout with local connection to snmpd

2005-02-15 Thread cnelson
On Tue, 15 Feb 2005 08:33:40 -0500 [EMAIL PROTECTED] wrote: CRC session.peername = localhost; CRC session.community = config; CRC session.community_len = strlen(session.community); CRC CRC /* establish the session */ CRC ss = snmp_open(session); CRC CRC

Re: Non-standard interfaces in ifTable

2005-02-15 Thread cnelson
On Tue, 15 Feb 2005 07:47:23 -0500 [EMAIL PROTECTED] wrote: CRC ... CRC As far as future compatibility goes, getting the kernel to CRC recognize your interfaces is the best option. If that's not possible,CRC then you'll have to maintain proprietary patches against net-snmp. CRC CRC

Re: Timeout with local connection to snmpd

2005-02-15 Thread cnelson
... Is ss NULL? If not, what does it contain for community? ... OK. I've built with static libraries and my code now looks like: session.peername = localhost; session.retries = 1; session.version = SNMP_VERSION_2c; session.community = config; session.community_len =

Timeout with local connection to snmpd

2005-02-14 Thread cnelson
I'm trying to validate that SourceForge bug 1016849 is no longer a problem -- I seem to be the only person who's seen it -- in v5.2 and I'm running into _other_ problems. I DLd and built and installed 5.2.1. I can snmpget remotely but my application which does local access to snmpd times

Re: Non-standard interfaces in ifTable

2005-02-10 Thread cnelson
I have an embedded Linux system with some interfaces that are not standard, i.e. the default ifTable implementation isn't getting part or all of the information. From looking at the code, it appears that I willneed to directly modify the source that comes with net-snmp. ... You can tell

Re: RE: Non-standard interfaces in ifTable

2005-02-10 Thread cnelson
I have an embedded Linux system with some interfaces that are not standard, i.e. the default ifTable implementation isn't getting part or all of the information. From looking at the code, it appears that I willneed to directly modify the source that comes with net-snmp. ...

Re: New front end for the Net-SNMP website.

2004-12-21 Thread cnelson
... Getting the correct balance between completeness and compactness is a Non Trivial Problem. But is it NP-Complete? ;-) --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real

Re: RE: New front end for the Net-SNMP website.

2004-12-21 Thread cnelson
Quite nice overall but several nits, if I may. Curiously, all in: Net-SNMP is available for many Unix and Unix like operating systems and also for Windows. I've often been corrected that as a TM of Bell Labs (or whoever), UNIX is all capitals. (I've generally said Unix to mean UNIX and

Re: Is there a MIB value for geographic location?

2004-11-04 Thread cnelson
... There is the sysLocation value, which is easily accessible in the snmpd.conffile, but I guess that normally this is not used for a latitude and longitude. Are there any difficulties in using it this way? All the examples talk about this as a geographic location, but then give

Linking to static Net-SNMP libraries

2004-11-01 Thread cnelson
I'm trying to confirm that a problem I'm having with 5.2rc1 is in my use of dynamic libraries leading to some conflict but when I try to link against static libraries, I get an error. I've modified the Makefile link line for my client to: $(CC) $(CFLAGS) -o $(PROGNAME) $(OBJS) \

Re: Linking to static Net-SNMP libraries

2004-11-01 Thread cnelson
Are you attempting to build this on Linux? Actually, I'm cross-building on i386 Linux for PPC Linux. If so you need to have a completeinstallation. Not partial when installing on linux. You will get missing libraries if you only partially installing and yeslcrypto is one of those missing

Re: snmp_open() problem in 5.2.rc1

2004-10-29 Thread cnelson
This smells of library conflicts to me. Make sure you don't have a mix of snmp libraries installed in /usr/lib/*snmp* and/or /usr/local/lib/*snmp*. Also, try building with static libraries (configure --enable-static --disable-shared). That's a good clue. Thanks. I'm out of

snmp_open() problem in 5.2.rc1

2004-10-28 Thread cnelson
I'm trying to figure out why I have a null community in my agent when using 5.2.rc1 but the same code works OK with 5.1.1. I've got: struct snmp_session session; init_snmp(snmpapp); snmp_sess_init( session ); session.peername = localhost; session.retries = 1;

Re: Possible problem with authorization in 5.2.rc1

2004-10-27 Thread cnelson
... More particularly, the dump begins: 30 5B // request sequence 02 01 01// version = SNMPv2c 04 00 // community = A0 54 // GET PDU etc So the request is being sent with an empty community string (hence it's not suprising that the agent is

Re: Possible problem with authorization in 5.2.rc1

2004-10-27 Thread cnelson
... So, snmp_open() appears to not be copying the community string. How come? I'll look into it a bit shortly. I think I found the problem. Around line 998 of snmplib/snmp_api.c, there is a recent addition of: #if !defined(DISABLE_SNMPV1) || !defined(DISABLE_SNMPV2C) which DeMorgan

Re: Possible problem with authorization in 5.2.rc1

2004-10-27 Thread cnelson
I think I found the problem. Around line 998 of snmplib/snmp_api.c, there is a recent addition of: #if !defined(DISABLE_SNMPV1) || !defined(DISABLE_SNMPV2C) which DeMorgan tells us is really: #if defined(DISABLE_SNMPV1) defined(DISABLE_SNMPV2C) Err no. Surely

Re: Possible problem with authorization in 5.2.rc1

2004-10-26 Thread cnelson
I can use snmpget on another system to read, for example, system.sysDescr.0 but on-node, when I try to use the config community to get values, snmp_get() times out. What if you try with snmpget on that same node (not from a remote system)?If you run essentially the same command

Re: Possible problem with authorization in 5.2.rc1

2004-10-26 Thread cnelson
... you should be able to see if a packet goes out, if the agent receives it, if the agent sends a response and if the app receives it. Thanks. My client logs: Sending 93 bytes to UDP: [127.0.0.1]:161 : 30 5B 02 01 01 04 00 A0 54 02 04 77 0B 12 D2 020[..T..w 0016: 01 00

Re: Possible problem with authorization in 5.2.rc1

2004-10-26 Thread cnelson
Well, I've come full circle. I think I've confirmed that I have an authorization problem. - snmpget on the local host times out just as my client application does - When the client times out, there's a note in the log that it tried (and failed, but that's another issue) to send an

Possible problem with authorization in 5.2.rc1

2004-10-25 Thread cnelson
I'm trying to see if Bug 1016849 (https://sourceforge.net/tracker/?func=detailatid=112694aid=1016849group_id=12694) is still in 5.2. I've installed 45.2.rc1 and I'm having unrelated problems which are preventing me from validating the bug. My /usr/share/snmp/snmpd.conf (which works with

Re: extending the agent

2004-10-01 Thread cnelson
... apparently you have to modify some of the code. Doesn't the mib2c generates it all? mib2c really can't know where your data is coming from (or going to, for a set request). What it generates is a skeleton you can hang your own code on. It really is 90% of the work. There are some

Re: Help, please. Can't get privacy to work

2004-09-22 Thread cnelson
... How can I prove that snmpd has SSL build in? U... a) Try snmpget UCD-SNMP-MIB::versionConfigureOptions.0 That won't say explicitly, but will indicate how the suite was configured (which may indicate if it either turned on or turned off use of

Re: Help, please. Can't get privacy to work

2004-09-22 Thread cnelson
My agent was missing ssl. After much pain rebuilding, all it well. Thanks. --- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project

Re: Help, please. Can't get privacy to work

2004-09-21 Thread cnelson
I'm trying to get v3 security to work. I can use -l authNopriv but -l authpriv gives decryption error. I don't understand that. Cryptography isn't my strong suit; I'm using a network sniffer to look at packets ... Ethereal reports that the reply to my encrypted PDU requesting

Re: Help, please. Can't get privacy to work

2004-09-21 Thread cnelson
I'm trying to get v3 security to work. I can use -l authNopriv but -l authpriv gives decryption error. I don't understand that. Cryptography isn't my strong suit; I'm using a network sniffer to look at packets ... Ethereal reports that the reply to my encrypted PDU requesting

Re: How can I get createUser to be processed?

2004-09-16 Thread cnelson
(Ooops. The first time I replied only to Thomas.) [EMAIL PROTECTED] wrote: The man page for snmpd.conf says: ... This directive should be placed into the /var/net- snmp/snmpd.conf file instead of the other normal locations. The reason is that the information is

Permissions on /var/net-snmp/snmpd.conf

2004-09-16 Thread cnelson
I have an administrative user, admin, who uses a configuration utility to manipulate parts of the system setup, including snmp users. To do this, I've set /var/net-snmp/snmpd.conf to look like: # ls -ld /var/net-snmp/ drwxrwxr-x2 root admin 0 Jan 1 02:14 /var/net-snmp/

Re: Am I confused or is read_config_read_octet_string broken?

2004-09-16 Thread cnelson
On Wed, 15 Sep 2004 13:09:54 -0400 [EMAIL PROTECTED] wrote: CRC I'm trying to use read_config_read_octet_string() (in 5.1.1) and I'm not CRC getting the results I expect. ghost voiceUse the source, Luke.../ghost voice Yeah, I'm trying (that's where I found the snippet I posted). But it's

Re: How can I get createUser to be processed?

2004-09-16 Thread cnelson
... I was unclear. Here's what I'm doing: - writing a createUser directive to /var/net-snmp/snmpd.conf - Poking the reconfig bit in the agent's MIB ... Here's the rub. I wan't actually poking the reconfig bit as I thought I was. That works now. Never mind.

Order of usmUser lines in /var/net-snmp/snmpd.conf

2004-09-15 Thread cnelson
If I put multiple createUser lines in /var/net-snmp/snmpd.conf and restart the agent, can I expect or rely upon the resulting usmUser lines being in the same order? I'd like to be able to delete or modify one of several users but the usmUser lines are encrypted so I can't see which one

Re: Order of usmUser lines in /var/net-snmp/snmpd.conf

2004-09-15 Thread cnelson
Thomas Anders wrote: No need to rely on the order. The usmUser lines aren't really encrypted, they just contain localized keys and some of the data (like the user name) in hex. The (notoriously undocumented) format actually is: usmUser userStatus userStorageType engineID name secName

Am I confused or is read_config_read_octet_string broken?

2004-09-15 Thread cnelson
I'm trying to use read_config_read_octet_string() (in 5.1.1) and I'm not getting the results I expect. It is written to allocate space for the return value if needed: /* * malloc data space if needed (+1 for good measure) */ if (*str == NULL) { if

How can I get createUser to be processed?

2004-09-15 Thread cnelson
The man page for snmpd.conf says: ... This directive should be placed into the /var/net- snmp/snmpd.conf file instead of the other normal locations. The reason is that the information is read from the file and then the line is removed (eliminating the storage of the

Complex views in VACM

2004-09-14 Thread cnelson
How can I -- or, for that matter, can I -- create complex views of the MIB. For example, I'd like three users: public (read-only), private (read/write to most of the MIB), admin (read/write anything). How do I say, public can see everything except the VACM tables and the snmpd reset bit and

Re: SNMPv3 and encryption

2004-09-10 Thread cnelson
... I'd suggest you downgrade this to be auth rather than priv, make sure the passwords are consistent, and concentrate on getting SNMPv3 authentication working first. *Then* try adding privacy as well. Thanks. I've got auth working and imagine priv isn't far behind. I spoke too

Re: SNMPv3 and encryption

2004-09-10 Thread cnelson
I put the following in /var/net-snmp/snmpd.conf: createUser admin MD5 admin DES [but] When I try: snmpwalk -v 3 -n -u admin -a MD5 -A adminpwd -x DES -X adminpwd -l authPriv theserver system I get: snmpwalk: Decryption error Either

Re: SNMPv3 and encryption

2004-09-10 Thread cnelson
- Original Message - From: Dave Shield [EMAIL PROTECTED] Date: Friday, September 10, 2004 9:28 am Subject: Re: SNMPv3 and encryption ... After rebooting the system where the agent runs and seeing createUser turned into usmUser, I see: $ snmpwalk -v 3 . -l authPriv

SNMPv3 and encryption

2004-09-09 Thread cnelson
I'm trying to get my head around SNMPv3, specifically the security aspects. I've read the FAQ and skimmed the RFCs but I need a little more orientation, if someone could oblige. The/a big differenece between v2c and v3 is that v2c uses a community string, passed in the clear whereas v3 uses a

Default community configuration

2004-09-09 Thread cnelson
Looking at snmpd.conf.5, I find: The default configuration of the agent, as shipped, is functionally equivalent to the following entries: com2sec publicdefault public group publicv1 public group publicv2c public group publicusm public

Secure access to agent

2004-09-03 Thread cnelson
I want to limit access to the net-snmp agent (snmpd) to only secure (encrypted) channels. In the simplest case, I can include rouser and rwuser in snmpd.conf and omit rocommunity and rwcommunity. Is that right? If i want to get a little more sophisitcated, I can omit v1 and v2c from my

Re: Saving persistent values *now*

2004-08-30 Thread cnelson
(I've read this 3 times but I guess it's been a long day 'cuz it doesn't make sense to me.) Ok what I do is keep a local copy Local to what function? Where? of the set request data in an array. This could easily be a linked list of objects. When a set request is made I check a COMMIT

Re: Help, please. Is there something wrong with this code?

2004-08-25 Thread cnelson
You need to pass a pointer to the actual (binary) value - not a printable version of it. snmp_add_var(pdu, auth_OID, auth_OID_len, 'i', value); Thanks but: x.c:1022: warning: passing arg 5 of `snmp_add_var' from

Help, please. Is there something wrong with this code?

2004-08-20 Thread cnelson
I'm trying to manipulate ifLinkUpDownTrapEnable values. I used mib2c to create a ifXTable module and I can get and set values with snmpget and snmpset just fine. Now I'm trying to write a utility routine to update all the values with one call. I've got something like: //

What is bandwidth?

2004-08-17 Thread cnelson
RFC 2233 says ifHighSpeed is: An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. ... Which suggests to me that a 10Mbps half-duplex port has ifHighSpeed = 10 and a 10Mbps full-duplex port (which has twice the _bandwidth_) has ifHighSpeed = 20. I

Re: Enabling authentication traps

2004-08-17 Thread cnelson
... $ snmpget -v 2c -c public mynode SNMPv2- MIB::snmpEnableAuthenTraps.0 RFC1213- MIB::snmpEnableAuthenTraps.0 = INTEGER: disabled(2) $ snmpset -v 2c -c public mynode SNMPv2- MIB::snmpEnableAuthenTraps.0 i 1 Error in packet. Reason: notWritable (that object does not support

Persistent values in/from a table

2004-08-17 Thread cnelson
I've found read_config.c and read the comments there about callbacks and read_config_store() and I've looked at how the net-snmp distribution deals with snmpEnableAuthenTraps but I'm having trouble applying those concepts to my problem. I'm implementing ifXTable and want to make the per-port

Enabling link up/down traps

2004-08-13 Thread cnelson
I'm missing something. I look at IF-MIB.txt and I see ifLinkUpDownTrapEnable but I've used mib2c to build code to handle interfaces and there's no ifLinkUpDownTrapEnable objects in that code. I see that the enable object is on an ifXEntry in the ifXTable but how do I get to that? I just want

  1   2   >