[squid-users] snmp error
Hi, I am trying to configure snmp with.When i try to run snmpwalk command for testing , i am getting erros in cache.log. cache.log 2011/10/24 00:30:48| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:49| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:50| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:51| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:52| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:53| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 snmpwalk -m /usr/share/snmp/mibs/SQUID-MIB.txt -v1 -c public localhost:3401 .1.3.6.1.4.1.3495.1.1 Timeout: No Response from localhost:3401 my squid.conf # # Recommended minimum configuration: # acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networks from where browsing # should be allowed acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 # RFC1918 possible internal network acl localnet src 192.168.0.0/16 # RFC1918 possible internal network acl localnet src fc00::/7 # RFC 4193 local private network range acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl mynetwork src '/etc/squid/mynetwork' # # Recommended minimum Access Permission configuration: # # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager # Deny requests to certain unsafe ports http_access deny !Safe_ports # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports # We strongly recommend the following be uncommented to protect innocent # web applications running on the proxy server who think the only # one who can access services on localhost is a local user #http_access deny to_localhost # # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # # Example rule allowing access from your local networks. # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed http_access allow mynetwork http_access allow localhost # And finally deny all other access to this proxy http_access deny all # Squid normally listens to port 3128 http_port 3128 http_port 3129 intercept # We recommend you to use at least the following line. hierarchy_stoplist cgi-bin ? # Uncomment and adjust the following to add a disk cache directory. cache_dir aufs /CACHE 307200 64 512 # Leave coredumps in the first cache dir coredump_dir /CACHE # Add any of your own refresh_pattern entries above these. refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^gopher:14400% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 cache_mem 2000 MB httpd_suppress_version_string on visible_hostname CACHE_ENGINE error_directory /etc/squid/errors via off maximum_object_size_in_memory 40 KB maximum_object_size 65536 KB cache_swap_low 96 cache_swap_high 97 memory_replacement_policy lru cache_replacement_policy heap LFUDA quick_abort_min 1024 KB quick_abort_max 2045 KB quick_abort_pct 90 positive_dns_ttl 8 hours negative_dns_ttl 0 ipcache_size 2 ipcache_low 95 ipcache_high 97 fqdncache_size 12000 cache_store_log /var/log/squid/store.log pipeline_prefetch on snmp_port 3401 acl snmppublic snmp_community public snmp_access allow snmppublic localhost snmp_access deny all snmp_incoming_address 0.0.0.0 snmp_outgoing_address 0.0.0.0 where could be the mistake? squid version: 3.1.8 centos 6 64 bit kernel: 2.6.32-71.el6.x86_64 while i try to run : snmpwalk -v1 -c public localhost , it is working fine. Regards, Benjamin Fernandis
Re: [squid-users] snmp error
On 24/10/11 02:32, benjamin fernandis wrote: Hi, I am trying to configure snmp with.When i try to run snmpwalk command for testing , i am getting erros in cache.log. cache.log 2011/10/24 00:30:48| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:49| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:50| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:51| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:52| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:53| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 Strange. Possibly due to -v1 parameter being used. Try with -v2c instead and see if it still occurs. snmpwalk -m /usr/share/snmp/mibs/SQUID-MIB.txt -v1 -c public localhost:3401 .1.3.6.1.4.1.3495.1.1 Timeout: No Response from localhost:3401 my squid.conf snip snmp_port 3401 acl snmppublic snmp_community public snmp_access allow snmppublic localhost snmp_access deny all snmp_incoming_address 0.0.0.0 snmp_outgoing_address 0.0.0.0 where could be the mistake? http://www.squid-cache.org/Doc/config/snmp_outgoing_address/ NOTE, snmp_incoming_address and snmp_outgoing_address can not have the same value since they both use port 3401. leading to Timeout: No Response from localhost:3401 Solve this by removing the lines for both in and out addresses from your config. The defaults are fine. If you have to set the specific outgoing address for any reason, at least make sure it is an IP assigned to the box. Not zero. squid version: 3.1.8 centos 6 64 bit kernel: 2.6.32-71.el6.x86_64 while i try to run : snmpwalk -v1 -c public localhost , it is working fine. That walks the kernel. Not squid AFAIK. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.16 Beta testers wanted for 3.2.0.13
Re: [squid-users] snmp error
Hi Amos, Thanks for your kind response.I removed (snmp_incoming_address 0.0.0.0 snmp_outgoing_address 0.0.0.0) from squid.conf and try to use version2 in snmpwalk command, but i m getting same output. Does it any specific bug or something related with snmp package version or squid ? Because i have another squid box which having fedora 15 in that i used same configuration and it is working fine.But while using centos6 , i m facing current problems. Regards, Benjamin On Mon, Oct 24, 2011 at 9:07 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 24/10/11 02:32, benjamin fernandis wrote: Hi, I am trying to configure snmp with.When i try to run snmpwalk command for testing , i am getting erros in cache.log. cache.log 2011/10/24 00:30:48| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:49| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:50| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:51| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:52| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 2011/10/24 00:30:53| snmp_core.cc(489) snmpDecodePacket: Failed SNMP agent query from : 210.122.22.30:53441 Strange. Possibly due to -v1 parameter being used. Try with -v2c instead and see if it still occurs. snmpwalk -m /usr/share/snmp/mibs/SQUID-MIB.txt -v1 -c public localhost:3401 .1.3.6.1.4.1.3495.1.1 Timeout: No Response from localhost:3401 my squid.conf snip snmp_port 3401 acl snmppublic snmp_community public snmp_access allow snmppublic localhost snmp_access deny all snmp_incoming_address 0.0.0.0 snmp_outgoing_address 0.0.0.0 where could be the mistake? http://www.squid-cache.org/Doc/config/snmp_outgoing_address/ NOTE, snmp_incoming_address and snmp_outgoing_address can not have the same value since they both use port 3401. leading to Timeout: No Response from localhost:3401 Solve this by removing the lines for both in and out addresses from your config. The defaults are fine. If you have to set the specific outgoing address for any reason, at least make sure it is an IP assigned to the box. Not zero. squid version: 3.1.8 centos 6 64 bit kernel: 2.6.32-71.el6.x86_64 while i try to run : snmpwalk -v1 -c public localhost , it is working fine. That walks the kernel. Not squid AFAIK. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.16 Beta testers wanted for 3.2.0.13
