Joshua,
Sure, there may be a couple of such situations.
The explanation is in label "gaga" in snmp_vars.c:
When access is denied for some object and exact!=0
(that indicates GETNEXT operation), agent tries to
find *next* accessible object.
I advise you to comment line "gogo gaga;",
it helped me.
Ali
--- Joshua_Giles@... wrote:
> Ali,
>
> I see the same problem with 4.2.3(with the same
> setup as you) after doing a
> "snmpwalk localhost public .1" It doesn't finish
> printing the tree;It only
> gets to:
>
> $>system.sysORTable.sysOREntry.sysDRUptime.9 =
> (<representation of timeticks
> go
> $>here>)
> $>Timeout: No response from localhost
>
> I try a snmp(get/walk) I get a:
>
> $>Timeout: No response from localhost
>
> The daemon is still running.
> A look at the log indicates some sort of loop.
>
> I imagine that this is not supposed to happen, when
> will this be fixed?
>
>
>
> Joshua Giles
> ESG Systems Management Sr. Analyst
> Linux Operating System Development
> Joshua_Giles@...
> Linux website @ dell => http://www.dell.com/linux
>
>
> -----Original Message-----
> From: Ali Chanaui [mailto:ali_chanaui@...]
> Sent: Monday, February 25, 2002 4:10 AM
> To: Dave Shield; arozin@...
> Cc: SNMP coders
> Subject: Re: snmpgetnext security hole? was: Use of
> SNMPv1 resulted in a
> more secure Internet
>
>
> I have an apprehension: an attacker can use this
> behaviour to stick (or almost to stick) the SNMP
> daemon, can't he ?
>
> Did you see Alex's reply ?
> How do you find his workaround ?
>
> Regards, Ali
>
> --- Dave Shield <D.T.Shield@...> wrote:
> >
> >
> > > But when I try to
> > > snmpgetnext -v1 <myIp> public public ifNumber.0
> > > - the agent sticks out; debugger shows, that, it
> > seems
> > > to me, in some infinite loop.
> >
> > I suspect that if you wait long enough, the agent
> > *will* recover.
> > It's (probably) not an infinite loop - just a very
> > long one.
> >
> > Basically, the agent is working its way through
> the
> > list of known
> > objects, trying to find the next one it's allowed
> to
> > return to you.
> > Since there isn't any such object, it will
> > eventually fail (and
> > return noSuchName or endOfMib)
> >
> > But in the meantime, your client has probably
> sent
> > a couple of
> > retransmissions (each of which the agent
> desperately
> > tries to handle
> > and fails), and given up in disgust - long before
> > the first response
> > comes back.
> >
> > Try it with a ridiculously long timeout - say 10
> > minutes - and see
> > if you actually get something back.
> >
> > Dave
> >
> >
> > _______________________________________________
> > Net-snmp-coders mailing list
> > Net-snmp-coders@...
> >
>
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Sports - Coverage of the 2002 Olympic Games
> http://sports.yahoo.com
>
> _______________________________________________
> Net-snmp-coders mailing list
> Net-snmp-coders@...
>
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
|
