net-snmp-coders — Discussion of internal project coding (Please use this OR -users, NOT both!)

snmpd.conf re-read

[Vlad T. <vl...@dd...>]

Hi,

According to snmpd.conf man page, snmpd can be forced to re-read its
configuration files, snmpd.conf in particular, by sending a "kill -HUP"
signal to the snmpd process. For some reason, it is not happening to me.
Any ideas?

Thanks,
-- 
Vlad Tunik

Motorola, CGISS, Wireless Data Solutions Engineering
1301 E. Algonquin Rd, Rm 1055A
Schaumburg, IL 60196

Phone: (847)576-6457
FAX: (847)576-7737
email: vl...@co...

Accessing details on triggering request message

[Frank S. <st...@ib...>]

Hi!

We are implementing the DISMAN-SCHEDULE-MIB (RFC 2591) as NET-SNMP 4.2
agent MIB module. To do this correctly, a registered MIB function
needs access to the security credentials of the SNMP message that
triggered this function [in detail: the action of a schedule is a Set
operation. If it is invoked, it has to use the security credentials
that were present when the corresponding row of the schedTable was
created.  An implementation must therefore record and maintain the
credentials for every scheduling entry.]

Do you have any suggestion how I could retrieve this information
information from within the agent module?

 Frank

Re: Problems for OpenBSD 2.8 agent (4.2 release)

[Michael J. S. <msl...@is...>]

ni...@ba... wrote:
> 
> On Tue, 05 Dec 2000 15:59:19 -0500 "Michael J. Slifcak" <msl...@is...> wrote:
> 
> >ipDefaultTTL is 0, should be 1.
> 
> That sure wouldn't make such sense either. TTL = 1 means that no packet would be
> able to cross a router? It probably means that it fails to get the real value.


Given the description from IP-MIB.txt (see below), the value 0 is out of
range.
Linux uses 64, MS-Windows uses 128.


> 
> >nlist error for cnt or _cnt not found.
> 
> Hmmm, you will probably have to find some sysctl to get the value on 2.8

Good suggestion, Niels.  What does OpenBSD 2.6 or 2.7 return ?


> 
> /Niels



-Mike Slifcak, Internet Security Systems, Inc.


########

From IP-MIB.txt :


ipDefaultTTL OBJECT-TYPE
    SYNTAX      INTEGER (1..255)
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
            "The default value inserted into the Time-To-Live field of
            the IP header of datagrams originated at this entity,
            whenever a TTL value is not supplied by the transport layer
            protocol."
    ::= { ip 2
}

Re: Problems for OpenBSD 2.8 agent (4.2 release)

[Dave S. <D.T...@cs...>]

> What it just meant to say was: 1 is just as bad a value as 0

Unless that's what the system actually uses.

Yes, I know it doesn't make sense to do so if the system is
going to talk to the wider Internet, but we're meant to report
the actual setup.  If a system is broken in this way, then
we'd need to be able to report it!

Dave

Re: Problems for OpenBSD 2.8 agent (4.2 release)

[<ni...@ba...>]

On Thu, 07 Dec 2000 10:25:34 +0000 Dave Shield <D.T...@cs...> wrote:
>Mike> ipDefaultTTL is 0, should be 1.
>
>Niels> That sure wouldn't make such sense either. TTL = 1 means that no packet
>Niels> would be able to cross a router? It probably means that it fails to get
>Niels> the real value.
>
>In which case it should return an error (noSuchObject/Name).
>Mike's right - a value of '0' is not valid according to the syntax
>of IP-MIB::ipDefaultTTL   -   INTEGER (1..255)

What it just meant to say was: 1 is just as bad a value as 0

/Niels


-- 
Get your firstname@lastname email for FREE at http://Nameplanet.com/?su

Re: SNMP GET v. SET implementation

[Dave S. <D.T...@cs...>]

> Actually, I can set a variable, but what I am not clear on is the
> implementation of GETs against a variable that is read/write.

The GET of a variable is essentially independent of whether it is
read-only or read-write.  The only difference is whether to set
the 'write_method' hook - this is ignored for all requests other
that SETs.

>                                                               As there are
> not separate routines for a get or set,

But there are!
The GET is handled by the 'var_xxx()' routine itself, and the SET by the
routine indicated via the 'write_method' parameter.

>                                     and I don't see any parameter that
> indicates the operation as a GET/SET/GETNEXT, it seems that a GET operation
> against a read/write variable actually rewrites the variable with the
> current value and then returns that variable.

No - it can't.  It doesn't have access to the new value - this is
never passed to the GET handler.   What it does is to start constructing
a new varbind, on the assumption that this is a GET request.  This
new varbind will be discarded later, when the main agent driving routines
call the SET handler.


> I am hoping this is not the case and there is an elegant solution or method
> of operation distinction as I am writing a MIB to monitor and control a
> device that communicates over a 9600 serial line using VT100 so time becomes
> an issue and superfluous communication has an impact.

We'd accept that the implementation model isn't particularly efficient,
and there's this "unnecessary" GET request call for a SET request.   But
it's certainly not true that a GET of a writeable object will call the
SET handler.

Dave

Re: Problems for OpenBSD 2.8 agent (4.2 release)

[Dave S. <D.T...@cs...>]

Mike> ipDefaultTTL is 0, should be 1.
 
Niels> That sure wouldn't make such sense either. TTL = 1 means that no packet
Niels> would be able to cross a router? It probably means that it fails to get
Niels> the real value.

In which case it should return an error (noSuchObject/Name).
Mike's right - a value of '0' is not valid according to the syntax
of IP-MIB::ipDefaultTTL   -   INTEGER (1..255)

Dave

Re: help required : *SNMP managers* and *indexing*

[Dave S. <D.T...@cs...>]

> I am having trouble doing an index level registration with a master agent. I
> can register a table just fine. I use the REGISTER_MIB() macro. I have tried
> using several functions in agent_registry.c without much luck.

This particular feature hasn't received much detailed testing - most
MIb implementations work at a higher level (e.g. full tables).
It wouldn't surprise me too much if this didn't work properly.

What sort of problems are you seeing?

Dave

Re: HELP on dynamic libraries

[Wes H. <har...@us...>]

>>>>> On Wed, 06 Dec 2000 18:11:27 +0100, Jerome Jargot <Jer...@fe...> said:

Jerome> The ucd-snmp/agent/.libs/snmpd is a binary which seems to use
Jerome> the dynamic libraries:

Jerome> - ucd-snmp/agent/.libs/libucdagent-0.4.2.so
Jerome> - ucd-snmp/agent/.libs/libucdmibs-0.4.2.so
Jerome> - ucd-snmp/snmplib/.libs/libsnmp-0.4.2.so

Jerome> Is it true ?

Jerome> So, could it be possible to remove all lib*.a, lib*.la,
Jerome> lib*.lai ?  (will the master agent be working after that ?)

You should not delete anything from the build tree.  libtool makes use
of these files when you run "make install".  (a binary will be
installed, not the shell script)

Note that by default the package is built with both static and shared
libraries.  To turn one or the other off, use --disable-static or
--disable-shared when running configure.

Jerome> After compiling a subagent, does it use the same dynamic
Jerome> libraries ?  i.e.: if I copy the 3 libraries into
Jerome> /usr/stuff/lib, does the master agent AND subagents run well
Jerome> using LD_LIBRARY_PATH=/usr/stuff/lib ?

In theory.  "make install" is the proper way to go to ensure that
things work (and it'll tell you what you need to do if anything).

-- 
Wes Hardaker
NAI Labs
Network Associates

Re: Issues with "make test"

[Wes H. <har...@us...>]

>>>>> On Wed, 06 Dec 2000 17:03:33 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> WAITFOR 60 seems safe.  If it isn't up by then, there is a
Michael> problem.  This timing could be part of the STARTAGENT
Michael> function, I think.

I was actually thinking along the lines of:

WAITFOR 60 ucd-snmp version

To look for the version stamp line in the output, which is an
indication that the agent is up and running..

-- 
Wes Hardaker
NAI Labs
Network Associates

Re: Problems for OpenBSD 2.8 agent (4.2 release)

[<ni...@ba...>]

On Tue, 05 Dec 2000 15:59:19 -0500 "Michael J. Slifcak" <msl...@is...> wrote:

>ipDefaultTTL is 0, should be 1.

That sure wouldn't make such sense either. TTL = 1 means that no packet would be
able to cross a router? It probably means that it fails to get the real value.

>nlist error for cnt or _cnt not found.

Hmmm, you will probably have to find some sysctl to get the value on 2.8

/Niels


-- 
Get your firstname@lastname email for FREE at http://Nameplanet.com/?su

Re: Proposed change for OpenBSD ifType values

[<ni...@ba...>]

On Wed, 06 Dec 2000 12:15:35 -0500 "Michael J. Slifcak" <msl...@is...> wrote:

> Suggested Action
> To avoid range overflow problems (IANAifType-MIB.txt), suggest
> mapping the ifTypes for known interfaces as follows :

> Name     Current ifType       Proposed Replacement IANA ifType
> gre       other(1)            tunnel(131) "Encapsulation interface"
> bridge    232 [illegal]       tunnel(131) "Encapsulation interface"
> gif       240 [illegal]       tunnel(131) "Encapsulation interface"

Makes a lot of sense to me, at least for gif and gre.

> Question:
> Would mplsTunnel(150) "MPLS Tunnel Virtual Interface" be better
> IANA ifType in one or more instances above ?

No, they have nothing to do with MPLS (Multi-Protocol Label Switching

/Niels


-- 
Get your firstname@lastname email for FREE at http://Nameplanet.com/?su

Re: Issues with "make test"

[Michael J. S. <msl...@is...>]

Wes Hardaker wrote:
> 
> >>>>> On Wed, 06 Dec 2000 16:23:38 -0500, "Michael J. Slifcak" <msl...@is...> said:
> 
> Michael> Intel Pentium Pro 200MHz  (256kB L2 cache), 64 Mbytes RAM
> Michael> Not a screamer, and also not a dog.
> Michael> It failed once out of five tries, at -t 30 !
> 
> Hmm...  That is fast enough that it certainly shouldn't require 30
> seconds.  Maybe its loosing packets?  Try -t 5 -r 5?
> 
> We're merely waiting for the subagent to start up and hence the needed
> timeout...  Maybe we need a WAITFOR token for the tests that waits
> till a particular line appears in the output (or timesout trying).
> 

WAITFOR 60 seems safe.  If it isn't up by then, there is a problem.
This timing could be part of the STARTAGENT function, I think.

-Mike Slifcak, Internet Security Systems, Inc.

Re: Issues with "make test"

[Wes H. <we...@ha...>]

>>>>> On Wed, 06 Dec 2000 16:23:38 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> Intel Pentium Pro 200MHz  (256kB L2 cache), 64 Mbytes RAM
Michael> Not a screamer, and also not a dog.
Michael> It failed once out of five tries, at -t 30 !

Hmm...  That is fast enough that it certainly shouldn't require 30
seconds.  Maybe its loosing packets?  Try -t 5 -r 5?

We're merely waiting for the subagent to start up and hence the needed
timeout...  Maybe we need a WAITFOR token for the tests that waits
till a particular line appears in the output (or timesout trying).

-- 
"Ninjas aren't dangerous.  They're more afraid of you than you are of them."

Re: Issues with "make test"

[Wes H. <we...@ha...>]

>>>>> On Wed, 06 Dec 2000 15:44:20 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> Recommend you use that consistently with all existing tests.

It's just a *really* long timeout to use.

What type of box is this (processor)?
and you said its running openbsd?

-- 
"Ninjas aren't dangerous.  They're more afraid of you than you are of them."

HELP on dynamic libraries

[Jerome J. <Jer...@fe...>]

   Hello !


After compiling the agent one can find :

  - the shell scripts "snmpd" in directory "ucd-snmp/agent"
  - the directory "ucd-snmp/agent/.libs" which contains:

-rwxr-xr-x   1 jjargot  calapp     99056 Dec  6 10:30
libucdagent-0.4.2.so*
-rw-r--r--   1 jjargot  calapp     90528 Dec  6 10:30 libucdagent.a
lrwxrwxrwx   1 jjargot  calapp        17 Dec  6 10:30 libucdagent.la ->
../libucdagent.la
-rw-r--r--   1 jjargot  calapp       677 Dec  6 10:30 libucdagent.lai
lrwxrwxrwx   1 jjargot  calapp        20 Dec  6 10:30 libucdagent.so ->
libucdagent-0.4.2.so*
-rwxr-xr-x   1 jjargot  calapp    513356 Dec  6 10:30
libucdmibs-0.4.2.so*
-rw-r--r--   1 jjargot  calapp    465372 Dec  6 10:30 libucdmibs.a
lrwxrwxrwx   1 jjargot  calapp        16 Dec  6 10:30 libucdmibs.la ->
../libucdmibs.la
-rw-r--r--   1 jjargot  calapp       671 Dec  6 10:30 libucdmibs.lai
lrwxrwxrwx   1 jjargot  calapp        19 Dec  6 10:30 libucdmibs.so ->
libucdmibs-0.4.2.so*
-rwxr-xr-x   1 jjargot  calapp    147492 Dec  6 10:30 snmpd*

  - the directory "ucd-snmp/snmplib/.libs"

drwxr-xr-x   2 jjargot  calapp       512 Dec  6 10:30 ./
drwxr-xr-x   3 jjargot  calapp      2560 Dec  6 10:30 ../
-rwxr-xr-x   1 jjargot  calapp    820076 Dec  6 10:30 libsnmp-0.4.2.so*
-rw-r--r--   1 jjargot  calapp    775040 Dec  6 10:30 libsnmp.a
lrwxrwxrwx   1 jjargot  calapp        13 Dec  6 10:30 libsnmp.la ->
../libsnmp.la
-rw-r--r--   1 jjargot  calapp       653 Dec  6 10:30 libsnmp.lai
lrwxrwxrwx   1 jjargot  calapp        16 Dec  6 10:30 libsnmp.so ->
libsnmp-0.4.2.so*



The ucd-snmp/agent/.libs/snmpd is a binary which seems to use the
dynamic libraries:

  - ucd-snmp/agent/.libs/libucdagent-0.4.2.so
  - ucd-snmp/agent/.libs/libucdmibs-0.4.2.so
  - ucd-snmp/snmplib/.libs/libsnmp-0.4.2.so

Is it true ?

So, could it be possible to remove all lib*.a, lib*.la, lib*.lai ?
(will the master agent be working after that ?)


After compiling a subagent, does it use the same dynamic libraries ?
i.e.: if I copy the 3 libraries into /usr/stuff/lib, does the master
agent AND subagents run well using LD_LIBRARY_PATH=/usr/stuff/lib ?


thanks in advance

  Jerome

Re: Issue with GETNEXT

[Wes H. <har...@us...>]

>>>>> On Wed, 06 Dec 2000 10:03:12 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> Obviously, the -coders list has not been posting my e-mails.

For a while the size limit on this list was set to 40k, which is
unreasonable (and annoying for me since I have to go approve those
postings greater than that) (note that you can approve them too, if
you follow my previous instructions to the developers).  Anyway, I've
since made this limit unlimited.

Michael> I've been trying to write to the list at
Michael> net...@li..., but reviewing the
Michael> archive, I know some messages do not appear.  Do you know of
Michael> any problem the mail archive might have with gzip'd tar files
Michael> ?

You had one held yesterday (silvercreek stuff) because the coders list
was BCC'ed, which is flagged as questionable (for good reason) by the
mailing list software.  I just approved it now, so it should be
showing up to the list.

Michael> Also, this is a very busy time for me.

Michael> I'm sorry if these inconveniences give you the impression
Michael> that I'm intentionally timing my postings to disadvantage.

I was teasing you, I hope you know...

Michael> I'm attaching another copy of most of the stuff I've been
Michael> writing about recently.  I recognize that embedding
Michael> createUser line is bad juju, but this is for ease of setup
Michael> for testing only.

Understood.  I do it too for testing...

Michael> I have tried 4.2.pre2 and 4.2, results are the same.
Michael> I get comparable result on Linux 6.1 (this machine is a mix),
Michael> on OpenBSD 2.8 (fresh clean install),
Michael> and Solaris 2.5.1 (old, stable system).

ok, using your snmpd.conf I can reproduce the problem. Grr...  It must
be a bug in the vacm mib code.  I'll have to go look at it (I need
more time in the day, unfortunately).

-- 
Wes Hardaker
NAI Labs
Network Associates

Proposed change for OpenBSD ifType values

[Michael J. S. <msl...@is...>]

index level mib registration question

[Szaboky, G. (George) <sz...@lu...>]

I am having problems with an Agentx subagent registering for a single
row in a table. Here is the scenario.

I am using mib2c to generate a module for every table in a private mib 
and we have a table named configTable in our private mib, the following 
oid will be generated:

oid connTable_variables_oid[] = {
  1,    /* iso         */
  3,    /* org         */
  6,    /* dod         */
  1,    /* internet    */
  4,    /* private     */
  1,    /* enterprises */
  1751, /* lucent      */
  2,    /* mibs        */
  79,   /* uAdm        */
  1,    /* uAdm25GigMib */
  1,    /* uAdmConfigObjects */
  1     /* configTable */
};

The following variable table is also generated.

/* 
 * variable2 configTable_variables:
 *   this variable defines function callbacks and type return information 
 *   for the configTable mib section 
 */

struct variable2 configTable_variables[] = {
/*  magic number        , variable type , ro/rw , callback fn  , L,
oidsuffix */
#define   CONFIGINDEX           3
  { CONFIGINDEX         , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,1
} },
#define   CONFIGACTIVELOAD      4
  { CONFIGACTIVELOAD    , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,2
} },
#define   CONFIGSOFTWAREVERSION  5
  { CONFIGSOFTWAREVERSION, ASN_INTEGER   , RONLY , var_configTable, 2, { 1,3
} },
#define   CONFIGSOFTWARESIZE    6
  { CONFIGSOFTWARESIZE  , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,4
} },
#define   CONFIGSIGNATURE       7
  { CONFIGSIGNATURE     , ASN_OCTET_STR , RONLY , var_configTable, 2, { 1,5
} },
#define   CONFIGSOFTWARECRC     8
  { CONFIGSOFTWARECRC   , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,6
} },
#define   CONFIGCURRENTTIME     9
  { CONFIGCURRENTTIME   , ASN_OCTET_STR , RWRITE, var_configTable, 2, { 1,7
} },
#define   CONFIGDEVICECOUNT     10
  { CONFIGDEVICECOUNT   , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,8
} },
#define   CONFIGSONETIFCOUNT    11
  { CONFIGSONETIFCOUNT  , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,9
} },
#define   CONFIGHSIIFCOUNT      12
  { CONFIGHSIIFCOUNT    , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,10
} },
#define   CONFIGUTOPIACOUNT     13
  { CONFIGUTOPIACOUNT   , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,11
} },
#define   CONFIGPKTSRVCCOUNT    14
  { CONFIGPKTSRVCCOUNT  , ASN_INTEGER   , RONLY , var_configTable, 2, { 1,12
} },
#define   CONFIGPROTECTIONSWITCHGRPCOUNT  15
  { CONFIGPROTECTIONSWITCHGRPCOUNT, ASN_INTEGER   , RONLY , var_configTable,
2, { 1,13 } },

};
/*    (L = length of the oidsuffix) */

Now if a subagent were to register for the entire table we would use the  
macro:

  /* register ourselves with the agent to handle our mib tree */
  REGISTER_MIB("configTable", configTable_variables, variable2,
               configTable_variables_oid);

which is generated by mib2c. This seems to work. 

In this case though, this table is indexed by a single integer. There are
several 
subagents that register for this table. Each subagent has a unique index and
must 
register for a single row in the mib. For example if we assume that a
subagent is
responsible for the row associated with index 2, we will register with the
index using:

  configIndex = register_int_index(configTable_variables_oid, 12, 2);
 
So now I have registered an index and would like to do an index level 
mib registration. I have tried  using several functions in agent_registry.c,

without any luck. How do register for a row under these circumstances?

Thanks in advance,

George

Re: Issue with GETNEXT

[Michael J. S. <msl...@is...>]

An obtuse reference to this problem was raised 1-Dec-2000 in
http://www.geocrawler.com/lists/3/SourceForge/6845/50/4755483/

See the part about lexicographical ordering.

>>>> I agree that wasn't very good reporting on my part. <<<<


Obviously, the -coders list has not been posting my e-mails.
I've been trying to write to the list at
net...@li...,
but reviewing the archive, I know some messages do not appear.
Do you know of any problem the mail archive might have with gzip'd tar
files ? 

There are issues with my company moving between buildings.
Perhaps our e-mail server is contributing to the confusion.

Also, this is a very busy time for me.  I haven't the time
to commit to fully investigating issues soon after discovery.

I'm sorry if these inconveniences give you the impression
that I'm intentionally timing my postings to disadvantage.
My intention is to notify the folks developing the agent
in a timely manner, and providing sufficient information
to describe and reproduce the problem.


I'm attaching another copy of most of the stuff I've been writing about
recently.   I recognize that embedding createUser line is bad juju,
but this is for ease of setup for testing only. 

I have tried 4.2.pre2 and 4.2, results are the same.
I get comparable result on Linux 6.1 (this machine is a mix),
on OpenBSD 2.8 (fresh clean install),
and Solaris 2.5.1 (old, stable system).

I do not see vacmViewTreeFamilyStatus objects suffixed with ".1.0" ;
only with ".1".

Perhaps my "mkit" script, or snmpd.conf, can help explain
why you and I get different results ?


Best Regards,
-Mike Slifcak, Internet Security Systems, Inc.



Wes Hardaker wrote:
> 
> >>>>> On Tue, 05 Dec 2000 08:47:31 -0500, "Michael J. Slifcak" <msl...@is...> said:
> 
> Michael> I'm having some difficulty understanding the results I see
> Michael> when I try GETNEXT requests over tables that have multiple
> Michael> variable length indices.  I'm not getting the results that I
> Michael> expect, and I'd like to understand if this is a protocol
> Michael> issue, a MIB issue, or an agent implementation issue.
> 
> Michael, how come you wait till the day *after* a major release to
> start bringing up issues????
> 
> Anyway,
> 
> Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView002".1
> Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView003".1
> 
> Those should end in .1.0 I think.  At least they are on my machine.
> 
> Michael> #check versions of software used.
> Michael> snmpget -V
> Michael> snmpgetnext -V
> 
> And what version *were* you using?  "If you're not running our most
> recent relase (4.2) would you mind upgrading and re-submitting your
> test results to us?" (hehe)
> 
> Michael> snmpget -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView002\".1
> Michael> snmpgetnext -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView002\"
> 
> I suspect they should be a trailing .1.0 instead.
> 
> Michael> #And getnext using partial OID of last object fails.  Why ?
> 
> Michael> snmpgetnext -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView003\"
> 
> not for me!
> 
> % ../apps/snmpgetnext ... vacmViewTreeFamilyStatus.\"anonymousView000\"
> .iso.org.dod.internet.snmpV2.snmpModules.snmpVacmMIB.vacmMIBObjects.vacmMIBViews.vacmViewTreeFamilyTable.vacmViewTreeFamilyEntry.vacmViewTreeFamilyStatus."anonymousView001".1.0 = active(1)
> 
> --
> Wes Hardaker
> NAI Labs
> Network Associates

Re: Issues with "make test"

[Michael J. S. <msl...@is...>]

Wes Hardaker wrote:
> 
> >>>>> On Tue, 05 Dec 2000 11:33:38 -0500, "Michael J. Slifcak" <msl...@is...> said:
> 
> Michael> Why does running 'make test' for the newer AgentX tests
> Michael> create a size=0 /tmp/s.AANNNN file [A=alphabetic , N=numeric]
> Michael> ?
> 
> Don't know.  Maybe thats mkstemp() at work?

It could be.  But the files are cleaned up if the test passes.

> 
> Michael> Also, tests 25-28 (AgentX related) fail on OpenBSD 2.8.
> 
> Why?  what do the output of ./RUNTESTS -T 25 -V show (for example).
> 
> --
> Wes Hardaker
> NAI Labs
> Network Associates


I'm re-attaching the results.
Reply to the list if you read this message from the archive
and you don't see a "openbsd_testfail.tgz" attachment.

Regards,
-Mike Slifcak, Internet Security Systems, Inc.

Re: Issue with GETNEXT

[Wes H. <har...@us...>]

>>>>> On Tue, 05 Dec 2000 08:47:31 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView002".1
Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView003".1

What does the configuration file look like thats generating these
entries?  (rocommunity, rwuser, etc)?

-- 
Wes Hardaker
NAI Labs
Network Associates

Re: Issue with GETNEXT

[Wes H. <har...@us...>]

>>>>> On Tue, 05 Dec 2000 08:47:31 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> I'm having some difficulty understanding the results I see
Michael> when I try GETNEXT requests over tables that have multiple
Michael> variable length indices.  I'm not getting the results that I
Michael> expect, and I'd like to understand if this is a protocol
Michael> issue, a MIB issue, or an agent implementation issue.

Michael, how come you wait till the day *after* a major release to
start bringing up issues????

Anyway,

Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView002".1
Michael> SNMP-VIEW-BASED-ACM-MIB::vacmViewTreeFamilyStatus."anonymousView003".1

Those should end in .1.0 I think.  At least they are on my machine.

Michael> #check versions of software used.
Michael> snmpget -V
Michael> snmpgetnext -V

And what version *were* you using?  "If you're not running our most
recent relase (4.2) would you mind upgrading and re-submitting your
test results to us?" (hehe)

Michael> snmpget -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView002\".1
Michael> snmpgetnext -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView002\"

I suspect they should be a trailing .1.0 instead.

Michael> #And getnext using partial OID of last object fails.  Why ?

Michael> snmpgetnext -OS localhost public vacmViewTreeFamilyStatus.\"anonymousView003\"

not for me!

% ../apps/snmpgetnext ... vacmViewTreeFamilyStatus.\"anonymousView000\"
.iso.org.dod.internet.snmpV2.snmpModules.snmpVacmMIB.vacmMIBObjects.vacmMIBViews.vacmViewTreeFamilyTable.vacmViewTreeFamilyEntry.vacmViewTreeFamilyStatus."anonymousView001".1.0 = active(1)                                                    

-- 
Wes Hardaker
NAI Labs
Network Associates

Re: Issues with "make test"

[Wes H. <har...@us...>]

>>>>> On Tue, 05 Dec 2000 11:33:38 -0500, "Michael J. Slifcak" <msl...@is...> said:

Michael> Why does running 'make test' for the newer AgentX tests
Michael> create a size=0 /tmp/s.AANNNN file [A=alphabetic , N=numeric]
Michael> ?

Don't know.  Maybe thats mkstemp() at work?

Michael> Also, tests 25-28 (AgentX related) fail on OpenBSD 2.8.

Why?  what do the output of ./RUNTESTS -T 25 -V show (for example).

-- 
Wes Hardaker
NAI Labs
Network Associates

Problems for OpenBSD 2.8 agent (4.2 release)

[Michael J. S. <msl...@is...>]

ifType 232 and 240 are illegal.
ipDefaultTTL is 0, should be 1.
nlist error for cnt or _cnt not found.