net-snmp-coders — Discussion of internal project coding (Please use this OR -users, NOT both!)

Release timeline

[Hugh M. <hug...@ou...>]

Hi all,

net-snmp v5.8.1.pre2 was released a little over four months ago.

Following a lot of excellent work by Bart and others since then, what
is the proposed timeline for the next pre-release or final v5.8.1?

Thank you

Re: Disable snmpv2 and v1, and enable snmpv3.

[Craig S. <cs...@dr...>]

On Wed, 17 Jun 2020 at 16:33, SURYA T S <sur...@gm...> wrote:

> Please help me to disable snmpv1 and v2 and enable only snmpv3.
> Can we do this from snmpd.conf?
>
Just don't define any snmp v1/v2c (lines like rocommunity and rwcomunity)
and use the SNMP user commands instead.


> Observed NETSNMP_DISABLE_SNMPV2C, NETSNMP_DISABLE_SNMPV1 defines. How
> can we set and unset it?
>
That's done at compile time with things like configure --disable-snmpv1

 - Craig

Disable snmpv2 and v1, and enable snmpv3.

[SURYA T S <sur...@gm...>]

HI All.

Please help me to disable snmpv1 and v2 and enable only snmpv3.
Can we do this from snmpd.conf?

Observed NETSNMP_DISABLE_SNMPV2C, NETSNMP_DISABLE_SNMPV1 defines. How
can we set and unset it?

I want to disable v1,v2 traps, walk and get.

Thanks in advance.

Re: snmptrapd SNMP V3 support

[Magnus F. <ma...@ly...>]

On Wed, May 27, 2020 at 10:42:09AM +0000, Yefetluzzatto, Inbal wrote:
> Hello,
> 
> I currently use NET-SNMP Version:  5.7.2 which has limited SNMP V3 support.
> I am trying to set up a manager that can use Authentication protocols -  SHA-256 and MD5 with Privacy protocols AES-256 and 3DES (TDES).
> 
> I was trying to install version 5.8 on my vd  (running CentOS Linux 7), however I keep on failing during installation.
> I was using the following:
> 
>   *   ./configure --with-openssl=/usr/bin/openssl --enable-blumenthal-aes --with-mibfiles="<mib file path>" --with-transports="UDPshared Callback AAL5PVC IPX DTLSUDP TLSTCP SSH"  --with-security-modules="usm ksm tsm"  --without-root-access  --enable-internal-md5  --enable-new-features --with-sys-contact="contact" --with-sys-location="location" --with-logfile="path"  --with-persistent-directory="path" --with-dmalloc=/usr/local
> Note - I have tried with and without --with-dmalloc=/usr/local - got me to the same result.
>   *   make
> 
> and receive the following error:
> 
> libtool: compile:  gcc -I../include -I. -I../snmplib -g -O2 -DNETSNMP_ENABLE_IPV6 -fno-strict-aliasing -DNETSNMP_REMOVE_U64 -g -O2 -Ulinux -Dlinux=linux -c snmp_client.c  -fPIC -DPIC -o .libs/snmp_client.o
> In file included from ../include/net-snmp/session_api.h:324:0,
>                  from ../include/net-snmp/library/snmp_client.h:33,
>                  from ../include/net-snmp/varbind_api.h:102,
>                  from ../include/net-snmp/library/snmp_api.h:33,
>                  from ../include/net-snmp/definitions.h:23,
>                  from ../include/net-snmp/types.h:462,
>                  from snmp_client.c:94:
> ../include/net-snmp/library/snmpAAL5PVCDomain.h:18:17: fatal error: atm.h: No such file or directory
> Going over https://sourceforge.net/p/net-snmp/mailman/message/16164082/ didn't help.

You probably doesn't need support for snmp over isdn carrier so you can just
remove AAL5PVC from your configure line and try again.

/MF

Use of valid variable in entry structures

[Aferjes B. R. <are...@gm...>]

Hi All,

I generated the template for MIB using mib2c and I saw a variable valid
present in all the entry structures that I have generated.

I don't know what's the use of variable valid is. If anyone knew, please
let me know

Thanks,
Aferjes Blesswin Redeemson M

Re: snmptrapd SNMP V3 support

[Craig S. <cs...@dr...>]

On Thu, 11 Jun 2020 at 04:13, Yefetluzzatto, Inbal <Inb...@de...>
wrote:

> ../include/net-snmp/library/snmpAAL5PVCDomain.h:18:17: fatal error: atm.h:
> No such file or directory
>
atm.h is a system library header. In Debian, you would find this in
libatm1-dev package which you would need to have installed for net-snmp to
compile with this setup. I'm not sure of the exact name of the package for
your distribution but it would be something close to this name.

Ideally, configure would check this and have a complain if it wasn't there
but either way without the atm package you're not getting anything compiled.

  - Craig

snmptrapd SNMP V3 support

[Yefetluzzatto, I. <Inb...@de...>]

Hello,

I currently use NET-SNMP Version:  5.7.2 which has limited SNMP V3 support.
I am trying to set up a manager that can use Authentication protocols -  SHA-256 and MD5 with Privacy protocols AES-256 and 3DES (TDES).

I was trying to install version 5.8 on my vd  (running CentOS Linux 7), however I keep on failing during installation.
I was using the following:

  *   ./configure --with-openssl=/usr/bin/openssl --enable-blumenthal-aes --with-mibfiles="<mib file path>" --with-transports="UDPshared Callback AAL5PVC IPX DTLSUDP TLSTCP SSH"  --with-security-modules="usm ksm tsm"  --without-root-access  --enable-internal-md5  --enable-new-features --with-sys-contact="contact" --with-sys-location="location" --with-logfile="path"  --with-persistent-directory="path" --with-dmalloc=/usr/local
Note - I have tried with and without --with-dmalloc=/usr/local - got me to the same result.
  *   make

and receive the following error:

libtool: compile:  gcc -I../include -I. -I../snmplib -g -O2 -DNETSNMP_ENABLE_IPV6 -fno-strict-aliasing -DNETSNMP_REMOVE_U64 -g -O2 -Ulinux -Dlinux=linux -c snmp_client.c  -fPIC -DPIC -o .libs/snmp_client.o
In file included from ../include/net-snmp/session_api.h:324:0,
                 from ../include/net-snmp/library/snmp_client.h:33,
                 from ../include/net-snmp/varbind_api.h:102,
                 from ../include/net-snmp/library/snmp_api.h:33,
                 from ../include/net-snmp/definitions.h:23,
                 from ../include/net-snmp/types.h:462,
                 from snmp_client.c:94:
../include/net-snmp/library/snmpAAL5PVCDomain.h:18:17: fatal error: atm.h: No such file or directory
Going over https://sourceforge.net/p/net-snmp/mailman/message/16164082/ didn't help.

Is there a guideline on how to setup version 5.8 that will support SNMP V3?

Thanks in advance,
Best regards
Inbal


[Dell-EMC-XtremIO-Signature-02]
Senior Software Engineer
Direct +972 722 563 096
Office +972 722 563 000
Fax +972 9 766 1694
Inb...@de...<mailto:Inb...@de...>
XtremIO Ltd., EMC Corp, Kibbutz Glil-Yam, Herzlia 4690500, Israel

Re: Net-SNMP 5.8 core dump

[Bart V. A. <bva...@ac...>]

On 2020-05-26 10:49, David Moriconi (dmoricon) via Net-snmp-coders wrote:
> The Net-SNMP daemon crashed with the following error (full backtrace can
> be found below):
> 
> Error in `/usr/local/netsnmp/netsnmp_base/sbin/snmpd': malloc():
> smallbin double linked list corrupted: 0x000056546e6a9840
> 
> We are using Net-SNMP 5.8 built from revision rev2c837e1 of V5-8-patches
> branch.  We have an AgentX subagent connected to the daemon.
> Unfortunately, we do not know what operation causes the crash. I was
> wondering if this was a known issue and by any chance already fixed.

Please provide a way to reproduce this crash or reproduce it under
Valgrind and provide the Valgrind output.

Thanks,

Bart.

Net-SNMP 5.8 core dump

[David M. (dmoricon) <dmo...@ci...>]

Hi all,
The Net-SNMP daemon crashed with the following error (full backtrace can be found below):
Error in `/usr/local/netsnmp/netsnmp_base/sbin/snmpd': malloc(): smallbin double linked list corrupted: 0x000056546e6a9840
We are using Net-SNMP 5.8 built from revision rev2c837e1 of V5-8-patches branch.  We have an AgentX subagent connected to the daemon. Unfortunately, we do not know what operation causes the crash. I was wondering if this was a known issue and by any chance already fixed.

Regards,

Here is the full backtrace:
======= Backtrace: =========
/lib64/libc.so.6(+0x7f7c4)[0x7fb03e0637c4]
/lib64/libc.so.6(+0x82f00)[0x7fb03e066f00]
/lib64/libc.so.6(__libc_malloc+0x4c)[0x7fb03e069adc]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(snmp_clone_mem+0x45)[0x7fb03f3a3e64]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(+0x1c0fa)[0x7fb03f3a40fa]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(+0x1c47b)[0x7fb03f3a447b]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(snmp_clone_pdu+0x2c)[0x7fb03f3a4533]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35(init_agent_snmp_session+0xff)[0x7fb03fc3a983]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35(handle_snmp_packet+0x17a)[0x7fb03fc3c55b]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(+0x529e8)[0x7fb03f3da9e8]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(+0x52b80)[0x7fb03f3dab80]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(_sess_read+0x359)[0x7fb03f3db7ce]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(snmp_sess_read2+0x32)[0x7fb03f3dc710]
/usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35(snmp_read2+0x3e)[0x7fb03f3dad8a]
/usr/local/netsnmp/netsnmp_base/sbin/snmpd(+0x5084)[0x56546e196084]
/usr/local/netsnmp/netsnmp_base/sbin/snmpd(main+0x19b8)[0x56546e1958cc]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7fb03e006505]
/usr/local/netsnmp/netsnmp_base/sbin/snmpd(+0x2b99)[0x56546e193b99]
======= Memory map: ========
56546e191000-56546e198000 r-xp 00000000 fd:01 436216225 /usr/local/netsnmp/5.8.rev2c837e1/sbin/snmpd
56546e397000-56546e398000 r--p 00006000 fd:01 436216225 /usr/local/netsnmp/5.8.rev2c837e1/sbin/snmpd
56546e398000-56546e399000 rw-p 00007000 fd:01 436216225 /usr/local/netsnmp/5.8.rev2c837e1/sbin/snmpd
56546e546000-56546e728000 rw-p 00000000 00:00 0 [heap]
7fb030000000-7fb030021000 rw-p 00000000 00:00 0
7fb030021000-7fb034000000 ---p 00000000 00:00 0
7fb036870000-7fb036885000 r-xp 00000000 fd:01 25580530 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fb036885000-7fb036a84000 ---p 00015000 fd:01 25580530 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fb036a84000-7fb036a85000 r--p 00014000 fd:01 25580530 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fb036a85000-7fb036a86000 rw-p 00015000 fd:01 25580530 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fb036a86000-7fb036a8e000 r-xp 00000000 fd:01 25563045 /usr/lib64/libnss_sss.so.2
7fb036a8e000-7fb036c8d000 ---p 00008000 fd:01 25563045 /usr/lib64/libnss_sss.so.2
7fb036c8d000-7fb036c8e000 r--p 00007000 fd:01 25563045 /usr/lib64/libnss_sss.so.2
7fb036c8e000-7fb036c8f000 rw-p 00008000 fd:01 25563045 /usr/lib64/libnss_sss.so.2
7fb036c8f000-7fb036c9b000 r-xp 00000000 fd:01 25202145 /usr/lib64/libnss_files-2.17.so
7fb036c9b000-7fb036e9a000 ---p 0000c000 fd:01 25202145 /usr/lib64/libnss_files-2.17.so
7fb036e9a000-7fb036e9b000 r--p 0000b000 fd:01 25202145 /usr/lib64/libnss_files-2.17.so
7fb036e9b000-7fb036e9c000 rw-p 0000c000 fd:01 25202145 /usr/lib64/libnss_files-2.17.so
7fb036e9c000-7fb036ea2000 rw-p 00000000 00:00 0
7fb036ea2000-7fb03d3cc000 r--p 00000000 fd:01 16912899 /usr/lib/locale/locale-archive
7fb03d3cc000-7fb03d3ce000 r-xp 00000000 fd:01 25202123 /usr/lib64/libfreebl3.so
7fb03d3ce000-7fb03d5cd000 ---p 00002000 fd:01 25202123 /usr/lib64/libfreebl3.so
7fb03d5cd000-7fb03d5ce000 r--p 00001000 fd:01 25202123 /usr/lib64/libfreebl3.so
7fb03d5ce000-7fb03d5cf000 rw-p 00002000 fd:01 25202123 /usr/lib64/libfreebl3.so
7fb03d5cf000-7fb03d6d0000 r-xp 00000000 fd:01 26513274 /usr/lib64/libm-2.17.so
7fb03d6d0000-7fb03d8cf000 ---p 00101000 fd:01 26513274 /usr/lib64/libm-2.17.so
7fb03d8cf000-7fb03d8d0000 r--p 00100000 fd:01 26513274 /usr/lib64/libm-2.17.so
7fb03d8d0000-7fb03d8d1000 rw-p 00101000 fd:01 26513274 /usr/lib64/libm-2.17.so
7fb03d8d1000-7fb03dbac000 r-xp 00000000 fd:01 67332135 /usr/local/ssl/1.0.2s/lib/libcrypto.so.1.0.0
7fb03dbac000-7fb03ddab000 ---p 002db000 fd:01 67332135 /usr/local/ssl/1.0.2s/lib/libcrypto.so.1.0.0
7fb03ddab000-7fb03ddca000 r--p 002da000 fd:01 67332135 /usr/local/ssl/1.0.2s/lib/libcrypto.so.1.0.0
7fb03ddca000-7fb03ddd8000 rw-p 002f9000 fd:01 67332135 /usr/local/ssl/1.0.2s/lib/libcrypto.so.1.0.0
7fb03ddd8000-7fb03dddc000 rw-p 00000000 00:00 0
7fb03dddc000-7fb03dde3000 r-xp 00000000 fd:01 25202160 /usr/lib64/librt-2.17.so
7fb03dde3000-7fb03dfe2000 ---p 00007000 fd:01 25202160 /usr/lib64/librt-2.17.so
7fb03dfe2000-7fb03dfe3000 r--p 00006000 fd:01 25202160 /usr/lib64/librt-2.17.so
7fb03dfe3000-7fb03dfe4000 rw-p 00007000 fd:01 25202160 /usr/lib64/librt-2.17.so
7fb03dfe4000-7fb03e1a7000 r-xp 00000000 fd:01 25202132 /usr/lib64/libc-2.17.so
7fb03e1a7000-7fb03e3a7000 ---p 001c3000 fd:01 25202132 /usr/lib64/libc-2.17.so
7fb03e3a7000-7fb03e3ab000 r--p 001c3000 fd:01 25202132 /usr/lib64/libc-2.17.so
7fb03e3ab000-7fb03e3ad000 rw-p 001c7000 fd:01 25202132 /usr/lib64/libc-2.17.so
7fb03e3ad000-7fb03e3b2000 rw-p 00000000 00:00 0
7fb03e3b2000-7fb03e3b4000 r-xp 00000000 fd:01 25202166 /usr/lib64/libutil-2.17.so
7fb03e3b4000-7fb03e5b3000 ---p 00002000 fd:01 25202166 /usr/lib64/libutil-2.17.so
7fb03e5b3000-7fb03e5b4000 r--p 00001000 fd:01 25202166 /usr/lib64/libutil-2.17.so
7fb03e5b4000-7fb03e5b5000 rw-p 00002000 fd:01 25202166 /usr/lib64/libutil-2.17.so
7fb03e5b5000-7fb03e5bd000 r-xp 00000000 fd:01 25202136 /usr/lib64/libcrypt-2.17.so
7fb03e5bd000-7fb03e7bc000 ---p 00008000 fd:01 25202136 /usr/lib64/libcrypt-2.17.so
7fb03e7bc000-7fb03e7bd000 r--p 00007000 fd:01 25202136 /usr/lib64/libcrypt-2.17.so
7fb03e7bd000-7fb03e7be000 rw-p 00008000 fd:01 25202136 /usr/lib64/libcrypt-2.17.so
7fb03e7be000-7fb03e7ec000 rw-p 00000000 00:00 0
7fb03e7ec000-7fb03e7ee000 r-xp 00000000 fd:01 26513272 /usr/lib64/libdl-2.17.so
7fb03e7ee000-7fb03e9ee000 ---p 00002000 fd:01 26513272 /usr/lib64/libdl-2.17.so
7fb03e9ee000-7fb03e9ef000 r--p 00002000 fd:01 26513272 /usr/lib64/libdl-2.17.so
7fb03e9ef000-7fb03e9f0000 rw-p 00003000 fd:01 26513272 /usr/lib64/libdl-2.17.so
7fb03e9f0000-7fb03ea06000 r-xp 00000000 fd:01 26513276 /usr/lib64/libnsl-2.17.so
7fb03ea06000-7fb03ec06000 ---p 00016000 fd:01 26513276 /usr/lib64/libnsl-2.17.so
7fb03ec06000-7fb03ec07000 r--p 00016000 fd:01 26513276 /usr/lib64/libnsl-2.17.so
7fb03ec07000-7fb03ec08000 rw-p 00017000 fd:01 26513276 /usr/lib64/libnsl-2.17.so
7fb03ec08000-7fb03ec0a000 rw-p 00000000 00:00 0
7fb03ec0a000-7fb03ec21000 r-xp 00000000 fd:01 25202155 /usr/lib64/libpthread-2.17.so
7fb03ec21000-7fb03ee20000 ---p 00017000 fd:01 25202155 /usr/lib64/libpthread-2.17.so
7fb03ee20000-7fb03ee21000 r--p 00016000 fd:01 25202155 /usr/lib64/libpthread-2.17.so
7fb03ee21000-7fb03ee22000 rw-p 00017000 fd:01 25202155 /usr/lib64/libpthread-2.17.so
7fb03ee22000-7fb03ee26000 rw-p 00000000 00:00 0
7fb03ee26000-7fb03f16f000 r-xp 00000000 fd:01 595625836 /usr/local/perl/5.30.0/lib/5.30.0/x86_64-linux-thread-multi/CORE/libperl.so
7fb03f16f000-7fb03f36f000 ---p 00349000 fd:01 595625836 /usr/local/perl/5.30.0/lib/5.30.0/x86_64-linux-thread-multi/CORE/libperl.so
7fb03f36f000-7fb03f382000 rw-p 00349000 fd:01 595625836 /usr/local/perl/5.30.0/lib/5.30.0/x86_64-linux-thread-multi/CORE/libperl.so
7fb03f382000-7fb03f388000 rw-p 00000000 00:00 0
7fb03f388000-7fb03f463000 r-xp 00000000 fd:01 419810009 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35.0.1
7fb03f463000-7fb03f662000 ---p 000db000 fd:01 419810009 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35.0.1
7fb03f662000-7fb03f665000 r--p 000da000 fd:01 419810009 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35.0.1
7fb03f665000-7fb03f668000 rw-p 000dd000 fd:01 419810009 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmp.so.35.0.1
7fb03f668000-7fb03f72e000 rw-p 00000000 00:00 0
7fb03f72e000-7fb03f8b3000 r-xp 00000000 fd:01 419842655 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpmibs.so.35.0.1
7fb03f8b3000-7fb03fab3000 ---p 00185000 fd:01 419842655 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpmibs.so.35.0.1
7fb03fab3000-7fb03fab8000 r--p 00185000 fd:01 419842655 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpmibs.so.35.0.1
7fb03fab8000-7fb03fabd000 rw-p 0018a000 fd:01 419842655 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpmibs.so.35.0.1
7fb03fabd000-7fb03fbf6000 rw-p 00000000 00:00 0
7fb03fbf6000-7fb03fc71000 r-xp 00000000 fd:01 419809984 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35.0.1
7fb03fc71000-7fb03fe70000 ---p 0007b000 fd:01 419809984 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35.0.1
7fb03fe70000-7fb03fe72000 r--p 0007a000 fd:01 419809984 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35.0.1
7fb03fe72000-7fb03fe73000 rw-p 0007c000 fd:01 419809984 /usr/local/netsnmp/5.8.rev2c837e1/lib/libnetsnmpagent.so.35.0.1
7fb03fe73000-7fb03fe95000 r-xp 00000000 fd:01 25167252 /usr/lib64/ld-2.17.so
7fb04007f000-7fb040086000 rw-p 00000000 00:00 0
7fb040091000-7fb040094000 rw-p 00000000 00:00 0
7fb040094000-7fb040095000 r--p 00021000 fd:01 25167252 /usr/lib64/ld-2.17.so
7fb040095000-7fb040096000 rw-p 00022000 fd:01 25167252 /usr/lib64/ld-2.17.so
7fb040096000-7fb040097000 rw-p 00000000 00:00 0
7ffc1dab3000-7ffc1db06000 rw-p 00000000 00:00 0 [stack]
7ffc1db6d000-7ffc1db6f000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

[http://www.cisco.com/c/dam/m/en_us/signaturetool/images/banners/standard/09_standard_graphic.png]
David Moriconi
Software Engineer
dmo...@ci...<mailto:dmo...@ci...>
Tel: 5143333808
Cisco Systems Canada Co. / Les Systemes Cisco Canada CIE
Cisco.com<http://www.cisco.com/web/CA/>
[http://www.cisco.com/assets/swa/img/thinkbeforeyouprint.gif]
Think before you print.
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
Please click here<http://www.cisco.com/c/en/us/about/legal/terms-sale-software-license-agreement/company-registration-information.html> for Company Registration Information.

Re: tmpfs ignores

[Bart V. A. <bva...@ac...>]

On 2020-05-26 04:46, Craig Small wrote:
> I'm following up Debian bug report 685877 The main issue is tmpfs is
> part of the HRFS_ignores array and so all tmpfs filesystems are
> ignored and not displayed.
> 
> This was added by Niels Baggesen back in 2004 with commit
> 2dfdd7cb73ec8bc670888939568f2bfa49f73943 which seems to be just an
> update of the filesystem types.
> 
> The interesting thing is tmpfs is used a lot more used now.  I'm not
> sure if it should be included in filesystem list or not. Does the MIB
> definition determine if it should be in? The only thing I could find
> was user directories.

I haven't found anyting in https://tools.ietf.org/html/rfc2790 that
requires to exclude tmpfs.

A candidate fix has been checked in on the v5.8 and master branches.
Please retest.

Thanks,

Bart.

tmpfs ignores

[Craig S. <cs...@dr...>]

Hi,
  I'm following up Debian bug report 685877 The main issue is tmpfs is
part of the HRFS_ignores array and so all tmpfs filesystems are
ignored and not displayed.

This was added by Niels Baggesen back in 2004 with commit
2dfdd7cb73ec8bc670888939568f2bfa49f73943 which seems to be just an
update of the filesystem types.

The interesting thing is tmpfs is used a lot more used now.  I'm not
sure if it should be included in filesystem list or not. Does the MIB
definition determine if it should be in? The only thing I could find
was user directories.

 - Craig

1: https://bugs.debian.org/685877

SHA1 AES192 decryption problems

[peteryzwei <pet...@ya...>]

hello,I am using Net-snmp 5.8 and for these 2 auth/priv combinationsSHA1  AES192SHA1 AES256
decryption always fails on receiving an encrypted message. sc_decrypt() is successful but the parse in snmpv3_scopedPDU_parse() fails on ASN error.
I built net-snmp on windows OS 10 home.
I use wireshark and it has no problem decrypting the messages from the SNMP browser, so I know the pass phrases are correct.
I've tried other combinations successful, such as SHA1 AES128, SHA256 AES256, SHA224 AES192, etc.So the 2 combinations above seem to have problems.
I use function usm_parse_create_usmUser("", "shaaes192 SHA 1234567890 AES192 1234567890")to create the USM user. There is no error on creation. I see that usm_extend_user_kul() is called for the 2 cases, whereasit is not called for other combinations. Could there be a bug in that function ?
You can try to reproduce the problem by simply creating a user with those auth/priv combination and send a SNMP message froma browser.
regards,Peter

source ip for snmp-responses

[SURYA T S <sur...@gm...>]

Hi Team,


I want to change source ip for snmp-response, I was able to use
clientaddr token for changing source ip in snmp trap. but snmp
responses is not working same way.


Currently responses are using srcip from snmp request destination ip.
I tried changing s_addr in local addr_pair, but sendmsg was failing
and packet was sent via interface.


I am using netsnmp ver 5.7.2

Please suggest me better way to change srcip in snmpresponses,

Any changes we can do from pdu, or Sessions level / Socket level.
setting Clientaddr token is not working for snmpresponses.


Thanks in advance.
Surya

Trap engine ID eth0

[Philippe D. <phd...@gm...>]

Hello all,

I have a question linked to snmp traps in V3 version.

In V2C, my code is working and in V3 the same code is also working except that I need to define an engine ID on both sides (Tx and Rx). I use snmp V3 protocol for authentication purpose only.

So, I’m wondering if it’s possible to send a SNMP V3 Trap by using the EngineID linked to eth0 for example.
The main question which hidden is: How the receiver knows this engine ID ? Or Do we have to use a hard coded value ? Is there a key exchange mechanism ?

For snmpset or snmpget, this behavior is described in the snmpd.conf file.

By advance thanks for your help.
Philippe DENIS

Re: response source IP for SNMP walk

[chandrasekharreddy c. <cha...@ho...>]

Thanks Bill, I will try .

Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Bill Fenner <fe...@gm...>
Sent: Friday, May 15, 2020 6:07:10 PM
To: chandrasekharreddy chinnapareddygari <cha...@ho...>
Cc: net...@li... <net...@li...>
Subject: Re: response source IP for SNMP walk

On Wed, May 13, 2020 at 9:47 AM chandrasekharreddy chinnapareddygari <cha...@ho...<mailto:cha...@ho...>> wrote:
Hi team,


I want to  change source ip for snmpwalk like changing source IP for traps.
I know , we can use clientaddr for changing source IP for traps.


Is there any token is available to change source IP for snmpwalk.

Yes, in snmpapp.conf, you can use a line like

[snmp] clientaddr 192.0.2.1

to set the client addr for all the apps like snmpget, snmpwalk, etc.

  Bill

Re: response source IP for SNMP walk

[Bill F. <fe...@gm...>]

On Wed, May 13, 2020 at 9:47 AM chandrasekharreddy chinnapareddygari <
cha...@ho...> wrote:

> Hi team,
>
>
> I want to  change source ip for snmpwalk like changing source IP for traps.
> I know , we can use clientaddr for changing source IP for traps.
>
>
> Is there any token is available to change source IP for snmpwalk.
>

Yes, in snmpapp.conf, you can use a line like

[snmp] clientaddr 192.0.2.1

to set the client addr for all the apps like snmpget, snmpwalk, etc.

  Bill

Re: response source IP for SNMP walk

[Stuart H. <st...@sp...>]

On 2020/05/13 13:45, chandrasekharreddy chinnapareddygari wrote:
> Hi team,
> 
> 
> I want to  change source ip for snmpwalk like changing source IP for traps.
> I know , we can use clientaddr for changing source IP for traps.
> 
> 
> Is there any token is available to change source IP for snmpwalk.

No, you'll need to do this in your OS if it offers such a facility,
otherwise modify the code.

response source IP for SNMP walk

[chandrasekharreddy c. <cha...@ho...>]

Hi team,


I want to  change source ip for snmpwalk like changing source IP for traps.
I know , we can use clientaddr for changing source IP for traps.


Is there any token is available to change source IP for snmpwalk.

Please help me .


Thanks,
Chandra


Get Outlook for Android<https://aka.ms/ghei36>

A simple C program which sends v2c informs do not make retries in case of unavailable destination

[<AYa...@ib...>]

Hello Everyone!

I have a question. I want to send SNMP v2c informs using C and net-snmp 
module in linux SLES 12.
To do this I created the following simple program where everything comes 
to send_trap_to_sess() function :

#include <net-snmp/net-snmp-config.h>
#include <net-snmp/net-snmp-includes.h>
oid             objid_sysuptime[] = { 1, 3, 6, 1, 2, 1, 1, 3, 0 };
oid             objid_id[] = { 1,3,6,1,4,1,78945,1,1,2,4,0};
oid             objid_name[] = { 1,3,6,1,4,1,78945,1,1,2,1,0};
oid              trap_oid[] = {1,3,6,1,4,1,78945,1,1,1,1,1};
int main()
{
    netsnmp_session session, *ss;
    netsnmp_pdu    *pdu, *response;
    char *trap = NULL;

    char comm[] = "public";
    snmp_sess_init( &session );
    session.version = SNMP_VERSION_2c;
    session.community = comm;
    session.community_len = strlen(session.community);
    session.peername = "192.168.4.10:1234";
    session.retries = 3;
    session.timeout = 1000;
    ss = snmp_open(&session);
    if (!ss) {
      snmp_sess_perror("ack", &session);
      exit(1);
    }
    pdu = snmp_pdu_create(SNMP_MSG_INFORM);
    pdu->community = comm;
    pdu->community_len = strlen(comm);
    pdu->trap_type = SNMP_TRAP_ENTERPRISESPECIFIC;
    long sysuptime;
    char csysuptime [20];
    sysuptime = get_uptime ();
    sprintf (csysuptime, "%ld", sysuptime);
    trap = csysuptime;
    snmp_add_var (pdu, objid_sysuptime, sizeof (objid_sysuptime)/sizeof
(oid),'t', trap);
    snmp_add_var(pdu, trap_oid, OID_LENGTH(trap_oid), 'o', 
"1.3.6.1.4.1.78945.1.1.1.1.1");
    snmp_add_var(pdu, objid_name, OID_LENGTH(objid_name), 's', "Test Name"
);
    snmp_add_var(pdu, objid_id, OID_LENGTH(objid_id) , 'i', "5468");
    send_trap_to_sess (ss, pdu);
    snmp_close(ss);
    return (0);
}


Frankly speaking this is modified part of code taken from 
https://stackoverflow.com/questions/30050542/how-to-send-v2-traps-in-net-snmp-using-c 
 where a user asked how to send snmp v2c trap using C. 
Here I modified creation of pdu:
pdu = snmp_pdu_create(SNMP_MSG_INFORM);
and added assignments of retries and timeout values for informs
session.retries = 3;
session.timeout = 1000;

This example works quite well. I see that it sends inform request in 
wireshark output. But there is one problem: If the destination is not 
available it will not do any retries despite that this is an inform.

Could you please give me a suggestion what I do wrong here? 
Thank you in advance.

Best regards, 
Andrei Yahorau

Get IPAddress type inside Table from created MIB timeout

[António M. <ant...@ei...>]

Hi. I'm struggling with this for 3 days now...


I do not understand why, but when I try to get a IPAddress from a table inside my MIB, it always gets timeout and all other types work. I tried with SNMPb and the GET works just fine.


With snmpget command does not work either.


Tried with version 5.8 and 5.8.1.pre2


Below, I leave my C client code and my MIB.


############################## CLIENT CODE###################################


   netsnmp_session *sess_handle = setup_snmp_session(SNMP_VERSION_2c,(unsigned char *)("public"),(unsigned char *)ip);
    if(sess_handle != NULL)
    {
        int count=1;
        netsnmp_pdu *pdu;
        netsnmp_pdu *response;
        netsnmp_variable_list *vars;

        oid anOID[MAX_OID_LEN];
        size_t anOID_len;
        int status;

        pdu = snmp_pdu_create(SNMP_MSG_GET);

        anOID_len = MAX_OID_LEN;
        if (!get_node(oidname, anOID, &anOID_len))
        {
            snmp_perror(oidname);
            return 0;
        }


        oid o[] = { 1,3,6,1,4,1,26364,2,1,1,1,4,0};
        snmp_add_null_var(pdu, o, OID_LENGTH(o));
        //snmp_add_null_var(pdu, anOID, anOID_len);


        status = snmp_synch_response(sess_handle, pdu, &response);


        /*
     * Process the response.
     */
        if (status == STAT_SUCCESS )
        {
            if(response->errstat == SNMP_ERR_NOERROR)
            {
                /* manipuate the information ourselves */
                for(vars = response->variables; vars; vars = vars->next_variable)
                {
                    fprint_variable(stderr, vars->name, vars->name_length, vars);


                    if (vars->type == ASN_IPADDRESS)
                    {
                        char auxIp[INET_ADDRSTRLEN];

                        memset(auxIp, 0, sizeof(auxIp));

                        inet_ntop( AF_INET, &(vars->val.counter64->high), auxIp, sizeof(auxIp));

                        fprintf(stderr,"%s\n", auxIp);
                    }
                    else
                    {
                        if (vars->type == ASN_INTEGER)
                        {
                            fprintf(stderr,"%d\n", vars->val.counter64->high);
                        }
                        else if (vars->type == ASN_OCTET_STR)
                        {
                            fprintf(stderr,"%s\n",vars->val.string);
                        }
                        else if (vars->type == ASN_UNSIGNED)
                        {
                            fprintf(stderr,"%lu\n", vars->val.counter64->high);
                        }
                        else
                        {

                            fprintf(stderr,"value #%d is NOT a integer! Ack!\n", count++);
                        }
                    }
                }
            }
            else {
                /*
                         * error in response, print it
                         */
                if (response->errstat == SNMP_ERR_NOSUCHNAME) {
                    fprintf(stderr,"End of MIB.\n");
                } else {
                    fprintf(stderr, "Error in packet.\nReason: %s\n",
                            snmp_errstring(response->errstat));
                    if (response->errindex != 0) {
                        fprintf(stderr, "Failed object: ");
                        for (count = 1, vars = response->variables;
                             vars && (count != response->errindex);
                             vars = vars->next_variable, count++)
                            /*EMPTY*/;
                        if (vars)
                            fprint_objid(stderr, vars->name,
                                         vars->name_length);
                        fprintf(stderr, "\n");
                    }
                }
            }
        } else {
            /*
              * FAILURE: print what went wrong!
              */

            if (status == STAT_SUCCESS)
            {
                fprintf(stderr, "Error in packet\nReason: %s\n",snmp_errstring(response->errstat));
            }
            else if (status == STAT_TIMEOUT)
            {
                fprintf(stderr, "Timeout: No response from %s.\n", sess_handle->peername);
            }
            else
            {
                snmp_sess_perror("snmpdemoapp", sess_handle);
            }
        }
    }
    snmp_close(sess_handle);
    return 0;



########MIB  ##########################


connectionTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF ConnectionEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
    "Table with the Connections available to iccs7 application"
    ::= { network 1 }

connectionEntry OBJECT-TYPE
    SYNTAX      ConnectionEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
    "Connection Information"
    INDEX   { connectionIndex }
    ::= { connectionTable 1 }

ConnectionEntry ::= SEQUENCE {
    connectionIndex        Unsigned32,
    connectionName             OCTET STRING,
    connectionMethod           OCTET STRING,
    connectionIpAddress      IpAddress,
    connectionNetmask          Unsigned32,
    connectionGatewayAddress  IpAddress
}


connectionIndex OBJECT-TYPE
    SYNTAX      Unsigned32
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
    "Connection Index"
    ::= { connectionEntry 1 }

connectionName OBJECT-TYPE
    SYNTAX      OCTET STRING (SIZE(0..64))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
    "Connection Name"
    ::= { connectionEntry 2 }

connectionMethod OBJECT-TYPE
    SYNTAX      OCTET STRING
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
    "The method to obtain IP address"
    ::= { connectionEntry 3 }

connectionIpAddress OBJECT-TYPE
    SYNTAX      IpAddress
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
    "IP Address Connection"
    ::= { connectionEntry 4 }

connectionNetmask OBJECT-TYPE
    SYNTAX      Unsigned32 (0..32)
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
    "IP Netmask"
    ::= { connectionEntry 5 }

connectionGatewayAddress OBJECT-TYPE
    SYNTAX      IpAddress
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
    "Gateway Address"
    ::= { connectionEntry 6 }


Thank you



www.eid.pt

EID, S.A.
Capital Social €1.100.000
N° de matricula unico 501 400 699

DISCLAIMER
nubisnetworks.com; spf=pass smtp.mailfrom=ant...@ei... smtp.helo=eid.pt

Re: Issue with trapsess in snmpd.conf file

[Magnus F. <ma...@ly...>]

On Mon, May 04, 2020 at 01:54:04AM +0200, Philippe Denis wrote:
> > Hi Magnus,
> >
> > Thanks for your answer.
> 
> Firstly, when asking things on a mailing list you should keep the whole
> conversation on the mailing list as I ain't interested in doing unpaid
> consultancy work.
> 
> > Now, the warning is not more present but no trap is received (observation
> done with tcpdump).
> >
> > Is there any keyword to address  in the Agent X ?
> >
> > Do you have a simple example to test ?
> 
> This require some help from your side, could you please tell me the exact
> commands you use to start your subagent as well as the master agent (snmpd).
> 
> [Phil]: For starting the subagent, I called './Mydaemon -Dtdomain'   and
> for the Master Agent "/usr/local/sbin/snmpd  -f -Lo -C -c
> /var/net-snmp/Mysnmpd.conf"
> The log of the subagent is the following one:
> registered debug token agentx, 1
> registered debug token tdomain, 1
> Log handling defined - disabling stderr
> tdomain: netsnmp_tdomain_init() called
> tdomain: domain_list -> { iso.3.6.1.6.1.1, "udp" } -> {
> iso.3.6.1.2.1.100.1.5, "tcp" } -> { iso.3.6.1.4.1.8072.3.3.7, "alias" } ->
> { iso.3.6.1.2.1.100.1.13, "unix" } -> [NIL]
> agentx_register_app_config_handler: registering .conf token for
> "agentxsocket"
> agentx_register_app_config_handler: registering .conf token for
> "agentxperms"
> agentx_register_app_config_handler: registering .conf token for
> "agentxRetries"
> agentx_register_app_config_handler: registering .conf token for
> "agentxTimeout"

Here you try to bind a udp port to 193.168.1.1

> tdomain: tdomain_transport_full("snmptrap", "193.168.1.1", 0, "[NIL]",
> "[NIL]")
> tdomain: checking for host specific config hosts/193.168.1.1
> tdomain: Use application default domains "udp" "udp6"
> tdomain: Found domain "udp" from specifier "udp"
> tdomain: trying domain "udp" address "193.168.1.1" default address ":162"
> tdomain: tdomain_transport_full("snmptrap", "193.168.1.10", 0, "[NIL]",
> "[NIL]")
> tdomain: checking for host specific config hosts/193.168.1.10
> tdomain: Use application default domains "udp" "udp6"
> tdomain: Found domain "udp" from specifier "udp"
> tdomain: trying domain "udp" address "193.168.1.10" default address ":162"
> tdomain: tdomain_transport_full("snmptrap", "193.168.2.1", 0, "[NIL]",
> "[NIL]")
> tdomain: checking for host specific config hosts/193.168.2.1
> tdomain: Use application default domains "udp" "udp6"
> tdomain: Found domain "udp" from specifier "udp"
> tdomain: trying domain "udp" address "193.168.2.1" default address ":162"

Here you create the socket AgentX is supposed to listen on

> Turning on AgentX master support.
> agentx/config: port spec: /var/agentx/master
> agentx/config: port permissions: 777 777
> agentx/config: socket permissions: 777 (511)
> agentx/config: directory permissions: 777 (511)


Here you try to create a server on udp:161

> tdomain: tdomain_transport_full("snmp", "udp:161", 1, "[NIL]", "[NIL]")
> tdomain: Found domain "udp" from specifier "udp"
> tdomain: trying domain "udp" address "161" default address ":161"

and here that failed, probably because your snmpd is already listening
on that port.

> Error opening specified endpoint "udp:161"
> Server Exiting with code 1
> NET-SNMP version 5.7.3 AgentX subagent connected

This looks like the log I would expect from snmpd with a master agent,
not the log from a subagent.

/MF

> [Phil]: Here is the content of the Mysnmpd.conf file
> 
> #  Listen for connections on all interfaces
> agentAddress  udp:161
> 
> # MAC Address and eth0 used to create the SNMPv3
> engineIDType 3
> engineIDNIC eth0
> 
> view   systemonly  included   .1.3.6.1.2.1.1
> view   systemonly  included   .1.3.6.1.2.1.25.1
> rwuser systemadm
> 
> trapsess -v3 -u systemadm localhost
> trapsess -v3 -u systemadm 193.168.1.1
> trapsess -v3 -u systemadm193.168.1.10
> trapsess -v3 -u systemadm193.168.2.1
> 
> master agentx
> agentXSocket /var/agentx/master
> agentXperms 777 777
> 
> [Phil]: How to know if a trap is sent ? Is there a specific keyword in the
> same principle that '-Dagentx' ?
> Thanks.
> Philippe
> 
>  /MF
> 
> Le mer. 29 avr. 2020 ?? 16:19, Magnus Fromreide <ma...@ly...> a
> ??crit :
> 
> > On Wed, Apr 29, 2020 at 01:22:52PM +0200, Philippe Denis wrote:
> > > Hi Magnus,
> > >
> > > Thanks for your answer.
> >
> > Firstly, when asking things on a mailing list you should keep the whole
> > conversation on the mailing list as I ain't interested in doing unpaid
> > consultancy work.
> >
> > > Now, the warning is not more present but no trap is received
> > (observation done with tcpdump).
> > >
> > > Is there any keyword to address  in the Agent X ?
> > >
> > > Do you have a simple example to test ?
> >
> > This require some help from your side, could you please tell me the exact
> > commands you use to start your subagent as well as the master agent
> > (snmpd).
> >
> > /MF
> >
> > > Best regards
> > > Philippe DENIS
> > >
> > > > Le 29 avr. 2020 ?? 08:26, Magnus Fromreide <ma...@ly...> a
> > ??crit :
> > > >
> > > > ???On Wed, Apr 29, 2020 at 02:46:30AM +0200, Philippe Denis wrote:
> > > >> Hello all,
> > > >>
> > > >> I???m facing several issues when I???ve tried to send V3 traps from my
> > Agent X to the master agent to trap recipient. The program linked to the
> > trap generation was written by mib2c tool mainly. (Only dummies variables
> > and values added)
> > > >>
> > > >> I???ve added in my configuration file snmpd.conf file, the following
> > line:
> > > >> trapsess 192.1.2.1
> > > >>
> > > >> When I start the agent, I got the following error message ???no
> > community specified.??? but when reading the man page it looks that the trap
> > community is for trapsink, trap2sink and trapinform.
> > > >>
> > > >> Is it correct ? Is there any option to use to know what is wrong ?
> > > >
> > > > In the man page it says that trapsess should take arguments like
> > snmptrapd.
> > > >
> > > > In order to experiment I would run
> > > >
> > > >  snmpd -Lo -d -f --trapsess="trapsess-params" 127.0.0.1
> > > >
> > > > and then stop snmpd with Ctrl-C so for my first attempt, similar to
> > > > yours, I run
> > > >
> > > >  snmpd -Lo -d -f --trapsess="127.0.0.1" 127.0.0.1
> > > >
> > > > and snmpd happily prints
> > > >
> > > >  Security name is missing.Cannot add new trap destination internal0
> > > >
> > > > so something differs between our agents or configs. If I try with
> > > >
> > > >  snmpd -Lo -d -f --trapsess="-v2c 127.0.0.1" 127.0.0.1
> > > >
> > > > then my snmpd prints
> > > >
> > > >  No community name specified.
> > > >
> > > > and I suppose that is similar enough to your case but it is also a v2
> > > > notification so lets say explicitly that we want a v3 notification
> > > >
> > > >  snmpd -Lo -d -f --trapsess="-v3 127.0.0.1" 127.0.0.1
> > > >
> > > > prints
> > > >
> > > >  Security name is missing.Cannot add new trap destination internal0
> > > >
> > > > and the snmpcmd.1 man page states that -u is used to specify a
> > securityName
> > > > so lets try that
> > > >
> > > >  snmpd -Lo -d -f --trapsess="-v3 -u mySecurityName 127.0.0.1" 127.0.0.1
> > > >
> > > > This results in my snmpd sending something with mySecurityName in it
> > so I
> > > > suppose that is the startup notification.
> > > >
> > > > In order to make this permanent I then add
> > > >
> > > > trapsess -v3 -u mySecurityName 127.0.0.1
> > > >
> > > > to my snmpd.conf
> > > >
> > > > Does this help?
> > > >
> > > > (The snmpd parameters mean
> > > > -Lo - send logs to stdout
> > > > -d  - log all traffic
> > > > -f  - run in the foreground)
> > > >
> > > >> I???m using tcpdump to sniff network but nothing is sent although the
> > gdb debugger says that send_v2trap is OK.
> > > >>
> > > >> Thanks by advance for your help.
> > > >>
> > > >> Best Regards.
> > > >> Ph. DENIS
> > > >>
> > > >> _______________________________________________
> > > >> Net-snmp-coders mailing list
> > > >> Net...@li...
> > > >> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
> >
> 
> 
> -- 
> Cordialement
> Ph. DENIS


> _______________________________________________
> Net-snmp-coders mailing list
> Net...@li...
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Re: Issue with trapsess in snmpd.conf file

[Philippe D. <phd...@gm...>]

> Hi Magnus,
>
> Thanks for your answer.

Firstly, when asking things on a mailing list you should keep the whole
conversation on the mailing list as I ain't interested in doing unpaid
consultancy work.

> Now, the warning is not more present but no trap is received (observation
done with tcpdump).
>
> Is there any keyword to address  in the Agent X ?
>
> Do you have a simple example to test ?

This require some help from your side, could you please tell me the exact
commands you use to start your subagent as well as the master agent (snmpd).

[Phil]: For starting the subagent, I called './Mydaemon -Dtdomain'   and
for the Master Agent "/usr/local/sbin/snmpd  -f -Lo -C -c
/var/net-snmp/Mysnmpd.conf"
The log of the subagent is the following one:
registered debug token agentx, 1
registered debug token tdomain, 1
Log handling defined - disabling stderr
tdomain: netsnmp_tdomain_init() called
tdomain: domain_list -> { iso.3.6.1.6.1.1, "udp" } -> {
iso.3.6.1.2.1.100.1.5, "tcp" } -> { iso.3.6.1.4.1.8072.3.3.7, "alias" } ->
{ iso.3.6.1.2.1.100.1.13, "unix" } -> [NIL]
agentx_register_app_config_handler: registering .conf token for
"agentxsocket"
agentx_register_app_config_handler: registering .conf token for
"agentxperms"
agentx_register_app_config_handler: registering .conf token for
"agentxRetries"
agentx_register_app_config_handler: registering .conf token for
"agentxTimeout"
tdomain: tdomain_transport_full("snmptrap", "193.168.1.1", 0, "[NIL]",
"[NIL]")
tdomain: checking for host specific config hosts/193.168.1.1
tdomain: Use application default domains "udp" "udp6"
tdomain: Found domain "udp" from specifier "udp"
tdomain: trying domain "udp" address "193.168.1.1" default address ":162"
tdomain: tdomain_transport_full("snmptrap", "193.168.1.10", 0, "[NIL]",
"[NIL]")
tdomain: checking for host specific config hosts/193.168.1.10
tdomain: Use application default domains "udp" "udp6"
tdomain: Found domain "udp" from specifier "udp"
tdomain: trying domain "udp" address "193.168.1.10" default address ":162"
tdomain: tdomain_transport_full("snmptrap", "193.168.2.1", 0, "[NIL]",
"[NIL]")
tdomain: checking for host specific config hosts/193.168.2.1
tdomain: Use application default domains "udp" "udp6"
tdomain: Found domain "udp" from specifier "udp"
tdomain: trying domain "udp" address "193.168.2.1" default address ":162"
Turning on AgentX master support.
agentx/config: port spec: /var/agentx/master
agentx/config: port permissions: 777 777
agentx/config: socket permissions: 777 (511)
agentx/config: directory permissions: 777 (511)
tdomain: tdomain_transport_full("snmp", "udp:161", 1, "[NIL]", "[NIL]")
tdomain: Found domain "udp" from specifier "udp"
tdomain: trying domain "udp" address "161" default address ":161"
Error opening specified endpoint "udp:161"
Server Exiting with code 1
NET-SNMP version 5.7.3 AgentX subagent connected

[Phil]: Here is the content of the Mysnmpd.conf file

#  Listen for connections on all interfaces
agentAddress  udp:161

# MAC Address and eth0 used to create the SNMPv3
engineIDType 3
engineIDNIC eth0

view   systemonly  included   .1.3.6.1.2.1.1
view   systemonly  included   .1.3.6.1.2.1.25.1
rwuser systemadm

trapsess -v3 -u systemadm localhost
trapsess -v3 -u systemadm 193.168.1.1
trapsess -v3 -u systemadm193.168.1.10
trapsess -v3 -u systemadm193.168.2.1

master agentx
agentXSocket /var/agentx/master
agentXperms 777 777

[Phil]: How to know if a trap is sent ? Is there a specific keyword in the
same principle that '-Dagentx' ?
Thanks.
Philippe

 /MF

Le mer. 29 avr. 2020 à 16:19, Magnus Fromreide <ma...@ly...> a
écrit :

> On Wed, Apr 29, 2020 at 01:22:52PM +0200, Philippe Denis wrote:
> > Hi Magnus,
> >
> > Thanks for your answer.
>
> Firstly, when asking things on a mailing list you should keep the whole
> conversation on the mailing list as I ain't interested in doing unpaid
> consultancy work.
>
> > Now, the warning is not more present but no trap is received
> (observation done with tcpdump).
> >
> > Is there any keyword to address  in the Agent X ?
> >
> > Do you have a simple example to test ?
>
> This require some help from your side, could you please tell me the exact
> commands you use to start your subagent as well as the master agent
> (snmpd).
>
> /MF
>
> > Best regards
> > Philippe DENIS
> >
> > > Le 29 avr. 2020 à 08:26, Magnus Fromreide <ma...@ly...> a
> écrit :
> > >
> > > On Wed, Apr 29, 2020 at 02:46:30AM +0200, Philippe Denis wrote:
> > >> Hello all,
> > >>
> > >> I’m facing several issues when I’ve tried to send V3 traps from my
> Agent X to the master agent to trap recipient. The program linked to the
> trap generation was written by mib2c tool mainly. (Only dummies variables
> and values added)
> > >>
> > >> I’ve added in my configuration file snmpd.conf file, the following
> line:
> > >> trapsess 192.1.2.1
> > >>
> > >> When I start the agent, I got the following error message “no
> community specified.” but when reading the man page it looks that the trap
> community is for trapsink, trap2sink and trapinform.
> > >>
> > >> Is it correct ? Is there any option to use to know what is wrong ?
> > >
> > > In the man page it says that trapsess should take arguments like
> snmptrapd.
> > >
> > > In order to experiment I would run
> > >
> > >  snmpd -Lo -d -f --trapsess="trapsess-params" 127.0.0.1
> > >
> > > and then stop snmpd with Ctrl-C so for my first attempt, similar to
> > > yours, I run
> > >
> > >  snmpd -Lo -d -f --trapsess="127.0.0.1" 127.0.0.1
> > >
> > > and snmpd happily prints
> > >
> > >  Security name is missing.Cannot add new trap destination internal0
> > >
> > > so something differs between our agents or configs. If I try with
> > >
> > >  snmpd -Lo -d -f --trapsess="-v2c 127.0.0.1" 127.0.0.1
> > >
> > > then my snmpd prints
> > >
> > >  No community name specified.
> > >
> > > and I suppose that is similar enough to your case but it is also a v2
> > > notification so lets say explicitly that we want a v3 notification
> > >
> > >  snmpd -Lo -d -f --trapsess="-v3 127.0.0.1" 127.0.0.1
> > >
> > > prints
> > >
> > >  Security name is missing.Cannot add new trap destination internal0
> > >
> > > and the snmpcmd.1 man page states that -u is used to specify a
> securityName
> > > so lets try that
> > >
> > >  snmpd -Lo -d -f --trapsess="-v3 -u mySecurityName 127.0.0.1" 127.0.0.1
> > >
> > > This results in my snmpd sending something with mySecurityName in it
> so I
> > > suppose that is the startup notification.
> > >
> > > In order to make this permanent I then add
> > >
> > > trapsess -v3 -u mySecurityName 127.0.0.1
> > >
> > > to my snmpd.conf
> > >
> > > Does this help?
> > >
> > > (The snmpd parameters mean
> > > -Lo - send logs to stdout
> > > -d  - log all traffic
> > > -f  - run in the foreground)
> > >
> > >> I’m using tcpdump to sniff network but nothing is sent although the
> gdb debugger says that send_v2trap is OK.
> > >>
> > >> Thanks by advance for your help.
> > >>
> > >> Best Regards.
> > >> Ph. DENIS
> > >>
> > >> _______________________________________________
> > >> Net-snmp-coders mailing list
> > >> Net...@li...
> > >> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>


-- 
Cordialement
Ph. DENIS

Re: Issue with trapsess in snmpd.conf file

[Magnus F. <ma...@ly...>]

On Wed, Apr 29, 2020 at 01:22:52PM +0200, Philippe Denis wrote:
> Hi Magnus,
> 
> Thanks for your answer. 

Firstly, when asking things on a mailing list you should keep the whole
conversation on the mailing list as I ain't interested in doing unpaid
consultancy work.

> Now, the warning is not more present but no trap is received (observation done with tcpdump).
> 
> Is there any keyword to address  in the Agent X ?
> 
> Do you have a simple example to test ?

This require some help from your side, could you please tell me the exact
commands you use to start your subagent as well as the master agent (snmpd).

/MF

> Best regards 
> Philippe DENIS
> 
> > Le 29 avr. 2020 à 08:26, Magnus Fromreide <ma...@ly...> a écrit :
> > 
> > On Wed, Apr 29, 2020 at 02:46:30AM +0200, Philippe Denis wrote:
> >> Hello all,
> >> 
> >> I’m facing several issues when I’ve tried to send V3 traps from my Agent X to the master agent to trap recipient. The program linked to the trap generation was written by mib2c tool mainly. (Only dummies variables and values added)
> >> 
> >> I’ve added in my configuration file snmpd.conf file, the following line:
> >> trapsess 192.1.2.1
> >> 
> >> When I start the agent, I got the following error message “no community specified.” but when reading the man page it looks that the trap community is for trapsink, trap2sink and trapinform.
> >> 
> >> Is it correct ? Is there any option to use to know what is wrong ?
> > 
> > In the man page it says that trapsess should take arguments like snmptrapd.
> > 
> > In order to experiment I would run
> > 
> >  snmpd -Lo -d -f --trapsess="trapsess-params" 127.0.0.1
> > 
> > and then stop snmpd with Ctrl-C so for my first attempt, similar to
> > yours, I run
> > 
> >  snmpd -Lo -d -f --trapsess="127.0.0.1" 127.0.0.1
> > 
> > and snmpd happily prints
> > 
> >  Security name is missing.Cannot add new trap destination internal0
> > 
> > so something differs between our agents or configs. If I try with
> > 
> >  snmpd -Lo -d -f --trapsess="-v2c 127.0.0.1" 127.0.0.1
> > 
> > then my snmpd prints
> > 
> >  No community name specified.
> > 
> > and I suppose that is similar enough to your case but it is also a v2
> > notification so lets say explicitly that we want a v3 notification
> > 
> >  snmpd -Lo -d -f --trapsess="-v3 127.0.0.1" 127.0.0.1
> > 
> > prints
> > 
> >  Security name is missing.Cannot add new trap destination internal0
> > 
> > and the snmpcmd.1 man page states that -u is used to specify a securityName
> > so lets try that
> > 
> >  snmpd -Lo -d -f --trapsess="-v3 -u mySecurityName 127.0.0.1" 127.0.0.1
> > 
> > This results in my snmpd sending something with mySecurityName in it so I
> > suppose that is the startup notification.
> > 
> > In order to make this permanent I then add
> > 
> > trapsess -v3 -u mySecurityName 127.0.0.1
> > 
> > to my snmpd.conf
> > 
> > Does this help?
> > 
> > (The snmpd parameters mean
> > -Lo - send logs to stdout
> > -d  - log all traffic
> > -f  - run in the foreground)
> > 
> >> I’m using tcpdump to sniff network but nothing is sent although the gdb debugger says that send_v2trap is OK.
> >> 
> >> Thanks by advance for your help.
> >> 
> >> Best Regards. 
> >> Ph. DENIS
> >> 
> >> _______________________________________________
> >> Net-snmp-coders mailing list
> >> Net...@li...
> >> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Re: Issue with trapsess in snmpd.conf file

[Magnus F. <ma...@ly...>]

On Wed, Apr 29, 2020 at 02:46:30AM +0200, Philippe Denis wrote:
> Hello all,
> 
> I’m facing several issues when I’ve tried to send V3 traps from my Agent X to the master agent to trap recipient. The program linked to the trap generation was written by mib2c tool mainly. (Only dummies variables and values added)
> 
> I’ve added in my configuration file snmpd.conf file, the following line:
> trapsess 192.1.2.1
> 
> When I start the agent, I got the following error message “no community specified.” but when reading the man page it looks that the trap community is for trapsink, trap2sink and trapinform.
> 
> Is it correct ? Is there any option to use to know what is wrong ?

In the man page it says that trapsess should take arguments like snmptrapd.

In order to experiment I would run

  snmpd -Lo -d -f --trapsess="trapsess-params" 127.0.0.1

and then stop snmpd with Ctrl-C so for my first attempt, similar to
yours, I run

  snmpd -Lo -d -f --trapsess="127.0.0.1" 127.0.0.1

and snmpd happily prints

  Security name is missing.Cannot add new trap destination internal0

so something differs between our agents or configs. If I try with

  snmpd -Lo -d -f --trapsess="-v2c 127.0.0.1" 127.0.0.1

then my snmpd prints

  No community name specified.

and I suppose that is similar enough to your case but it is also a v2
notification so lets say explicitly that we want a v3 notification

  snmpd -Lo -d -f --trapsess="-v3 127.0.0.1" 127.0.0.1

prints

  Security name is missing.Cannot add new trap destination internal0

and the snmpcmd.1 man page states that -u is used to specify a securityName
so lets try that

  snmpd -Lo -d -f --trapsess="-v3 -u mySecurityName 127.0.0.1" 127.0.0.1

This results in my snmpd sending something with mySecurityName in it so I
suppose that is the startup notification.

In order to make this permanent I then add

trapsess -v3 -u mySecurityName 127.0.0.1

to my snmpd.conf

Does this help?

(The snmpd parameters mean
 -Lo - send logs to stdout
 -d  - log all traffic
 -f  - run in the foreground)

> I’m using tcpdump to sniff network but nothing is sent although the gdb debugger says that send_v2trap is OK.
> 
> Thanks by advance for your help.
> 
> Best Regards. 
> Ph. DENIS
> 
> _______________________________________________
> Net-snmp-coders mailing list
> Net...@li...
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Issue with trapsess in snmpd.conf file

[Philippe D. <phd...@gm...>]

Hello all,

I’m facing several issues when I’ve tried to send V3 traps from my Agent X to the master agent to trap recipient. The program linked to the trap generation was written by mib2c tool mainly. (Only dummies variables and values added)

I’ve added in my configuration file snmpd.conf file, the following line:
trapsess 192.1.2.1

When I start the agent, I got the following error message “no community specified.” but when reading the man page it looks that the trap community is for trapsink, trap2sink and trapinform.

Is it correct ? Is there any option to use to know what is wrong ?

I’m using tcpdump to sniff network but nothing is sent although the gdb debugger says that send_v2trap is OK.

Thanks by advance for your help.

Best Regards. 
Ph. DENIS