You can subscribe to this list here.
2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(26) |
Nov
(262) |
Dec
(286) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
(416) |
Feb
(420) |
Mar
(638) |
Apr
(722) |
May
(478) |
Jun
(697) |
Jul
(559) |
Aug
(502) |
Sep
(482) |
Oct
(992) |
Nov
(452) |
Dec
(415) |
2002 |
Jan
(465) |
Feb
(593) |
Mar
(472) |
Apr
(696) |
May
(715) |
Jun
(544) |
Jul
(428) |
Aug
(552) |
Sep
(418) |
Oct
(429) |
Nov
(327) |
Dec
(255) |
2003 |
Jan
(531) |
Feb
(380) |
Mar
(394) |
Apr
(408) |
May
(541) |
Jun
(483) |
Jul
(310) |
Aug
(329) |
Sep
(275) |
Oct
(360) |
Nov
(351) |
Dec
(300) |
2004 |
Jan
(334) |
Feb
(468) |
Mar
(433) |
Apr
(433) |
May
(448) |
Jun
(472) |
Jul
(456) |
Aug
(565) |
Sep
(536) |
Oct
(567) |
Nov
(451) |
Dec
(435) |
2005 |
Jan
(296) |
Feb
(373) |
Mar
(335) |
Apr
(663) |
May
(456) |
Jun
(537) |
Jul
(268) |
Aug
(364) |
Sep
(284) |
Oct
(395) |
Nov
(387) |
Dec
(391) |
2006 |
Jan
(464) |
Feb
(465) |
Mar
(556) |
Apr
(242) |
May
(202) |
Jun
(158) |
Jul
(314) |
Aug
(397) |
Sep
(379) |
Oct
(456) |
Nov
(381) |
Dec
(308) |
2007 |
Jan
(380) |
Feb
(438) |
Mar
(337) |
Apr
(344) |
May
(379) |
Jun
(316) |
Jul
(392) |
Aug
(287) |
Sep
(301) |
Oct
(413) |
Nov
(265) |
Dec
(325) |
2008 |
Jan
(468) |
Feb
(500) |
Mar
(367) |
Apr
(547) |
May
(316) |
Jun
(289) |
Jul
(383) |
Aug
(167) |
Sep
(190) |
Oct
(162) |
Nov
(152) |
Dec
(236) |
2009 |
Jan
(371) |
Feb
(384) |
Mar
(370) |
Apr
(368) |
May
(347) |
Jun
(319) |
Jul
(235) |
Aug
(354) |
Sep
(211) |
Oct
(155) |
Nov
(235) |
Dec
(227) |
2010 |
Jan
(326) |
Feb
(250) |
Mar
(336) |
Apr
(318) |
May
(269) |
Jun
(281) |
Jul
(324) |
Aug
(257) |
Sep
(299) |
Oct
(181) |
Nov
(182) |
Dec
(148) |
2011 |
Jan
(176) |
Feb
(240) |
Mar
(351) |
Apr
(177) |
May
(100) |
Jun
(131) |
Jul
(168) |
Aug
(228) |
Sep
(122) |
Oct
(115) |
Nov
(116) |
Dec
(88) |
2012 |
Jan
(127) |
Feb
(108) |
Mar
(117) |
Apr
(149) |
May
(166) |
Jun
(135) |
Jul
(205) |
Aug
(112) |
Sep
(63) |
Oct
(142) |
Nov
(67) |
Dec
(69) |
2013 |
Jan
(140) |
Feb
(62) |
Mar
(56) |
Apr
(38) |
May
(35) |
Jun
(30) |
Jul
(57) |
Aug
(35) |
Sep
(24) |
Oct
(32) |
Nov
(59) |
Dec
(41) |
2014 |
Jan
(47) |
Feb
(37) |
Mar
(46) |
Apr
(51) |
May
(36) |
Jun
(31) |
Jul
(49) |
Aug
(50) |
Sep
(38) |
Oct
(67) |
Nov
(47) |
Dec
(55) |
2015 |
Jan
(38) |
Feb
(47) |
Mar
(20) |
Apr
(30) |
May
(19) |
Jun
(27) |
Jul
(80) |
Aug
(48) |
Sep
(27) |
Oct
(23) |
Nov
(42) |
Dec
(32) |
2016 |
Jan
(34) |
Feb
(15) |
Mar
(46) |
Apr
(44) |
May
(49) |
Jun
(22) |
Jul
(36) |
Aug
(24) |
Sep
(6) |
Oct
(14) |
Nov
(13) |
Dec
(13) |
2017 |
Jan
(22) |
Feb
(19) |
Mar
(10) |
Apr
(9) |
May
(30) |
Jun
(48) |
Jul
(20) |
Aug
(21) |
Sep
(17) |
Oct
(11) |
Nov
(22) |
Dec
(16) |
2018 |
Jan
(25) |
Feb
(3) |
Mar
(19) |
Apr
(22) |
May
(20) |
Jun
(5) |
Jul
(17) |
Aug
(33) |
Sep
(9) |
Oct
(27) |
Nov
(9) |
Dec
(7) |
2019 |
Jan
(18) |
Feb
(23) |
Mar
(12) |
Apr
(22) |
May
(29) |
Jun
(23) |
Jul
(17) |
Aug
(15) |
Sep
(28) |
Oct
(12) |
Nov
(26) |
Dec
(22) |
2020 |
Jan
(7) |
Feb
(3) |
Mar
(12) |
Apr
(16) |
May
(24) |
Jun
(20) |
Jul
(43) |
Aug
(10) |
Sep
(5) |
Oct
(10) |
Nov
(6) |
Dec
(20) |
2021 |
Jan
(21) |
Feb
(10) |
Mar
(20) |
Apr
(17) |
May
(31) |
Jun
(16) |
Jul
(21) |
Aug
(5) |
Sep
(15) |
Oct
(13) |
Nov
(3) |
Dec
(10) |
2022 |
Jan
(10) |
Feb
(16) |
Mar
(14) |
Apr
(5) |
May
(8) |
Jun
(8) |
Jul
(12) |
Aug
(23) |
Sep
(4) |
Oct
(3) |
Nov
(5) |
Dec
|
2023 |
Jan
(3) |
Feb
(2) |
Mar
(1) |
Apr
(3) |
May
(3) |
Jun
|
Jul
|
Aug
(8) |
Sep
|
Oct
(3) |
Nov
(2) |
Dec
(3) |
2024 |
Jan
(4) |
Feb
(3) |
Mar
(5) |
Apr
(4) |
May
(3) |
Jun
(4) |
Jul
(11) |
Aug
(5) |
Sep
|
Oct
|
Nov
|
Dec
|
From: Turritopsis D. T. En M. <teo...@pr...> - 2024-04-11 16:09:58
|
Subject: Teo En Ming's Notes on Upgrading Firmware on HPE MSR954 Router and Enabling Web Interface - Version 1 Author: Mr. Turritopsis Dohrnii Teo En Ming Country: Singapore Date of Action: 11 Apr 2024 Thursday Time: 8.30 PM to 11.00 PM Step 1: Configuring IP address on router port GE1 to prepare for TFTP operation =============================================================================== Startup configuration file does not exist. Performing automatic configuration... Press CTRL_D to break. Automatic configuration attempt: 1. Not ready for automatic configuration: no interface available. Waiting for the next... Automatic configuration attempt: 2. Interface used: Vlan-interface1. Enable DHCP client on Vlan-interface1. Vlan-interface1 failed to obtain IP address. Waiting for the next... Automatic configuration is aborted. Line con0 is available. Press ENTER to get started. <HPE>system-view [HPE]interface Vlan-interface 1 [HPE-Vlan-interface1]ip address 192.168.1.1 255.255.255.0 [HPE-Vlan-interface1]end <HPE>show ip int br *down: administratively down (s): spoofing (l): loopback Interface Physical Protocol IP Address Description GE0/0 down down -- -- GE0/5 down down -- -- Vlan1 up up 192.168.1.1 -- Step 2: Download and install Open TFTP Server and Configure Management Workstation ===================================================================================== Download Open TFTP Server from https://sourceforge.net/projects/tftp-server/ Install Open TFTP Server Installer. Configure IP address of management workstation as 192.168.1.2/24 Copy LATEST firmware image file MSR954-CMW710-R6728P27.ipe to C:\OpenTFTPServer Double click RunStandAloneMT.bat Turn off GlassWire firewall. Turn off Windows Defender firewall. Step 3: TFTP Operation for the firmware ============================================ <HPE>tftp 192.168.1.2 get MSR954-CMW710-R6728P27.ipe The following attempt at installing the latest firmware failed because of insufficient space on the flash memory. <HPE>boot-loader file flash:/MSR954-CMW710-R6728P27.ipe main Verifying the file flash:/MSR954-CMW710-R6728P27.ipe on the device.......Done. HPE MSR954 images in IPE: msr954-cmw710-boot-r6728p27.bin msr954-cmw710-system-r6728p27.bin msr954-cmw710-wifidog-r6728p27.bin msr954-cmw710-wwd-r6728p27.bin msr954-cmw710-security-r6728p27.bin msr954-cmw710-voice-r6728p27.bin msr954-cmw710-data-r6728p27.bin This command will set the main startup software images. Continue? [Y/N]:y Add images to the device. No sufficient storage space on the device. Step 4: Delete unnecessary files on the flash memory to free up space ========================================================================= <HPE>delete flash:/msr954*.bin Delete flash:/msr954-cmw710-boot-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-boot-r0306p30.bin... Done. Delete flash:/msr954-cmw710-data-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-data-r0306p30.bin... Done. Delete flash:/msr954-cmw710-security-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-security-r0306p30.bin... Done. Delete flash:/msr954-cmw710-system-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-system-r0306p30.bin... Done. Delete flash:/msr954-cmw710-voice-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-voice-r0306p30.bin... Done. Delete flash:/msr954-cmw710-wifidog-r0306p30.bin? [Y/N]:y Deleting file flash:/msr954-cmw710-wifidog-r0306p30.bin... Done. <HPE>delete flash:/logfile/* Delete flash:/logfile/logfile1.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile1.log.gz... Done. Delete flash:/logfile/logfile10.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile10.log.gz... Done. Delete flash:/logfile/logfile2.log? [Y/N]:y Deleting file flash:/logfile/logfile2.log... Done. Delete flash:/logfile/logfile2.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile2.log.gz... Done. Delete flash:/logfile/logfile3.log? [Y/N]:y Deleting file flash:/logfile/logfile3.log... Done. Delete flash:/logfile/logfile4.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile4.log.gz... Done. Delete flash:/logfile/logfile5.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile5.log.gz... Done. Delete flash:/logfile/logfile6.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile6.log.gz... Done. Delete flash:/logfile/logfile7.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile7.log.gz... Done. Delete flash:/logfile/logfile8.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile8.log.gz... Done. Delete flash:/logfile/logfile9.log.gz? [Y/N]:y Deleting file flash:/logfile/logfile9.log.gz... Done. <HPE>dir flash:/ Directory of flash: 0 -rw- 93636608 Jan 01 2011 00:29:51 MSR954-CMW710-R6728P27.ipe 1 drw- - Jan 01 2011 00:00:10 diagfile 2 -rw- 735 Jan 01 2011 00:07:25 hostkey 3 -rw- 228 Jan 01 2011 00:12:54 ifindex.dat 4 drw- - Jan 01 2011 00:00:10 license 5 drw- - Jan 01 2011 00:36:14 logfile 6 drw- - Jan 01 2011 00:00:10 seclog 7 -rw- 591 Jan 01 2011 00:07:25 serverkey 8 -rw- 5735 Jan 01 2011 00:12:55 startup.cfg 9 -rw- 61417 Jan 01 2011 00:12:55 startup.mdb 251904 KB total (86996 KB free) <HPE>delete flash:/startup.mdb Delete flash:/startup.mdb? [Y/N]:y Deleting file flash:/startup.mdb... Done. <HPE>dir /all Directory of flash: 0 -rw- 93636608 Jan 01 2011 00:29:51 MSR954-CMW710-R6728P27.ipe 1 drw- - Jan 01 2011 00:00:10 diagfile 2 -rw- 735 Jan 01 2011 00:07:25 hostkey 3 -rw- 228 Jan 01 2011 00:12:54 ifindex.dat 4 drw- - Jan 01 2011 00:00:10 license 5 drw- - Jan 01 2011 00:36:14 logfile 6 drw- - Jan 01 2011 00:00:10 seclog 7 -rw- 591 Jan 01 2011 00:07:25 serverkey 8 -rw- 5735 Jan 01 2011 00:12:55 startup.cfg 9 drwh - Jan 01 2011 00:45:44 .trash <HPE>rmdir flash:/.trash Remove directory flash:/.trash and the files in the recycle-bin under this directory will be deleted permanently. Continue? [Y/N]:y Failed to remove the directory because it is not empty. <HPE>dir flash:/.trash/ Directory of flash:/.trash 0 -rw- 362875 Jun 24 2011 11:12:32 logfile1.log.gz_0001 1 -rw- 307359 Jan 07 2011 13:01:22 logfile10.log.gz_0001 2 -rw- 332922 Jan 07 2011 11:11:52 logfile2.log.gz_0001 3 -rw- 3633086 Jan 07 2011 20:06:45 logfile2.log_0001 4 -rw- 5216633 Jul 19 2011 10:45:11 logfile3.log_0001 5 -rw- 370150 Jul 02 2011 19:51:51 logfile4.log.gz_0001 6 -rw- 356413 Jun 27 2011 21:30:47 logfile5.log.gz_0001 7 -rw- 355667 Jul 05 2011 10:05:21 logfile6.log.gz_0001 8 -rw- 363096 Jul 11 2011 10:40:24 logfile7.log.gz_0001 9 -rw- 371726 Jul 17 2011 06:21:00 logfile8.log.gz_0001 10 -rw- 354088 Jul 08 2011 19:24:06 logfile9.log.gz_0001 11 -rw- 6972416 Jan 01 2013 00:00:00 msr954-cmw710-boot-r0306p30.bin_0001 12 -rw- 2955264 Jan 01 2013 00:00:00 msr954-cmw710-data-r0306p30.bin_0001 13 -rw- 387072 Jan 01 2013 00:00:00 msr954-cmw710-security-r0306p30.bin_0001 14 -rw- 51291136 Jan 01 2013 00:00:00 msr954-cmw710-system-r0306p30.bin_0001 15 -rw- 12288 Jan 01 2013 00:00:00 msr954-cmw710-voice-r0306p30.bin_0001 16 -rw- 116736 Jan 01 2013 00:00:00 msr954-cmw710-wifidog-r0306p30.bin_0001 17 -rw- 61417 Jan 01 2011 00:12:55 startup.mdb_0001 251904 KB total (86996 KB free) <HPE>delete flash:/.trash/msr954-cmw710-boot-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-boot-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-boot-r0306p30.bin_0001... Done. <HPE>delete flash:/.trash/msr954-cmw710-data-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-data-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-data-r0306p30.bin_0001... Done. <HPE>delete flash:/.trash/msr954-cmw710-security-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-security-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-security-r0306p30.bin_0001... Done. <HPE>delete flash:/.trash/msr954-cmw710-system-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-system-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-system-r0306p30.bin_0001... Done. <HPE>delete flash:/.trash/msr954-cmw710-voice-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-voice-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-voice-r0306p30.bin_0001... Done. <HPE>delete flash:/.trash/msr954-cmw710-wifidog-r0306p30.bin_0001 The file cannot be restored. Delete flash:/.trash/msr954-cmw710-wifidog-r0306p30.bin_0001? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/.trash/msr954-cmw710-wifidog-r0306p30.bin_0001... Done. <HPE>dir flash:/.trash/ Directory of flash:/.trash 0 -rw- 362875 Jun 24 2011 11:12:32 logfile1.log.gz_0001 1 -rw- 307359 Jan 07 2011 13:01:22 logfile10.log.gz_0001 2 -rw- 332922 Jan 07 2011 11:11:52 logfile2.log.gz_0001 3 -rw- 3633086 Jan 07 2011 20:06:45 logfile2.log_0001 4 -rw- 5216633 Jul 19 2011 10:45:11 logfile3.log_0001 5 -rw- 370150 Jul 02 2011 19:51:51 logfile4.log.gz_0001 6 -rw- 356413 Jun 27 2011 21:30:47 logfile5.log.gz_0001 7 -rw- 355667 Jul 05 2011 10:05:21 logfile6.log.gz_0001 8 -rw- 363096 Jul 11 2011 10:40:24 logfile7.log.gz_0001 9 -rw- 371726 Jul 17 2011 06:21:00 logfile8.log.gz_0001 10 -rw- 354088 Jul 08 2011 19:24:06 logfile9.log.gz_0001 11 -rw- 61417 Jan 01 2011 00:12:55 startup.mdb_0001 251904 KB total (147428 KB free) Step 5: Installing the LATEST firmware on the HPE MSR954 router ================================================================== <HPE>boot-loader file flash:/MSR954-CMW710-R6728P27.ipe main Verifying the file flash:/MSR954-CMW710-R6728P27.ipe on the device.......Done. HPE MSR954 images in IPE: msr954-cmw710-boot-r6728p27.bin msr954-cmw710-system-r6728p27.bin msr954-cmw710-wifidog-r6728p27.bin msr954-cmw710-wwd-r6728p27.bin msr954-cmw710-security-r6728p27.bin msr954-cmw710-voice-r6728p27.bin msr954-cmw710-data-r6728p27.bin This command will set the main startup software images. Continue? [Y/N]:y Add images to the device. Decompressing file msr954-cmw710-wwd-r6728p27.bin to flash:/msr954-cmw710-wwd-r6728p27.bin...Done. Decompressing file msr954-cmw710-wifidog-r6728p27.bin to flash:/msr954-cmw710-wifidog-r6728p27.bin...Done. Decompressing file msr954-cmw710-data-r6728p27.bin to flash:/msr954-cmw710-data-r6728p27.bin...Done. Decompressing file msr954-cmw710-voice-r6728p27.bin to flash:/msr954-cmw710-voice-r6728p27.bin...Done. Decompressing file msr954-cmw710-security-r6728p27.bin to flash:/msr954-cmw710-security-r6728p27.bin...Done. Decompressing file msr954-cmw710-system-r6728p27.bin to flash:/msr954-cmw710-system-r6728p27.bin........................................Done. Decompressing file msr954-cmw710-boot-r6728p27.bin to flash:/msr954-cmw710-boot-r6728p27.bin.....Done. The images that have passed all examinations will be used as the main startup software images at the next reboot on the device. Verifying that the latest firmware has been installed. <HPE>display boot-loader Software images on the device: Current software images: flash:/msr954-cmw710-boot-r0306p30.bin flash:/msr954-cmw710-system-r0306p30.bin flash:/msr954-cmw710-wifidog-r0306p30.bin flash:/msr954-cmw710-security-r0306p30.bin flash:/msr954-cmw710-voice-r0306p30.bin flash:/msr954-cmw710-data-r0306p30.bin Main startup software images: flash:/msr954-cmw710-boot-r6728p27.bin flash:/msr954-cmw710-system-r6728p27.bin flash:/msr954-cmw710-wifidog-r6728p27.bin flash:/msr954-cmw710-wwd-r6728p27.bin flash:/msr954-cmw710-security-r6728p27.bin flash:/msr954-cmw710-voice-r6728p27.bin flash:/msr954-cmw710-data-r6728p27.bin Backup startup software images: None Rebooting the HPE MSR954 router. <HPE>reboot Start to check configuration with next startup configuration file, please wait.........DONE! Current configuration may be lost after the reboot, save current configuration? [Y/N]:n This command will reboot the device. Continue? [Y/N]:y Now rebooting, please wait... %Jan 1 01:00:07:296 2011 HPE DEV/5/SYSTEM_REBOOT: System is rebooting now. Step 6: Enabling Web Interface on the HPE MSR954 Router ======================================================== Startup configuration file doesn't exist or is invalid. Performing automatic configuration... Press CTRL_C or CTRL_D to break. Automatic configuration attempt: 1. Not ready for automatic configuration: no interface available. Waiting for the next... Automatic configuration attempt: 2. Interface used: Vlan-interface1. Enable DHCP client on Vlan-interface1. Vlan-interface1 failed to obtain IP address. Waiting for the next... Automatic configuration is aborted. <HPE>system-view [HPE]interface Vlan-interface 1 [HPE-Vlan-interface1]ip address 192.168.1.1 255.255.255.0 [HPE]ip https enable You can now browse the web interface using https://192.168.1.1/ Google Chrome doesn't display the web interface properly. You need to use Microsoft Edge. But I don't know the default username and password, need to check it out later. Step 7: Remember to save the router configuration before shutting down ======================================================================== [HPE]save The current configuration will be written to the device. Are you sure? [Y/N]:y Please input the file name(*.cfg)[flash:/startup.cfg] (To leave the existing filename unchanged, press the enter key): flash:/startup.cfg exists, overwrite? [Y/N]:y Validating file. Please wait... Configuration is saved to device successfully. Reference Guides ================= [1] 07-Software upgrade configuration Link: https://www.h3c.com/en/d_201905/1178175_294551_0.htm [2] Router HPE MSR954 Web interface Link: https://community.hpe.com/t5/comware-based/router-hpe-msr954-web-interface/td-p/6940091 [3] dir Link: https://techhub.hpe.com/eginfolib/networking/docs/switches/5700/5998-5600r_fund_cr/content/447037782.htm Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems |
From: Turritopsis D. T. En M. <teo...@pr...> - 2024-04-01 14:34:40
|
Subject: HPE MSR954 Router Console Bootup Messages and Show Version Good day from Singapore, I have bought a refurbished/second hand/used HPE MSR954 router at Canberra Road for $30 on 30 Mar 2024 Saturday at about 10 pm. Serial Number: CN****11DB MAC address: 4CAEA37BD937 Console bootup messages below ================================= a▒▒▒Fh▒▒f▒▒CC▒▒▒ѕ▒▒is starting... Press Ctrl+D to access BASIC-BOOTWARE MENU Booting Normal Extend BootWare **************************************************************************** * * * HPE MSR954 BootWare, Version 1.30 * * * **************************************************************************** Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP Compiled Date : May 16 2016 CPU ID : 0xa CPU L1 Cache : 32KB CPU L2 Cache : 256KB Memory Type : DDR3 SDRAM Memory Size : 1024MB Flash Size : 256MB PCB Version : 2.0 BootWare Validating... Press Ctrl+B to access EXTENDED-BOOTWARE MENU... Loading the main image files... Loading file flash:/msr954-cmw710-system-r0306p30.bin....................... .............................Done. Loading file flash:/msr954-cmw710-security-r0306p30.bin...Done. Loading file flash:/msr954-cmw710-voice-r0306p30.bin...Done. Loading file flash:/msr954-cmw710-data-r0306p30.bin......Done. Loading file flash:/msr954-cmw710-wifidog-r0306p30.bin...Done. Loading file flash:/msr954-cmw710-boot-r0306p30.bin..........Done. Image file flash:/msr954-cmw710-boot-r0306p30.bin is self-decompressing..... ............................................................................ ............................................................................ ............................................................................ ............................................................................ ............................................................................ ............................................................................ ............................................................................ ............................................................................ ......................................................Done. System image is starting... Cryptographic algorithms tests passed. Startup configuration file does not exist. Performing automatic configuration... Press CTRL_D to break. Automatic configuration attempt: 1. Not ready for automatic configuration: no interface available. Waiting for the next... Automatic configuration attempt: 2. Not ready for automatic configuration: no interface available. Waiting for the next... Automatic configuration is aborted. Line con0 is available. Press ENTER to get started. <HPE>%Jan 1 00:02:12:518 2011 HPE SHELL/5/SHELL_LOGIN: Console logged in from con0. show version output ==================== <HPE>show version HPE Comware Software, Version 7.1.059, Release 0306P30 Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP HPE MSR954 uptime is 0 weeks, 0 days, 0 hours, 2 minutes Last reboot reason : Reset button reboot Boot image: flash:/msr954-cmw710-boot-r0306p30.bin Boot image version: 7.1.059P21, Release 0306P30 Compiled Jun 08 2016 16:00:00 System image: flash:/msr954-cmw710-system-r0306p30.bin System image version: 7.1.059, Release 0306P30 Compiled Jun 08 2016 16:00:00 Feature image(s) list: flash:/msr954-cmw710-wifidog-r0306p30.bin, version: 7.1.059 Compiled Jun 08 2016 16:00:00 flash:/msr954-cmw710-security-r0306p30.bin, version: 7.1.059 Compiled Jun 08 2016 16:00:00 flash:/msr954-cmw710-voice-r0306p30.bin, version: 7.1.059 Compiled Jun 08 2016 16:00:00 flash:/msr954-cmw710-data-r0306p30.bin, version: 7.1.059 Compiled Jun 08 2016 16:00:00 CPU ID: 0xa 1G bytes DDR3 SDRAM Memory 10M bytes Flash Memory PCB Version: 2.0 CPLD Version: 0.0 Basic BootWare Version: 1.30 Extended BootWare Version: 1.30 [SLOT 0]CON (Hardware)2.0, (Driver)1.0, (CPLD)0.0 [SLOT 0]GE0/0 (Hardware)2.0, (Driver)1.0, (CPLD)0.0 [SLOT 0]4GSW (Hardware)2.0, (Driver)1.0, (CPLD)0.0 [SLOT 0]SFP0/5 (Hardware)2.0, (Driver)1.0, (CPLD)0.0 [SLOT 0]CELLULAR0/0 (Hardware)2.0, (Driver)1.0, (CPLD)0.0 [SLOT 0]CELLULAR0/1 (Hardware)2.0, (Driver)1.0, (CPLD)0.0 <HPE> Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems. |
From: Turritopsis D. T. En M. <teo...@pr...> - 2024-03-20 14:03:06
|
Subject: Teo En Ming's Notes on Basic Configuration of Cisco ASA 5516-X Firewall - Version 1 Good day from Singapore, Author: Mr. Turritopsis Dohrnii Teo En Ming Country: Singapore Date of Publication: 20 March 2024 Wednesday Document Version: 1 I have bought this refurbished/second hand/used Cisco ASA 5516-X firewall with FirePOWER Services for SGD$100 at Bukit Panjang Ring Road on 17 Mar 2024 Sunday at about 8.30 PM Singapore Time. On 19 March 2024 Tuesday, I have completed basic configuration of this firewall. Configuration Start: 19 March 2024 Tuesday, 9.22 PM Configuration End: 19 March 2024 Tuesday, 11.33 PM Below are my notes on configuring the Cisco ASA 5516-X firewall (basic). Part 1: Factory reset the Cisco ASA 5516-X firewall =================================================== Reference guide: Clearing, resetting or erasing configuration on Cisco ASA Link: https://www.linkedin.com/pulse/clearing-resetting-erasing-configuration-cisco-asa-darko-raki%C4%87?utm_source=share&utm_medium=member_android&utm_campaign=share_via cisco> en Password: ***** cisco# conf t cisco(config)# ***************************** NOTICE ***************************** Help to improve the ASA platform by enabling anonymous reporting, which allows Cisco to securely receive minimal error and health information from the device. To learn more about this feature, please visit: http://www.cisco.com/go/smartcall Would you like to enable anonymous error reporting to help improve the product? [Y]es, [N]o, [A]sk later: Y Enabling anonymous reporting. Adding "call-home reporting anonymous" to running configuration... Creating trustpoint "_SmartCallHome_ServerCA" and installing certificate... Trustpoint CA certificate accepted. Please remember to save your configuration. cisco(config)# configure factory-default Based on the inside IP address and mask, the DHCP address pool size is reduced to 250 from the platform limit 256 WARNING: The boot system configuration will be cleared. The first image found in disk0:/ will be used to boot the system on the next reload. Verify there is a valid image on disk0:/ or the system will not boot. Begin to apply factory-default configuration: Clear all configuration Executing command: ! Executing command: interface Management1/1 Executing command: management-only Executing command: no nameif Executing command: no security-level Executing command: no ip address Executing command: no shutdown Executing command: exit Executing command: ! Executing command: interface GigabitEthernet1/1 Executing command: nameif outside INFO: Security level for "outside" set to 0 by default. Executing command: security-level 0 Executing command: ip address dhcp setroute Executing command: no shutdown Executing command: exit Executing command: ! Executing command: interface GigabitEthernet1/2 Executing command: nameif inside INFO: Security level for "inside" set to 100 by default. Executing command: security-level 100 Executing command: ip address 192.168.1.1 255.255.255.0 Executing command: no shutdown Executing command: exit Executing command: ! Executing command: object network obj_any Executing command: subnet 0.0.0.0 0.0.0.0 Executing command: nat (any,outside) dynamic interface Executing command: exit Executing command: ! Executing command: http server enable Executing command: http 192.168.1.0 255.255.255.0 inside Executing command: ! Executing command: dhcpd auto_config outside Executing command: dhcpd address 192.168.1.5-192.168.1.254 inside Executing command: dhcpd enable inside Executing command: ! Executing command: logging asdm informational Executing command: ! Executing command: ! Executing command: ! Factory-default configuration is completed ciscoasa(config)# reload System config has been modified. Save? [Y]es/[N]o: y Cryptochecksum: 200435a9 cee9c848 4fb5e91d ac201631 3250 bytes copied in 0.150 secs Proceed with reload? [confirm] ciscoasa(config)# *** *** --- START GRACEFUL SHUTDOWN --- Shutting down isakmp Shutting down webvpn Shutting down sw-module Shutting down License Controller Shutting down File system *** *** --- SHUTDOWN NOW --- Process shutdown finished Rebooting... (status 0x9) .. INIT: Sending processes the TERM signal Deconfiguring network interfaces... done. Sending all processes the TERM signal... Sending all processes the KILL signal... Deactivating swap... Unmounting local filesystems... Rebooting... Part 2: Basic Configuration of Cisco ASA 5516-X Firewall ========================================================= Reference guide: Basic Cisco ASA 5506-x Configuration Example Link: https://www.speaknetworks.com/basic-cisco-asa-5506-x-configuration-example/ ciscoasa> en Password: ciscoasa# ciscoasa# show bootvar BOOT variable = Current BOOT variable = CONFIG_FILE variable = Current CONFIG_FILE variable = Step 1: Configure ASA interfaces and assign appropriate security levels =========================================================================== ciscoasa# conf t ciscoasa(config)# interface GigabitEthernet1/1 ciscoasa(config-if)# description to WAN ciscoasa(config-if)# nameif outside ciscoasa(config-if)# security-level 0 ciscoasa(config-if)# ip address dhcp setroute ciscoasa(config-if)# exit ciscoasa(config)# interface GigabitEthernet1/2 ciscoasa(config-if)# description to LAN ciscoasa(config-if)# nameif inside ciscoasa(config-if)# security-level 100 ciscoasa(config-if)# ip address 192.168.1.1 255.255.255.0 ciscoasa(config-if)# exit ciscoasa(config)# interface GigabitEthernet1/3 ciscoasa(config-if)# description to DMZ1 ciscoasa(config-if)# nameif dmz1 ciscoasa(config-if)# security-level 50 ciscoasa(config-if)# ip address 192.168.2.1 255.255.255.0 ciscoasa(config-if)# exit Step 2: Configure ASA as an Internet gateway, enable Internet access ======================================================================== Configure NAT rules. ciscoasa(config)# nat (inside,outside) after-auto source dynamic any interface ciscoasa(config)# nat (dmz1,outside) after-auto source dynamic any interface Allow ping requests to go out. ciscoasa(config)# policy-map global_policy ciscoasa(config-pmap)# class inspection_default ciscoasa(config-pmap-c)# inspect icmp ciscoasa(config-pmap-c)# exit ciscoasa(config-pmap)# exit Step 3: Configure static NAT to web servers, grant Internet inbound access to web servers =========================================================================================== I will skip this step because I am not planning to have any public facing web servers at home at the moment. Step 4: Configure DHCP service on the ASA ============================================ Configure DHCP server for LAN network. ciscoasa(config)# dhcpd address 192.168.1.2-192.168.1.254 inside ciscoasa(config)# dhcpd dns 8.8.8.8 8.8.4.4 ciscoasa(config)# dhcpd lease 3600 ciscoasa(config)# dhcpd ping_timeout 50 ciscoasa(config)# dhcpd enable inside ciscoasa(config)# dhcprelay timeout 60 Configure DHCP Server for DMZ network. ciscoasa(config)# dhcpd address 192.168.2.2-192.168.2.254 dmz1 ciscoasa(config)# dhcpd enable dmz1 ciscoasa(config)# exit (Optional) Step 5: Redirect traffic to the FirePOWER module for deeper level inspection ======================================================================================== I don't think I have any FirePOWER feature license, so I will skip this step for the moment. Step 6: Hardening the device =============================== Shutdown unused interfaces. ciscoasa(config)# interface GigabitEthernet1/4 ciscoasa(config-if)# shutdown ciscoasa(config-if)# interface GigabitEthernet1/5 ciscoasa(config-if)# shutdown ciscoasa(config-if)# interface GigabitEthernet1/6 ciscoasa(config-if)# shutdown ciscoasa(config-if)# interface GigabitEthernet1/7 ciscoasa(config-if)# shutdown ciscoasa(config-if)# interface GigabitEthernet1/8 ciscoasa(config-if)# shutdown ciscoasa(config-if)# exit Enable SSH access for admin. ciscoasa(config)# hostname ASA5516X ASA5516X(config)# crypto key generate rsa modulus 1024 (change to 4096 in future) WARNING: You have a RSA keypair already defined named <Default-RSA-Key>. Do you really want to replace them? [yes/no]: yes Keypair generation process begin. Please wait... Hosts from the internet are not allowed to ssh into the firewall. LAN users are allowed to ssh into the firewall. ASA5516X(config)# ssh 192.168.1.0 255.255.255.0 inside DMZ users are not allowed to ssh into the firewall. ASA5516X(config)# ssh timeout 30 ASA5516X(config)# ssh version 2 ASA5516X(config)# aaa authentication ssh console LOCAL WARNING: local database is empty! Use 'username' command to define local users. Step 7: Configure time and enable logging =========================================== I didn't set the time or timezone correctly. Will fix it in the future. ASA5516X(config)# clock set 22:37:00 Mar 19 2024 ASA5516X(config)# clock timezone GMT +8 ASA5516X(config)# logging enable ASA5516X(config)# logging timestamp ASA5516X(config)# logging buffer-size 512000 ASA5516X(config)# logging buffered debugging Part 3: Create LOCAL users for SSH ================================== Reference guide: Cisco ASA Firewall Management Interface Configuration (with Example) Link: https://www.networkstraining.com/using-the-management-interface-of-the-cisco-asa-firewall/ ASA5516X(config)# username cisco password cisco privilege 15 Part 4: Enable ASA Web Interface ================================= Reference guide: How do I perform a basic setup of Cisco ASA 5516-X firewall? Link: https://community.cisco.com/t5/network-security/how-do-i-perform-a-basic-setup-of-cisco-asa-5516-x-firewall/m-p/5041698#M1109965 ASA5516X(config)# http server enable ASA5516X(config)# http 192.168.1.0 255.255.255.0 inside ASA5516X(config)# enable password cisco level 15 Hosts from the internet are not allowed to access the ASA web interface. Hosts from the DMZ are not allowed to access the ASA web interface. Part 5: Saving the Firewall Configuration ========================================== ASA5516X(config)# write mem Building configuration... Cryptochecksum: 5857f4ec 34234f34 4cec64f6 f85d7cd4 7180 bytes copied in 0.150 secs [OK] ASA5516X(config)# write mem Building configuration... Cryptochecksum: 5857f4ec 34234f34 4cec64f6 f85d7cd4 7180 bytes copied in 0.150 secs [OK] Part 6: show run output ======================= ASA5516X# show run : Saved : : Serial Number: JAD****00ZZ : Hardware: ASA5516, 8192 MB RAM, CPU Atom C2000 series 2416 MHz, 1 CPU (8 cores) : ASA Version 9.7(1)4 ! hostname ASA5516X enable password $sha512$5000$LuFgFhttGYuAEdvYbB7Y9g==$M2/7xYvePzQsOAQNrQsxTg== pbkdf2 names ! interface GigabitEthernet1/1 description to WAN nameif outside security-level 0 ip address dhcp setroute ! interface GigabitEthernet1/2 description to LAN nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0 ! interface GigabitEthernet1/3 description to DMZ1 nameif dmz1 security-level 50 ip address 192.168.2.1 255.255.255.0 ! interface GigabitEthernet1/4 shutdown no nameif no security-level no ip address ! interface GigabitEthernet1/5 shutdown no nameif no security-level no ip address ! interface GigabitEthernet1/6 shutdown no nameif no security-level no ip address ! interface GigabitEthernet1/7 shutdown no nameif no security-level no ip address ! interface GigabitEthernet1/8 shutdown no nameif no security-level no ip address ! interface Management1/1 management-only no nameif no security-level no ip address ! ftp mode passive clock timezone GMT 8 object network obj_any subnet 0.0.0.0 0.0.0.0 pager lines 24 logging enable logging timestamp logging buffer-size 512000 logging buffered debugging logging asdm informational mtu outside 1500 mtu inside 1500 mtu dmz1 1500 no failover no monitor-interface service-module icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 no arp permit-nonconnected arp rate-limit 16384 ! object network obj_any nat (any,outside) dynamic interface ! nat (inside,outside) after-auto source dynamic any interface nat (dmz1,outside) after-auto source dynamic any interface timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 timeout conn-holddown 0:00:15 timeout igp stale-route 0:01:10 user-identity default-domain LOCAL aaa authentication ssh console LOCAL http server enable http 192.168.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact service sw-reset-button crypto ipsec security-association pmtu-aging infinite crypto ca trustpoint _SmartCallHome_ServerCA no validation-usage crl configure crypto ca trustpool policy crypto ca certificate chain _SmartCallHome_ServerCA certificate ca 18dad19e267de8bb4a2158cdcc6b3b4a 308204d3 308203bb a0030201 02021018 dad19e26 7de8bb4a 2158cdcc 6b3b4a30 0d06092a 864886f7 0d010105 05003081 ca310b30 09060355 04061302 55533117 30150603 55040a13 0e566572 69536967 6e2c2049 6e632e31 1f301d06 0355040b 13165665 72695369 676e2054 72757374 204e6574 776f726b 313a3038 06035504 0b133128 63292032 30303620 56657269 5369676e 2c20496e 632e202d 20466f72 20617574 686f7269 7a656420 75736520 6f6e6c79 31453043 06035504 03133c56 65726953 69676e20 436c6173 73203320 5075626c 69632050 72696d61 72792043 65727469 66696361 74696f6e 20417574 686f7269 7479202d 20473530 1e170d30 36313130 38303030 3030305a 170d3336 30373136 32333539 35395a30 81ca310b 30090603 55040613 02555331 17301506 0355040a 130e5665 72695369 676e2c20 496e632e 311f301d 06035504 0b131656 65726953 69676e20 54727573 74204e65 74776f72 6b313a30 38060355 040b1331 28632920 32303036 20566572 69536967 6e2c2049 6e632e20 2d20466f 72206175 74686f72 697a6564 20757365 206f6e6c 79314530 43060355 0403133c 56657269 5369676e 20436c61 73732033 20507562 6c696320 5072696d 61727920 43657274 69666963 6174696f 6e204175 74686f72 69747920 2d204735 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101 00af2408 08297a35 9e600caa e74b3b4e dc7cbc3c 451cbb2b e0fe2902 f95708a3 64851527 f5f1adc8 31895d22 e82aaaa6 42b38ff8 b955b7b1 b74bb3fe 8f7e0757 ecef43db 66621561 cf600da4 d8def8e0 c362083d 5413eb49 ca595485 26e52b8f 1b9febf5 a191c233 49d84363 6a524bd2 8fe87051 4dd18969 7bc770f6 b3dc1274 db7b5d4b 56d396bf 1577a1b0 f4a225f2 af1c9267 18e5f406 04ef90b9 e400e4dd 3ab519ff 02baf43c eee08beb 378becf4 d7acf2f6 f03dafdd 75913319 1d1c40cb 74241921 93d914fe ac2a52c7 8fd50449 e48d6347 883c6983 cbfe47bd 2b7e4fc5 95ae0e9d d4d143c0 6773e314 087ee53f 9f73b833 0acf5d3f 3487968a ee53e825 15020301 0001a381 b23081af 300f0603 551d1301 01ff0405 30030101 ff300e06 03551d0f 0101ff04 04030201 06306d06 082b0601 05050701 0c046130 5fa15da0 5b305930 57305516 09696d61 67652f67 69663021 301f3007 06052b0e 03021a04 148fe5d3 1a86ac8d 8e6bc3cf 806ad448 182c7b19 2e302516 23687474 703a2f2f 6c6f676f 2e766572 69736967 6e2e636f 6d2f7673 6c6f676f 2e676966 301d0603 551d0e04 1604147f d365a7c2 ddecbbf0 3009f343 39fa02af 33313330 0d06092a 864886f7 0d010105 05000382 01010093 244a305f 62cfd81a 982f3dea dc992dbd 77f6a579 2238ecc4 a7a07812 ad620e45 7064c5e7 97662d98 097e5faf d6cc2865 f201aa08 1a47def9 f97c925a 0869200d d93e6d6e 3c0d6ed8 e6069140 18b9f8c1 eddfdb41 aae09620 c9cd6415 3881c994 eea28429 0b136f8e db0cdd25 02dba48b 1944d241 7a05694a 584f60ca 7e826a0b 02aa2517 39b5db7f e784652a 958abd86 de5e8116 832d10cc defda882 2a6d281f 0d0bc4e5 e71a2619 e1f4116f 10b595fc e7420532 dbce9d51 5e28b69e 85d35bef a57d4540 728eb70e 6b0e06fb 33354871 b89d278b c4655f0d 86769c44 7af6955c f65d3208 33a454b6 183f685c f2424a85 3854835f d1e82cf2 ac11d6a8 ed636a quit telnet timeout 5 ssh stricthostkeycheck ssh 192.168.1.0 255.255.255.0 inside ssh timeout 30 ssh version 2 ssh key-exchange group dh-group1-sha1 console timeout 0 dhcpd dns 8.8.8.8 8.8.4.4 dhcpd auto_config outside ! dhcpd address 192.168.1.2-192.168.1.254 inside dhcpd enable inside ! dhcpd address 192.168.2.2-192.168.2.254 dmz1 dhcpd enable dmz1 ! dhcprelay timeout 60 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept dynamic-access-policy-record DfltAccessPolicy username cisco password $sha512$5000$G5B9+ZfYxXVvcUPZ67ndpg==$SzTisL+GxQG2Nr/K7hh9gA== pbkdf2 privilege 15 ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 512 no tcp-inspection policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp inspect ip-options inspect icmp ! service-policy global_policy global prompt hostname context call-home reporting anonymous Cryptochecksum:2cf585656729bff783f7247b760f1d15 : end Part 7: Corrective Steps for DMZ network ======================================== ASA5516X(config)# interface GigabitEthernet1/3 ASA5516X(config-if)# no shut ASA5516X(config-if)# exit ASA5516X(config)# write mem Building configuration... Cryptochecksum: 2cf58565 6729bff7 83f7247b 760f1d15 7170 bytes copied in 0.150 secs [OK] That's all. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com |
From: Gowtham <trg...@gm...> - 2024-03-19 11:29:06
|
Hi I need to raise a mteTrigger trap when the IF-MIB::ifInErrors per minute go beyond 10 on all the interfaces. So tried the below config in snmpd.conf monitor -S -D -r 60 "Network inErrors" ifInErrors 9 10 This sends a mteTriggerRising trap if the ifInErrors increase by 10 in the last 60 seconds and a mteTriggerFalling trap when the delta falls below 9. This works alright but when the snmpd is restarted, there is one mteTriggerFalling trap sent for every interface though the ifInErrors is 0. Can we skip sending the mteTriggerFalling at the start of snmpd? Or is there any other way we can achieve this? Regards, Gowtham |
From: Atkins, B. <Bri...@ne...> - 2024-03-12 23:19:34
|
I reported this back in 2020, but I think there was confusion caused by my response. Snmpd definitely throws an error if a trapsink contains a TCP transport specifier: # cat /etc/snmp/snmpd.conf rocommunity public trapsink tcp:10.224.4.161 public # snmpd -f -Le snmpd: netsnmp_create_notification_session: /etc/snmp/snmpd.conf: line 3: Error: cannot create sink: tcp:10.224.4.161 net-snmp: 1 error(s) in config file(s) NET-SNMP version 5.9 Here is some additional debugging, in case it helps: # snmpd -f -Le -Dtdomain,snmp_sess registered debug token tdomain, 1 registered debug token snmp_sess, 1 tdomain: netsnmp_tdomain_init() called tdomain: domain_list -> { iso.3.6.1.6.1.9, "dtlsudp/dtls/dtlsudp6/dtls6" } -> { iso.3.6.1.6.1.8, "tlstcp/tls" } -> { iso.3.6.1.2.1.100.1.2, "udp6/ipv6/udpv6/udpipv6" } -> { iso.3.6.1.2.1.100.1.6, "tcp6/tcpv6/tcpipv6" } -> { iso.3.6.1.6.1.1, "udp" } -> { iso.3.6.1.2.1.100.1.5, "tcp" } -> { iso.3.6.1.4.1.8072.3.3.7, "alias" } -> { iso.3.6.1.2.1.100.1.13, "unix" } -> [NIL] snmp_sess: opening transport: 0 snmp_sess: done opening transport: 20 snmp_sess_add: fd 3 tdomain: tdomain_transport_spec("snmptrap", "tcp:10.224.4.161", 0, "[NIL]", "[NIL]", "[NIL]") tdomain: Found domain "tcp" from specifier "tcp" tdomain: trying domain "tcp" address "10.224.4.161" default address ":162" snmpd: netsnmp_create_notification_session: /etc/snmp/snmpd.conf: line 3: Error: cannot create sink: tcp:10.224.4.161 net-snmp: 1 error(s) in config file(s) tdomain: tdomain_transport_spec("snmp", "", 1, "[NIL]", "[NIL]", "[NIL]") tdomain: checking for host specific config hosts/ tdomain: Use application default domains "udp" "udp6" tdomain: Found domain "udp" from specifier "udp" tdomain: trying domain "udp" address "" default address ":161" snmp_sess: opening transport: 20 snmp_sess_add: fd 6 snmp_sess_add: limiting session rcv size (2147483647) to transport max (65507) snmp_sess_add: limiting session snd size (2147483647) to transport max (65507) NET-SNMP version 5.9 I'm using the generic Debian 11 snmpd distribution # dpkg -l snmpd Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-==============-==================-============-================================================ ii snmpd 5.9+dfsg-4+deb11u1 amd64 SNMP (Simple Network Management Protocol) agents |
From: Mariano E. <mar...@gm...> - 2024-03-07 07:06:39
|
Disregard, it was the -n (context) switch, removed it and it worked! On Wed, Mar 6, 2024 at 10:16 PM Mariano Eduardo <mar...@gm...> wrote: > > *NET-SNMP version: 5.6.2.1* > *OS: MacOS Catalina* > > > Hello everyone! So given the subject of this email, I believe the issue > lies in the authentication settings most likely? > > I'm simply running sudo snmpwalk -v3 -t 10 -u testuser -a MD5 -A > password123 -l authNoPriv -n v3context -x DES 127.0.0.1 system > > only to receive the following error: > > sess_process_packet: resending message id#1238060702 reqid#1528862053 > rp_reqid#1528862053 rp_msgid#1238060702 len 141 > transport:send: 141 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]:0 > trace: netsnmp_udpbase_send(): transports/snmpUDPBaseDomain.c, 333: > netsnmp_udp: send 141 bytes from 0x7f9a4b809973 to UDP: > [127.0.0.1]:161->[0.0.0.0]:0 on fd 3 > trace: snmp_sess_select_info2_flags(): snmp_api.c, 6328: > sess_select: for all sessions: 3 (to in 1709773839.024516 sec) > verbose:sess_select: timer due in 1.999962 sec > verbose:sess_select: setting timer to 1.999962 sec, clear block (was 1) > trace: snmp_synch_input(): snmp_client.c, 176: > snmp_synch: Response (ReqID: 1528862053 - Cmd 161) > Timeout: No Response from 127.0.0.1 > > > I've googled to no avail but I can't simply get to the bottom of this > issue. > > At some point I've noticed something about the Engine-ID, I have no idea > how to retrieve this (all attempts from Google examples returned the same > timeout error). > > As you can see, I've also tried increasing the timeout period, but that > did not work. > > Any points would be greatly appreciated! > > |
From: Mariano E. <mar...@gm...> - 2024-03-07 01:16:33
|
*NET-SNMP version: 5.6.2.1* *OS: MacOS Catalina* Hello everyone! So given the subject of this email, I believe the issue lies in the authentication settings most likely? I'm simply running sudo snmpwalk -v3 -t 10 -u testuser -a MD5 -A password123 -l authNoPriv -n v3context -x DES 127.0.0.1 system only to receive the following error: sess_process_packet: resending message id#1238060702 reqid#1528862053 rp_reqid#1528862053 rp_msgid#1238060702 len 141 transport:send: 141 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]:0 trace: netsnmp_udpbase_send(): transports/snmpUDPBaseDomain.c, 333: netsnmp_udp: send 141 bytes from 0x7f9a4b809973 to UDP: [127.0.0.1]:161->[0.0.0.0]:0 on fd 3 trace: snmp_sess_select_info2_flags(): snmp_api.c, 6328: sess_select: for all sessions: 3 (to in 1709773839.024516 sec) verbose:sess_select: timer due in 1.999962 sec verbose:sess_select: setting timer to 1.999962 sec, clear block (was 1) trace: snmp_synch_input(): snmp_client.c, 176: snmp_synch: Response (ReqID: 1528862053 - Cmd 161) Timeout: No Response from 127.0.0.1 I've googled to no avail but I can't simply get to the bottom of this issue. At some point I've noticed something about the Engine-ID, I have no idea how to retrieve this (all attempts from Google examples returned the same timeout error). As you can see, I've also tried increasing the timeout period, but that did not work. Any points would be greatly appreciated! |
From: Ambika Cp <amb...@gm...> - 2024-02-05 04:15:54
|
Hi Team, I am looking for a net-snmp version which is compatible with openssl3x. Could you please let me know if we have the net-snmp that goes with openssl3x? Regards Ambika |
From: Bill F. <fe...@gm...> - 2024-02-04 20:50:38
|
Hi Vivek, There are some types of configuration that can only be applied with a restart, because the option to change them has not yet been implemented. There is nothing fundamental that prevents this from being implemented, but it is not a simple fix, which is why it hasn't been done yet. Bill On Tue, Jan 9, 2024 at 1:58 AM Vivek Aditya <viv...@gm...> wrote: > Hi Team, > > I want the snmpv3 context to change without snmpd restart. When I checked > with SIGHUP, looks like adding a new snmpv3 context, SIGHUP works; But > deleting the context and sending a SIGHUP, the context does not get deleted > and still able to perform walk with that context. > > Is there a way to do it or has this issue already been resolved? Any help > would be appreciated > > -- > Warm Regards, > Vivek Aditya > _______________________________________________ > Net-snmp-coders mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders > |
From: Vincent G. <vin...@ov...> - 2024-02-01 09:52:26
|
Hi ! I've trouble to make work snmpget (running on Linux Mint) to initiate DTLS connection with an agent. Hostname "tboxvincent" is correctly set in 'hosts' file, and it's working fine when I ping it. It seems snmpget has trouble with dtlsudp or dtls transport domain (tried both), returning message like : "tdomain: Found no domain from specifier "dtlsudp"" (see below), but I don't know why : My command : snmpget -d -DALL -v 3 -l authPriv -n "" -u vincent -a MD5 -A "myPwdPhrase" -x DES -X "myPrivPhrase" -T localCert=vincent -T trust_cert=TBox_CA -T their_hostname=tboxvincent dtlsudp:tboxvincent:10161 sysContact.0 Returning on terminal : trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 652: tdomain: tdomain_transport_spec("snmp", "dtlsudp:tboxvincent:10161", 0, "udp,udp6", "[NIL]", "[NIL]") trace: find_tdomain(): snmp_transport.c, 607: tdomain: Found no domain from specifier "dtlsudp" trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 738: tdomain: Use user specified default domain "udp,udp6" trace: find_tdomain(): snmp_transport.c, 601: tdomain: Found domain "udp" from specifier "udp" trace: netsnmp_lookup_default_target(): snmp_service.c, 413: defaults: netsnmp_lookup_default_target("snmp", "udp") -> ":161" trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 791: tdomain: trying domain "udp" address "dtlsudp:tboxvincent:10161" default address ":161" trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 65: netsnmp_sockaddr_in: addr 0x7ffd345bab90, inpeername "dtlsudp:tboxvincent:10161", default_target ":161" trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 65: netsnmp_sockaddr_in: addr 0x7ffd345bab90, inpeername ":161", default_target "[NIL]" trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 122: netsnmp_sockaddr_in: check user service 161 trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 181: netsnmp_sockaddr_in: return { AF_INET, 0.0.0.0:161 } trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 122: netsnmp_sockaddr_in: check user service tboxvincent:10161 trace: netsnmp_sockaddr_in2(): transports/snmpIPv4BaseDomain.c, 136: netsnmp_sockaddr_in: servname not numeric trace: find_tdomain(): snmp_transport.c, 601: tdomain: Found domain "udp6" from specifier "udp6" trace: netsnmp_lookup_default_target(): snmp_service.c, 413: defaults: netsnmp_lookup_default_target("snmp", "udp6") -> ":161" trace: netsnmp_tdomain_transport_tspec(): snmp_transport.c, 791: tdomain: trying domain "udp6" address "dtlsudp:tboxvincent:10161" default address ":161" trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 206: netsnmp_sockaddr_in6_2: addr 0x7ffd345bab80, peername "dtlsudp:tboxvincent:10161", default_target ":161" trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 206: netsnmp_sockaddr_in6_2: addr 0x7ffd345bab80, peername ":161", default_target "[NIL]" trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 244: netsnmp_sockaddr_in6_2: totally numeric: 161 trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 480: netsnmp_sockaddr_in6_2: return { AF_INET6, [::]:161 } trace: netsnmp_sockaddr_in6_2(): transports/snmpIPv6BaseDomain.c, 381: netsnmp_sockaddr_in6_2: hostname(?) with port suffix :10161 trace: netsnmp_getaddrinfo(): system.c, 866: dns:getaddrinfo: looking up "dtlsudp:tboxvincent" with hint ({ ... }) trace: _sess_open(): snmp_api.c, 1662: _sess_open: couldn't interpret peername snmpget: Unknown host (dtlsudp:tboxvincent:10161) (Invalid argument) My /etc/snmp.conf file : mibdirs /usr/share/snmp/mibs persistentDir /usr/snmp/persist tempFilePattern /usr/temp/snmpdXXXXXX defContext none defVersion 3 defAuthType MD5 defAuthPassphrase myPwdPhrase defSecurityModel tsm defSecurityName vincent defSecurityLevel authPriv Any help/ideas will be very appreciated, many thanks ! Vincent |
From: Turritopsis D. T. En M. <tdt...@gm...> - 2024-01-21 16:04:56
|
Subject: Accidentally set Password Recovery Functionality to Disabled for Cisco ASA 5506-X Firewall After Following Guide with Conflicting Instructions Good day from Singapore, On 12 Jan 2024 Friday, my colleague Danial Robinson asked me to go to our customer office at Paya Lebar Square, Singapore to reset the password for Cisco ASA 5506-X firewall. When I putty into the console of Cisco ASA 5506-X firewall, I knew I was able to reset the password. But alas! I had followed a guide with conflicting instructions. The following is the guide with conflicting instructions. Reference Guide: Password Recovery for the Cisco ASA 5500 Firewall (5505,5510,5520 etc) Link: https://www.networkstraining.com/password-recovery-for-the-cisco-asa-5500-firewall/ When I came to Step 7 in the guide, it gave conflicting instructions. Step 7 says: "Accept the default values for all settings (at the prompt enter Y)", which is apparently contradictory. Step 7 asks you to accept the default values for all settings and yet it contradicts itself by asking you to enter Y at the prompt. Due to my carelessness and lack of careful thought, I had accidentally entered Y when I was asked about setting password recovery to disabled. I had never thought my action would be permanent and irreversible. This was a complete disaster. After the reboot, I could no longer reset the password for Cisco ASA 5506-X firewall. The change was permanent and irreversible. Every time I try to break into ROMMON mode, I was asked to permanently erase disk0, which is the flash. <CODE> Rom image verified correctly Cisco Systems ROMMON, Version 1.1.14, RELEASE SOFTWARE Copyright (c) 1994-2018 by Cisco Systems, Inc. Compiled Tue 06/05/2018 22:45:19.61 by builder Current image running: Boot ROM0 Last reset cause: PowerOn DIMM Slot 0 : Present Platform ASA5506 with 4096 Mbytes of main memory MAC Address: 74:88:bb:c8:72:bf INFO: PASSWORD RECOVERY functionality is disabled. WARNING: Password recovery and ROMMON command line access has been disabled by your security policy. Answering YES below will cause ALL configurations, passwords, images in 'disk0:' to be erased. ROMMON command line access will be re-enabled, and a new image must be downloaded via ROMMON. Permanently erase 'disk0:'? no </CODE> Dear Cisco TAC support, Is there any way to recover the startup-config without forcing me to permanently erase the flash? Which will erase everything? The following console output shows that I could not enter ROMMON mode at all, after accidentally setting password recovery to disabled. <CODE> securevpn> reload ^ ERROR: % Invalid input detected at '^' marker. securevpn> Rom image verified correctly Cisco Systems ROMMON, Version 1.1.14, RELEASE SOFTWARE Copyright (c) 1994-2018 by Cisco Systems, Inc. Compiled Tue 06/05/2018 22:45:19.61 by builder Current image running: Boot ROM0 Last reset cause: PowerOn DIMM Slot 0 : Present Platform ASA5506 with 4096 Mbytes of main memory MAC Address: 74:88:bb:c8:72:bf INFO: PASSWORD RECOVERY functionality is disabled. WARNING: Password recovery and ROMMON command line access has been disabled by your security policy. Answering YES below will cause ALL configurations, passwords, images in 'disk0:' to be erased. ROMMON command line access will be re-enabled, and a new image must be downloaded via ROMMON. Permanently erase 'disk0:'? no Located '.boot_string' @ cluster 997554. # Attempt autoboot: "boot disk0:/asa984-22-lfbff-k8.SPA" Located 'asa984-22-lfbff-k8.SPA' @ cluster 969854. ############################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### LFBFF signature verified. INIT: version 2.88 booting Starting udev Configuring network interfaces... done. Populating dev cache ^[^[^[^[^[^[dosfsck 2.11, 12 Mar 2005, FAT32, LFN There are differences between boot sector and its backup. Differences: (offset:original/backup) 65:01/00 Not automatically fixing this. Starting check/repair pass. Starting verification pass. /dev/sdb1: 138 files, 947320/1919830 clusters dosfsck(/dev/sdb1) returned 0 Mounting /dev/sdb1 IO Memory Nodes: 1 IO Memory Per Node: 387973120 bytes Global Reserve Memory Per Node: 314572800 bytes Nodes=1 LCMB: got 387973120 bytes on numa-id=0, phys=0x38800000, virt=0x2aaaaae00000 LCMB: HEAP-CACHE POOL got 312475648 bytes on numa-id=0, virt=0x2aaac2000000 LCMB: HEAP-CACHE POOL got 2097152 bytes on numa-id=0, virt=0x2aaad4a00000 Processor memory: 1638667399 M_MMAP_THRESHOLD 65536, M_MMAP_MAX 25004 M_MMAP_THRESHOLD 65536, M_MMAP_MAX 25004 POST started... POST finished, result is 0 (hint: 1 means it failed) Compiled on Fri 29-May-20 00:37 PDT by builders Total NICs found: 14 i354 rev03 Gigabit Ethernet @ irq255 dev 20 index 08 MAC: 7488.bbc8.72bf ivshmem rev03 Backplane Data Interface @ index 09 MAC: 0000.0001.0002 en_vtun rev00 Backplane Control Interface @ index 10 MAC: 0000.0001.0001 en_vtun rev00 Backplane Int-Mgmt Interface @ index 11 MAC: 0000.0001.0003 en_vtun rev00 Backplane Ext-Mgmt Interface @ index 12 MAC: 0000.0000.0000 en_vtun rev00 Backplane Tap Interface @ index 13 MAC: 0000.0100.0001 WARNING: Attribute already exists in the dictionary. WARNING: Attribute already exists in the dictionary. Verify the activation-key, it might take a while... Running Permanent Activation Key: Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 5 perpetual Inside Hosts : Unlimited perpetual Failover : Disabled perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Carrier : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 10 perpetual Total VPN Peers : 12 perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual Shared License : Disabled perpetual Total TLS Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Cluster : Disabled perpetual This platform has a Base license. ^[^[Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1) Cisco Adaptive Security Appliance Software Version 9.8(4)22 ****************************** Warning ******************************* This product contains cryptographic features and is subject to United States and local country laws governing, import, export, transfer, and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute, or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return the enclosed items immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to ex...@ci.... ******************************* Warning ******************************* Cisco Adaptive Security Appliance Software, version 9.8 Copyright (c) 1996-2019 by Cisco Systems, Inc. For licenses and notices for open source software used in this product, please visit http://www.cisco.com/go/asa-opensource Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. Cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Reading from flash... !!!!!........... Cryptochecksum (unchanged): a44c49c9 4217b655 7de33b81 70c47440 INFO: Power-On Self-Test in process. ....................................................................... INFO: Power-On Self-Test complete. INFO: Starting HW-DRBG health test... INFO: HW-DRBG health test passed. INFO: Starting SW-DRBG health test... INFO: SW-DRBG health test passed. User enable_1 logged in to securevpn Logins over the last 1 days: 1. Failed logins since the last login: 0. Type help or '?' for a list of available commands. securevpn> </CODE> The following is the "show version" console output. <CODE> securevpn> show version Cisco Adaptive Security Appliance Software Version 9.8(4)22 Firepower Extensible Operating System Version 2.2(2.124) Device Manager Version 7.8(2)151 Compiled on Fri 29-May-20 00:37 PDT by builders System image file is "disk0:/asa984-22-lfbff-k8.SPA" Config file at boot was "startup-config" securevpn up 126 days 8 hours Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) Internal ATA Compact Flash, 8000MB BIOS Flash M25P64 @ 0xfed01000, 16384KB Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1) Number of accelerators: 1 1: Ext: GigabitEthernet1/1 : address is 7488.bbc8.72c0, irq 255 2: Ext: GigabitEthernet1/2 : address is 7488.bbc8.72c1, irq 255 3: Ext: GigabitEthernet1/3 : address is 7488.bbc8.72c2, irq 255 4: Ext: GigabitEthernet1/4 : address is 7488.bbc8.72c3, irq 255 5: Ext: GigabitEthernet1/5 : address is 7488.bbc8.72c4, irq 255 6: Ext: GigabitEthernet1/6 : address is 7488.bbc8.72c5, irq 255 7: Ext: GigabitEthernet1/7 : address is 7488.bbc8.72c6, irq 255 8: Ext: GigabitEthernet1/8 : address is 7488.bbc8.72c7, irq 255 9: Int: Internal-Data1/1 : address is 7488.bbc8.72bf, irq 255 10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0 11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0 12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0 13: Ext: Management1/1 : address is 7488.bbc8.72bf, irq 0 14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0 Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 5 perpetual Inside Hosts : Unlimited perpetual Failover : Disabled perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Carrier : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 10 perpetual Total VPN Peers : 12 perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual Shared License : Disabled perpetual Total TLS Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Cluster : Disabled perpetual This platform has a Base license. Serial Number: Running Permanent Activation Key: Configuration register is 0x1 Image type : Release Key Version : A Configuration has not been modified since last system restart. </CODE> ************************************************************* Technical specifications of Cisco ASA 5506-X firewall ************************************************************* Processor: CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) Memory: 4 GB RAM Storage: 8 GB Internal ATA Compact Flash ************************************************************* The following is the "show flash" console output. <CODE> securevpn> show flash --#-- --length-- -----date/time------ path 122 108563072 Jan 25 2019 22:53:16 asa982-lfbff-k8.SPA 123 26970456 Jan 25 2019 22:53:46 asdm-782.bin 124 93 Jun 17 2020 18:50:42 .boot_string 11 4096 Jan 25 2019 22:56:56 log 144 1375 Mar 09 2020 12:54:10 log/asa-appagent.log 19 4096 Jan 25 2019 22:57:48 crypto_archive 20 4096 Jan 25 2019 22:57:50 coredumpinfo 21 59 Jan 25 2019 22:57:50 coredumpinfo/coredump.cfg 125 26916144 Mar 09 2020 16:39:48 asdm-781-150.bin 126 28672 Jan 01 1980 08:00:00 FSCK0000.REC 127 45961535 Mar 05 2020 20:34:28 anyconnect-win-4.7.01076-webdeploy-k9.pkg 128 53129667 Mar 05 2020 20:34:48 anyconnect-macos-4.7.01076-webdeploy-k9.pkg 129 12511 Mar 05 2020 23:07:36 oldconfig_2020Mar05_1451.cfg 130 34033084 Mar 05 2020 23:09:02 asdm-7131.bin 131 111281312 Mar 05 2020 23:29:58 asa984-8-lfbff-k8.SPA 132 12851 Mar 05 2020 23:30:06 oldconfig_2020Mar05_1513.cfg 133 26975568 Mar 05 2020 23:35:10 asdm-782-151_2.bin 134 111290512 Jun 17 2020 14:46:10 asa984-10-lfbff-k8.SPA 135 23506 Jun 17 2020 14:46:22 oldconfig_2020Jun17_0631.cfg 136 23509 Jun 17 2020 15:07:42 backup_170620.cfg 137 111383904 Jun 17 2020 18:25:30 asa984-22-lfbff-k8.SPA 138 23674 Jun 17 2020 18:25:38 oldconfig_2020Jun17_1010.cfg 139 4096 Jan 01 1980 08:00:00 FSCK0001.REC 7863623680 bytes total (3983400960 bytes free) </CODE> Looks like Cisco ASA 5506-X firewall operating system is also based on Linux and open source software. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems. |
From: wim d. <wim...@ad...> - 2024-01-17 22:27:03
|
HI all, I have a 5.7.3 server and 5.9.1 clients running on different computers. The problem is the client does not get any answers from the server when running with the -d option I see a send and a receive of one packet (I presume authentication) and then a set of sends but not receives and finally Timeout: No Response from synology1. So connection is possible. On the server side I see the inverse receive and send and then receives with the correct interpretation of the request (a GET) but no replies What could be wrong ? W |
From: Feroz <fer...@gm...> - 2024-01-10 06:18:15
|
IMO we need to revert this patch, as it would cause issues in production. This is a partial fix. -Feroz On Tue, Jan 9, 2024 at 2:35 PM Vivek Aditya <viv...@gm...> wrote: > Thanks for quick response > > I am working on this feature and able to achieve partial success. There is > one use case where it does not work. It's a pretty small code > change. Please take a look at the commit message for the logic and to > understand the exact use-case where it isn't working. Any help or > suggestion is appreciated. > > review link - https://github.com/net-snmp/net-snmp/pull/769 > > > On Mon, 8 Jan 2024 at 22:52, Wes Hardaker <har...@us...> > wrote: > >> Vivek Aditya <viv...@gm...> writes: >> >> > I want the SNMP to start listening on a new agent port without restart. >> > Just sending SIGHUP to snmpd does not work. >> > >> > Is there a way to do it or has this issue already been fixed? Any help >> > would be appreciated. >> >> That's a good feature request, but I don't think we handle that now >> you're right. >> -- >> Wes Hardaker >> Please mail all replies to net...@li... >> > > > -- > Warm Regards, > Vivek Aditya > _______________________________________________ > Net-snmp-coders mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders > -- Regards, Feroz Ahmed |
From: Wes H. <har...@us...> - 2024-01-08 17:23:02
|
Vivek Aditya <viv...@gm...> writes: > I want the SNMP to start listening on a new agent port without restart. > Just sending SIGHUP to snmpd does not work. > > Is there a way to do it or has this issue already been fixed? Any help > would be appreciated. That's a good feature request, but I don't think we handle that now you're right. -- Wes Hardaker Please mail all replies to net...@li... |
From: Dan L. <da...@la...> - 2023-12-28 17:08:51
|
On Wed, Dec 27, 2023, at 8:43 PM, Dan Langille wrote: > Hello, > > I'm trying to configure net-snmp-5.9.1 on FreeBSD 14.0 > > I've succeeded with a fresh install (in a FreeBSD jail) and now I'm > trying to configure the hosts. What's missing on the hosts is > hrMemorySize and hrStorageTable. > > Hosts are running: /usr/local/sbin/snmpd -f -Lo -Dhost -c > /usr/local/etc/snmpd.conf -a -r > > /usr/local/etc/snmpd.conf looks similar on working and non-working hosts. > > The files in /usr/local/share/snmpd seem to match. > > I can see hrMemorySize here: > > [1:40 r730-01 dvl /usr/local/share/snmp] % grep -r hrMemorySize * > mibs/HOST-RESOURCES-MIB.txt: hrMemorySize, hrStorageSize, > hrStorageAllocationFailures, > mibs/HOST-RESOURCES-MIB.txt:hrMemorySize OBJECT-TYPE > mibs/HOST-RESOURCES-MIB.txt: hrMemorySize, hrStorageIndex, > hrStorageType, > > So I'm not sure where to start checking next. Thanks for any clues. Earlier today, I resolved this. The build in question was created with: NET_SNMP_WITHOUT_MIB_MODULE_LIST+= host NET_SNMP_WITHOUT_MIB_MODULE_LIST+= ucd-snmp/memory CONFIGURE_ARGS+= --without-kmem-usage Thanks. -- Dan Langille da...@la... |
From: Dan L. <da...@la...> - 2023-12-28 01:43:54
|
Hello, I'm trying to configure net-snmp-5.9.1 on FreeBSD 14.0 I've succeeded with a fresh install (in a FreeBSD jail) and now I'm trying to configure the hosts. What's missing on the hosts is hrMemorySize and hrStorageTable. Hosts are running: /usr/local/sbin/snmpd -f -Lo -Dhost -c /usr/local/etc/snmpd.conf -a -r /usr/local/etc/snmpd.conf looks similar on working and non-working hosts. The files in /usr/local/share/snmpd seem to match. I can see hrMemorySize here: [1:40 r730-01 dvl /usr/local/share/snmp] % grep -r hrMemorySize * mibs/HOST-RESOURCES-MIB.txt: hrMemorySize, hrStorageSize, hrStorageAllocationFailures, mibs/HOST-RESOURCES-MIB.txt:hrMemorySize OBJECT-TYPE mibs/HOST-RESOURCES-MIB.txt: hrMemorySize, hrStorageIndex, hrStorageType, So I'm not sure where to start checking next. Thanks for any clues. -- Dan Langille da...@la... |
From: Kurt T. F. W. <kur...@gm...> - 2023-12-24 04:54:36
|
Subject: Kurt Tay Foo Wei is Targeted Individuals Singapore Kurt Tay Foo Wei is a Targeted Individual in Singapore. Kurt Tay Foo Wei has probably criticized/badmouthed the Singapore Government, Minister Mentor Lee Kuan Yew, Prime Minister Lee Hsien Loong, Ho Ching and/or other cabinet ministers in Singapore. That's why the Singapore Government targeted, persecuted, marked and blacklisted Kurt Tay Foo Wei. Tens of thousands of people in Singapore hate Kurt Tay Foo Wei to the core and these haters target Kurt Tay Foo Wei every day, every minute. These tens of thousands of haters of Kurt Tay Foo Wei wanted to get into the Good Books of the Singapore Government, for better job prospects and monetary incentives from the Singapore Government. Mr. Turritopsis Dohrnii Teo En Ming is also a Targeted Individual in Singapore. According to The Straits Times newspaper in Singapore, there are 70,000 people in Singapore with mental illness. This means that there are 70,000 Targeted Individuals in Singapore. This is because mental illness is a government invention, designed to punish and torture people who criticize the government. Millions of Targeted Individuals in the Americas, Europe, Australia, New Zealand, India, Russia, China, Japan, South Korea, and all the other countries in the world are now arguing that government(s) invented mental illness to punish and torture people who criticize the government. Government(s) develop psychotronic weapons, mind control technology, satellite communications, cell towers and nanotechnology chip implants in the brain to induce mental illness in millions of people. And government(s) are very scared to let the world/mass population know of such a technology capable of inducing mental illness in millions of people. Because there will be massive outcry and uprisings in every country all over the world. <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free.www.avg.com <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> |
From: Turritopsis D. T. En M. <teo...@pr...> - 2023-11-19 14:13:41
|
Subject: I have confirmed that the latest Sophos Firewall SFOS version 20.0.0 GA-Build222 is using open source Snort as its Intrusion Prevention System (IPS) Good day from Singapore, I have started installing Sophos Firewall SFOS version 20.0.0 GA-Build222 on my Intel Celeron J3160 (4 GB DDR3L RAM + 64 GB SSD) on 16 Nov 2023 Thursday at 11.00 PM. Initially I had wanted to install Sophos Firewall on my newest Intel Celeron J4125 (8 GB DDR4 + 64 GB SSD) but the Linux Kernel version 4.14.302 wasn't able to detect Intel Ethernet Controller I225-V 2.5 GbE network interface cards. To workaround the problem, I had to install pfSense firewall version 2.7.0 on my Intel Celeron J4125 firewall appliance and then install Sophos Firewall on my Intel Celeron J3160 firewall appliance. Both pfSense and Sophos Firewall use open source Snort as its Intrusion Prevention System (IPS). When I was installing Sophos Firewall on my Intel Celeron J3160 firewall appliance, I opened up the terminal and traversed the Linux filesystem. I saw the directory snort inside the /etc/ directory. This confirmed that the latest version of Sophos Firewall is indeed using open source Snort as its Intrusion Prevention System (IPS). Regarding my Sophos Firewall, I have only performed a Basic Setup/Configuration at the moment. But I have also turned on IPS and ensured that Admin Services (HTTPS and SSH) are restricted to the LAN zone only. Further exploration of the (1) network interfaces and (2) firewall policies/rules inside Sophos Firewall will be done later when I have more time. It is good to know that major firewall vendors like Sophos and pfSense (netgate) are using open source Snort as its Intrusion Prevention System (IPS). This goes to show that Snort is a rock solid and top notch IPS which is well supported by the world's networking leader Cisco. I am still unable to determine if Fortigate firewalls are using Snort as its IPS because Fortinet has extensively modified the Linux operating system for its FortiOS. I have finished installing Sophos Firewall (Basic Setup and Configuration only) on my Intel Celeron J3160 firewall appliance on 17 Nov 2023 Friday at 1.00 AM. I have managed to sleep at about 2.00 AM and woke up in the morning at about 7.00 AM on 17 Nov 2023 Friday. I do notice that my Sophos Firewall is a bit slow and lags. Perhaps it is because my Intel Celeron J3160 firewall appliance only has 4 GB of RAM. I will need to increase the amount of memory in the future. Fortigate, pfSense and Sophos firewalls support SNMP. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems. Sent with Proton Mail secure email. |
From: Turritopsis D. T. En M. <tdt...@gm...> - 2023-11-14 03:12:47
|
Subject: [UPDATE 3] [Thunderbird email client] Composing email: Clicking Options > Delivery Status Notification Does Not Work At All!!! Good day from Singapore, Today is 13 November 2023 Monday Singapore Time 7 PM. Recently I have installed Thunderbird email client version 115.4.1 (64-bit) SUPERNOVA in Windows 11 Home version 22H2 in my home desktop computer. I have numerous Gmail email account(s). I do not know whether GMAIL is using Postfix or EXIM Mail Transfer Agent (MTA). I have composed and SENT emails with the Subject: "Singaporean man who previously attempted to contest in the 2023 Singapore Presidential Elections has applied for refugee status/political asylum in the UK on 23 Oct 2023" to the following international news media outlets, mainly British, American and Hong Kong: [01] BBC News (UK) [02] The Guardian (UK) [03] The Observer (UK) [04] The Daily Telegraph (UK) [05] The Sunday Telegraph (UK) [06] The Washington Post (USA) [07] The New York Times (USA) [08] CNN (USA) [09] Yahoo News [10] Wired.com (USA) [11] Vice.com (USA) [12] Mothership (Singapore) [13] Must Share News (Singapore) [14] The Independent (Singapore) [15] Goodyfeed (Singapore) [16] Sky News (UK) [17] The Times (UK) [18] The Independent (UK) [19] Channel 4 News (UK) [20] Daily Mail (UK) [21] The Sun (UK) [22] The Mirror (UK) [23] South China Morning Post (Hong Kong) [24] Financial Times (UK) [25] Reuters (UK) - I have managed to contact Reuters using contact submission form on its official website. [26] Agence France-Press (France) - I have managed to contact Agence France-Press using contact submission form on its official website. [27] Associated Press (USA) - I have managed to contact Associated Press using contact submission form on its official website. Before sending each email, I will click Options > Delivery Status Notification in Thunderbird email client. I will ENSURE this option is clicked, besides clicking Return Receipts. However, I have NEVER received any Delivery Status Notification for the emails that I have sent. Not even once. Though I have received Return Receipts, but they are very FEW. Questions: [1] Is there a bug with Thunderbird email client? ---OR--- [2] Did the Singapore Government have unfettered access and absolute control of all my email accounts? Were my outgoing emails to the above international news media outlets intercepted and deleted by the Singapore Government before they reach their recipients? Hence the above-mentioned international news media outlets have NEVER received my emails??? Many years ago, I think it was during General Election 2011 in Singapore, I think it was Mr. Tan Jee Say, who told me that the Singapore Government has secret/covert access to all the email accounts of all Singaporeans. Why is the Singapore Government so scared to let the whole world know that Singapore Citizen Mr. Teo En Ming has flown from Singapore to London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed refugee status / political asylum in the United Kingdom on 23 Oct 2023? After the British Government has fully paid for my free Singapore Airlines SQ321 flight (because I only have about/approximately SGD$2400 in my bank accounts on 23 Oct 2023) and sent me back to Singapore from London Heathrow Airport (I was transferred from London Gatwick Airport to London Heathrow Airport) on a 12-hour flight on 23 Oct 2023, I saw someone (not me) had created a forum thread/topic at Hardwarezone Singapore Eat-Drink-Man-Woman (EDMW) forums with the title, something like: "BREAKING Teo En Ming has claimed refugee in the UK on 23 Oct 2023..." However, after 5 pages of forum discussion (I think), the administrators or moderators of Hardwarezone Singapore forums had QUICKLY deleted the above forum thread/topic. Maybe due to pressure from the Singapore Government. Maybe due to pressure from the Singapore Government. I didn't see the actual forum thread/topic itself. What I saw was the Google Cache of the deleted forum topic. But now the Google Cache is also gone, I think. Why is the Singapore Government so scared to let the whole world know that Singapore Citizen Mr. Teo En Ming has flown from Singapore to London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed refugee status / political asylum in the United Kingdom on 23 Oct 2023? Or is it a bug with Thunderbird email client that I have never received any Delivery Status Notification for the emails that I have sent out to the above international news media outlets? Or was there a problem with the GMAIL SMTP servers?? Problem with Postfix MTA? Problem with Exim MTA? Problem with Sendmail MTA? Why is the Singapore Government so scared to let the whole world know that Singapore Citizen Mr. Teo En Ming has flown from Singapore to London (transit in Shanghai, China) on 22 Oct 2023 Sunday and claimed refugee status / political asylum in the United Kingdom on 23 Oct 2023? Mr. Teo En Ming has previously applied for political asylum / refugee status at the [1] United Nations Refugee Agency UNHCR Bangkok (21-22 March 2017), [2] in Taiwan on 5 Aug 2019 and [3] in Australia (application by email through the Australian Embassy in Kuala Lumpur) on 10 March 2020. But they were never reported in the news anywhere at all. There is widespread news coverage on Amos Yee, who had offended Singapore Minister Mentor Lee Kuan Yew 8 years ago in 2015. Mr. Teo En Ming had also offended Singapore Minister Mentor Lee Kuan Yew 16 years ago in 2007, many many years before Amos Yee did. So I don't understand why the Singapore Government is so scared to have widespread news coverage of Mr. Teo En Ming. Why can't the Singapore Government let millions and billions of people know Mr. Teo En Ming??????? The Singapore Government has really ordered a MEDIA BLACKOUT for Mr. Turritopsis Dohrnii Teo En Ming! Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems. |
From: Pobinger, G. <ger...@sw...> - 2023-10-31 19:16:47
|
Hi, * we use net-snmp as the SNMP v3 demon that forwards requests to certain MIBs to our self-written, locally running SNMPv1 sub-agent. We have noticed that when the SNMP client issues a GETBULK request that cannot be completely fulfilled (e.g. there are less entries in the table than requested), then the response * contains the Var-bindings that are available, but * has set error-status to nosuchname * has set error-index to 1 * contains an additional varbinding (with same OID as the last available) with value Null * contains another varbinding (with same OID) with value endOfMibView (This may be related to this (relatively old) posting https://sourceforge.net/p/net-snmp/mailman/message/30509710/) When the subagent runs as v2c, everything works correctly. So we have a workaround for now. Any ideas why net-snmp invents the additional varbindings or sets the error-status/index? BR, Gerhard Pobinger |
From: Turritopsis D. T. En M. <tdt...@gm...> - 2023-10-21 06:01:21
|
Subject: [World Wide Announcement] Mr. Teo En Ming has configured, setup, and deployed 22 Fortigate firewalls for 20 companies in Singapore so far Good day from Singapore, Ever since Mr. Turritopsis Dohrnii Teo En Ming joined his present IT Solutions Provider company the American Defense Information Systems Agency (DISA) (fictitious company name used instead of real company name) on 15 June 2020, he has configured, setup, and deployed 22 Fortigate firewalls for 20 companies / organizations in Singapore so far. Information is accurate as of 21 Oct 2023 Sat Singapore Time. In addition, Mr. Teo En Ming has also provided guidance and mentoring to his colleague Danial Robinson (fictitious individual name used instead of real name) on configuring 2 Fortigate firewalls for 2 closely-affiliated companies at Tagore Lane Singapore, on 26 Sep 2023 and 17 Oct 2023 respectively. Mr. Teo En Ming also has a pfSense Community Edition version 2.7.0 firewall appliance (SGD$222) at home, which is based on the rock solid and top notch FreeBSD operating system. FreeBSD ROCKS!!! Another thing to note: Mr. Teo En Ming has also maintained a list of achievements / accomplishments / IT projects completed since 27 Nov 2017, which is 5 years 10 months and 24 days ago. Mr. Teo En Ming first properly began his career as an IT Support Engineer on 27 Nov 2017, at the age of 39 years old. Before 39 years old, Mr. Teo En Ming did not have a proper job and frequently gets fired from his jobs for about 10 years after graduation from the National University of Singapore (NUS) with a Bachelor of Mechanical Engineering with Aerospace Option (2nd Class Lower Honors) degree in December 2006. For about 10 years since 2007, Mr. Teo En Ming is extremely under-employed (because he frequently gets fired from his jobs) due to Government-Induced Mental Illness (millions of people all over the world say schizophrenia was invented) / government persecution. Mr. Teo En Ming was subjected to government persecution for the past 16 years because he had offended the all-powerful Singapore Minister Mentor Lee Kuan Yew in the year 2007 with disparaging remarks. As a result of government persecution and the fact that he frequently gets fired from jobs for about 10 years, Mr. Teo En Ming has Extremely Little personal bank savings and MEDIOCRE/PEANUTS/NEGLIGIBLE/INSIGNIFICANT CPF savings account. As of 21 Oct 2023, Mr. Teo En Ming's total combined bank balance is SGD$3,395. As of 21 Oct 2023, Mr. Teo En Ming's CPF account breakdown is as follows: CPF Ordinary Account $44,735 CPF Special Account $30,122 CPF Medisave Account $7,366 CPF Investments $26,323 Total Combined CPF savings: SGD$108,546 The Singapore Government had also cheated Mr. Teo En Ming's family of a HDB flat. Mr. Teo En Ming's parents have lost ownership of a 3-room HDB flat at Bedok Reservoir Road Singapore in the year 2011. Mr. Teo En Ming has no choice but to rent a HDB RENTAL flat from HDB under the Public Housing Rental Scheme in Singapore. The Public Housing Rental Scheme is meant for Extremely Poor families in Singapore. Besides Extreme Poverty, Mr. Teo En Ming also has numerous Government-Induced Medical Problems (GIMP). Maybe Mr. Teo En Ming will not be able to live past 50 years old. He will deal with this in another post. It is hoped that governments in Western Liberal Democracies will accept Mr. Teo En Ming and not reject him when he applies for refugee status / political asylum VERY SOON. It is long overdue that Mr. Teo En Ming should be flying out of Singapore to apply for refugee status / political asylum in developed countries such as in Europe, North America, Japan, South Korea, Australia or New Zealand. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com 21 Oct 2023 Saturday Singapore Time 1.53 PM |
From: Prankur C. <pra...@gm...> - 2023-10-17 10:54:34
|
Dear SNMP team, Referring to the mib2c mfd tutorial for IF-MIB was helpful to understand the read-only attributes/columns of the IF-MIB::ifTable. What I also wanted to understand the setting of values / adding new rows (as you guys mentioned in the Intermediate table tutorial) but I could not find this tutorial anywhere. For sending traps notifications, is there also some example / Tutorial code ? -- Cheers Prankur |
From: Wes H. <har...@us...> - 2023-08-25 17:53:57
|
Jan Andersen <ja...@co...> writes: > That gives me the desired output - but why the difference from the > version without '-mALL'? Hi Jan, This tutorial page should help you: http://www.net-snmp.org/wiki/index.php/TUT:Using_and_loading_MIBS -- Wes Hardaker USC/ISI |
From: Feroz <fer...@gm...> - 2023-08-24 12:21:47
|
Can you please check, if snmptranslate helps you. https://linux.die.net/man/1/snmptranslate -Feroz On Thu, Aug 24, 2023 at 5:39 PM Jan Andersen <ja...@co...> wrote: > Thx, Feroz - got it! > > On a completely different note; do you know how snmpwalk et al figure > out which numerical OID matches which text OID? I've started looking at > the MIB files, and while they are very informative, I haven't spotted > that connection. Yet. > > /jan > > On 23/08/2023 16:56, Feroz wrote: > > I'm not sure if your custom MIB has an extension of ".mib" or ".txt". > > e.g: > > IF-MIB.txt > > > > All the MIB's that come with the net-snmp package have a ".txt" > extension. > > > > Try to change your mib file extension to "netgear-MIB.txt" and copy it > > in the location where you have "IF-MIB.txt".. > > See if it solves. > > > > On Wed, Aug 23, 2023 at 8:50 PM Jan Andersen <ja...@co... > > <mailto:ja...@co...>> wrote: > > > > That gives me the desired output - but why the difference from the > > version without '-mALL'? > > > > Also, in the man page it looks like '-mALL' only lists the MIBs that > > are > > listed in the local MIB files and therefore may leave something out > > that > > the appliance might supply - or have I got that wrong? > > > > /jan > > > > On 23/08/2023 16:05, Feroz wrote: > > > can you try with > > > > > > snmpwalk -v 2c -c netgear netgear1 -mALL > > > > > > Make sure you copied mib file in appropriate directory. > > > > > > > > > > > > On Wed, Aug 23, 2023 at 8:05 PM Jan Andersen <ja...@co... > > <mailto:ja...@co...> > > > <mailto:ja...@co... <mailto:ja...@co...>>> wrote: > > > > > > I have a curious problem with snmpwalk in debian 11 - if I run > > > something > > > like: > > > > > > root@vogon:~# snmpwalk -v 2c -c netgear netgear1 > > SNMPv2-MIB::sysORID > > > > > > I get OIDs translated to text: > > > > > > SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96 > > > SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2 > > > SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1 > > > SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29 > > > SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5 > > > SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78 > > > SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72 > > > SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154 > > > SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30 > > > SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76 > > > SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43 > > > SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623 > > > SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795 > > > SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2 > > > SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6 > > > SNMPv2-MIB::sysORID.16 = OID: > SNMPv2-SMI::enterprises.4526.11.61 > > > SNMPv2-MIB::sysORID.17 = OID: > SNMPv2-SMI::enterprises.4526.11.43 > > > SNMPv2-MIB::sysORID.18 = OID: > SNMPv2-SMI::enterprises.4526.11.31 > > > SNMPv2-MIB::sysORID.19 = OID: > SNMPv2-SMI::enterprises.4526.11.100 > > > SNMPv2-MIB::sysORID.20 = OID: > SNMPv2-SMI::enterprises.4526.11.37 > > > > > > However, if I run this: > > > > > > root@vogon:~# snmpwalk -v 2c -c netgear netgear1 > > > > > > I get them untranslated: > > > > > > iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port > Gigabit > > > Ethernet Smart Managed Pro Switch with 2 SFP Ports" > > > iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54 > > > iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days, > > 14:27:55.00 > > > iso.3.6.1.2.1.1.4.0 = "" > > > iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1" > > > iso.3.6.1.2.1.1.6.0 = STRING: "Network rack" > > > iso.3.6.1.2.1.1.7.0 = INTEGER: 2 > > > iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00 > > > iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96 > > > iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2 > > > ... > > > > > > > > > I have installed the same packages on my laptop, also Debian > 11: > > > > > > root@vogon:~# dpkg -l | grep -i -E 'snmp' > > > ii libnet-snmp-perl 6.0.1-6 > > > all > > > Script > > > SNMP connections > > > ii libsnmp-base > > 5.9+dfsg-4+deb11u1 > > > all > > SNMP > > > configuration script, MIBs and documentation > > > ii libsnmp40:amd64 > > 5.9+dfsg-4+deb11u1 > > > amd64 > > SNMP > > > (Simple Network Management Protocol) library > > > ii snmp > > 5.9+dfsg-4+deb11u1 > > > amd64 > > SNMP > > > (Simple Network Management Protocol) applications > > > ii snmp-mibs-downloader 1.5 > > > all > > > install and manage Management Information Base (MIB) files > > > > > > > > > On my laptop, I always get text-OIDs. I cloned the repo > > > (https://github.com/net-snmp/net-snmp > > <https://github.com/net-snmp/net-snmp> > > > <https://github.com/net-snmp/net-snmp > > <https://github.com/net-snmp/net-snmp>>) and tried to figure out > from > > > the > > > source what makes the difference, but it is a bit complex; > what > > > should I > > > look for? > > > > > > > > > > > > > > > _______________________________________________ > > > Net-snmp-users mailing list > > > Net...@li... > > <mailto:Net...@li...> > > > <mailto:Net...@li... > > <mailto:Net...@li...>> > > > Please see the following page to unsubscribe or change other > > options: > > > https://lists.sourceforge.net/lists/listinfo/net-snmp-users > > <https://lists.sourceforge.net/lists/listinfo/net-snmp-users> > > > <https://lists.sourceforge.net/lists/listinfo/net-snmp-users > > <https://lists.sourceforge.net/lists/listinfo/net-snmp-users>> > > > > > > > > > > > > -- > > > Regards, > > > Feroz Ahmed > > > > > > _______________________________________________ > > Net-snmp-users mailing list > > Net...@li... > > <mailto:Net...@li...> > > Please see the following page to unsubscribe or change other options: > > https://lists.sourceforge.net/lists/listinfo/net-snmp-users > > <https://lists.sourceforge.net/lists/listinfo/net-snmp-users> > > > > > > > > -- > > Regards, > > Feroz Ahmed > -- Regards, Feroz Ahmed |
From: Jan A. <ja...@co...> - 2023-08-23 15:18:45
|
That gives me the desired output - but why the difference from the version without '-mALL'? Also, in the man page it looks like '-mALL' only lists the MIBs that are listed in the local MIB files and therefore may leave something out that the appliance might supply - or have I got that wrong? /jan On 23/08/2023 16:05, Feroz wrote: > can you try with > > snmpwalk -v 2c -c netgear netgear1 -mALL > > Make sure you copied mib file in appropriate directory. > > > > On Wed, Aug 23, 2023 at 8:05 PM Jan Andersen <ja...@co... > <mailto:ja...@co...>> wrote: > > I have a curious problem with snmpwalk in debian 11 - if I run > something > like: > > root@vogon:~# snmpwalk -v 2c -c netgear netgear1 SNMPv2-MIB::sysORID > > I get OIDs translated to text: > > SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::mib-2.96 > SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::mib-2.32.2 > SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::mib-2.32.1 > SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::mib-2.16.29 > SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::mib-2.16.20.5 > SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::mib-2.78 > SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::mib-2.72 > SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::mib-2.154 > SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::mib-2.30 > SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::mib-2.76 > SNMPv2-MIB::sysORID.11 = OID: iso.2.840.10006.300.43 > SNMPv2-MIB::sysORID.12 = OID: iso.0.8802.1.1.2.1.5.4623 > SNMPv2-MIB::sysORID.13 = OID: iso.0.8802.1.1.2.1.5.4795 > SNMPv2-MIB::sysORID.14 = OID: iso.0.8802.1.1.2 > SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::mib-2.26.6 > SNMPv2-MIB::sysORID.16 = OID: SNMPv2-SMI::enterprises.4526.11.61 > SNMPv2-MIB::sysORID.17 = OID: SNMPv2-SMI::enterprises.4526.11.43 > SNMPv2-MIB::sysORID.18 = OID: SNMPv2-SMI::enterprises.4526.11.31 > SNMPv2-MIB::sysORID.19 = OID: SNMPv2-SMI::enterprises.4526.11.100 > SNMPv2-MIB::sysORID.20 = OID: SNMPv2-SMI::enterprises.4526.11.37 > > However, if I run this: > > root@vogon:~# snmpwalk -v 2c -c netgear netgear1 > > I get them untranslated: > > iso.3.6.1.2.1.1.1.0 = STRING: "GS324T S350 Series 24-Port Gigabit > Ethernet Smart Managed Pro Switch with 2 SFP Ports" > iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.4526.100.4.54 > iso.3.6.1.2.1.1.3.0 = Timeticks: (1266647500) 146 days, 14:27:55.00 > iso.3.6.1.2.1.1.4.0 = "" > iso.3.6.1.2.1.1.5.0 = STRING: "NEATGEAR1" > iso.3.6.1.2.1.1.6.0 = STRING: "Network rack" > iso.3.6.1.2.1.1.7.0 = INTEGER: 2 > iso.3.6.1.2.1.1.8.0 = Timeticks: (1900) 0:00:19.00 > iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.2.1.96 > iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.2.1.32.2 > ... > > > I have installed the same packages on my laptop, also Debian 11: > > root@vogon:~# dpkg -l | grep -i -E 'snmp' > ii libnet-snmp-perl 6.0.1-6 > all > Script > SNMP connections > ii libsnmp-base 5.9+dfsg-4+deb11u1 > all SNMP > configuration script, MIBs and documentation > ii libsnmp40:amd64 5.9+dfsg-4+deb11u1 > amd64 SNMP > (Simple Network Management Protocol) library > ii snmp 5.9+dfsg-4+deb11u1 > amd64 SNMP > (Simple Network Management Protocol) applications > ii snmp-mibs-downloader 1.5 > all > install and manage Management Information Base (MIB) files > > > On my laptop, I always get text-OIDs. I cloned the repo > (https://github.com/net-snmp/net-snmp > <https://github.com/net-snmp/net-snmp>) and tried to figure out from > the > source what makes the difference, but it is a bit complex; what > should I > look for? > > > > > _______________________________________________ > Net-snmp-users mailing list > Net...@li... > <mailto:Net...@li...> > Please see the following page to unsubscribe or change other options: > https://lists.sourceforge.net/lists/listinfo/net-snmp-users > <https://lists.sourceforge.net/lists/listinfo/net-snmp-users> > > > > -- > Regards, > Feroz Ahmed |