westhawksnmp-snmp — This mailing list discusses the Westhawk SNMP stack in Java.

[snmp] Context-engine id error when sending SNMPv3 trap

[Ramesh P. <ram...@gm...>]

Hi Team

I am in process to send SNMPv3 trap as shown in below code section. But I
am getting the error for :

Code :
       SnmpContextv3 itsContext3 = new SnmpContextv3("127.0.0.1", 162);
         tsPdu1 = new TrapPduv2(itsContext3);

            itsContext3.setUserName("Ramesh");
            itsContext3.setUseAuthentication(true);
            itsContext3.setUserAuthenticationPassword("authPssword");
            itsContext3.setAuthenticationProtocol(SnmpContextv3Face.SHA1_
PROTOCOL);

            itsContext3.setContextEngineId(InetAddress.getByName("127.0.
0.1").getAddress());

            itsContext3.setContextName("localhost");
            itsContext3.setUsePrivacy(true);
            itsContext3.setUserPrivacyPassword("usrPssword");
            itsContext3.setPrivacyProtocol(SnmpContextv3Face.AES_ENCRYPT);
            itsContext3.setUserPrivacyPassword("privPssword");

            // Adding OID/varbind
            itsPdu1.addOid(bind);
   //sending snmpv3 trap
            itsPdu1.send();



Error Details:
uk.co.westhawk.snmp.stack.EncodingException: UsmAgent
uk.co.westhawk.snmp.stack.DefaultUsmAgent should provide Engine ID!

at uk.co.westhawk.snmp.stack.SnmpContextv3Basis.encodePacket(
SnmpContextv3Basis.java:718)

at uk.co.westhawk.snmp.stack.Pdu.send(Pdu.java:224)

at uk.co.westhawk.snmp.stack.Pdu.send(Pdu.java:204)
Please help on it....

-- 
Regards
Ramesh

[snmp] How to receive traps from specific host or All hosts

[Sankar K. <san...@ro...>]

Hi All,

          I'm very new to these concepts and I want to write an application
to receive traps from specific or all hosts on port 162(which is assigned
for traps). I tried to create an application by using Westhawk Java API,
but I couldn't get any traps from other host.

My App :
   -> I have created new Java class with and added westhawk jars.
   -> Created an SnmpContextv2c
   -> Created an object for *TrapListener* class by overriding the method *
"trapReceived"*
   -> Added trapListener to Context using "*sc.addTrapListener(t, 162);"*
*   *->
          Is it enough to receive raps from other hosts? If not can please
give me guidance to create an application for receiving traps from hosts.

          Thanks in advance


Thanks & Regards
------------------------------
*D.Sankar Kumar*
*Ronanki Infotech Pvt. Ltd.**
*Sigma Chambers | Jeevan Bhima Nagar Main Rd. | Benguluru | India.
Mobile: +919986725601 <%2B91%20814%20708%203609>
Email: san...@ro... | Website:www.ronankiinfotech.com
"The essential part of creativity is not being afraid to fail."

[snmp] Receiving trap

[Pandu P. <pa...@gm...>]

Hello,

I'm trying to run ReceiveTrap from the example directory but couldn't get
it to work.
Here's what I did:
1. Run ReceiveTrap
D:\Library\snmp6_1\classes>java uk.co.westhawk.examplev2c.ReceiveTrap
Util(): Using properties file
'uk\co\westhawk\examplev2c\ReceiveTrap.properties'.
ReceiveTrap.init(): SnmpContextv2c[host=127.0.0.1, port=162,
bindAddress=null, socketType=Standard, community=public, #trapListeners=1,
#pduListeners=1]

2. Run SendTrap
D:\Library\snmp6_1\classes>java uk.co.westhawk.examplev2c.SendTrap
Util(): Using properties file
'uk\co\westhawk\examplev2c\SendTrap.properties'.
uk.co.westhawk.snmp.stack.TrapPduv2[context=SnmpContextv2c[host=127.0.0.1,
port=162, bindAddress=null, socketType=Standard, community=public,
#trapListeners=0, #pduListeners=0], reqId=1, msgType=0xA7,
reqVarbinds=[1.3.6.1.2.1.1.3.0: 5, 1.3.6.1.6.3.1.1.4.1.0:
1.3.6.1.6.3.1.1.5.2], respVarbinds=null]

After sending trap, I was expecting ReceiveTrap to print some messages, but
it did nothing.
Tested on ver 6.1.
Please let me know if I'm missing something.

Thanks

Re: [snmp] GetBulkPdu max repetition problem

[Birgit A. <bi...@yi...>]

Hi Pandu,

Thanks for testing.
I've added the changes and committed the code to CVS on SourceForge.

Cheers, Birgit

On 19/04/2013 13:17, Pandu Purnama wrote:
> Hi Birgit,
>
> I've applied the fix to GetBulkPdu & can confirm that it works!
> Thanks!
>
>
> On Thu, Apr 18, 2013 at 5:56 PM, Birgit Arkesteijn <bi...@yi...
> <mailto:bi...@yi...>> wrote:
>
>     Hi Pandu,
>
>     Yes, this is an omission in the code.
>     The flow of decoding incoming PduRequests is as follows:
>
>     1)
>     The contexts decode the PDU:
>     SnmpContext.processIncomingPdu()
>     SnmpContextv2c.processIncomingPdu()
>     SnmpContextv3.processPotentialRequest()
>
>     In case of GetBulk, this will only be in v2c and v3.
>
>     2)
>     These methods call
>     Pdu.fillin(AsnPduSequence seq)
>
>     This method is implemented only by Pdu and is therefore not
>     setting the
>     non_repeaters
>     max_repetitions
>     properties in GetBulk.
>
>
>     Fix:
>     You should overwrite fillin in GetBulk and fill in the two properties,
>     something like (not tested):
>
>     void fillin(AsnPduSequence seq)
>     {
>         super.fillin(seq);
>         this.setNonRepeaters(this.getErrorStatus());
>         this.setMaxRepetitions(this.getErrorIndex());
>     }
>
>     If this works, please post back to the mailing list, so others
>     know as well!
>
>
>
>     Hope this helps,
>     Birgit
>
>     ps
>
>     Documentation:
>     http://snmp123.googlecode.com/hg/doc/index.html
>
>     Westhawk SNMP stack on SourceForge:
>     http://sourceforge.net/projects/westhawksnmp/?source=directory
>

Re: [snmp] GetBulkPdu max repetition problem

[Pandu P. <pa...@gm...>]

Hi Birgit,

I've applied the fix to GetBulkPdu & can confirm that it works!
Thanks!


On Thu, Apr 18, 2013 at 5:56 PM, Birgit Arkesteijn <bi...@yi...>wrote:

> Hi Pandu,
>
> Yes, this is an omission in the code.
> The flow of decoding incoming PduRequests is as follows:
>
> 1)
> The contexts decode the PDU:
> SnmpContext.processIncomingPdu()
> SnmpContextv2c.processIncomingPdu()
> SnmpContextv3.processPotentialRequest()
>
> In case of GetBulk, this will only be in v2c and v3.
>
> 2)
> These methods call
> Pdu.fillin(AsnPduSequence seq)
>
> This method is implemented only by Pdu and is therefore not setting the
> non_repeaters
> max_repetitions
> properties in GetBulk.
>
>
> Fix:
> You should overwrite fillin in GetBulk and fill in the two properties,
> something like (not tested):
>
> void fillin(AsnPduSequence seq)
> {
>     super.fillin(seq);
>     this.setNonRepeaters(this.getErrorStatus());
>     this.setMaxRepetitions(this.getErrorIndex());
> }
>
> If this works, please post back to the mailing list, so others know as
> well!
>
>
>
> Hope this helps,
> Birgit
>
> ps
>
> Documentation:
> http://snmp123.googlecode.com/hg/doc/index.html
>
> Westhawk SNMP stack on SourceForge:
> http://sourceforge.net/projects/westhawksnmp/?source=directory
>
>
> On 03/04/2013 12:02, Pandu Purnama wrote:
> > Hello,
> >
> > I'm trying to simulate SNMP agent.
> > I'm able to handle GET & GETNEXT request correctly.
> > However there's a problem when handling GETBULK request.
> > It turns out that the GetBulkPdu.getMaxRepetitions() method is always
> > returning 0.
> >
> > I've tested using various tools, eg. snmpbulkwalk, mibwalker, etc (tried
> > with both default & supplied max repetitions), but on server it seems
> that
> > the supplied value is always ignored.
> > The same thing happens with non repeaters.
> > Here's the pdu.toString() result:
> >
> uk.co.westhawk.snmp.stack.GetBulkPdu[context=SnmpContextv2c[host=127.0.0.1,
> > port=161, bindAddress=null, socketType=Standard, community=public,
> > #trapListeners=0, #pduListeners=1], reqId=30101, msgType=0xA5,
> > reqVarbinds=[1.3.6.1.2.1: AsnNull], non_rep=0, max_rep=0]
> >
> > Is this a bug? or am I missing something?
> > Thanks
>
>

Re: [snmp] GetBulkPdu max repetition problem

[Birgit A. <bi...@yi...>]

Hi Pandu,

Yes, this is an omission in the code.
The flow of decoding incoming PduRequests is as follows:

1)
The contexts decode the PDU:
SnmpContext.processIncomingPdu()
SnmpContextv2c.processIncomingPdu()
SnmpContextv3.processPotentialRequest()

In case of GetBulk, this will only be in v2c and v3.

2)
These methods call
Pdu.fillin(AsnPduSequence seq)

This method is implemented only by Pdu and is therefore not setting the
non_repeaters
max_repetitions
properties in GetBulk.


Fix:
You should overwrite fillin in GetBulk and fill in the two properties,
something like (not tested):

void fillin(AsnPduSequence seq)
{
    super.fillin(seq);
    this.setNonRepeaters(this.getErrorStatus());
    this.setMaxRepetitions(this.getErrorIndex());
}

If this works, please post back to the mailing list, so others know as well!



Hope this helps,
Birgit

ps

Documentation:
http://snmp123.googlecode.com/hg/doc/index.html

Westhawk SNMP stack on SourceForge:
http://sourceforge.net/projects/westhawksnmp/?source=directory


On 03/04/2013 12:02, Pandu Purnama wrote:
> Hello,
>
> I'm trying to simulate SNMP agent.
> I'm able to handle GET & GETNEXT request correctly.
> However there's a problem when handling GETBULK request.
> It turns out that the GetBulkPdu.getMaxRepetitions() method is always
> returning 0.
>
> I've tested using various tools, eg. snmpbulkwalk, mibwalker, etc (tried
> with both default & supplied max repetitions), but on server it seems that
> the supplied value is always ignored.
> The same thing happens with non repeaters.
> Here's the pdu.toString() result:
> uk.co.westhawk.snmp.stack.GetBulkPdu[context=SnmpContextv2c[host=127.0.0.1,
> port=161, bindAddress=null, socketType=Standard, community=public,
> #trapListeners=0, #pduListeners=1], reqId=30101, msgType=0xA5,
> reqVarbinds=[1.3.6.1.2.1: AsnNull], non_rep=0, max_rep=0]
>
> Is this a bug? or am I missing something?
> Thanks

[snmp] GetBulkPdu max repetition problem

[Pandu P. <pa...@gm...>]

Hello,

I'm trying to simulate SNMP agent.
I'm able to handle GET & GETNEXT request correctly.
However there's a problem when handling GETBULK request.
It turns out that the GetBulkPdu.getMaxRepetitions() method is always
returning 0.

I've tested using various tools, eg. snmpbulkwalk, mibwalker, etc (tried
with both default & supplied max repetitions), but on server it seems that
the supplied value is always ignored.
The same thing happens with non repeaters.
Here's the pdu.toString() result:
uk.co.westhawk.snmp.stack.GetBulkPdu[context=SnmpContextv2c[host=127.0.0.1,
port=161, bindAddress=null, socketType=Standard, community=public,
#trapListeners=0, #pduListeners=1], reqId=30101, msgType=0xA5,
reqVarbinds=[1.3.6.1.2.1: AsnNull], non_rep=0, max_rep=0]

Is this a bug? or am I missing something?
Thanks

Re: [snmp] SNMP on V3

[Birgit A. <bi...@yi...>]

Dear Yossi,

Before I answer your question:
It seems that someone has been kind enough to create a googlecode
project for the SNMP stack. The StackUsage documentation can be found at:
http://snmp123.googlecode.com/hg/doc/StackUsage.html


Now to your questions:
Unfortunately the mailing list dropped two of your attachments.

usmStatsNotInTimeWindows indicates that the agent (authoritative engine)
considers your message outside its time window, see
http://snmp123.googlecode.com/hg/doc/api/uk/co/westhawk/snmp/stack/usmStatsConstants.html#usmStatsNotInTimeWindows

I suggest you investigate the agent side to see why this is the case.
As always with SNMPv3, the configuration of the manager needs to tie in
closely to that of the authoritative engine.

Sorry that I can't be of more help.

Regards, Birgit

On 19/11/2012 13:16, Zadok, Yossi wrote:
> Hi,
>
> I'm trying to use the example you provided within the stack for version 3 but getting errors while trying to query the device with the system up time OID.
>
> I'm using the example in the examplev3 path and activating the "get_next.java" as my client, I provided the configuration details in the property file and execute.
>
> This is the main error message:
> "3User yossizadok does support privacy, but received message without privacy: usmStatsNotInTimeWindows 42"
>
> Attached both file:
>
> -          get_next.properties- my configuration details for V3.
>
> -          Debug.txt- Debug file after executing the get_next.java (increase the debug level in the stack)
>
> -          1.bmp - screen shot show the same configuration using external tool which completed successfully .
>
>
> Can you please help me with this query? Why the V3 is not working on my end? Did I missed something? Whether the v3 example should function?
>
> Thanks,
> Yossi

[snmp] SNMP on V3

[Zadok, Y. <Yossi_Zadok2@BMC.com>]

Hi,

I'm trying to use the example you provided within the stack for version 3 but getting errors while trying to query the device with the system up time OID.

I'm using the example in the examplev3 path and activating the "get_next.java" as my client, I provided the configuration details in the property file and execute.

This is the main error message:
"3User yossizadok does support privacy, but received message without privacy: usmStatsNotInTimeWindows 42"

Attached both file:

-          get_next.properties- my configuration details for V3.

-          Debug.txt- Debug file after executing the get_next.java (increase the debug level in the stack)

-          1.bmp - screen shot show the same configuration using external tool which completed successfully .


Can you please help me with this query? Why the V3 is not working on my end? Did I missed something? Whether the v3 example should function?

Thanks,
Yossi

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Gerd R. <g.r...@pp...>]

Hello, List. 

Today I'm happy to have some closing words for this topic. 
To answer the open questions : 
Yes it IS generally possible with the westhawk stack to receive and decode v3 traps from many unknown devices. 
Of course all the devices sending the traps must have different context engine IDs. 
Next important thing is, that the class SnmpContextv3 must be instantiated on the fly with the correct host and port (taken from the RawPduEvent) because the these two parameters are the key for the hashtable which maps the contextEngineId. 
My mistake was to use the parameters from the listener socket of the contextpool here. So all the different contextEngineIds were mapped with the same key (127.0.0.1/162). And this leaded to the error I got. 

Best regards, 
Gerd Raudenbusch 

----- Ursprüngliche Mail -----
Von: "Tim Panton" <th...@we...> 
An: "List discussing the Westhawk SNMP stack." <wes...@li...> 
Gesendet: Donnerstag, 13. Oktober 2011 11:12:37 
Betreff: Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ? 

Can you check what the engineID is for the sending modem ? 

The one you quoted seems _very_ long. 

Tim. 

On 13 Oct 2011, at 09:10, Gerd Raudenbusch wrote: 

> 
> Hello, folks. 
> 
> First of all thank you all for your answers. 
> I followed your advice to create the v3 context on the fly. I use a context pool now and implement "rawPduReceived(final RawPduEvent evt)". There I create the v3 context and call contextv3.processIncomingPdu(evt.getMessage()); 
> I still get "uk.co.westhawk.snmp.stack.DecodingException: Message is outside time window" but must say all the modems use the same contextEngineId. When I set the engineId to the mac addresses of the modem I get a "uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct." 
> 
> I thought these verifications were made in the v3 context and creating a new context everytime would solve the problem but it doesn't - which means that this verifications are made earlier (maybe the packets are "tagged" in the context pool?) 
> 
> So I ask myself if it is generally possible to receive v3 traps from many unknown devices or not. 
> Do you have another hint for me or can I forget it to detect new modems in the NMS by receiving v3 traps from the modems ? 
> 
> Cheers, 
> Gerd. 
> 
> -- 
> 
> Gerd Raudenbusch 
> Dipl. Informatiker (FH) 
> Software Development 
> 
> 
> 
> Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
> Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
> E-Mai l: g.r...@pp... | http://www.ppc-ag.de 
> 
> Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
> Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 
> ------------------------------------------------------------------------------ 
> All the data continuously generated in your IT infrastructure contains a 
> definitive record of customers, application performance, security 
> threats, fraudulent activity and more. Splunk takes this data and makes 
> sense of it. Business sense. IT sense. Common sense. 
> http://p.sf.net/sfu/splunk-d2d-oct 
> _______________________________________________ 
> Westhawksnmp-snmp mailing list 
> Wes...@li... 
> https://lists.sourceforge.net/lists/listinfo/westhawksnmp-snmp 

Tim Panton - Web/VoIP consultant and implementor 
www.westhawk.co.uk 




------------------------------------------------------------------------------ 
All the data continuously generated in your IT infrastructure contains a 
definitive record of customers, application performance, security 
threats, fraudulent activity and more. Splunk takes this data and makes 
sense of it. Business sense. IT sense. Common sense. 
http://p.sf.net/sfu/splunk-d2d-oct 
_______________________________________________ 
Westhawksnmp-snmp mailing list 
Wes...@li... 
https://lists.sourceforge.net/lists/listinfo/westhawksnmp-snmp 


-- 

Gerd Raudenbusch 
Dipl.  Informatiker (FH) 
Software Development 



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
E-Mai l: g.r...@pp... | http://www.ppc-ag.de 

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Birgit A. <bi...@yi...>]

Hi Gerd,

You might have to clear the time window by calling:
TimeWindow.clearTimeWindow(snmpEngineId)

When the TimeWindow is unknown, the stack will do a discovery first.
This means that when you create a context on the fly and clean the time
window on every incoming trap, the stack will do a discovery for every
incoming trap. This way three PDUs will be exchanged instead of your
single trap. Do you expect a huge amount of traps?

Re Message is outside time window:
The decoding exception happens when the stack receives the trap and
decodes it. It will compare its local copy (ie last known details) of
the time window with the details in the PDU (trap). When the two time
windows differ too much, the decoder will generate this exception.

Re Received engine Id:
That's is similar as above. The context compares its contextEngineId
with the contextEngineID in the trap.
Note: contextEngineID is not the same as the (discovered) snmpEngineId,
that is used in the time window (amongst others).

If you're concerned the Pool is tagging context(s), call
SnmpContextv3Pool.dumpContexts() (just to debug)
and see what's in the pool. It should contain a counter with the number
of references to each context.

Besides clearing the time window, I have no other suggestions. That what
makes SNMPv3 more secure than v1 or 2, now works against you.
I take it SNMPv3 is really necessary and SNMPv2 wouldn't suffice?

Cheers, Birgit

On 13/10/2011 10:10, Gerd Raudenbusch wrote:
> Hello, folks. 
>
> First of all thank you all for your answers. 
> I followed your advice to create the v3 context on the fly. I use a context pool now and implement "rawPduReceived(final RawPduEvent evt)". There I create the v3 context and call contextv3.processIncomingPdu(evt.getMessage()); 
> I still get "uk.co.westhawk.snmp.stack.DecodingException: Message is outside time window" but must say all the modems use the same contextEngineId. When I set the engineId to the mac addresses of the modem I get a "uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct." 
>
> I thought these verifications were made in the v3 context and creating a new context everytime would solve the problem but it doesn't - which means that this verifications are made earlier (maybe the packets are "tagged" in the context pool?) 
>
> So I ask myself if it is generally possible to receive v3 traps from many unknown devices or not. 
> Do you have another hint for me or can I forget it to detect new modems in the NMS by receiving v3 traps from the modems ? 
>
> Cheers, 
> Gerd.

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Tim P. <th...@we...>]

Can you check what the engineID is for the sending modem ?

The one you quoted seems _very_ long.

Tim.

On 13 Oct 2011, at 09:10, Gerd Raudenbusch wrote:

> 
> Hello, folks. 
> 
> First of all thank you all for your answers. 
> I followed your advice to create the v3 context on the fly. I use a context pool now and implement "rawPduReceived(final RawPduEvent evt)". There I create the v3 context and call contextv3.processIncomingPdu(evt.getMessage()); 
> I still get "uk.co.westhawk.snmp.stack.DecodingException: Message is outside time window" but must say all the modems use the same contextEngineId. When I set the engineId to the mac addresses of the modem I get a "uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct." 
> 
> I thought these verifications were made in the v3 context and creating a new context everytime would solve the problem but it doesn't - which means that this verifications are made earlier (maybe the packets are "tagged" in the context pool?) 
> 
> So I ask myself if it is generally possible to receive v3 traps from many unknown devices or not. 
> Do you have another hint for me or can I forget it to detect new modems in the NMS by receiving v3 traps from the modems ? 
> 
> Cheers, 
> Gerd. 
> 
> -- 
> 
> Gerd Raudenbusch 
> Dipl.  Informatiker (FH) 
> Software Development 
> 
> 
> 
> Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
> Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
> E-Mai l: g.r...@pp... | http://www.ppc-ag.de 
> 
> Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
> Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> Westhawksnmp-snmp mailing list
> Wes...@li...
> https://lists.sourceforge.net/lists/listinfo/westhawksnmp-snmp

Tim Panton - Web/VoIP consultant and implementor
www.westhawk.co.uk

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Gerd R. <g.r...@pp...>]

Hello, folks. 

First of all thank you all for your answers. 
I followed your advice to create the v3 context on the fly. I use a context pool now and implement "rawPduReceived(final RawPduEvent evt)". There I create the v3 context and call contextv3.processIncomingPdu(evt.getMessage()); 
I still get "uk.co.westhawk.snmp.stack.DecodingException: Message is outside time window" but must say all the modems use the same contextEngineId. When I set the engineId to the mac addresses of the modem I get a "uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct." 

I thought these verifications were made in the v3 context and creating a new context everytime would solve the problem but it doesn't - which means that this verifications are made earlier (maybe the packets are "tagged" in the context pool?) 

So I ask myself if it is generally possible to receive v3 traps from many unknown devices or not. 
Do you have another hint for me or can I forget it to detect new modems in the NMS by receiving v3 traps from the modems ? 

Cheers, 
Gerd. 

-- 

Gerd Raudenbusch 
Dipl.  Informatiker (FH) 
Software Development 



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
E-Mai l: g.r...@pp... | http://www.ppc-ag.de 

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Tim P. <th...@we...>]

On 12 Oct 2011, at 07:54, Gerd Raudenbusch wrote:

> 
> Hello, Birgit. 
> 
> Thanks for the quick answer. 
> Yes, you are right, time window errors I got before, when all modems used the same engine Id. 
> So as I understand you right, I cannot collect traps from multiple devices with one context. 
> I had to use the context pool. 
> In the moment there are a few hundred modems but it is planned to install thousands. 
> Is that pool usable for such an amount of agents ? 
> 
> Best regards, 
> Gerd. 

The pool is useful if you have a moderate number of contexts (100s say) on devices that you 
are monitoring continuously . 
If you have a larger number or shorter term contact with devices, you may want to create
(and destroy) a context on the fly.

As far as I recall if you use SNMPv3 you can't avoid the need to have a correct 
time window/engineId - so you'll need discovery - which in turn implies a separate context
per device. (I suppose you could edit our source code to disable that, but then it wouldn't be v3)

If you choose to go for creating contexts on the fly, 
I  encourage you to read the StackUsage.html document - especially the section on 
"undecoded PDU events" .

Tim.

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Gejo J. T. <Gej...@ar...>]

Hi Gerd,

I'm not sure whether it will work technically, but worth a try if you do not intend to use the security features in V3.
Use the same context engine Id for all the modems. Turn off the "privacy" and "authentication" flags while creating the contexts (I feel this will avoid time window errors)

Additionally you can have an Oid inside the PDU to have a unique Id as its value (ipAddress?) to distinguish the originator of the TRAP/INFORM message.

Regards,
Gejo

-----Original Message-----
From: Gerd Raudenbusch [mailto:g.r...@pp...]
Sent: Wednesday, October 12, 2011 12:25 PM
To: wes...@li...
Subject: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?


Hello, Birgit.

Thanks for the quick answer.
Yes, you are right, time window errors I got before, when all modems used the same engine Id.
So as I understand you right, I cannot collect traps from multiple devices with one context.
I had to use the context pool.
In the moment there are a few hundred modems but it is planned to install thousands.
Is that pool usable for such an amount of agents ?

Best regards,
Gerd.

----- Ursprüngliche Mail -----
Von: "Birgit Arkesteijn" <bi...@yi...>
An: "List discussing the Westhawk SNMP stack." <wes...@li...>
CC: "Gerd Raudenbusch" <g.r...@pp...>
Gesendet: Dienstag, 11. Oktober 2011 21:12:04
Betreff: Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

Hi Gerd,

The idea/design with decoding traps has always been that for each snmp
agent or 'entity' you use one context.
Since each agent has his own engineId, each context has it's own engineId.
Now you a single context, with the configuration of a single agent, to
decode pdu messages from other agents.

Specially for SNMPv3 this can be important since there are so much more
parameters involved, besides the engineId. Also there is the discovery
to take into account.
Even if you got beyond the problem of different engineId, you might get
time window errors.

How many agents are involved? Would it be an option to have a single
context for each of them, maybe using the Pool?

Cheers, Birgit


On 11/10/2011 17:07, Gerd Raudenbusch wrote:
> Hello,
>
> When I made a feasibility study about migrating to SNMPv3 I successfully tested receiving v2 and v3 traps with exactly two sending devices.The surprise came when I tested with more devices sending v3 encoded traps.
> I use the Westhawk lib in a network management system which collects traps from modems.
> Now I got this error :
> uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct. amIAuthoritative == false
> ...
> And the reason seems to be that before I received a trap from another modem (with different IP) within the same context using the same username and authentification data.
> I thought the EngineId+Systemboots+Uptime is mapped for every different trap sender not only for a single one.
>
> I've no idea where my mistake is.
> So how can I collect traps from multiple notification originators ?


--

Gerd Raudenbusch
Dipl.  Informatiker (FH)
Software Development



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111
E-Mai l: g.r...@pp... | http://www.ppc-ag.de

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper


--
Gerd Raudenbusch
Dipl.  Informatiker (FH)
Software Development



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111
E-Mai l: g.r...@pp... | http://www.ppc-ag.de

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Westhawksnmp-snmp mailing list
Wes...@li...
https://lists.sourceforge.net/lists/listinfo/westhawksnmp-snmp




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================

[snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Gerd R. <g.r...@pp...>]

Hello, Birgit. 

Thanks for the quick answer. 
Yes, you are right, time window errors I got before, when all modems used the same engine Id. 
So as I understand you right, I cannot collect traps from multiple devices with one context. 
I had to use the context pool. 
In the moment there are a few hundred modems but it is planned to install thousands. 
Is that pool usable for such an amount of agents ? 

Best regards, 
Gerd. 

----- Ursprüngliche Mail -----
Von: "Birgit Arkesteijn" <bi...@yi...> 
An: "List discussing the Westhawk SNMP stack." <wes...@li...> 
CC: "Gerd Raudenbusch" <g.r...@pp...> 
Gesendet: Dienstag, 11. Oktober 2011 21:12:04 
Betreff: Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ? 

Hi Gerd, 

The idea/design with decoding traps has always been that for each snmp 
agent or 'entity' you use one context. 
Since each agent has his own engineId, each context has it's own engineId. 
Now you a single context, with the configuration of a single agent, to 
decode pdu messages from other agents. 

Specially for SNMPv3 this can be important since there are so much more 
parameters involved, besides the engineId. Also there is the discovery 
to take into account. 
Even if you got beyond the problem of different engineId, you might get 
time window errors. 

How many agents are involved? Would it be an option to have a single 
context for each of them, maybe using the Pool? 

Cheers, Birgit 


On 11/10/2011 17:07, Gerd Raudenbusch wrote: 
> Hello, 
> 
> When I made a feasibility study about migrating to SNMPv3 I successfully tested receiving v2 and v3 traps with exactly two sending devices.The surprise came when I tested with more devices sending v3 encoded traps. 
> I use the Westhawk lib in a network management system which collects traps from modems. 
> Now I got this error : 
> uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct. amIAuthoritative == false 
> ... 
> And the reason seems to be that before I received a trap from another modem (with different IP) within the same context using the same username and authentification data. 
> I thought the EngineId+Systemboots+Uptime is mapped for every different trap sender not only for a single one. 
> 
> I've no idea where my mistake is. 
> So how can I collect traps from multiple notification originators ? 


-- 

Gerd Raudenbusch 
Dipl.  Informatiker (FH) 
Software Development 



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
E-Mai l: g.r...@pp... | http://www.ppc-ag.de 

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 


-- 
Gerd Raudenbusch 
Dipl.  Informatiker (FH) 
Software Development 



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
E-Mai l: g.r...@pp... | http://www.ppc-ag.de 

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper

Re: [snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Birgit A. <bi...@yi...>]

Hi Gerd,

The idea/design with decoding traps has always been that for each snmp
agent or 'entity' you use one context.
Since each agent has his own engineId, each context has it's own engineId.
Now you a single context, with the configuration of a single agent, to
decode pdu messages from other agents.

Specially for SNMPv3 this can be important since there are so much more
parameters involved, besides the engineId. Also there is the discovery
to take into account.
Even if you got beyond the problem of different engineId, you might get
time window errors.

How many agents are involved? Would it be an option to have a single
context for each of them, maybe using the Pool?

Cheers, Birgit


On 11/10/2011 17:07, Gerd Raudenbusch wrote:
> Hello, 
>
> When I made a feasibility study about migrating to SNMPv3 I successfully tested receiving v2 and v3 traps with exactly two sending devices.The surprise came when I tested with more devices sending v3 encoded traps. 
> I use the Westhawk lib in a network management system which collects traps from modems. 
> Now I got this error : 
> uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct. amIAuthoritative == false 
> ... 
> And the reason seems to be that before I received a trap from another modem (with different IP) within the same context using the same username and authentification data. 
> I thought the EngineId+Systemboots+Uptime is mapped for every different trap sender not only for a single one. 
>
> I've no idea where my mistake is. 
> So how can I collect traps from multiple notification originators ? 

[snmp] How can I collect SNMPv3 traps from multiple notification originators ?

[Gerd R. <g.r...@pp...>]

Hello, 

When I made a feasibility study about migrating to SNMPv3 I successfully tested receiving v2 and v3 traps with exactly two sending devices.The surprise came when I tested with more devices sending v3 encoded traps. 
I use the Westhawk lib in a network management system which collects traps from modems. 
Now I got this error : 
uk.co.westhawk.snmp.stack.DecodingException: Received engine Id ('800013700553506944434F4D2D3436342D30353030303100A1') is not correct. amIAuthoritative == false 
... 
And the reason seems to be that before I received a trap from another modem (with different IP) within the same context using the same username and authentification data. 
I thought the EngineId+Systemboots+Uptime is mapped for every different trap sender not only for a single one. 

I've no idea where my mistake is. 
So how can I collect traps from multiple notification originators ? 







-- 

Gerd Raudenbusch 
Dipl.  Informatiker (FH) 
Software Development 



Power Plus Communications AG | Am Exerzierplatz 2 | 68167 Mannheim | Germany 
Tel.: +49 621 40165-221 | Fax: +49 621 40165-111 
E-Mai l: g.r...@pp... | http://www.ppc-ag.de 

Handelsregister-Nr.: HRB 8853 | Sitz und Registergericht: Mannheim 
Vorstand: Ingo Schönberg (Vorsitzender), Eugen Mayer | Vorsitzender des Aufsichtsrates: Dr. Manfred Krüper 

Re: [snmp] Request :: V3 device -time out exception -No proper response

[Birgit A. <bi...@yi...>]

Dear Rohit,

I'm sorry for my very late reply.
Maybe you've found the answer by now.

The best way to debug what's going on is to set the debug level on
AsnObject (see javadoc for this class).
It could be that one of the Snmpv3 context parameters isn't set properly.

Good luck!
Birgit

On 01/07/2011 12:30, Rohit.4.Kulkarni wrote:
> Sir,
>
> I am using "snmp6_1.jar" and it's previous version.
> Basically We have  developed SNMP walk application.
> We have used both Jar's for V2 device  ->working well in all cases.
> But We are expecting same type of work for V3  device also .
> All credentials we have provided are correct then also We are  getting "Time out Exception/Error".
>
> I have attached documenet ( Ports in & out data report -From my machine requested V2 and V3 device) .
> Repetedly same request object created and no proper response from V3 device .but with same application when device is V2 .Proper request and proper response .
>
> What Should I do ? .Please reply me .
>
> Thanks
> Rohit Kulkarni

Re: [snmp] decoding snmp v2c trap

[Birgit A. <bi...@yi...>]

Hi Mark,

I hope that maybe a previous question might help:
http://sourceforge.net/mailarchive/message.php?msg_id=21861757

If not, search for 'enterprise' in our mail archives.
http://sourceforge.net/search/?group_id=182520&type_of_search=mlists

Our Java stack doesn't do MIB parsing.

Cheers, Birgit

On 09/09/2011 20:46, Mark Cantrell wrote:
> Hello,
>
> Is there any way to determine the enterprise oid from a version 2 pdu
> trap?   It is my understanding that version 2 also contains this
> attribute.  However I don't see anything in the api that would decode
> the enterprise oid from the message for version 2c
>
>
> Thanks in advance
> Mark

[snmp] decoding snmp v2c trap

[Mark C. <mar...@gm...>]

Hello,

Is there any way to determine the enterprise oid from a version 2 pdu
trap?   It is my understanding that version 2 also contains this
attribute.  However I don't see anything in the api that would decode
the enterprise oid from the message for version 2c


Thanks in advance
Mark

[snmp] Westhawk vs snmp4j SNMP Stack

[Narasimha M. N. <nar...@te...>]

Dear Forum members.

I am evaluating Java based SNMP stacks. Among the SNMP stacks Westhawk 
and snmp4j, which is better (in terms of stability, memory usage, 
multi-threaded capability, etc)? If someone has done such analysis, 
appreciate if they could share. How are the commercial support (paid 
services) for  these two stacks? Appreciate  a quick reply.

Regards, Narasimha Murthy

[snmp] Request :: V3 device -time out exception -No proper response

[Rohit.4.Kulkarni <RK0073427@TechMahindra.com>]

Sir,

I am using "snmp6_1.jar" and it's previous version.
Basically We have  developed SNMP walk application.
We have used both Jar's for V2 device  ->working well in all cases.
But We are expecting same type of work for V3  device also .
All credentials we have provided are correct then also We are  getting "Time out Exception/Error".

I have attached documenet ( Ports in & out data report -From my machine requested V2 and V3 device) .
Repetedly same request object created and no proper response from V3 device .but with same application when device is V2 .Proper request and proper response .

What Should I do ? .Please reply me .

Thanks
Rohit Kulkarni

============================================================================================================================Disclaimer:  This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra.============================================================================================================================

Re: [snmp] ant buildStubBrowser

[Birgit A. <bi...@yi...>]

Hi Leila,

You don't have to build the stubBrowser, but you can if you want.
See http://snmp.westhawk.co.uk/StackUsage.html for more instructions.

If you just want to use the stack, don't build it, but use the jar file
to compile your own applet/application.

But to answer your question:
The build target expects the mibble jar in the directory
/project/classes1.3/mibble-2.5/
That is the default location we used when we built the stubbrowser.
If you want to do the same, download the mibble jar file and change the
properties to configure where the mibble jar file lives.

I strongly suggest you read the StackUsage document from A-Z and look at
some of the code examples before you continue.

Cheers, Birgit


On 16/06/2011 13:46, leila ghazzai wrote:
>> hello,
>>
>> I have just beginning with wethawk's SNMP stack but I have problem with
>> this command ant buildStubBrowser I did not understand what I should do in
>> the section "Building the stack stubBrowser.jar"
>> Can you help me please.
>>
>> Thank you
>>
>> I have this problem when  I do ant buildStubBrowser :
>> /project/classes1.3/mibble-2.5 not found.

Re: [snmp] ant buildStubBrowser

[leila g. <gha...@gm...>]

2011/6/16 leila ghazzai <gha...@gm...>

> hello,
>
> I have just beginning with wethawk's SNMP stack but I have problem with
> this command ant buildStubBrowser I did not understand what I should do in
> the section "Building the stack stubBrowser.jar"
> Can you help me please.
>
> Thank you
>

I have this problem when  I do ant buildStubBrowser :
/project/classes1.3/mibble-2.5 not found.