> > Ethereal reports that the reply to my encrypted PDU requesting
> > sysLocation is a value of 3 for
> > SNMP-USER-BASED-SM-MIB::usmStatsDecryptionErrors.0.
That would tend to indicate that it's the *agent* that can't
decode the incoming request properly.
> I infer that something about snmpd on my target isn't handling DES
> decryption. ..... I know I read somewhere ....that I have to have
> to build snmpd with SSL to get encryption.
Yes - that's right.
The suite relies on the OpenSSL libraries (or equivalents) to implement
the various encryption algorithms.
Nothing actually uses Secure Socket Layers as such - it's the
encryption routines themselves that we don't provide.
> How can I prove that snmpd has SSL build in?
Ummmm...
a) Try
snmpget .... UCD-SNMP-MIB::versionConfigureOptions.0
That won't say explicitly, but will indicate how the suite was
configured (which may indicate if it either turned on or turned off
use of OpenSSL).
b) ldd snmpd
That will show you which libraries are being linked to - any mention
of 'libcrypto' or something similar would tend to indicate that it
should support encrption
c) nm snmpd | grep -i encrypt
This should list 'sc_encrypt' regardless, but anything else is a Good Sign.
d) strings snmpd | grep -i encrypt
strings libnetsnmp.a | grep -i encrypt
If either of these include the message
"Encryption support not enabled"
(or similar) then you're out of luck.
(or at least would need to reconfigure/recompile)
Though in fact, the remote agent should probably be logging this anyway.
It might also be worth running the remote agent with '-Dscapi'
and seeing what the debug output says.
A few things for you to try, anyway.
Dave
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
