--- Dave Shield <[EMAIL PROTECTED]> wrote:

> On 12/12/2007, PoWah Wong <[EMAIL PROTECTED]>
> wrote:
> > >     snmptrapd -f -Le -Dsnmptrapd -d
> > >
> > > Then start up the snmpd agent again.
> > > What does the trap receiver display?
> > >
> > >
> > Now the trap receiver display:
> > # snmptrapd -f -Le -Dsnmptrapd -d
> 
> > NET-SNMP version 5.4.1
> >
> > Received 192 bytes from UDP: [172.20.11.245]:32832
>    [snip]
> 
> So snmptrapd is at least receiving the raw packet.
> 
> But if that is the *only* output, then the trap is
> being dropped
> before it gets as far as the trap processing. 
> (Since almost
> the first thing that the trap receiver would do is
> log a debug
> message "input: 147")
> 
> That means it must be the low-level receipt/parsing
> of the
> incoming trap that is failing.
> 
> 
> Two things to try:
>    a)   Run the trap receiver using
>               snmptrapd -f -Le -Dusm -d
> 
> This will show any problems in the SNMPv3/USM
> processing.
> 
> Dave
> 
I modify snmptrapd.conf to:
createUser -e 0x80001f88806a19937bd3c75547
test_MD5_AES MD5 12345678 AES 87654321
authuser log,execute test_MD5_AES
logOption s u
traphandle "default" /home/powah/snmp/traps test
...

Why I still get no match on engineID?
Isn't test_MD5_AES has the correct engineID?
What is the proper way to get the engineID of the
snmpd? Is it in the file /var/net-snmp/snmpd.conf?

# snmptrapd -f -Le -Dusm -d -c
/home/powah/snmp/snmptrapd.conf
registered debug token usm, 1
netsnmp_assert !"registration != duplicate" failed
agent_registry.c:535 netsnmp_subtree_load()
netsnmp_assert !"registration != duplicate" failed
agent_registry.c:535 netsnmp_subtree_load()
netsnmp_assert !"registration != duplicate" failed
agent_registry.c:535 netsnmp_subtree_load()
usmUser: created a new user myuser at 80 00 00 00 01
usmUser: created a new user traptest at 80 00 00 00 01
02 03 04
usmUser: created a new user test_SHA_DES at 80 00 00
00 01 02 03 04 05
usmUser: created a new user test_SHA_AES at 80 00 00
00 01 02 03 04 05 06
usmUser: created a new user test_MD5_DES at 80 00 00
00 01 02 03 04 05 06 07
usmUser: created a new user test_MD5_AES at 80 00 1F
88 80 6A 19 93 7B D3 C7 55 47
usmUser: created a new user admin at 80 00 1F 88 80 B3
96 23 4F 40 4C 5D 47
usmUser: created a new user adminwindows at 80 00 1F
88 80 B3 96 23 4F 40 4C 5D 47
NET-SNMP version 5.4.1

Received 192 bytes from UDP: [172.20.11.245]:32849
0000: 30 81 BD 02  01 03 30 11  02 04 75 67  3E 70 02
03    0.....0...ug>p..
0016: 00 FF E3 04  01 03 02 01  03 04 3E 30  3C 04 0D
80    ..........>0<...
0032: 00 1F 88 80  6A 19 93 7B  D3 C7 55 47  02 01 3C
02    ....j..{..UG..<.
0048: 02 03 1C 04  0C 74 65 73  74 5F 4D 44  35 5F 41
45    .....test_MD5_AE
0064: 53 04 0C FD  6E BD 02 43  3B 0B 00 B0  FD 93 CD
04    S...n..C;.......
0080: 08 8A DD 52  99 63 D1 45  DD 04 65 18  37 52 E5
6B    ...R.c.E..e.7R.k
0096: E1 63 F9 FB  39 F1 01 B5  D8 79 43 B2  66 18 F2
E1    .c..9....yC.f...
0112: 1F 56 A6 4D  2A F3 F3 1F  B4 09 BE A9  C5 B4 96
DB    .V.M*...........
0128: 3F D5 FA DC  B7 7D 3B E1  54 FE 56 AA  0D 1E 33
EB    ?....};.T.V...3.
0144: E6 12 7B 1F  95 08 74 B8  E2 EB 8C DE  0A 98 10
5D    ..{...t........]
0160: 27 82 2A 5A  F2 A8 61 66  62 54 AF EF  A6 5E DC
AE    '.*Z..afbT...^..
0176: AF AA D9 95  BB 9C 2C 93  96 89 BE 33  00 A3 B2
B7    ......,....3....

usm: USM processing begun...
usm: match on user test_MD5_AES
usm: no match on engineID (80 00 1F 88 80 6A 19 93 7B
D3 C7 55 47 )
usm: match on user test_MD5_AES
usm: Verification succeeded.
usm: USM processing completed.
2007-12-12 11:19:34 fc6.mypc.com [UDP:
[172.20.11.245]:32849]:
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks:
(79638) 0:13:16.38     SNMPv2-MIB::snmpTrapOID.0 =
OID: NET-SNMP-AGENT-MIB::nsNotifyRestart       
SNMPv2-MIB::snmpTrapEnterprise.0 = OID:
NET-SNMP-MIB::netSnmpNotificationPrefix
trap: test received
trap: test -fc6.mypc.com- -UDP: [172.20.11.245]:32849-
-DISMAN-EVENT-MIB::sysUpTimeInstance = 0:0:13:16.38,
SNMPv2-MIB::snmpTrapOID.0 =
NET-SNMP-AGENT-MIB::nsNotifyRestart,
SNMPv2-MIB::snmpTrapEnterprise.0 =
NET-SNMP-MIB::netSnmpNotificationPrefix-




      Looking for the perfect gift? Give the gift of Flickr! 

http://www.flickr.com/gift/


-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to