Hello,

I'm told that line 00374 at 
http://www.net-snmp.com/dev/agent/snmp__parse__args_8c-source.html is an 
example of how net-snmp hides sensitive data supplied on the command line.

I'm trying to figure out why this is not occurring on the hosts I've been 
looking at, running FreeBSD 12. I can see the passphrases, e.g.

$ ps auwwx | egrep -e 'snmpget|snmpbulkwalk'
www     97729  0.0  0.0      0    16  -  REJ  18:49   0:00.07 
/usr/local/bin/snmpget -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u roUsers 
-x AES -X x2rRs3B35Mntnb2p -Oqv -M /usr/local/www/librenms/mibs 
udp:knew.example.org:161 .1.3.6.1.4.1.7465.20.2.9.1.2.1.3.1.2
www     97730  0.0  0.0  21552  9800  -  RJ   18:49   0:00.04 
/usr/local/bin/snmpbulkwalk -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u 
roUsers -x AES -X x2rRs3B35Mntnb2p -OQUst -m IF-MIB -M 
/usr/local/www/librenms/mibs udp:knew.example.org:161 ifInDiscards
$

[the passphrases shown above have been modified before pasting]

Is this a known issue related to FreeBSD?

-- 
  Dan Langille
  d...@langille.org


_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to