Re: problem with interface index values

2012-06-20 Thread christopher.wu
I can add some more insight to my original question.

After the first time I bounce the PPPoE daemon snmpd (version 5.5.1) returns 
two ppp0 interfaces.  After a few minutes the first one will disappear.  Before 
that could happen I decided to restart snmpd to see what it would return.


IF-MIB::ifIndex.15 = INTEGER: 15
IF-MIB::ifIndex.16 = INTEGER: 16
IF-MIB::ifIndex.17 = INTEGER: 17
IF-MIB::ifIndex.18 = INTEGER: 18

IF-MIB::ifDescr.15 = STRING: eth0.
IF-MIB::ifDescr.16 = STRING: eth0.3030
IF-MIB::ifDescr.17 = STRING: ppp0
IF-MIB::ifDescr.18 = STRING: ppp0

Restart snmpd at this point.

IF-MIB::ifIndex.15 = INTEGER: 15
IF-MIB::ifIndex.16 = INTEGER: 16
IF-MIB::ifIndex.18 = INTEGER: 18

IF-MIB::ifDescr.15 = STRING: eth0.
IF-MIB::ifDescr.16 = STRING: eth0.3030
IF-MIB::ifDescr.18 = STRING: ppp0

ppp0's index is 18 at this point and there is no longer an index 17.

Can you provide any insight as to why this is happening, or better yet how to 
stop it? 

Thank you.

 On Tue, 05 Jun 2012 12:02:48 -0700 christopher.wu 
 wrote  


 > 
 > First off, apologies for what will be a lengthy post, but I wanted to 
 > include as much background as possible to help with a potential answer.
 >  When we were running net-snmp version 5.2.5.1 (on an embedded Linux system) 
 > we encountered a customer that complained that their SNMP poller was 
 > complaining of “unknown” interfaces from the SNMP results we were returning. 
 >  After some research I realized that there were problems with the interfaces 
 > being returned when PPPoE connections are used.  PPPoE connections seem to 
 > get assigned a new IP address relatively frequently (compared to DHCP).  I 
 > can easily recreate this by just killing the running pppd daemon.  When I do 
 > that the new IP address assigned to the ppp0 interface is returned by 
 > ipAdEntIfIndex with an index number that has increased by one.  However, the 
 > values returned by ifNumber, ifDescr, ifIndex, etc all remain the same.  
 > Therefore ipAdEntIfIndex is using an index number that references an 
 > interface that does not exist.
 >  I studied the SNMP code and fixed it by modifying the 
 > netsnmp_access_interface_ioctl_ifindex_get() function.  Instead of just 
 > returning ifrq.ifr_ifindex, I compare that value to what the 
 > Interface_Index_By_Name() function would return for that interface.  If they 
 > don't match then I force the correct value to be returned.  I added the code 
 > in “NEW_CODE”.
 >  
 > 
 > DEBUGMSGTL(("access:interface:ioctl", "ifindex_get\n"));
 > 
 > 
 > rc = _ioctl_get(fd, SIOCGIFINDEX, &ifrq, name);
 > 
 > 
 > if (rc < 0) {
 > 
 > 
 >   DEBUGMSGTL(("access:interface:ioctl",
 > 
 > 
 >   "ifindex_get error on inerface '%s'\n", name));
 > 
 > 
 >   return 0;
 > 
 > 
 > }
 > 
 > 
 > 
 > 
 > 
 > 
 > #ifdef NEW_CODE
 > 
 > 
 > returnValue = ifrq.ifr_ifindex;
 > 
 > 
 > if (NULL != strstr(name, "ppp"))
 > 
 > 
 > {
 > 
 > 
 >   foundIndex = Interface_Index_By_Name(name, sizeof(name));
 > 
 > 
 > 
 > 
 > 
 > 
 >   if (foundIndex != returnValue && foundIndex > 0)
 > 
 > 
 >   {
 > 
 > 
 > snmp_log(LOG_DEBUG, "%s %d would have returned [%s] iface index %d but 
 > will use %d.\n", 
 > 
 > 
 >   __func__, __LINE__, name, returnValue, foundIndex);
 > 
 > 
 > returnValue = foundIndex;
 > 
 > 
 >   }
 > 
 > 
 > }
 > 
 > 
 > #endif
 > 
 >   
 > 
 >  
 >  That worked great and then customer was happy.  Later we updated to 
 > net-snmp version 5.5.1.  I noticed that this area of code was completely 
 > different and that snmpd was acting differently in this scenario.  When I 
 > bounce the pppd daemon snmpd will temporarily report two different ppp0 
 > interfaces, even though the /proc/net/dev file shows only one instance of 
 > ppp0.  The newer instance has an index value of one more than the old 
 > instance.
 >  
 >  
 >  IF-MIB::ifDescr.15 = STRING: eth0.
 >  IF-MIB::ifDescr.16 = STRING: eth0.3030
 >  IF-MIB::ifDescr.19 = STRING: ppp0
 >  IF-MIB::ifDescr.20 = STRING: ppp0
 >  
 >  
 >  IF-MIB::ifNumber.0 = INTEGER: 18
 >  
 >  
 >  
 > 
 > # cat dev
 > 
 > 
 > Inter-|   Receive|  Transmit
 > 
 > 
 > face |bytespackets errs drop fifo frame compressed multicast|bytes
 > packets errs drop fifo colls carrier compressed
 > 
 > 
 > lo:   42034 429000 0  0 042034 
 > 429000 0   0  0
 > 
 > 
 > teql0:   0   0000 0  0 00
 >0000 0   0  0
 > 
 > 
 > tunl0:   0   0000 0  0 00
 >0000 0   0  0
 > 
 > 
 > gre0:   0   0000 0  0 00 
 >   0000 0   0  0
 > 
 > 
 > eth0:  9280245397000 0  0 0  2323119
 > 58

Re: take 2 at installation

2012-06-20 Thread Dave Shield
On 20 June 2012 17:45, Michael Zimmers  wrote:
> Well, I just ran the configure script...for some reason, it didn't ask me
> hardly any questions this time.

It may have remembered the previous responses
(depending on exactly how you invoked configure last time)

> Here's the summary:
 [snip]
> Anyone see a problem with any of this before I proceed?

No - that looks fine.
Try compiling, and see what happens

Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: take 2 at installation

2012-06-20 Thread Ricardo Hillbrecht
I can't see any problem in there, this output is similar to mine.

-Ricardo

2012/6/20, Michael Zimmers :
> Well, I just ran the configure script...for some reason, it didn't ask
> me hardly any questions this time.
>
> Here's the summary:
>
> Net-SNMP configuration summary:
> -
>
>SNMP Versions Supported:1 2c 3
>Building for:   linux
>Net-SNMP Version:   5.7.1
>Network transport support:  Callback Unix Alias TCP UDP IPv4Base
> SocketBase TCPBase UDPIPv4Base UDPBase
>SNMPv3 Security Modules: usm
>Agent MIB code: default_modules =>  snmpv3mibs mibII
> ucd_snmp notification notification-log-mib target agent_mibs agentx
> disman/event disman/schedule utilities host
>MYSQL Trap Logging: unavailable
>Embedded Perl support:  enabled
>SNMP Perl modules:  building -- embeddable
>SNMP Python modules:disabled
>Crypto support from:internal
>Authentication support: MD5 SHA1
>Encryption support: DES AES
>Local DNSSEC validation:disabled
>
> Anyone see a problem with any of this before I proceed?
>
> Thanks.
>

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: take 2 at installation

2012-06-20 Thread Michael Zimmers
Well, I just ran the configure script...for some reason, it didn't ask 
me hardly any questions this time.


Here's the summary:

   Net-SNMP configuration summary:
   -

  SNMP Versions Supported:1 2c 3
  Building for:   linux
  Net-SNMP Version:   5.7.1
  Network transport support:  Callback Unix Alias TCP UDP IPv4Base
   SocketBase TCPBase UDPIPv4Base UDPBase
  SNMPv3 Security Modules: usm
  Agent MIB code: default_modules =>  snmpv3mibs mibII
   ucd_snmp notification notification-log-mib target agent_mibs agentx
   disman/event disman/schedule utilities host
  MYSQL Trap Logging: unavailable
  Embedded Perl support:  enabled
  SNMP Perl modules:  building -- embeddable
  SNMP Python modules:disabled
  Crypto support from:internal
  Authentication support: MD5 SHA1
  Encryption support: DES AES
  Local DNSSEC validation:disabled

Anyone see a problem with any of this before I proceed?

Thanks.
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Net-SNMP and non ASCII characters

2012-06-20 Thread Dave Shield
On 20 June 2012 16:26, Octavi Fullana  wrote:
> Can you please give me some guidelines to correctly setup locales?
> I already installed "es-ES", but  still receive the hexadecimal output

That probably makes the Spanish locale available, but doesn't necessary
make it active.

What O/S are you working with?
Try setting the environment variable 'LANG' to be 'es-ES'
and see if that helps.   Or possible 'LC_ALL'


Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


RE: Net-SNMP and non ASCII characters

2012-06-20 Thread Octavi Fullana
Ok, I understand. Can you please give me some guidelines to correctly setup 
locales? I already installed "es-ES", but  still receive the hexadecimal output

Thanks,

Octavi Fullana 

-Mensaje original-
De: dave.shi...@gmail.com [mailto:dave.shi...@gmail.com] En nombre de Dave 
Shield
Enviado el: miércoles, 20 de junio de 2012 17:17
Para: Octavi Fullana
CC: net-snmp-users@lists.sourceforge.net
Asunto: Re: Net-SNMP and non ASCII characters

On 13 June 2012 11:52, Octavi Fullana  wrote:
> But if I use the -Oa (force output as ASCII):
> snmpget -Oa -v 1 -c community Lexmark_printer_IP 
> .1.3.6.1.2.1.43.11.1.1.6.1.5
>
> I get "Caja de desecho de t.ner"


That is the purpose of the -Oa client option, yes.


> I have tried to add the -Oa switch in the SNMPDOPTS line inside the 
> /etc/init.d/snmpd script, but it is ignored.

Correct - the -O* output options are for the client applications only.
The SNMP agent doesn't use them (since in general it's not actually displaying 
any information).
   If you check the snmpd(8) man page, you'll see that -O is not mentioned.


> Does anybody know how to force
> the output to be ASCII for all snmp items?

You've already found it - use '-Oa' on the *client* side, not the agent.
(Or set the locale to recognise these as printable characters, as Wes suggests).

Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Net-SNMP and non ASCII characters

2012-06-20 Thread Dave Shield
On 13 June 2012 11:52, Octavi Fullana  wrote:
> But if I use the -Oa (force output as ASCII):
> snmpget -Oa -v 1 -c community Lexmark_printer_IP .1.3.6.1.2.1.43.11.1.1.6.1.5
>
> I get "Caja de desecho de t.ner"


That is the purpose of the -Oa client option, yes.


> I have tried to add the -Oa switch in the SNMPDOPTS line inside the
> /etc/init.d/snmpd script, but it is ignored.

Correct - the -O* output options are for the client applications only.
The SNMP agent doesn't use them (since in general it's not
actually displaying any information).
   If you check the snmpd(8) man page, you'll see that -O is not mentioned.


> Does anybody know how to force
> the output to be ASCII for all snmp items?

You've already found it - use '-Oa' on the *client* side, not the agent.
(Or set the locale to recognise these as printable characters, as Wes suggests).

Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Received response for SNMPv3 inform; but Agent still sending inform for the number of retries configured.

2012-06-20 Thread Wes Hardaker
Suresh kumar  writes:

> 1. Engine ID discovered correctly during discovery; but Agent still
> incrementing usmStatsUnknownEngineIDs.0 (See EngineIDErrorPkt.pcap)
> 2. Also sending report
> SNMP-USER-BASED-SM-MIB::usmStatsNotInTimeWindows.0 (See
> EngineIDErrorPkt.pcap). updated System time on Agent; still error
> received.

These are actually normal.  In the process of engineID discovery (and
time discovery) the agent will receive a message with the wrong
engineID, so the agent increments the count and sends back the real one.
That's actually how engineID discovery works.

-- 
Wes Hardaker
Please mail all replies to net-snmp-cod...@lists.sourceforge.net

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Received response for SNMPv3 inform; but Agent still sending inform for the number of retries configured.

2012-06-20 Thread Dave Shield
On 20 June 2012 15:56, Suresh kumar  wrote:
> Following is the snmpd.conf configuration:
>
> trapsess -v 3 -Ci -r 1 -t 5 -e 0x80001f8880386a8adc0005946b -n "" -a SHA -A
> mypassword -l authNoPriv -u traptest 192.168.101.226


and the snmptrapd.conf configuration?

Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Net-snmp 5.7.1: trouble with SNMPv3 INFORM's configured via MIBs, via config files ok

2012-06-20 Thread Wes Hardaker
Patrick Rogier  writes:

> /var/net-snmp/snmpd.conf (dynamic snmpd.conf):
>
> createUser my_rwuser  MD5 setup_rw_passphrase
> createUser my_rouser  MD5 setup_ro_passphrase
> createUser my_inform_user MD5 setup_inform_passphrase

The last line needs to create the user in the user table with the
engineID of the inform receiver.  So you'd need to use the -e switch to
createUser in order to set the engineID to the inform sink.

-- 
Wes Hardaker
SPARTA, Inc.

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: snmptrapd with TLS or DTLS?

2012-06-20 Thread Wes Hardaker
M L  writes:

> I have seen that net-snmp has support for (D)TLS for the snmpd agent.
> I've tried to find an example to do the same for the snmptrap
> daemon.For example, where to specify the server certificate to use for
> snmptrapd?

The same configuration tokens that work inside snmpd.conf will work in
snmptrapd.conf for specifying certificates.  So, yes, it works and we've
tested it.  In fact, the testing/fulltests/tls directory contains tests
to make sure it's working.
-- 
Wes Hardaker
SPARTA, Inc.

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Net-SNMP and non ASCII characters

2012-06-20 Thread Wes Hardaker
Octavi Fullana  writes:

> I have tried to add the -Oa switch in the SNMPDOPTS line inside the
> /etc/init.d/snmpd script, but it is ignored. Does anybody know how to
> force the output to be ASCII for all snmp items?

The applications use the isprint() function to determine if a character
is printable.  Which means that the locale environment needs to be set
up properly so that isprint() returns true for non-ascii characters that
are, indeed, printable.
-- 
Wes Hardaker
SPARTA, Inc.

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: securityEngineId problem in 5.7.1

2012-06-20 Thread Wes Hardaker
"Stone, Thomas"  writes:

> I'm cross-compiling for 32-bit embedded environment.  After modifying
> the configure file sufficiently so that the application builds and
> starts, the initial trap that should get sent to the SNMP server isn't
> going out.

Does your 'trapsess' line contain the -u flag?  It's pretty much mandatory.
-- 
Wes Hardaker
SPARTA, Inc.

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Received response for SNMPv3 inform; but Agent still sending inform for the number of retries configured.

2012-06-20 Thread Suresh kumar

Hi Dave
 
Following is the snmpd.conf configuration:
 
trapsess -v 3 -Ci -r 1 -t 5 -e 0x80001f8880386a8adc0005946b -n "" -a SHA -A 
mypassword -l authNoPriv -u traptest 192.168.101.226
 
1. Engine ID discovered correctly during discovery; but Agent still 
incrementing usmStatsUnknownEngineIDs.0 (See EngineIDErrorPkt.pcap)
2. Also sending report SNMP-USER-BASED-SM-MIB::usmStatsNotInTimeWindows.0 (See 
EngineIDErrorPkt.pcap). updated System time on Agent; still error received.
3. V3 Inform received by Trap Receiver; response sent to agent but agent is 
sending inform again (retry = 1; See Inform-Retry.pcap).
 
P.S i'm using netsnmp-5.7.1
 
Also attached pcap file that i was coptured
 
 
Regards
~Suresh
  

Inform-Retry.pcap
Description: Binary data


EngineIDErrorPkt.pcap
Description: Binary data
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


make errors on a Solaris platform

2012-06-20 Thread SCHILLO, ROBERT
When running make on a Solaris platform I get the following errors. Any 
suggestions?

make
/bin/bash ../libtool --mode=compile /usr/local/bin/gcc -I../include -I.
-I../snmplib -fno-strict-aliasing -g -m64 -O2 -Usolaris2 -Dsolaris2=solaris2 -c 
-o snmp_api.lo snmp_api.c
../libtool: line 1899: func_mode_compile: command not found
libtool: compile: invalid operation mode `compile'
libtool: compile: Try `libtool --help --mode=compile' for more information.
*** Error code 1
make: Fatal error: Command failed for target `snmp_api.lo'


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Sending and Receiving v3 traps

2012-06-20 Thread Dave Shield
On 19 June 2012 21:29, Bob O'Neil  wrote:
> I need to convert a working subagent application to migrate from sending
> SNMP version 2 traps to version 3 traps.

Does this subagent handle sending the traps itself,
or does it pass them off to the master agent?
  (If you're not sure, then it passes them to the master!)



> So how do I configure my Net-SNMP agent to utilize the send_v2trap() API
> calls to send version 3 traps?  Is this something that can be done via
> changes to the configuration files

Yes.

If you set up the snmpd.conf file using a suitable 'trapsess' line,
then *all* traps will be sent via SNMPv3 - regardless of whether
they were generated using send_v2trap, send_v3trap or even
send_easy_trap.

Similarly for 'trapsink', 'trap2sink', etc.
The API used to request the trap is purely concerned with how
the trap PDU is specified by the code that calls it.
This API has no effect on the SNMP version(s) of the trap(s) that
are ultimately generated.

See the tutorial pages on SNMPv3 notifications for more details.

Dave

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Sending and Receiving v3 traps

2012-06-20 Thread Bob O'Neil
I need to convert a working subagent application to migrate from sending

SNMP version 2 traps to version 3 traps.  From what I have read, the

send_v2trap API is equivalent to send_v3trap, other than the latter

having a context argument.

 

So how do I configure my Net-SNMP agent to utilize the send_v2trap() API

calls to send version 3 traps?  Is this something that can be done via
changes

to the configuration files, or are there programmatic APIs that need to be

called to have send_v2trap()  as v3 traps?

 

What API can be used by an external SNMP system manager to learn the

engineID of the trap sender for adding to its local database?   Is this

necessary if the engineID is provided as the "context" argument to the

send_v3trap API?  In general, how do SNMP System Manager's know

apriori the engine ids necessary for receiving v3 traps?

 




 

Bob O'Neil  |    mailto:b...@robocomai.com
|    http://www.robocomai.com

513.376.9197(office)|  513.829.6769 (home)   |  

RoboComAI, LLC  |  175 Tri County Parkway Suite 112  |  Cincinnati, OH
45246

 

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users