RE: net-snmp core dumps

[Krishna Vivek Vitta via Net-snmp-users]

Hi

This net-snmp(5.8) installed in Freebsd 8.4.

Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 10 February 2022 22:47
To: Krishna Vivek Vitta 
Cc: Wes Hardaker ; Krishna Vivek Vitta via 
Net-snmp-users 
Subject: Re: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
Hi Krishna,

Wes asked you to tell him what version of net-snmp is being used.  This is a 
very interesting question, since you mention using FreeBSD 8.4 which is 9 years 
old; are you also using 9 years old net-snmp?

  Bill


On Mon, Jan 24, 2022 at 11:19 PM Krishna Vivek Vitta via Net-snmp-users 
mailto:net-snmp-users@lists.sourceforge.net>>
 wrote:
Hi Wes

As requested, following are the contents of snmpd.conf. Is there any workaround 
to stop the core dumps ?

*
snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 
1.2.3.4:162<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F1.2.3.4%3A162%2F=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C5aff3be71eb84525abc108d9ecb94fed%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637801102945967141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=19qfdQ2Y2aW1gkzkG38BHB4%2B2Z5KTQhQO1GB%2FPg%2BogM%3D=0>
 public
sysobjectid 1.3.6.1.4.1.5951.6
[snmp] logTimestamp 1
exactEngineID 0x80001f88807b33613f4c64c860
rouser massdotsnmp authPriv
rocommunity DOT 192.168.65.113
rocommunity DOT 192.168.65.126
trap2sink 
170.63.198.40:162<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F170.63.198.40%3A162%2F=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C5aff3be71eb84525abc108d9ecb94fed%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637801102945967141%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=l3KgFAOA%2B%2BWwZ8iFyJEURZYBz8DC%2FbU2knZtnJNXL18%3D=0>
 DOT
trapsess -v 3 -u massdotsnmp -l authPriv 
10.198.148.46:162<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F10.198.148.46%3A162%2F=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C5aff3be71eb84525abc108d9ecb94fed%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637801102946123378%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=U3JqDDyweU7FfqFnUxOMYOqGBSpWWJ1Sy%2FpIiM%2Bh7ow%3D=0>
trapsess -v 3 -u massdotsnmp -l authPriv 
192.168.65.113:162<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.65.113%3A162%2F=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C5aff3be71eb84525abc108d9ecb94fed%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637801102946123378%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=m8wUadmbH6%2B3p89Jmxyb0EDNxNbgE1uH3J0cxCS7VGA%3D=0>
trapsess -v 3 -u massdotsnmp -l authPriv 
192.168.65.126:162<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.65.126%3A162%2F=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C5aff3be71eb84525abc108d9ecb94fed%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637801102946123378%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=2Q%2BePSa2VsEifVDNwtHdT3Pr7oq4qwFSnNB%2B5J4m744%3D=0>
~
~
**

Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker 
mailto:harda...@users.sourceforge.net>>
Sent: 21 January 2022 23:47
To: Krishna Vivek Vitta via Net-snmp-users 
mailto:net-snmp-users@lists.sourceforge.net>>
Cc: Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>>
Subject: Re: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
mailto:net-snmp-users@lists.sourceforge.net>>
 writes:

> In few of the Freebsd 8.4 setups, we see cores of snmpd incessantly.
> Any inputs or further pointers that can assist us

Which version of net-snmp is that from (snmpget -V will tell you).

> 0x0008015b981e in strncmp () from /lib/libc.so.7
> #1 0x00080097e6c2 in usm_create_usmUser_from_string () from /lib/
> libnetsnmp.so.35

This seems strange -- can you tell me what the contents of the file look like 
(being careful not to expose secrets).
--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net<mailto:Net-snmp-users@lists.sourceforge.net>
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users<htt

RE: net-snmp core dumps

[Krishna Vivek Vitta via Net-snmp-users]

Hi Wes

Kindly suggest if there are any recommendations

Thank you
Krishna Vivek

-Original Message-
From: Krishna Vivek Vitta via Net-snmp-users 
 
Sent: 02 February 2022 08:16
To: Wes Hardaker ; Krishna Vivek Vitta via 
Net-snmp-users 
Subject: RE: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Hi Wes

Any inputs ?

Thank you
Krishna Vivek

-Original Message-
From: Krishna Vivek Vitta via Net-snmp-users 
 
Sent: 25 January 2022 09:32
To: Wes Hardaker ; Krishna Vivek Vitta via 
Net-snmp-users 
Subject: RE: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Hi Wes

As requested, following are the contents of snmpd.conf. Is there any workaround 
to stop the core dumps ?

*
snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf # 
Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 1.2.3.4:162 public
sysobjectid 1.3.6.1.4.1.5951.6
[snmp] logTimestamp 1
exactEngineID 0x80001f88807b33613f4c64c860
rouser massdotsnmp authPriv
rocommunity DOT 192.168.65.113
rocommunity DOT 192.168.65.126
trap2sink 170.63.198.40:162 DOT
trapsess -v 3 -u massdotsnmp -l authPriv 10.198.148.46:162 trapsess -v 3 -u 
massdotsnmp -l authPriv 192.168.65.113:162 trapsess -v 3 -u massdotsnmp -l 
authPriv 192.168.65.126:162 ~ ~
**

Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker 
Sent: 21 January 2022 23:47
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
 writes:

> In few of the Freebsd 8.4 setups, we see cores of snmpd incessantly. 
> Any inputs or further pointers that can assist us

Which version of net-snmp is that from (snmpget -V will tell you).

> 0x0008015b981e in strncmp () from /lib/libc.so.7
> #1 0x00080097e6c2 in usm_create_usmUser_from_string () from /lib/
> libnetsnmp.so.35

This seems strange -- can you tell me what the contents of the file look like 
(being careful not to expose secrets).
--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fnet-snmp-usersdata=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7Cc6724e8ff3e24833a8df08d9e5f64158%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637793668099851763%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000sdata=SYIZJc3X4Hz6WooiDnJ3efOnA%2FjSMyACmRn531qPChc%3Dreserved=0



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fnet-snmp-usersdata=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7Cc6724e8ff3e24833a8df08d9e5f64158%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637793668099851763%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000sdata=SYIZJc3X4Hz6WooiDnJ3efOnA%2FjSMyACmRn531qPChc%3Dreserved=0



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: net-snmp core dumps

[Krishna Vivek Vitta via Net-snmp-users]

Hi Wes

Any inputs ?

Thank you
Krishna Vivek

-Original Message-
From: Krishna Vivek Vitta via Net-snmp-users 
 
Sent: 25 January 2022 09:32
To: Wes Hardaker ; Krishna Vivek Vitta via 
Net-snmp-users 
Subject: RE: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Hi Wes

As requested, following are the contents of snmpd.conf. Is there any workaround 
to stop the core dumps ?

*
snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf # 
Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 1.2.3.4:162 public
sysobjectid 1.3.6.1.4.1.5951.6
[snmp] logTimestamp 1
exactEngineID 0x80001f88807b33613f4c64c860
rouser massdotsnmp authPriv
rocommunity DOT 192.168.65.113
rocommunity DOT 192.168.65.126
trap2sink 170.63.198.40:162 DOT
trapsess -v 3 -u massdotsnmp -l authPriv 10.198.148.46:162 trapsess -v 3 -u 
massdotsnmp -l authPriv 192.168.65.113:162 trapsess -v 3 -u massdotsnmp -l 
authPriv 192.168.65.126:162 ~ ~
**

Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker 
Sent: 21 January 2022 23:47
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
 writes:

> In few of the Freebsd 8.4 setups, we see cores of snmpd incessantly. 
> Any inputs or further pointers that can assist us

Which version of net-snmp is that from (snmpget -V will tell you).

> 0x0008015b981e in strncmp () from /lib/libc.so.7
> #1 0x00080097e6c2 in usm_create_usmUser_from_string () from /lib/
> libnetsnmp.so.35

This seems strange -- can you tell me what the contents of the file look like 
(being careful not to expose secrets).
--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fnet-snmp-usersdata=04%7C01%7Ckrishna.vivekvitta%40citrix.com%7C73b376c28b474e41ee5508d9dfb9b7b9%7C335836de42ef43a2b145348c2ee9ca5b%7C0%7C0%7C637786811615790024%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000sdata=K7V2IFPGUTsdgDT6nxvxLlpb4vTBv1wWUeskWz0a4%2Bo%3Dreserved=0



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: net-snmp core dumps

[Krishna Vivek Vitta via Net-snmp-users]

Hi Wes

As requested, following are the contents of snmpd.conf. Is there any workaround 
to stop the core dumps ?

*
snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 1.2.3.4:162 public
sysobjectid 1.3.6.1.4.1.5951.6
[snmp] logTimestamp 1
exactEngineID 0x80001f88807b33613f4c64c860
rouser massdotsnmp authPriv
rocommunity DOT 192.168.65.113
rocommunity DOT 192.168.65.126
trap2sink 170.63.198.40:162 DOT
trapsess -v 3 -u massdotsnmp -l authPriv 10.198.148.46:162
trapsess -v 3 -u massdotsnmp -l authPriv 192.168.65.113:162
trapsess -v 3 -u massdotsnmp -l authPriv 192.168.65.126:162
~
~
**

Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker  
Sent: 21 January 2022 23:47
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: net-snmp core dumps

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
 writes:

> In few of the Freebsd 8.4 setups, we see cores of snmpd incessantly. 
> Any inputs or further pointers that can assist us

Which version of net-snmp is that from (snmpget -V will tell you).

> 0x0008015b981e in strncmp () from /lib/libc.so.7
> #1 0x00080097e6c2 in usm_create_usmUser_from_string () from /lib/
> libnetsnmp.so.35

This seems strange -- can you tell me what the contents of the file look like 
(being careful not to expose secrets).
--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

net-snmp core dumps

[Krishna Vivek Vitta via Net-snmp-users]

Hi Team

In few of the Freebsd 8.4 setups, we see cores of snmpd incessantly. Any inputs 
or further pointers that can assist us

0x0008015b981e in strncmp () from /lib/libc.so.7
#1 0x00080097e6c2 in usm_create_usmUser_from_string () from 
/lib/libnetsnmp.so.35
#2 0x00080097f685 in usm_parse_create_usmUser () from /lib/libnetsnmp.so.35
#3 0x0008009458b1 in run_config_handler () from /lib/libnetsnmp.so.35
#4 0x000800946d58 in read_config () from /lib/libnetsnmp.so.35
#5 0x000800947c47 in get_temp_file_pattern () from /lib/libnetsnmp.so.35
#6 0x000800947dea in read_config_files_of_type () from /lib/libnetsnmp.so.35
#7 0x000800947e83 in read_config_files () from /lib/libnetsnmp.so.35
#8 0x00080094721b in read_configs () from /lib/libnetsnmp.so.35
#9 0x00080091c6bb in init_snmp () from /lib/libnetsnmp.so.35
#10 0x00403d6c in main ()

Following were the permissions of the file
lrwxr-xr-x  1 root  wheel  21 Feb 22  2021 /etc/snmpd.conf

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: pcre option while compiling net-snmp-5.9.1

[Krishna Vivek Vitta via Net-snmp-users]

Hi Bart

I am using the code downloaded from 

https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9/

Somehow the patch provided below isn't working. I have used both --without-pcre 
and --with-pcre="no"

 Following is the configure command used:

./configure -C  --without-perl-modules  --disable-embedded-perl  
--disable-perl-cc-checks  --with-enterprise-sysoid="1.3.6.1.4.1.5951.6"  
--disable-applications  --disable-manuals  --disable-scripts 
--with-default-snmp-version="3"  --with-sys-contact="citrix"  
--with-sys-location="location"  --with-logfile="."  
--with-persistent-directory="/var/mps/netsnmp/" --enable-mini-agent  
--enable-reentrant  --with-mib-modules=mps,mpsGet  
--with-cflags='-I/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/include
 -I/var/mps64/main/rs_ads_dev/usr.src/crypto/openssl/include -DOPENSSL_FIPS 
-DNETSCALER -DNETSNMP_NO_INLINE' --with-out-mib-modules="mibII/sysORTable"  
--without-pcre 
--with-ldflags='-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs
 -L/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto -lcrypto 
-Wl,-rpath,/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto 
-lzmq'

I still see -lpcre being used for generating libnetsnmpagent.so.40.0.0 and 
libnetsnmpmibs.so.40.0.0

libtool: link: cc -shared  -fPIC -DPIC  helpers/.libs/all_helpers.o 
helpers/.libs/baby_steps.o helpers/.libs/bulk_to_nex
t.o helpers/.libs/cache_handler.o helpers/.libs/debug_handler.o 
helpers/.libs/instance.o helpers/.libs/mode_end_call.o h
elpers/.libs/multiplexer.o helpers/.libs/null.o helpers/.libs/old_api.o 
helpers/.libs/read_only.o helpers/.libs/row_merg
e.o helpers/.libs/scalar.o helpers/.libs/scalar_group.o 
helpers/.libs/serialize.o helpers/.libs/snmp_get_statistic.o hel
pers/.libs/stash_cache.o helpers/.libs/stash_to_next.o helpers/.libs/table.o 
helpers/.libs/table_array.o helpers/.libs/t
able_container.o helpers/.libs/table_data.o helpers/.libs/table_dataset.o 
helpers/.libs/table_iterator.o helpers/.libs/t
able_row.o helpers/.libs/table_tdata.o helpers/.libs/watcher.o 
.libs/agent_handler.o .libs/agent_index.o .libs/agent_rea
d_config.o .libs/agent_registry.o .libs/agent_sysORTable.o .libs/agent_trap.o 
.libs/kernel.o .libs/netsnmp_close_fds.o .
libs/snmp_agent.o .libs/snmp_vars.o mibgroup/mibII/.libs/vacm_conf.o 
mibgroup/snmpv3/.libs/usmConf.o   -Wl,-rpath -Wl,/v
ar/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9/snmplib/.libs 
-Wl,-rpath -Wl,/var/mps64/main/rs_ads_dev/u
sr.src/contrib/zeromq-4.1.0/src/.libs -Wl,-rpath -Wl,/usr/local/lib 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-
4.1.0/src/.libs/.libs ../snmplib/.libs/libnetsnmp.so 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs
 -L/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto 
-L/usr/local/lib -lm -lpcre -lkvm -lcrypto /var/mps64
/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs/libzmq.so -lrt 
-lpthread -lelf -lpkg  -Wl,-no-undefined -Wl,-rpa
th -Wl,/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto   
-Wl,-soname -Wl,libnetsnmpagent.so.40 -o .libs/
libnetsnmpagent.so.40.0.0

/.libs/util_funcs.o mibgroup/util_funcs/.libs/header_generic.o 
mibgroup/mibII/.libs/vacm_context.o mibgroup/util_funcs/.
libs/header_simple_table.o .libs/mib_modules.o .libs/auto_nlist.o   -Wl,-rpath 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/co
ntrib/net-snmp/net-snmp-5.9/agent/.libs -Wl,-rpath 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9/
snmplib/.libs -Wl,-rpath 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs 
-Wl,-rpath -Wl,/usr/local
/lib 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9/snmplib/.libs
 -L/var/mps64/main/rs_ads_dev/usr.s
rc/contrib/zeromq-4.1.0/src/.libs/.libs ./.libs/libnetsnmpagent.so 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4
.1.0/src/.libs 
-L/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto 
-L/usr/local/lib /var/mps64/main/rs_ads
_dev/usr.src/contrib/net-snmp/net-snmp-5.9/snmplib/.libs/libnetsnmp.so 
../snmplib/.libs/libnetsnmp.so -lcrypto /var/mps6
4/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs/libzmq.so -lrt 
-lpthread -lkvm -lm -lpcre -lelf -lpkg  -Wl,-no-
undefined -Wl,-rpath 
-Wl,/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto   
-Wl,-soname -Wl,libnetsnmpmib
s.so.40 -o .libs/libnetsnmpmibs.so.40.0.0

Please let me know if I am doing correct. Also, is there a way to not to link 
lpkg as well while generating the libraries. Kindly assist.

Thank you
Krishna Vivek

-Original Message-
From: Bart Van Assche  
Sent: 16 July 2021 02:14
To: Krishna Vivek Vitta ; Krishna Vivek Vitta 
via Net-snmp-users 
Subject: Re: pcre option while compiling net-snmp-5.9.1

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content i

RE: pcre option while compiling net-snmp-5.9.1

[Krishna Vivek Vitta via Net-snmp-users]

Hi Bart Van

Can you share the path for download ?

I have downloaded from

https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.1/


Is this the one you are referring where the fix is available ?

https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9/



Thank you
Krishna Vivek

From: Bart Van Assche 
Sent: 15 July 2021 03:22
To: Krishna Vivek Vitta ; Krishna Vivek Vitta 
via Net-snmp-users 
Subject: Re: pcre option while compiling net-snmp-5.9.1

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
On 7/14/21 12:37 AM, Krishna Vivek Vitta via Net-snmp-users wrote:
Hi Bart /Experts.

I am trying to compile net-snmp-5.9.1 in Freebsd 11.4 using --without-pcre
[ ... ]

A candidate fix has been checked in on the v5.9 branch. Please retest.

Bart.

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

pcre option while compiling net-snmp-5.9.1

[Krishna Vivek Vitta via Net-snmp-users]

Hi Bart /Experts.

I am trying to compile net-snmp-5.9.1 in Freebsd 11.4 using --without-pcre

Following configure command is used
export 
LD_LIBRARY_PATH=/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs
 && cd /var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1 && 
./configure -C  --without-perl-modules  --disable-embedded-perl  
--disable-perl-cc-checks  --with-enterprise-sysoid="1.3.6.1.4.1.5951.6"  
--disable-applications  --disable-manuals  --disable-scripts 
--with-default-snmp-version="3"  --with-sys-contact="citrix"  
--with-sys-location="location"  --with-logfile="."  
--with-persistent-directory="/var/mps/netsnmp/" --enable-mini-agent  
--enable-reentrant  --with-mib-modules=mps,mpsGet  
--with-cflags='-I/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/include
 -I/var/mps64/main/rs_ads_dev/usr.src/crypto/openssl/include -DOPENSSL_FIPS 
-DNETSCALER -DNETSNMP_NO_INLINE' --with-out-mib-modules="mibII/sysORTable"  
--without-pcre 
--with-ldflags='-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs
 -L/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto -lcrypto 
-Wl,-rpath,/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto' 
--with-ldflags='-lzmq'

But it results in following summary:

checking for library containing pcre_exec... -lpcre

In config.log:
LAGENTLIBS='-lpcre -lkvm '

Infact I have also used -with-pcre='no'. It still fails.

As a result the libs are generated with dependecy of libpcre.so.1, as seen 
below:

/.libs/util_funcs.o mibgroup/util_funcs/.libs/header_generic.o 
mibgroup/mibII/.libs/vacm_context.o mibgroup/util_funcs/.
libs/header_simple_table.o .libs/mib_modules.o .libs/auto_nlist.o   -Wl,-rpath 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/co
ntrib/net-snmp/net-snmp-5.9.1/agent/.libs -Wl,-rpath 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.
9.1/snmplib/.libs -Wl,-rpath -Wl,/usr/local/lib -Wl,-rpath -Wl,/usr/local/lib 
-L/var/mps64/main/rs_ads_dev/usr.src/contr
ib/net-snmp/net-snmp-5.9.1/snmplib/.libs ./.libs/libnetsnmpagent.so 
-L/usr/local/lib /var/mps64/main/rs_ads_dev/usr.src/
contrib/net-snmp/net-snmp-5.9.1/snmplib/.libs/libnetsnmp.so -lpcre 
../snmplib/.libs/libnetsnmp.so -lcrypto /usr/local/li
b/libzmq.so -lrt -lpthread -lkvm -lm -lelf -lpkg-Wl,-soname 
-Wl,libnetsnmpmibs.so.40 -o .libs/libnetsnmpmibs.so.40.1
.0

ldd /lib/libnetsnmpmibs.so.40
/lib/libnetsnmpmibs.so.40:
libnetsnmpagent.so.40 => /lib/libnetsnmpagent.so.40 (0x80144)
libnetsnmp.so.40 => /lib/libnetsnmp.so.40 (0x80169d000)
libpcre.so.1 => not found (0)
libcrypto.so.8 => /lib/libcrypto.so.8 (0x801a0)
libzmq.so.4 => /lib/libzmq.so.4 (0x801eef000)
librt.so.1 => /usr/lib/librt.so.1 (0x802146000)
libthr.so.3 => /lib/libthr.so.3 (0x80234c000)
libkvm.so.7 => /lib/libkvm.so.7 (0x802574000)
libm.so.5 => /lib/libm.so.5 (0x802782000)
libelf.so.2 => /lib/libelf.so.2 (0x8029b2000)
libc.so.7 => /lib/libc.so.7 (0x80085b000)
libpcre.so.1 => not found (0)
libc++.so.1 => /usr/lib/libc++.so.1 (0x802bc7000)
libcxxrt.so.1 => /lib/libcxxrt.so.1 (0x802e91000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x8030b2000)

Please suggest a way to overcome the issue.

In net-snmp-5.8, same configure command is used and it works, without any 
dependency of libpcre

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Building net-snmp-5.9.1 in Freebsd

[Krishna Vivek Vitta via Net-snmp-users]

Thanks this worked.


Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker  
Sent: 02 July 2021 22:38
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: Building net-snmp-5.9.1 in Freebsd

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

If you want to drop the kmem usage, try: --without-kmem-usage
-- 
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Building net-snmp-5.9.1 in Freebsd

[Krishna Vivek Vitta via Net-snmp-users]

Hi Bart


Command used:
cd /var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1 && 
./configure -C  --without-perl-modules  --disable-embedded-perl  
--disable-perl-cc-checks  --with-enterprise-sysoid="1.3.6.1.4.1.5951.6"  
--disable-applications  --disable-manuals  --disable-scripts 
--with-default-snmp-version="3"  --with-sys-contact="citrix"  
--with-sys-location="location"  --with-logfile="."  
--with-persistent-directory="/var/mps/netsnmp/" --enable-mini-agent  
--enable-reentrant  --with-mib-modules=mps,mpsGet  
--with-cflags='-I/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/include
 -I/var/mps64/main/rs_ads_dev/usr.src/crypto/openssl/include -DOPENSSL_FIPS 
-DNETSCALER -DNETSNMP_NO_INLINE' --with-libs=-lzmq 
--with-out-mib-modules="mibII/sysORTable"  --without-pcre 
--with-ldflags='-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs
 -L/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto -lcrypto 
-Wl,-rpath,/usr/obj/var/mps64/main/rs_ads_dev/usr.src/secure/lib/libcrypto' > 
config.out

Following is the configure output

checking for kvm.h... (cached) yes
checking for library containing kvm_read... (cached) none required
checking for library containing kvm_openfiles... (cached) none required
checking for library containing kvm_getprocs... (cached) none required
checking for library containing kvm_getproc2... (cached) no
checking for library containing kvm_getfiles... (cached) no
checking for library containing kvm_getfile2... (cached) no
checking for library containing kvm_getswapinfo... (cached) none required
checking for kvm_openfiles... (cached) yes
checking for kvm_getprocs... (cached) yes
checking for kvm_getproc2... (cached) no
checking for kvm_getswapinfo... (cached) yes
checking for kvm_getfiles... (cached) no
checking for kvm_getfile2... (cached) no


Thank you
Krishna Vivek

From: Bart Van Assche 
Sent: 05 July 2021 21:18
To: Krishna Vivek Vitta ; Krishna Vivek Vitta 
via Net-snmp-users 
Subject: Re: Building net-snmp-5.9.1 in Freebsd

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
On 7/1/21 9:33 PM, Krishna Vivek Vitta via Net-snmp-users wrote:
Hi Experts

I am upgrading 5.8 to 5.9.1 in Freebsd 11.4 setup.

During the course of compilation, we received the below errors:

libtool: link: cc -shared  -fPIC -DPIC  helpers/.libs/all_helpers.o 
helpers/.libs/baby_steps.o helpers/.libs/bulk_to_ne
xt.o helpers/.libs/cache_handler.o helpers/.libs/debug_handler.o 
helpers/.libs/instance.o helpers/.libs/mode_end_call.o
helpers/.libs/multiplexer.o helpers/.libs/null.o helpers/.libs/old_api.o 
helpers/.libs/read_only.o helpers/.libs/row_m
erge.o helpers/.libs/scalar.o helpers/.libs/scalar_group.o 
helpers/.libs/serialize.o helpers/.libs/snmp_get_statistic.o
helpers/.libs/stash_cache.o helpers/.libs/stash_to_next.o helpers/.libs/table.o 
helpers/.libs/table_array.o helpers/.l
ibs/table_container.o helpers/.libs/table_data.o helpers/.libs/table_dataset.o 
helpers/.libs/table_iterator.o helpers/.
libs/table_row.o helpers/.libs/table_tdata.o helpers/.libs/watcher.o 
.libs/agent_handler.o .libs/agent_index.o .libs/ag
ent_read_config.o .libs/agent_registry.o .libs/agent_sysORTable.o 
.libs/agent_trap.o .libs/kernel.o .libs/netsnmp_close
_fds.o .libs/snmp_agent.o .libs/snmp_vars.o mibgroup/mibII/.libs/vacm_conf.o 
mibgroup/snmpv3/.libs/usmConf.o   -Wl,-rpa
th 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1/snmplib/.libs
 -Wl,-rpath -Wl,/usr/local/lib .
./snmplib/.libs/libnetsnmp.so 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs 
-L/usr/obj/var/mps64/
main/rs_ads_dev/usr.src/secure/lib/libcrypto -lcrypto -lelf  -Wl,-no-undefined 
-Wl,-rpath -Wl,/usr/obj/var/mps64/main/r
s_ads_dev/usr.src/secure/lib/libcrypto   -Wl,-soname -Wl,libnetsnmpagent.so.40 
-o .libs/libnetsnmpagent.so.40.1.0
.libs/kernel.o: In function `init_kmem':
kernel.c:(.text+0x2f): undefined reference to `kvm_openfiles'
kernel.c:(.text+0x64): undefined reference to `kvm_openfiles'
.libs/kernel.o: In function `klookup':
kernel.c:(.text+0x118): undefined reference to `kvm_read'
kernel.c:(.text+0x157): undefined reference to `kvm_geterr'
.libs/kernel.o: In function `free_kmem':
kernel.c:(.text+0x1c0): undefined reference to `kvm_close'
cc: error: linker command failed with exit code 1 (use -v to see invocation)
gmake[1]: *** [Makefile:492: libnetsnmpagent.la] Error 1
gmake[1]: Leaving directory 
'/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1/agent'
gmake: *** [Makefile:674: subdirs] Error 1


Is there any way to disable linking of kvm using configure command ? The above 
errors weren't returned during compiling in 5.8

Can you share the configure output related to kvm? Net-SNMP v5.9.1 builds and 
runs fine in my FreeBSD 13 virtual machine. I see the fo

Building net-snmp-5.9.1 in Freebsd

[Krishna Vivek Vitta via Net-snmp-users]

Hi Experts

I am upgrading 5.8 to 5.9.1 in Freebsd 11.4 setup.

During the course of compilation, we received the below errors:

libtool: link: cc -shared  -fPIC -DPIC  helpers/.libs/all_helpers.o 
helpers/.libs/baby_steps.o helpers/.libs/bulk_to_ne
xt.o helpers/.libs/cache_handler.o helpers/.libs/debug_handler.o 
helpers/.libs/instance.o helpers/.libs/mode_end_call.o
helpers/.libs/multiplexer.o helpers/.libs/null.o helpers/.libs/old_api.o 
helpers/.libs/read_only.o helpers/.libs/row_m
erge.o helpers/.libs/scalar.o helpers/.libs/scalar_group.o 
helpers/.libs/serialize.o helpers/.libs/snmp_get_statistic.o
helpers/.libs/stash_cache.o helpers/.libs/stash_to_next.o helpers/.libs/table.o 
helpers/.libs/table_array.o helpers/.l
ibs/table_container.o helpers/.libs/table_data.o helpers/.libs/table_dataset.o 
helpers/.libs/table_iterator.o helpers/.
libs/table_row.o helpers/.libs/table_tdata.o helpers/.libs/watcher.o 
.libs/agent_handler.o .libs/agent_index.o .libs/ag
ent_read_config.o .libs/agent_registry.o .libs/agent_sysORTable.o 
.libs/agent_trap.o .libs/kernel.o .libs/netsnmp_close
_fds.o .libs/snmp_agent.o .libs/snmp_vars.o mibgroup/mibII/.libs/vacm_conf.o 
mibgroup/snmpv3/.libs/usmConf.o   -Wl,-rpa
th 
-Wl,/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1/snmplib/.libs
 -Wl,-rpath -Wl,/usr/local/lib .
./snmplib/.libs/libnetsnmp.so 
-L/var/mps64/main/rs_ads_dev/usr.src/contrib/zeromq-4.1.0/src/.libs 
-L/usr/obj/var/mps64/
main/rs_ads_dev/usr.src/secure/lib/libcrypto -lcrypto -lelf  -Wl,-no-undefined 
-Wl,-rpath -Wl,/usr/obj/var/mps64/main/r
s_ads_dev/usr.src/secure/lib/libcrypto   -Wl,-soname -Wl,libnetsnmpagent.so.40 
-o .libs/libnetsnmpagent.so.40.1.0
.libs/kernel.o: In function `init_kmem':
kernel.c:(.text+0x2f): undefined reference to `kvm_openfiles'
kernel.c:(.text+0x64): undefined reference to `kvm_openfiles'
.libs/kernel.o: In function `klookup':
kernel.c:(.text+0x118): undefined reference to `kvm_read'
kernel.c:(.text+0x157): undefined reference to `kvm_geterr'
.libs/kernel.o: In function `free_kmem':
kernel.c:(.text+0x1c0): undefined reference to `kvm_close'
cc: error: linker command failed with exit code 1 (use -v to see invocation)
gmake[1]: *** [Makefile:492: libnetsnmpagent.la] Error 1
gmake[1]: Leaving directory 
'/var/mps64/main/rs_ads_dev/usr.src/contrib/net-snmp/net-snmp-5.9.1/agent'
gmake: *** [Makefile:674: subdirs] Error 1


Is there any way to disable linking of kvm using configure command ? The above 
errors weren't returned during compiling in 5.8

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: snmpwalk fails with SHA/AES

[Krishna Vivek Vitta via Net-snmp-users]

:52:24 trace: receive(): snmpd.c, 1299:
2021-06-17 03:52:24 snmpd/select: select( numfds=10, ..., tvp=0x0)
2021-06-17 03:52:47 trace: receive(): snmpd.c, 1305:
2021-06-17 03:52:47 snmpd/select: returned, count = 1
2021-06-17 03:52:47 trace: netsnmp_udpbase_recv(): 
transports/snmpUDPBaseDomain.c, 429:
2021-06-17 03:52:47 netsnmp_udp: recvfrom fd 9 got 64 bytes (from UDP: 
[10.102.53.225]:46972->[0.0.0.0]:0)
2021-06-17 03:52:47 transport:recv: 64 bytes from UDP: 
[10.102.53.225]:46972->[0.0.0.0]:0
2021-06-17 03:52:47 trace: _sess_process_packet_parse_pdu(): snmp_api.c, 5540:
2021-06-17 03:52:47 sess_process_packet: session 0x803279860 fd 9 pkt 
0x8032b0e40 length 64


Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker  
Sent: 04 June 2021 01:28
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: snmpwalk fails with SHA/AES

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
 writes:

> Intitially, snmpwalk succeeds for 10-12 mins, but later it fails with 
> Authentication failure which is puzzling. We are clueless on how to 
> proceed ahead.

Can you see if it works using snmpwalk and not just zabbix?

>   * Deleted the user and re-added again. The behavior is same after certain 
> time
>   * Changed the engine id. The behavior is same

Make sure the engineid being reported is actually what you expect (don't know 
why it would be different, but...)

Can you also see if the engineid boots and time values look good both incoming 
and outgoing?  IE, are they syncing ok like they should?

>   * Deleted the user and re-added with MD5/DES. Polling is success without any
> errors in long run.

Very odd.

--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: snmpwalk fails with SHA/AES

[Krishna Vivek Vitta via Net-snmp-users]

Hi Wes Hardaker

Once Zabbix returns failure for a particular user(azvision), we are checking 
through snmp walk as well. The results are Authentication failure.

Another observation is

We deleted the user(azvision) and re-added to snmpd.conf and restarted snmpd.
We have kept Zabbix aside and used only snmpwalk from linux machine

Snmpwalk succeeds for 10-12 mins but again fails

The behavior is seen only on this host and for this particular user. 
Other users created on this host are working fine.

Kindly advise.


Thank you
Krishna Vivek

-Original Message-
From: Wes Hardaker  
Sent: 04 June 2021 01:28
To: Krishna Vivek Vitta via Net-snmp-users 

Cc: Krishna Vivek Vitta 
Subject: Re: snmpwalk fails with SHA/AES

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.

Krishna Vivek Vitta via Net-snmp-users
 writes:

> Intitially, snmpwalk succeeds for 10-12 mins, but later it fails with 
> Authentication failure which is puzzling. We are clueless on how to 
> proceed ahead.

Can you see if it works using snmpwalk and not just zabbix?

>   * Deleted the user and re-added again. The behavior is same after certain 
> time
>   * Changed the engine id. The behavior is same

Make sure the engineid being reported is actually what you expect (don't know 
why it would be different, but...)

Can you also see if the engineid boots and time values look good both incoming 
and outgoing?  IE, are they syncing ok like they should?

>   * Deleted the user and re-added with MD5/DES. Polling is success without any
> errors in long run.

Very odd.

--
Wes Hardaker
USC/ISI



___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

snmpwalk fails with SHA/AES

[Krishna Vivek Vitta via Net-snmp-users]

Hi experts,

We have a SNMP manager(Zabbix) polling the host running snmp agent with 
net-snmp(5.8) on freebsd.

v3 user(azvision) has been configured on host with SHA/AES.

Following is snmpd.conf

# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
sysobjectid 1.3.6.1.4.1.5951.6
exactEngineID 0x80001f88805eacce40ca5b605e
view nsview included 1.3.6.1
rouser netmonitor-vrops authPriv -V nsview
rouser azvision authPriv -V nsview
rouser MAS_nsmonitor authPriv -V nsview


Intitially, snmpwalk succeeds for 10-12 mins, but later it fails with 
Authentication failure which is puzzling. We are clueless on how to proceed 
ahead.

Workaround steps attempted:

  *   Deleted the user and re-added again. The behavior is same after certain 
time
  *   Changed the engine id. The behavior is same
  *   Deleted the user and re-added with MD5/DES. Polling is success without 
any errors in long run.
  *   Created a new user with another name and poll succeeds. The problem only 
seems to be with user:azvision


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: SNMPd cores

[Krishna Vivek Vitta via Net-snmp-users]

Kindly help for the below core dumps.


Thank you
Krishna Vivek

From: Krishna Vivek Vitta via Net-snmp-users 

Sent: 22 April 2021 09:01
To: net-snmp-users@lists.sourceforge.net
Subject: RE: SNMPd cores

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
Hi experts

Any inputs that can be suggested.

Thank you
Krishna Vivek

From: Krishna Vivek Vitta via Net-snmp-users 
mailto:net-snmp-users@lists.sourceforge.net>>
Sent: 19 April 2021 20:22
To: Subject: SNMPd cores

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
Hi Team

We are seeing below snmpd cores. Please provide your input of what can cause 
these and measures to mitigate.


#0 0x000800d99f5c in md5_block_asm_data_order () from /lib/libcrypto.so.6
#1 0x0003 in ?? ()
#2 0x01c6c1c0 in ?? ()
#3 0x00071b07 in ?? ()
#4 0x000801c42f20 in ?? ()
#5 0x000800d99e06 in MD5_Update () from /lib/libcrypto.so.6
#6 0x0008009564d6 in sc_hash_type () from /lib/libnetsnmp.so.35
#7 0x00080095639d in sc_hash () from /lib/libnetsnmp.so.35
#8 0x000800953817 in hash_engineID () from /lib/libnetsnmp.so.35
#9 0x000800953720 in search_enginetime_list () from /lib/libnetsnmp.so.35
#10 0x000800952f06 in get_enginetime () from /lib/libnetsnmp.so.35
#11 0x0008009748dc in usm_rgenerate_out_msg () from /lib/libnetsnmp.so.35
#12 0x00080097437a in usm_secmod_rgenerate_out_msg () from 
/lib/libnetsnmp.so.35
#13 0x000800921cb7 in snmpv3_packet_realloc_rbuild () from 
/lib/libnetsnmp.so.35
#14 0x00080091fb7d in snmp_close_sessions () from /lib/libnetsnmp.so.35
#15 0x0008009225f5 in snmpv3_packet_build () from /lib/libnetsnmp.so.35
#16 0x000800923898 in snmp_build () from /lib/libnetsnmp.so.35
#17 0x00080092ab53 in netsnmp_build_packet () from /lib/libnetsnmp.so.35
#18 0x00080092b255 in _build_initial_pdu_packet () from 
/lib/libnetsnmp.so.35
#19 0x000800689b14 in netsnmp_wrap_up_request () from 
/lib/libnetsnmpagent.so.35
#20 0x00080068e098 in netsnmp_handle_request () from 
/lib/libnetsnmpagent.so.35
#21 0x00080068a849 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#22 0x00080092cfbe in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#23 0x00080092d158 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#24 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#25 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#26 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#27 0x00404a5a in receive ()
#28 0x004043b2 in main ()



#0 0x0008015bafe6 in memmove () from /lib/libc.so.7
#1 0x0008008f9c0c in snmp_clone_var () from /lib/libnetsnmp.so.35
#2 0x0008008fa1f2 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#3 0x0008008fa311 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#4 0x0008008fa367 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#5 0x0008008fa3ca in snmp_clone_pdu () from /lib/libnetsnmp.so.35
#6 0x00080068442e in send_trap_to_sess () from /lib/libnetsnmpagent.so.35
#7 0x0008006835a4 in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#8 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#9 0x0008006846b6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#10 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#11 0x00404603 in receive ()
#12 0x004043b2 in main ()



#0 0x000801546c05 in _malloc_prefork () from /lib/libc.so.7
#1 0x00080154c44a in free () from /lib/libc.so.7
#2 0x00080092c00e in snmp_free_var () from /lib/libnetsnmp.so.35
#3 0x00080092c032 in snmp_free_varbind () from /lib/libnetsnmp.so.35
#4 0x00080092c0a9 in snmp_free_pdu () from /lib/libnetsnmp.so.35
#5 0x00080068349e in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#6 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#7 0x0008006846d6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#8 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#9 0x00080068a706 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#10 0x00080097926d in usm_handle_report () from /lib/libnetsnmp.so.35
#11 0x000800928c14 in snmpv3_get_report_type () from /lib/libnetsnmp.so.35
#12 0x000800929258 in snmp_parse () from /lib/libnetsnmp.so.35
#13 0x00080092c876 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#14 0x00080092d125 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#15 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#16 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#17 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#18 0x00404a5a in r

RE: SNMPd cores

[Krishna Vivek Vitta via Net-snmp-users]

Hi experts

Any inputs that can be suggested.

Thank you
Krishna Vivek

From: Krishna Vivek Vitta via Net-snmp-users 

Sent: 19 April 2021 20:22
To: Subject: SNMPd cores

[CAUTION - EXTERNAL EMAIL] DO NOT reply, click links, or open attachments 
unless you have verified the sender and know the content is safe.
Hi Team

We are seeing below snmpd cores. Please provide your input of what can cause 
these and measures to mitigate.


#0 0x000800d99f5c in md5_block_asm_data_order () from /lib/libcrypto.so.6
#1 0x0003 in ?? ()
#2 0x01c6c1c0 in ?? ()
#3 0x00071b07 in ?? ()
#4 0x000801c42f20 in ?? ()
#5 0x000800d99e06 in MD5_Update () from /lib/libcrypto.so.6
#6 0x0008009564d6 in sc_hash_type () from /lib/libnetsnmp.so.35
#7 0x00080095639d in sc_hash () from /lib/libnetsnmp.so.35
#8 0x000800953817 in hash_engineID () from /lib/libnetsnmp.so.35
#9 0x000800953720 in search_enginetime_list () from /lib/libnetsnmp.so.35
#10 0x000800952f06 in get_enginetime () from /lib/libnetsnmp.so.35
#11 0x0008009748dc in usm_rgenerate_out_msg () from /lib/libnetsnmp.so.35
#12 0x00080097437a in usm_secmod_rgenerate_out_msg () from 
/lib/libnetsnmp.so.35
#13 0x000800921cb7 in snmpv3_packet_realloc_rbuild () from 
/lib/libnetsnmp.so.35
#14 0x00080091fb7d in snmp_close_sessions () from /lib/libnetsnmp.so.35
#15 0x0008009225f5 in snmpv3_packet_build () from /lib/libnetsnmp.so.35
#16 0x000800923898 in snmp_build () from /lib/libnetsnmp.so.35
#17 0x00080092ab53 in netsnmp_build_packet () from /lib/libnetsnmp.so.35
#18 0x00080092b255 in _build_initial_pdu_packet () from 
/lib/libnetsnmp.so.35
#19 0x000800689b14 in netsnmp_wrap_up_request () from 
/lib/libnetsnmpagent.so.35
#20 0x00080068e098 in netsnmp_handle_request () from 
/lib/libnetsnmpagent.so.35
#21 0x00080068a849 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#22 0x00080092cfbe in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#23 0x00080092d158 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#24 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#25 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#26 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#27 0x00404a5a in receive ()
#28 0x004043b2 in main ()



#0 0x0008015bafe6 in memmove () from /lib/libc.so.7
#1 0x0008008f9c0c in snmp_clone_var () from /lib/libnetsnmp.so.35
#2 0x0008008fa1f2 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#3 0x0008008fa311 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#4 0x0008008fa367 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#5 0x0008008fa3ca in snmp_clone_pdu () from /lib/libnetsnmp.so.35
#6 0x00080068442e in send_trap_to_sess () from /lib/libnetsnmpagent.so.35
#7 0x0008006835a4 in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#8 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#9 0x0008006846b6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#10 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#11 0x00404603 in receive ()
#12 0x004043b2 in main ()



#0 0x000801546c05 in _malloc_prefork () from /lib/libc.so.7
#1 0x00080154c44a in free () from /lib/libc.so.7
#2 0x00080092c00e in snmp_free_var () from /lib/libnetsnmp.so.35
#3 0x00080092c032 in snmp_free_varbind () from /lib/libnetsnmp.so.35
#4 0x00080092c0a9 in snmp_free_pdu () from /lib/libnetsnmp.so.35
#5 0x00080068349e in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#6 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#7 0x0008006846d6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#8 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#9 0x00080068a706 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#10 0x00080097926d in usm_handle_report () from /lib/libnetsnmp.so.35
#11 0x000800928c14 in snmpv3_get_report_type () from /lib/libnetsnmp.so.35
#12 0x000800929258 in snmp_parse () from /lib/libnetsnmp.so.35
#13 0x00080092c876 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#14 0x00080092d125 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#15 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#16 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#17 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#18 0x00404a5a in receive ()
#19 0x004043b2 in main ()


Following is the snmpd.conf
sysContact pl...@de.ibm.com<mailto:pl...@de.ibm.com>
sysLocation FR-PAR,PAR7-1R126,D02,38-39
sysName FR-PAR-EXT-LBA-01
# snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are e

SNMPd cores

[Krishna Vivek Vitta via Net-snmp-users]

Hi Team

We are seeing below snmpd cores. Please provide your input of what can cause 
these and measures to mitigate.


#0 0x000800d99f5c in md5_block_asm_data_order () from /lib/libcrypto.so.6
#1 0x0003 in ?? ()
#2 0x01c6c1c0 in ?? ()
#3 0x00071b07 in ?? ()
#4 0x000801c42f20 in ?? ()
#5 0x000800d99e06 in MD5_Update () from /lib/libcrypto.so.6
#6 0x0008009564d6 in sc_hash_type () from /lib/libnetsnmp.so.35
#7 0x00080095639d in sc_hash () from /lib/libnetsnmp.so.35
#8 0x000800953817 in hash_engineID () from /lib/libnetsnmp.so.35
#9 0x000800953720 in search_enginetime_list () from /lib/libnetsnmp.so.35
#10 0x000800952f06 in get_enginetime () from /lib/libnetsnmp.so.35
#11 0x0008009748dc in usm_rgenerate_out_msg () from /lib/libnetsnmp.so.35
#12 0x00080097437a in usm_secmod_rgenerate_out_msg () from 
/lib/libnetsnmp.so.35
#13 0x000800921cb7 in snmpv3_packet_realloc_rbuild () from 
/lib/libnetsnmp.so.35
#14 0x00080091fb7d in snmp_close_sessions () from /lib/libnetsnmp.so.35
#15 0x0008009225f5 in snmpv3_packet_build () from /lib/libnetsnmp.so.35
#16 0x000800923898 in snmp_build () from /lib/libnetsnmp.so.35
#17 0x00080092ab53 in netsnmp_build_packet () from /lib/libnetsnmp.so.35
#18 0x00080092b255 in _build_initial_pdu_packet () from 
/lib/libnetsnmp.so.35
#19 0x000800689b14 in netsnmp_wrap_up_request () from 
/lib/libnetsnmpagent.so.35
#20 0x00080068e098 in netsnmp_handle_request () from 
/lib/libnetsnmpagent.so.35
#21 0x00080068a849 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#22 0x00080092cfbe in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#23 0x00080092d158 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#24 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#25 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#26 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#27 0x00404a5a in receive ()
#28 0x004043b2 in main ()



#0 0x0008015bafe6 in memmove () from /lib/libc.so.7
#1 0x0008008f9c0c in snmp_clone_var () from /lib/libnetsnmp.so.35
#2 0x0008008fa1f2 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#3 0x0008008fa311 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#4 0x0008008fa367 in snmp_reset_var_buffers () from /lib/libnetsnmp.so.35
#5 0x0008008fa3ca in snmp_clone_pdu () from /lib/libnetsnmp.so.35
#6 0x00080068442e in send_trap_to_sess () from /lib/libnetsnmpagent.so.35
#7 0x0008006835a4 in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#8 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#9 0x0008006846b6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#10 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#11 0x00404603 in receive ()
#12 0x004043b2 in main ()



#0 0x000801546c05 in _malloc_prefork () from /lib/libc.so.7
#1 0x00080154c44a in free () from /lib/libc.so.7
#2 0x00080092c00e in snmp_free_var () from /lib/libnetsnmp.so.35
#3 0x00080092c032 in snmp_free_varbind () from /lib/libnetsnmp.so.35
#4 0x00080092c0a9 in snmp_free_pdu () from /lib/libnetsnmp.so.35
#5 0x00080068349e in netsnmp_send_traps () from /lib/libnetsnmpagent.so.35
#6 0x00080068365f in send_enterprise_trap_vars () from 
/lib/libnetsnmpagent.so.35
#7 0x0008006846d6 in send_trap_vars () from /lib/libnetsnmpagent.so.35
#8 0x00080068477e in send_easy_trap () from /lib/libnetsnmpagent.so.35
#9 0x00080068a706 in handle_snmp_packet () from /lib/libnetsnmpagent.so.35
#10 0x00080097926d in usm_handle_report () from /lib/libnetsnmp.so.35
#11 0x000800928c14 in snmpv3_get_report_type () from /lib/libnetsnmp.so.35
#12 0x000800929258 in snmp_parse () from /lib/libnetsnmp.so.35
#13 0x00080092c876 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#14 0x00080092d125 in snmp_create_sess_pdu () from /lib/libnetsnmp.so.35
#15 0x00080092dda4 in _sess_read () from /lib/libnetsnmp.so.35
#16 0x00080092ebbd in snmp_sess_read2 () from /lib/libnetsnmp.so.35
#17 0x00080092d318 in snmp_read2 () from /lib/libnetsnmp.so.35
#18 0x00404a5a in receive ()
#19 0x004043b2 in main ()


Following is the snmpd.conf
sysContact pl...@de.ibm.com
sysLocation FR-PAR,PAR7-1R126,D02,38-39
sysName FR-PAR-EXT-LBA-01
# snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 1.2.3.4:162 public
sysobjectid 1.3.6.1.4.1.5951.6
[snmp] logTimestamp 1
exactEngineID 0x80001f888082c995074288e055
view TIVOLI included 1.3.6.1
rouser itnmusr authPriv -V TIVOLI
rouser visionuser authPriv -V TIVOLI
rouser eudediscosnmp authPriv -V TIVOLI
trapsess -v 3 -u itnmusr -l 

Community string characters

[Krishna Vivek Vitta]

Hi all

Are there any limitations wrt community string to configure snmp traps. Are 
there any exceptions wrt characters used in community string.

trap2sink host communitystring trapport

Can we use #,^, \ etc ?

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Adding timestamp in snmpd.log

[Krishna Vivek Vitta]

Hi Anders

Is there a mechanism to enable/control log level ? What are the options that I 
need to include in snmpd.conf ? I assume, the logging level is debug(default) 
which prints all messages

Thank you
Krishna Vivek

From: Anders Wallin 
Sent: 02 December 2019 16:22
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Adding timestamp in snmpd.log


On Sun, Dec 1, 2019 at 4:38 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Thank you Anders for swift response.

"[snmp] logTimestamp 1"

What does [snmp] indicate in above line ? Is it compulsory ?
Yes it's compulsory. This is an option that's not snmpd specific so the 
"interpreter" used should point to the generic  "snmp interpreter"

Our application frequently alters the contents of snmpd.conf in including trap 
destintions and managers. This may lead the entry “logTimestamp 1” being missed 
out in snmpd.conf.

Can timestamp be logged automatically without including the above option in 
snmpd.conf ?
You can also place this on the command line, see the man page for snmpd, e.g.
snmpd --logTimestamp=1 .
(note, here you don't need the "[snmp]"

If you want to set it by default you need to dig into the net-snmp code

Is there option as part of execution in snmpd or is there any change that can 
be included in source code ?



Thank you
Krishna Vivek

From: Anders Wallin mailto:walli...@gmail.com>>
Sent: 29 November 2019 20:34
To: Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>>
Cc: 
net-snmp-users@lists.sourceforge.net<mailto:net-snmp-users@lists.sourceforge.net>
Subject: Re: Adding timestamp in snmpd.log

add
"[snmp] logTimestamp 1"
 in snmpd.conf

Regards
Anders Wallin


On Fri, Nov 29, 2019 at 3:57 PM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Hi team,

We have a snmpd agent running in a Freebsd box.

The following command is being used to run snmpd:

“Snmpd -c snmpd.conf -Lf snmpd.log -p snmpd.pid”

Is there any option to add timestamp being logged for every trace in snmpd.log 
? Kindly assist


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net<mailto:Net-snmp-users@lists.sourceforge.net>
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Adding timestamp in snmpd.log

[Krishna Vivek Vitta]

Thank you Anders for swift response.

"[snmp] logTimestamp 1"

What does [snmp] indicate in above line ? Is it compulsory ?

Our application frequently alters the contents of snmpd.conf in including trap 
destintions and managers. This may lead the entry “logTimestamp 1” being missed 
out in snmpd.conf.

Can timestamp be logged automatically without including the above option in 
snmpd.conf ?

Is there option as part of execution in snmpd or is there any change that can 
be included in source code ?



Thank you
Krishna Vivek

From: Anders Wallin 
Sent: 29 November 2019 20:34
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Adding timestamp in snmpd.log

add
"[snmp] logTimestamp 1"
 in snmpd.conf

Regards
Anders Wallin


On Fri, Nov 29, 2019 at 3:57 PM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Hi team,

We have a snmpd agent running in a Freebsd box.

The following command is being used to run snmpd:

“Snmpd -c snmpd.conf -Lf snmpd.log -p snmpd.pid”

Is there any option to add timestamp being logged for every trace in snmpd.log 
? Kindly assist


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net<mailto:Net-snmp-users@lists.sourceforge.net>
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Adding timestamp in snmpd.log

[Krishna Vivek Vitta]

Hi team,

We have a snmpd agent running in a Freebsd box.

The following command is being used to run snmpd:

"Snmpd -c snmpd.conf -Lf snmpd.log -p snmpd.pid"

Is there any option to add timestamp being logged for every trace in snmpd.log 
? Kindly assist


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Some general questions on netsnmp_logging_restart

[Krishna Vivek Vitta]

Hi Bill,

Can we differentiate if snmpd has been subjected to coldStart or warmStart ? 
Are there ways to check if snmpd.conf has been reloaded ? The frequency of the 
trap is daily once during the same time.
Also as Kiran mentioned, Is there any impact by commenting the code to raise 
the trap ?

Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 12 September 2019 03:28
To: Kiran Kumar Pamula -X (kpamula - HCL TECHNOLOGIES LIMITED at Cisco) 

Cc: Naresh Pindukuru -X (narpindu - HCL TECHNOLOGIES LIMITED at Cisco) 
; Appandainathan Ayyannan -X (aayyanna - HCL TECHNOLOGIES 
LIMITED at Cisco) ; net-snmp-users@lists.sourceforge.net
Subject: Re: Some general questions on netsnmp_logging_restart

On Tue, Sep 10, 2019 at 1:06 AM Kiran Kumar Pamula -X (kpamula - HCL 
TECHNOLOGIES LIMITED at Cisco) via Net-snmp-users 
mailto:net-snmp-users@lists.sourceforge.net>>
 wrote:
Hi Experts,

Could you please help me with below questions in the below part of net-snmp 
code:

File: 
net-snmp/5.7.3-r5.0/net-snmp-5.7.3/agent/snmpd.c

1199  static int
1200  receive(void)
1201  {
..
..
1233  snmp_log(LOG_INFO, "Reconfiguring daemon\n");
1234  /*  Stop and restart logging.  This allows logfiles to be
1235  rotated etc.  */
1236  netsnmp_logging_restart();
1237  snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
1238   netsnmp_get_version());
1239  update_config();
1240  send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
..
..
}

  1.  In line 1237, log points to “NET-SNMP version 5.7.3 restarted”, but in 
actual, it is net-snmp logger that gets restarted here.

Hence the above message needs to be changed accordingly so that it doesn’t 
annoy customers !!

Am I right ?
Line 1239 updates the config.  The log message is meant to convey that the 
agent is restarted with the new config.



  1.  In line 1240, why a trap is being sent just for a snmp logging restart ?

Is this trap really need here as snmp process is not actually getting restarted 
?

Can this line be commented out ? And what is the impact if so.
The trap is not being sent just for snmp logging restart.  It is sent because 
the config is being reloaded.

This trap is sent because net-snmp doesn't know if it should send warmStart or 
not.  See the page I sent to Krishna in the thread "nsNotifyRestart traps" for 
more discussion.

  Bill

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: nsNotifyRestart traps

[Krishna Vivek Vitta]

Hello Bill,

Any update on it ?
I believe, on receiving HUP signal by the agent, log rotation occurs( as 
checked in code). It’s a free bsd box and would output of any command provide 
hint for the reason of HUP signal.

Thank you
Krishna Vivek

From: Krishna Vivek Vitta 
Sent: 28 August 2019 22:14
To: Bill Fenner 
Cc: net-snmp-users@lists.sourceforge.net
Subject: RE: nsNotifyRestart traps

Hello Bill

Thank you for inputs.
Isn’t snmpd.log rotated on receiving the HUP signal ? How can we check 
“logrotate” is running on server ? It’s a free bsd box and would output of any 
command provide hint the reason of HUP signal

How can we log timestamp in snmpd.log ?

Thank you
Krishna Vivek

From: Bill Fenner mailto:fen...@gmail.com>>
Sent: 27 August 2019 21:04
To: Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>>
Cc: 
net-snmp-users@lists.sourceforge.net<mailto:net-snmp-users@lists.sourceforge.net>
Subject: Re: nsNotifyRestart traps

On Tue, Aug 27, 2019 at 2:54 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Hello experts,

We have a management server running snmpd where it is sending nsNotifyRestart 
traps. The frequency is once per day during same time.
May I know on what occasions this trap is raised and I don’t get to see any 
logs in management server restarting agent(snmpd), though we see following in 
snmpd.log.

I went to 
https://lmgtfy.com/?q=nsNotifyRestart<https://secure-web.cisco.com/1i9QG7HjSl-xZDwR0beKOD8l_ixD-zAcQZA7nkVKbOpOEClEBICzjPj_kLgpMWxiCWfhSXsVud05IWOxYlZj8zgtNKhqnRVRjwb_faPehfC8BfUK-AjQDWjQUdNY2aIbNctln8km9u5sruQrJfnc7EyX5XOrB6qlrYQlHZvlORQqYRKmFGmEoqTyDDLck20XOTKXpVvsZc9RK6mBFmH52zyHMAwsU0sVVoXlp6JmXa2c3MEfOmX3PYxsGhPat3PNEJyCyQ3fgPeyvU8WImBWNZoNjOFhfkL2v0iYFTnqWgwa3UPEt79kEQqd0TLseAeypLNe9k2xQ-vARlEpDcRuLsIPNdFii7deGjO3Sxewtx14/https%3A%2F%2Flmgtfy.com%2F%3Fq%3DnsNotifyRestart>
 and the first search result was 
http://net-snmp.sourceforge.net/wiki/index.php/FAQ:Agent_15 which says:

The Net-SNMP agent ... generates an enterprise-specific trap 'nsNotifyRestart' 
... on receiving a HUP signal - typically after being re-configured.

One interesting thing to note is that "logrotate" is pretty likely to send a 
HUP to a daemon whose logs it's configured to rotate.  Does your trap happen to 
coincide with when "logrotate" runs on your server?

  Bill

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: nsNotifyRestart traps

[Krishna Vivek Vitta]

Hello Bill

Thank you for inputs.
Isn’t snmpd.log rotated on receiving the HUP signal ? How can we check 
“logrotate” is running on server ? It’s a free bsd box and would output of any 
command provide hint the reason of HUP signal

How can we log timestamp in snmpd.log ?

Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 27 August 2019 21:04
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: nsNotifyRestart traps

On Tue, Aug 27, 2019 at 2:54 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Hello experts,

We have a management server running snmpd where it is sending nsNotifyRestart 
traps. The frequency is once per day during same time.
May I know on what occasions this trap is raised and I don’t get to see any 
logs in management server restarting agent(snmpd), though we see following in 
snmpd.log.

I went to https://lmgtfy.com/?q=nsNotifyRestart and the first search result was 
http://net-snmp.sourceforge.net/wiki/index.php/FAQ:Agent_15 which says:

The Net-SNMP agent ... generates an enterprise-specific trap 'nsNotifyRestart' 
... on receiving a HUP signal - typically after being re-configured.

One interesting thing to note is that "logrotate" is pretty likely to send a 
HUP to a daemon whose logs it's configured to rotate.  Does your trap happen to 
coincide with when "logrotate" runs on your server?

  Bill

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

nsNotifyRestart traps

[Krishna Vivek Vitta]

Hello experts,

We have a management server running snmpd where it is sending nsNotifyRestart 
traps. The frequency is once per day during same time.
May I know on what occasions this trap is raised and I don't get to see any 
logs in management server restarting agent(snmpd), though we see following in 
snmpd.log.


"NET-SNMP version 5.5 restarted"

Following is Snmpd.conf  which is unchanged for atleast a month.

sysContact Remote Anywhere
sysLocation Sweden Skondal
sysName nssdx-mgmt
sysobjectid 1.3.6.1.4.1.5951.6
rocommunity 3r1c550n 153.88.253.37
exactEngineID 0x80001f8880fc94a90ee9214757
trap2sink 153.88.253.26:162 3r1c550n
rocommunity 3r1c550n 153.88.253.12


Please guide on understanding the reason behind the trap, steps to mitigate 
this event and trouble shooting.

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

REQ: Configure options help

[Krishna Vivek Vitta]

Hi team,

I have set the configure options with disable-agent but I see agent folder is 
building

Net-snmp 5.8
cd ./../../contrib/net-snmp-5.8 && ./configure \
--without-perl-modules --disable-embedded-perl --disable-agent 
--disable-applications --disable-manuals --disable-scripts \
--with-default-snmp-version="3" --with-sys-contact="contact" 
--with-sys-location="location" --with-logfile="." 
--with-persistent-directory="." --with-mib-modules="mps"

Line 19487: making all in 
/home/build/mana_37_10_netsnmp/usr.src/contrib/net-snmp-5.8/snmplib
  Line 19687: making all in 
/home/build/mana_37_10_netsnmp/usr.src/contrib/net-snmp-5.8/agent
  Line 19808: making all in 
/home/build/mana_37_10_netsnmp/usr.src/contrib/net-snmp-5.8/agent/helpers
  Line 19822: making all in 
/home/build/mana_37_10_netsnmp/usr.src/contrib/net-snmp-5.8/agent/mibgroup

But in net-snmp 5.5, I don't see agent building.

cd ./../../contrib/net-snmp && ./configure \
--without-perl-modules --disable-embedded-perl --disable-agent 
--disable-applications --disable-manuals --disable-scripts \
--with-default-snmp-version="3" --with-sys-contact="contact" 
--with-sys-location="location" --with-logfile="." 
--with-persistent-directory="." --with-mib-modules="mps"

making all in /home/build/TOT/usr.src/contrib/net-snmp/snmplib
making all in /home/build/TOT/usr.src/contrib/net-snmp/mibs


Please assist me in where I am going wrong ?


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: nsNotifyRestart trap raised frequently

[Krishna Vivek Vitta]

Hi Bill,

Please review the below SNMP configuration in the agent.

sysContact IT-IS
sysLocation ECM
sysName adc001101.engel.int
# snmpd Configuration File
#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
#trap2sink 1.2.3.4:162 public
sysobjectid 1.3.6.1.4.1.5951.6
exactEngineID 0x80001f888026bda253cc8fa856
rocommunity _9TikE06:wvtXG_4X_G 10.19.53.62
trap2sink 10.19.53.62:162 _9TikE06:wvtXG_4X_G
rocommunity _9TikE06:wvtXG_4X_G 10.6.53.25
rocommunity _9TikE06:wvtXG_4X_G 10.6.53.26
trap2sink 10.6.53.25:162 _9TikE06:wvtXG_4X_G
trap2sink 10.6.53.26:162 _9TikE06:wvtXG_4X_G

trap2sink 1.1.1.1:162 public

Is there something not obvious/special that could cause the trap being 
generated ?

Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 29 April 2019 21:52
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: nsNotifyRestart trap raised frequently

Hello Krishna,

I did a Google search for 'nsNotifyRestart' and one of the results was 
http://net-snmp.sourceforge.net/wiki/index.php/FAQ:Agent_15 .  This page 
describes when the nsNotifyRestart trap is sent.

  Bill


On Wed, Apr 24, 2019 at 7:28 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Hello experts,

We found that nsNotifyRestart is thrown frequently(every 2 hrs) and same has 
been reported in snmpd.log. There are no changes in snmp configuration in the 
SNMP manager and process id of SNMP is also not altering.


NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted



Customer using third party syslog WhatsUpGold.



Given below is the TRAP details which customer getting in email:



PassiveMonitor.Payload.TrapName=nsNotifyRestart

PassiveMonitor.Payload.TrapMajor=6

PassiveMonitor.Payload.TrapMinor=3

PassiveMonitor.Payload.ObjectLong=1.3.6.1.4.1.8072.4 (netSnmpNotificationPrefix)

PassiveMonitor.Payload.snmpTrapOID.0=1.3.6.1.4.1.8072.4.0.3 (nsNotifyRestart) 
PassiveMonitor.Payload.1.3.6.1.2.1.1.3.0=10days 16:00:33.69

PassiveMonitor.Payload.snmpTrapEnterprise.0=1.3.6.1.4.1.8072.4 
(netSnmpNotificationPrefix) 
PassiveMonitor.Payload.Object=netSnmpNotificationPrefix

PassiveMonitor.Payload.Timetick=10days 16:00:33.69 
PassiveMonitor.Payload.Packet Type=SNMPv2 Trap

PassiveMonitor.Payload.1.3.6.1.6.3.1.1.4.1.0=1.3.6.1.4.1.8072.4.0.3

PassiveMonitor.Payload.Protocol Version=SNMPv2 
PassiveMonitor.Payload.CommunityName=_9TikE06:wvtXG_4X_G

PassiveMonitor.Payload.1.3.6.1.6.3.1.1.4.3.0=1.3.6.1.4.1.8072.4

PassiveMonitor.Payload.sysUpTimeInstance=10days 16:00:33.69



Can you tell on what cases this trap is raised and what are the steps that can 
be taken to prevent from being raised.


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net<mailto:Net-snmp-users@lists.sourceforge.net>
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Help required for "snmpwalk: Authentication failure "

[Krishna Vivek Vitta]

+Petros to explain the problem in detail.


Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 29 April 2019 22:01
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Help required for "snmpwalk: Authentication failure "

Hi Krishna,

net-snmp 5.5 is 10 years old this year.  5.8 is the current release.

That said, it might be possible to help you if you share the actual snmpd.conf 
files.  You mention "add snmptrap dest_server=10.91.31.244 user_name=test 
dest_port=162 version=v3", but that is not how to configure net-snmp, so I 
don't know what to think about how that changes the actual configuration.

  Bill


On Wed, Apr 24, 2019 at 7:19 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Any update on the behaviour ?


Thank you
Krishna Vivek

From: Krishna Vivek Vitta
Sent: 23 April 2019 11:43
To: 
net-snmp-users@lists.sourceforge.net<mailto:net-snmp-users@lists.sourceforge.net>
Subject: Help required for "snmpwalk: Authentication failure "

Hi expert,

We have a case where snmpwalk fails after snmpv3 user is added to trap 
destination. Net-SNMP version being used is 5.5 on FreeBSD setup

We start with a configured user for SNMPv3. We used SHA1 and AES for the auth 
and privacy protocols:
add snmpuser name=test auth_password=testtest privacy_password=testtest 
auth_protocol=SHA1 privacy_protocol=AES view_name=SNMP-View 
security_level=authPriv
add snmpview name=SNMP-View subtree=1.3.6.1 type=Include

The above steps:
Adds a createUser directive in /var/mps/netsnmp/snmpd.conf and restarts snmpd
1.  SNMPD replaces the createUser directive with a usmUser directive in 
persistent conf

All this is normal. The configuration in the persistent snmpd.conf is correct. 
This is our test entry:

bash-3.2# fgrep 0x4e65747363616c657200 /var/mps/netsnmp/snmpd.conf
usmUser 1 3 0x80001f88809c0a3f394b485c56 0x4e65747363616c657200 
0x4e65747363616c657200 NULL .1.3.6.1.6.3.10.1.1.3 
0x06be7a79a8108ccde730455187973c0719b3e460 .1.3.6.1.6.3.10.1.2.4 
0x06be7a79a8108ccde730455187973c07 ""


bash-3.2# gdb /usr/sbin/snmpd -p `cat /var/run/snmpd.pid` --batch 
--command=/root/print_users.gdb | awk '/test/,/privKey:/'

name: 0x801c6fac0:   "test"

secName: 0x801c6fad0:"test"

authProtocol: .1.3.6.1.6.3.10.1.1.3 << This means SHA1

privProtocol: .1.3.6.1.6.3.10.1.2.4 << This means AES

authKey: 0x6be7a79a8108ccd 0xe730455187973c07 0x19b3e460

privKey: 0x6be7a79a8108ccd 0xe730455187973c07



And of course the queries work:



vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  
10.91.16.71:161<http://secure-web.cisco.com/1DeWAQy3PpOvyZKTQKl0y9vktN-KUg8jeA8jEq2ZgffI-qSxpcTBB_0HSvLxxp_13uwvBEvQG8UWcOuYctOjMmK--OCCmSkH6cCvXaZh-qMkU97wqGLkJ7PHUvBVZj0hHl4lQwSlHSYOuKbetU-6WzrC7YqkJDubz4NNSC9hIom88WZHQMPriwTuQLyhP11YehxZS__2b2gSbl066_YF16bdWtb0uFenZdyf7D096Td_PC2yJtemzmMx2cFqDfEyLeMAB77cL5CXV7NKZMSZTbQ/http%3A%2F%2F10.91.16.71%3A161>
 1.3.6.1.2.1.1.1

SNMPv2-MIB::sysDescr.0 = STRING: FreeBSD nssdx-mgmt 8.4-NETSCALER-12.0 FreeBSD 
8.4-NETSCALER-12.0 #0: Wed Sep 12 06:47:55 PDT 2018 
root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM[https://issues.citrite.net/images/icons/mail_small.gif]<mailto:root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM>amd64



Then I add an snmptrap destination that uses this user:



add snmptrap dest_server=10.91.31.244 user_name=test dest_port=162 version=v3

 And the queries fail with authentication failure:

 vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  
10.91.16.71:161<http://secure-web.cisco.com/1DeWAQy3PpOvyZKTQKl0y9vktN-KUg8jeA8jEq2ZgffI-qSxpcTBB_0HSvLxxp_13uwvBEvQG8UWcOuYctOjMmK--OCCmSkH6cCvXaZh-qMkU97wqGLkJ7PHUvBVZj0hHl4lQwSlHSYOuKbetU-6WzrC7YqkJDubz4NNSC9hIom88WZHQMPriwTuQLyhP11YehxZS__2b2gSbl066_YF16bdWtb0uFenZdyf7D096Td_PC2yJtemzmMx2cFqDfEyLeMAB77cL5CXV7NKZMSZTbQ/http%3A%2F%2F10.91.16.71%3A161>
 1.3.6.1.2.1.1.1

snmpwalk: Authentication failure (incorrect password, community or key)



This time although the configuration is the same, snmpd internally has set the 
wrong protocols:



bash-3.2# fgrep 0x4e65747363616c657200 /var/mps/netsnmp/snmpd.conf

usmUser 1 3 0x80001f88809c0a3f394b485c56 0x4e65747363616c657200 
0x4e65747363616c657200 NULL .1.3.6.1.6.3.10.1.1.3 
0x06be7a79a8108ccde730455187973c0719b3e460 
.1.3.6.1.6.3.10.1.2.40x06be7a79a8108ccde730455187973c07 0x

bash-3.2# gdb /usr/sbin/snmpd -p `cat /var/run/snmpd.pid` --batch 
--command=/root/print_users.gdb | awk '/Netscaler/,/privKey:/'

name: 0x801c6fac0:   "test"

secName: 0x801c6fad0:"test"

authProtocol: .1.3.6.1.6.3.10.1.1.2 << This means MD5

privProtocol: .1.3.6.1.6.3.10.1.2.2 << This means DES

authKey: 0x6be7a79a8108ccd 

RE: Help required for "snmpwalk: Authentication failure "

[Krishna Vivek Vitta]

Hi Bill,

Thanks Bill for looking into it. The version is old, but is there any bug which 
describes this anomaly ?

Following are the contents of snmpd.conf

#
# Copy this file to /mpsconfig, and make changes to /mpsconfig/snmpd.conf
# Changes in /etc/snmpd.conf will be lost following a reboot.
#
# The following are example for snmpd.conf.
#
#SNMP Trap Destination example
sysobjectid 1.3.6.1.4.1.5951.6
exactEngineID 0x80001f8880f9e71c18d35dfe5b
rocommunity public 0.0.0.0
rouser temp noAuthNoPriv
rouser test noAuthNoPriv
view SNMP-View included 1.3.6.1
rouser test authPriv -V SNMP-View
rouser second noAuthNoPriv

trapsess -v 3 -u test -l authPriv 10.91.31.244:162

trap2sink 10.102.126.217:162 public

The below commands are internal to software. We have CLI tool to add snmp users 
and config.
add snmpuser name=test auth_password=testtest privacy_password=testtest 
auth_protocol=SHA1 privacy_protocol=AES view_name=SNMP-View 
security_level=authPriv
add snmpview name=SNMP-View subtree=1.3.6.1 type=Include

Thank you
Krishna Vivek

From: Bill Fenner 
Sent: 29 April 2019 22:01
To: Krishna Vivek Vitta 
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Help required for "snmpwalk: Authentication failure "

Hi Krishna,

net-snmp 5.5 is 10 years old this year.  5.8 is the current release.

That said, it might be possible to help you if you share the actual snmpd.conf 
files.  You mention "add snmptrap dest_server=10.91.31.244 user_name=test 
dest_port=162 version=v3", but that is not how to configure net-snmp, so I 
don't know what to think about how that changes the actual configuration.

  Bill


On Wed, Apr 24, 2019 at 7:19 AM Krishna Vivek Vitta 
mailto:krishna.vivekvi...@citrix.com>> wrote:
Any update on the behaviour ?


Thank you
Krishna Vivek

From: Krishna Vivek Vitta
Sent: 23 April 2019 11:43
To: 
net-snmp-users@lists.sourceforge.net<mailto:net-snmp-users@lists.sourceforge.net>
Subject: Help required for "snmpwalk: Authentication failure "

Hi expert,

We have a case where snmpwalk fails after snmpv3 user is added to trap 
destination. Net-SNMP version being used is 5.5 on FreeBSD setup

We start with a configured user for SNMPv3. We used SHA1 and AES for the auth 
and privacy protocols:
add snmpuser name=test auth_password=testtest privacy_password=testtest 
auth_protocol=SHA1 privacy_protocol=AES view_name=SNMP-View 
security_level=authPriv
add snmpview name=SNMP-View subtree=1.3.6.1 type=Include

The above steps:
Adds a createUser directive in /var/mps/netsnmp/snmpd.conf and restarts snmpd
1.  SNMPD replaces the createUser directive with a usmUser directive in 
persistent conf

All this is normal. The configuration in the persistent snmpd.conf is correct. 
This is our test entry:

bash-3.2# fgrep 0x4e65747363616c657200 /var/mps/netsnmp/snmpd.conf
usmUser 1 3 0x80001f88809c0a3f394b485c56 0x4e65747363616c657200 
0x4e65747363616c657200 NULL .1.3.6.1.6.3.10.1.1.3 
0x06be7a79a8108ccde730455187973c0719b3e460 .1.3.6.1.6.3.10.1.2.4 
0x06be7a79a8108ccde730455187973c07 ""


bash-3.2# gdb /usr/sbin/snmpd -p `cat /var/run/snmpd.pid` --batch 
--command=/root/print_users.gdb | awk '/test/,/privKey:/'

name: 0x801c6fac0:   "test"

secName: 0x801c6fad0:"test"

authProtocol: .1.3.6.1.6.3.10.1.1.3 << This means SHA1

privProtocol: .1.3.6.1.6.3.10.1.2.4 << This means AES

authKey: 0x6be7a79a8108ccd 0xe730455187973c07 0x19b3e460

privKey: 0x6be7a79a8108ccd 0xe730455187973c07



And of course the queries work:



vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  
10.91.16.71:161<http://secure-web.cisco.com/1DeWAQy3PpOvyZKTQKl0y9vktN-KUg8jeA8jEq2ZgffI-qSxpcTBB_0HSvLxxp_13uwvBEvQG8UWcOuYctOjMmK--OCCmSkH6cCvXaZh-qMkU97wqGLkJ7PHUvBVZj0hHl4lQwSlHSYOuKbetU-6WzrC7YqkJDubz4NNSC9hIom88WZHQMPriwTuQLyhP11YehxZS__2b2gSbl066_YF16bdWtb0uFenZdyf7D096Td_PC2yJtemzmMx2cFqDfEyLeMAB77cL5CXV7NKZMSZTbQ/http%3A%2F%2F10.91.16.71%3A161>
 1.3.6.1.2.1.1.1

SNMPv2-MIB::sysDescr.0 = STRING: FreeBSD nssdx-mgmt 8.4-NETSCALER-12.0 FreeBSD 
8.4-NETSCALER-12.0 #0: Wed Sep 12 06:47:55 PDT 2018 
root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM[https://issues.citrite.net/images/icons/mail_small.gif]<mailto:root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM>amd64



Then I add an snmptrap destination that uses this user:



add snmptrap dest_server=10.91.31.244 user_name=test dest_port=162 version=v3

 And the queries fail with authentication failure:

 vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  
10.91.16.71:161<http://secure-web.cisco.com/1DeWAQy3PpOvyZKTQKl0y9vktN-KUg8jeA8jEq2ZgffI-qSxpcTBB_0HSvLxxp_13uwvBEvQG8UWcOuYctOjMmK--OCCmSkH6cCvXaZh-qMkU97wqGLkJ7PHUvBVZj0hHl4lQwSlHSYOuKbetU-6WzrC7YqkJDubz4NNSC9hIom88WZHQMPriwTuQLyhP11YehxZS__2b2gSbl066_Y

nsNotifyRestart trap raised frequently

[Krishna Vivek Vitta]

Hello experts,

We found that nsNotifyRestart is thrown frequently(every 2 hrs) and same has 
been reported in snmpd.log. There are no changes in snmp configuration in the 
SNMP manager and process id of SNMP is also not altering.


NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted

NET-SNMP version 5.5 restarted



Customer using third party syslog WhatsUpGold.



Given below is the TRAP details which customer getting in email:



PassiveMonitor.Payload.TrapName=nsNotifyRestart

PassiveMonitor.Payload.TrapMajor=6

PassiveMonitor.Payload.TrapMinor=3

PassiveMonitor.Payload.ObjectLong=1.3.6.1.4.1.8072.4 (netSnmpNotificationPrefix)

PassiveMonitor.Payload.snmpTrapOID.0=1.3.6.1.4.1.8072.4.0.3 (nsNotifyRestart) 
PassiveMonitor.Payload.1.3.6.1.2.1.1.3.0=10days 16:00:33.69

PassiveMonitor.Payload.snmpTrapEnterprise.0=1.3.6.1.4.1.8072.4 
(netSnmpNotificationPrefix) 
PassiveMonitor.Payload.Object=netSnmpNotificationPrefix

PassiveMonitor.Payload.Timetick=10days 16:00:33.69 
PassiveMonitor.Payload.Packet Type=SNMPv2 Trap

PassiveMonitor.Payload.1.3.6.1.6.3.1.1.4.1.0=1.3.6.1.4.1.8072.4.0.3

PassiveMonitor.Payload.Protocol Version=SNMPv2 
PassiveMonitor.Payload.CommunityName=_9TikE06:wvtXG_4X_G

PassiveMonitor.Payload.1.3.6.1.6.3.1.1.4.3.0=1.3.6.1.4.1.8072.4

PassiveMonitor.Payload.sysUpTimeInstance=10days 16:00:33.69



Can you tell on what cases this trap is raised and what are the steps that can 
be taken to prevent from being raised.


Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

RE: Help required for "snmpwalk: Authentication failure "

[Krishna Vivek Vitta]

Any update on the behaviour ?


Thank you
Krishna Vivek

From: Krishna Vivek Vitta
Sent: 23 April 2019 11:43
To: net-snmp-users@lists.sourceforge.net
Subject: Help required for "snmpwalk: Authentication failure "

Hi expert,

We have a case where snmpwalk fails after snmpv3 user is added to trap 
destination. Net-SNMP version being used is 5.5 on FreeBSD setup

We start with a configured user for SNMPv3. We used SHA1 and AES for the auth 
and privacy protocols:
add snmpuser name=test auth_password=testtest privacy_password=testtest 
auth_protocol=SHA1 privacy_protocol=AES view_name=SNMP-View 
security_level=authPriv
add snmpview name=SNMP-View subtree=1.3.6.1 type=Include

The above steps:
Adds a createUser directive in /var/mps/netsnmp/snmpd.conf and restarts snmpd
1.  SNMPD replaces the createUser directive with a usmUser directive in 
persistent conf

All this is normal. The configuration in the persistent snmpd.conf is correct. 
This is our test entry:

bash-3.2# fgrep 0x4e65747363616c657200 /var/mps/netsnmp/snmpd.conf
usmUser 1 3 0x80001f88809c0a3f394b485c56 0x4e65747363616c657200 
0x4e65747363616c657200 NULL .1.3.6.1.6.3.10.1.1.3 
0x06be7a79a8108ccde730455187973c0719b3e460 .1.3.6.1.6.3.10.1.2.4 
0x06be7a79a8108ccde730455187973c07 ""


bash-3.2# gdb /usr/sbin/snmpd -p `cat /var/run/snmpd.pid` --batch 
--command=/root/print_users.gdb | awk '/test/,/privKey:/'

name: 0x801c6fac0:   "test"

secName: 0x801c6fad0:"test"

authProtocol: .1.3.6.1.6.3.10.1.1.3 << This means SHA1

privProtocol: .1.3.6.1.6.3.10.1.2.4 << This means AES

authKey: 0x6be7a79a8108ccd 0xe730455187973c07 0x19b3e460

privKey: 0x6be7a79a8108ccd 0xe730455187973c07



And of course the queries work:



vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  10.91.16.71:161 1.3.6.1.2.1.1.1

SNMPv2-MIB::sysDescr.0 = STRING: FreeBSD nssdx-mgmt 8.4-NETSCALER-12.0 FreeBSD 
8.4-NETSCALER-12.0 #0: Wed Sep 12 06:47:55 PDT 2018 
root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM[https://issues.citrite.net/images/icons/mail_small.gif]<mailto:root@sjcpbld84-64:/usr/obj/home/build/rs_120_59_5_RTM/usr.src/sys/NSSVM>amd64



Then I add an snmptrap destination that uses this user:



add snmptrap dest_server=10.91.31.244 user_name=test dest_port=162 version=v3

 And the queries fail with authentication failure:

 vyos@vyos:~$ snmpwalk - -v3 -l authPriv -u Netscaler -a SHA -A 'testtest' -x 
AES -X 'testtest'  10.91.16.71:161 1.3.6.1.2.1.1.1

snmpwalk: Authentication failure (incorrect password, community or key)



This time although the configuration is the same, snmpd internally has set the 
wrong protocols:



bash-3.2# fgrep 0x4e65747363616c657200 /var/mps/netsnmp/snmpd.conf

usmUser 1 3 0x80001f88809c0a3f394b485c56 0x4e65747363616c657200 
0x4e65747363616c657200 NULL .1.3.6.1.6.3.10.1.1.3 
0x06be7a79a8108ccde730455187973c0719b3e460 
.1.3.6.1.6.3.10.1.2.40x06be7a79a8108ccde730455187973c07 0x

bash-3.2# gdb /usr/sbin/snmpd -p `cat /var/run/snmpd.pid` --batch 
--command=/root/print_users.gdb | awk '/Netscaler/,/privKey:/'

name: 0x801c6fac0:   "test"

secName: 0x801c6fad0:"test"

authProtocol: .1.3.6.1.6.3.10.1.1.2 << This means MD5

privProtocol: .1.3.6.1.6.3.10.1.2.2 << This means DES

authKey: 0x6be7a79a8108ccd 0xe730455187973c07 0x19b3e460

privKey: 0x6be7a79a8108ccd 0xe730455187973c07


Kindly provide assistance in resolving the case.

Thank you
Krishna Vivek

___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users