snmp walk+dumph_send error + how to configure snmpapp.conf files

Discussion:

usha

2003-08-19 02:40:02 UTC

Hi all,

Im using net-snmp-5.0.8.
While walking localhost with;snmpwalk -v 1 -c public 127.0.0.1 I get : " Timeout: No Response from 127.0.0.1".

After configuring snmpd.conf as given below, I overcame the above problem.

But still it asks for more .conf files as:
/opt/iexpress/net-snmp/lib/snmp/snmpwalk.local.conf
/var/net-snmp/snmpwalk.conf
/var/net-snmp/snmpwalk.local.conf
/opt/iexpress/net-snmp/etc/snmp/snmp.conf
/opt/iexpress/net-snmp/etc/snmp/snmp.local.conf
/opt/iexpress/net-snmp/share/snmp/snmp.conf
/opt/iexpress/net-snmp/share/snmp/snmp.local.conf
/opt/iexpress/net-snmp/lib/snmp/snmp.conf
/opt/iexpress/net-snmp/lib/snmp/snmp.local.conf
/opt/iexpress/net-snmp/etc/snmp/snmpapp.conf
/opt/iexpress/net-snmp/etc/snmp/snmpapp.local.conf
/opt/iexpress/net-snmp/share/snmp/snmpapp.conf
/opt/iexpress/net-snmp/share/snmp/snmpapp.local.conf
/opt/iexpress/net-snmp/lib/snmp/snmpapp.conf
/opt/iexpress/net-snmp/lib/snmp/snmpapp.local.conf
/var/net-snmp/snmpapp.conf
/var/net-snmp/snmpapp.local.conf

But I could not find much stuffs how to create snmpwalk.conf and snmpapp.conf.
And also it displays the following error:

dumph_send: error index
dumpx_send: 02 01 00
dumpv_send: Integer: 0 (0x00)
trace: snmp_pdu_realloc_rbuild(): snmp_api.c, 3194
dumph_send: error status

How to overcome this. Can you help inthis reg.

TIA

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.495 / Virus Database: 294 - Release Date: 6/30/2003

Dave Shield

2003-08-19 06:07:04 UTC

Permalink

Post by usha
/opt/iexpress/net-snmp/lib/snmp/snmpwalk.local.conf
/var/net-snmp/snmpwalk.conf
/var/net-snmp/snmpwalk.local.conf

etc, etc

No - it's not *asking* for these config files.
It's checking to see if these files exist.
It's quite normal for them not to.

Post by usha
But I could not find much stuffs how to create snmpwalk.conf and
snmpapp.conf.

It's rare to need application-specific config files - for the client
applications at least. The agent and trap handler are sufficiently
unique as to frequently (invariably) require specific configuration.

But most of the client tools (snmpget, snmpwalk, etc) tend to just use
the common 'snmp.conf' settings. And if you don't happen to have an
snmp.conf file either, this doesn't matter.

Post by usha
dumph_send: error index
dumpx_send: 02 01 00
dumpv_send: Integer: 0 (0x00)
trace: snmp_pdu_realloc_rbuild(): snmp_api.c, 3194
dumph_send: error status

That's not an error.
It's just dumping the outgoing PDU.

My guess is that you've somehow turned on debug output - either via
the '-D' command line flag, or the "debugTokens" config directive.

Dave

PS: Please - no HTML mail. Thanks

Balaji H. Kasal

2003-08-19 13:49:04 UTC

Permalink

There is no need to create own conf files. There must be be some
installation problem. Which version linux ?
Above all there are bugs in net-snmp-5.0.8 during conf. Better to go for
lower stable version of SNMP.

Best luck!
--
Regards,
--Balaji

Post by usha
Hi all,
Im using net-snmp-5.0.8.
While walking localhost with;snmpwalk -v 1 -c public 127.0.0.1 I get : " Timeout: No Response from 127.0.0.1".
After configuring snmpd.conf as given below, I overcame the above problem.
/opt/iexpress/net-snmp/lib/snmp/snmpwalk.local.conf
/var/net-snmp/snmpwalk.conf
/var/net-snmp/snmpwalk.local.conf
/opt/iexpress/net-snmp/etc/snmp/snmp.conf
/opt/iexpress/net-snmp/etc/snmp/snmp.local.conf
/opt/iexpress/net-snmp/share/snmp/snmp.conf
/opt/iexpress/net-snmp/share/snmp/snmp.local.conf
/opt/iexpress/net-snmp/lib/snmp/snmp.conf
/opt/iexpress/net-snmp/lib/snmp/snmp.local.conf
/opt/iexpress/net-snmp/etc/snmp/snmpapp.conf
/opt/iexpress/net-snmp/etc/snmp/snmpapp.local.conf
/opt/iexpress/net-snmp/share/snmp/snmpapp.conf
/opt/iexpress/net-snmp/share/snmp/snmpapp.local.conf
/opt/iexpress/net-snmp/lib/snmp/snmpapp.conf
/opt/iexpress/net-snmp/lib/snmp/snmpapp.local.conf
/var/net-snmp/snmpapp.conf
/var/net-snmp/snmpapp.local.conf
But I could not find much stuffs how to create snmpwalk.conf and snmpapp.conf.
dumph_send: error index
dumpx_send: 02 01 00
dumpv_send: Integer: 0 (0x00)
trace: snmp_pdu_realloc_rbuild(): snmp_api.c, 3194
dumph_send: error status
How to overcome this. Can you help inthis reg.
TIA
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.495 / Virus Database: 294 - Release Date: 6/30/2003

Dave Shield

2003-08-22 06:04:20 UTC

Permalink

trace: netsnmp_ds_set_boolean(): default_store.c, 69
netsnmp_ds_set_boolean: Setting APP:3 =3D 0/False
trace: netsnmp_ds_set_int(): default_store.c, 121
netsnmp_ds_set_int: Setting APP:4 =3D -1
trace: netsnmp_ds_set_int(): default_store.c, 121
netsnmp_ds_set_int: Setting APP:5 =3D -1
what does this mean, Is it running quite alright

Apart from the fact that it means you've got some form of debugging
turned on, I don't think this is any cause for concern.

There's not really enough detail to be certain, but I suspect
this is just setting some internal defaults - quite possibly
relating to the choice of SNMP version to use.

But i can walk through
the agent using the tool snmpwalk.

Then that's probably a good sign.

Turn off the debugging, and you should be fine.

Dave

PS: Please, no HTML mail. Thanks

Dave Shield

2003-12-08 07:18:00 UTC

Permalink

While trying to query the agent wih -snmpwalk, i get " response timeout".
But with the same binary ie. snpwalk when i tried to query the system
default daemon -snmpdm( comming with HP-UX OS) , I could succeed.

usha

2003-12-08 08:25:03 UTC

Permalink

Thanks Dave for the correct info which paved me the correct path, as u
suggested running the agent as non-daemon, i got the warning for acces
control config problem.(attached is the snmpd.conf.)

# /opt/iexpress/net-snmp/sbin/snmpd -f -L
Warning: no access control information configured.
It's unlikely this agent can serve any useful purpose in this state.
Run "snmpconf -g basic_setup" to help you configure the snmpd.conf file
for this agent.
NET-SNMP version 5.0.9

Being a newbie in configurations i surfed this nice mailing list and got
this config, with which i started the daemon, without any warnings:
# /opt/iexpress/net-snmp/sbin/snmpd -c etc/snmpd.conf -C -f -L
NET-SNMP version 5.0.9

But the query results that OID not found:
# /opt/iexpress/net-snmp/bin/snmpget -v2c -c public localhost system
/var/net-snmp/snmpapp.conf: line 1: Warning: Unknown token: defContext.
/var/net-snmp/snmpapp.conf: line 2: Warning: Unknown token: defSecurityName.
/var/net-snmp/snmpapp.conf: line 3: Warning: Unknown token:
defAuthPassphrase.
/var/net-snmp/snmpapp.conf: line 4: Warning: Unknown token: defVersion.
/var/net-snmp/snmpapp.conf: line 5: Warning: Unknown token: defAuthType.
/var/net-snmp/snmpapp.conf: line 6: Warning: Unknown token:
defSecurityLevel.
/var/net-snmp/snmpapp.local.conf: line 1: Warning: Unknown token:
defContext.
/var/net-snmp/snmpapp.local.conf: line 2: Warning: Unknown token:
defSecurityName.
/var/net-snmp/snmpapp.local.conf: line 3: Warning: Unknown token:
defAuthPassphrase.
/var/net-snmp/snmpapp.local.conf: line 4: Warning: Unknown token:
defVersion.
/var/net-snmp/snmpapp.local.conf: line 5: Warning: Unknown token:
defAuthType.
/var/net-snmp/snmpapp.local.conf: line 6: Warning: Unknown token:
defSecurityLevel.
SNMPv2-MIB::system = No Such Object available on this agent at this OID

And now my snmpd.conf looks as:
com2sec paranoid default public
group MyROSystem v2c paranoid
view all included .1 80
access MyROSystem "" any noauth prefix ifaces none none

Expecting ur guidance ASAP.
Thanks Once again
Usha

" response timeout".

Post by Dave Shield

But with the same binary ie. snpwalk when i tried to query the system
default daemon -snmpdm( comming with HP-UX OS) , I could succeed.

Sounds as if the agent isn't starting up properly.
Have you checked that it's actually running?
Does it log any warning messages?
What do you see if you try running the agent as a "non-daemon" ?
i.e.
snmpd -f -L
Dave
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

Dave Shield

2003-12-08 09:01:03 UTC

Permalink

Post by usha
running the agent as non-daemon, i got the warning for acces
control config problem.(attached is the snmpd.conf.)
# /opt/iexpress/net-snmp/sbin/snmpd -f -L
Warning: no access control information configured.
It's unlikely this agent can serve any useful purpose in this state.
Run "snmpconf -g basic_setup" to help you configure the snmpd.conf file
for this agent.
NET-SNMP version 5.0.9

That's what I expected.

Post by usha
Being a newbie in configurations i surfed this nice mailing list and got

Have a look at the FAQ.
In particular

How do I configure access control?
---------------------------------

The simplest way is to use the configure directives:

rocommunity public (for SNMPv1/2c)
rwcommunity private
or
rouser user1 (for SNMPv3)
rwuser user2

These specify the community names or security names to accept for
read-only and read-write access to the whole of the supported MIB tree.
(Obviously you should change these names to match your requirements -
which is a particularly good idea in the case of 'rwcommunity'!)

<etc, etc>

Dave

usha

2003-12-09 04:16:01 UTC

Permalink

Thnaks Dave I could now query with v2c and v1, but with v3 I get :

# /opt/iexpress/net-snmp/bin/snmpwalk -v3 -c public localhost system
snmpwalk: No securityName specified

And my snmpd.conf looks as:
rouser root
rwuser root

TIA
----- Original Message -----
From: "Dave Shield" <***@csc.liv.ac.uk>
To: "usha" <***@lycos.co.uk>
Cc: <net-snmp-***@lists.sourceforge.net>
Sent: Monday, December 08, 2003 4:30 PM
Subject: Re: my query with snmpwalk gets struck with response timeout - Plz
help

Post by Dave Shield

That's what I expected.

Post by usha
Being a newbie in configurations i surfed this nice mailing list and got

Have a look at the FAQ.
In particular
How do I configure access control?
---------------------------------
rocommunity public (for SNMPv1/2c)
rwcommunity private
or
rouser user1 (for SNMPv3)
rwuser user2
These specify the community names or security names to accept for
read-only and read-write access to the whole of the supported MIB tree.
(Obviously you should change these names to match your requirements -
which is a particularly good idea in the case of 'rwcommunity'!)
<etc, etc>
Dave
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

usha

2003-12-09 04:17:02 UTC

Permalink

Post by Dave Shield

That's what I expected.

Post by usha
Being a newbie in configurations i surfed this nice mailing list and got

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

usha

2003-12-09 04:24:02 UTC

Permalink

Post by Dave Shield

That's what I expected.

Post by usha
Being a newbie in configurations i surfed this nice mailing list and got

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

Dave Shield

2003-12-09 07:33:02 UTC

Permalink

[First, please *just* send queries to the list,
and not Cc:ed to me. It's OK if you're following
up directly to query something I've said, but
a new query like this should go to the list only.
I get enough mail as it is! Thanks ]

Post by usha
# /opt/iexpress/net-snmp/bin/snmpwalk -v3 -c public localhost system
snmpwalk: No securityName specified

That's quite correct.
You haven't specified a username or security name.
You've specified a community string, but that's totally
irrelevant to SNMPv3.

Have you read the README.snmpv3 file ?

Post by usha
rouser root
rwuser root

usha

2003-12-09 10:23:01 UTC

Permalink

Dave, clicking to "reply" the mail, has led to mail only for u : (

and did'nt appear in the dear list instead : (

Have i now took care to click "reply all" instead, Yer, Im safe : )

I get succeded the query as per README.snmpv3: And test output
attached.(tested in hp-ux PA platform and linux)

So my MD5 auth succeded and now i want to test with DES encryption.
But plz suggest me why the related tests skips:

13:testing SNMPv3 get using initial/MD5DES of .1.3.6.1.2.1.1.3.0...SKIPPED
15:testing SNMPv3 get using templateSHA/MD5DES of
1.3.6.1.2.1.1.3.0...SKIPPED
22:testing snmpv1 traps are sent by snmpd API...SKIPPED
23:testing snmpv2c traps are sent by snmpd API...SKIPPED
24:testing snmpv1 traps are sent by snmpd without notification mib
support...SKIPPED
25:testing snmpv2c traps are sent by snmpd without notification mib
support...SKIPPED
28:testing AgentX GET support...SKIPPED
29:testing AgentX SET support...SKIPPED
30:testing AgentX illegal SET handling support...SKIPPED
31:testing AgentX trap sending support...SKIPPED
32:testing Proxy GET support...SKIPPED
33:testing Proxy SET support...SKIPPED
34:testing Proxy illegal SET handling support...SKIPPED

----- Original Message -----
From: "Dave Shield" <***@csc.liv.ac.uk>
To: "usha" <***@lycos.co.uk>
Cc: <net-snmp-***@lists.sourceforge.net>
Sent: Tuesday, December 09, 2003 3:01 PM
Subject: Re: my query with snmpwalk gets struck with response timeout - Plz
help

Post by Dave Shield
[First, please *just* send queries to the list,
and not Cc:ed to me. It's OK if you're following
up directly to query something I've said, but
a new query like this should go to the list only.
I get enough mail as it is! Thanks ]

Post by usha
# /opt/iexpress/net-snmp/bin/snmpwalk -v3 -c public localhost system
snmpwalk: No securityName specified

That's quite correct.
You haven't specified a username or security name.
You've specified a community string, but that's totally
irrelevant to SNMPv3.
Have you read the README.snmpv3 file ?

Post by usha
rouser root
rwuser root

Have you read the FAQ entry I pointed you at?
In particular, the bit immediately after the paragraph I quoted.
Also, please note that SNMPv3 users are *NOT* the same as Unix users.
You need to set these up explicitly. See the README.snmpv3
I'd also strongly suggest that you don't use the same usernames
and passwords as for your Unix accounts. And VERY VERY STRONGLY
suggest that you DEFINITELY don't use the root password!
Dave
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

Dave Shield

2003-12-09 14:22:03 UTC

Permalink

Post by usha
So my MD5 auth succeded and now i want to test with DES encryption.
13:testing SNMPv3 get using initial/MD5DES of .1.3.6.1.2.1.1.3.0...SKIPPED
15:testing SNMPv3 get using templateSHA/MD5DES of
1.3.6.1.2.1.1.3.0...SKIPPED
22:testing snmpv1 traps are sent by snmpd API...SKIPPED
23:testing snmpv2c traps are sent by snmpd API...SKIPPED
24:testing snmpv1 traps are sent by snmpd without notification mib
support...SKIPPED
25:testing snmpv2c traps are sent by snmpd without notification mib
support...SKIPPED
28:testing AgentX GET support...SKIPPED
29:testing AgentX SET support...SKIPPED
30:testing AgentX illegal SET handling support...SKIPPED
31:testing AgentX trap sending support...SKIPPED
32:testing Proxy GET support...SKIPPED
33:testing Proxy SET support...SKIPPED
34:testing Proxy illegal SET handling support...SKIPPED

Nope - sorry, no idea.
(Which is why I didn't answer the first time you asked this question!
Asking the same thing repeatedly in quick succession is *not* calculated
to encourage me to offer assistance)

I presume that you've got the OpenSSL suite installed?
(Since you've now read the README.snmpv3, you'll have seen that
this is required for encryption)

But that doesn't explain the trap and AgentX stuff.

Dave

Dave Shield

2003-12-11 08:33:02 UTC

Permalink

/sbin/snmpd udp6:161 -c etc/snmpd.conf -C -f -L

usha

2003-12-13 04:45:01 UTC

Permalink

Dave, I can't start my snmpd and it throws the error "Error opening
specified endpoint "udp6:161:

# ./sbin/snmpd -c ./etc/snmpd.conf -C -f -L udp6:161
./etc/snmpd.conf: line 199: Warning: Unknown token: rocommunity6.
Warning: no access control information configured.
It's unlikely this agent can serve any useful purpose in this state.
Run "snmpconf -g basic_setup" to help you configure the snmpd.conf file
for this agent.
Error opening specified endpoint "udp6:161"
Server Exiting with code 1

But in linux i tried same build steps (except dubug option enabled) and test
steps, snmpd fails to start logging as:

[***@lvs net-snmp]# ./sbin/snmpd -c ./etc/snmpd.conf udp6:161
trace: netsnmp_ds_set_boolean(): default_store.c, 68
netsnmp_ds_set_boolean: Setting APP:3 = 0/False
trace: netsnmp_ds_set_int(): default_store.c, 120
netsnmp_ds_set_int: Setting APP:4 = -1
trace: netsnmp_ds_set_int(): default_store.c, 120
netsnmp_ds_set_int: Setting APP:5 = -1
trace: netsnmp_ds_set_string(): default_store.c, 146
netsnmp_ds_set_string: Setting LIB:5 = "./etc/snmpd.conf"
trace: main(): snmpd.c, 731
snmpd/main: optind 3, argc 4
trace: netsnmp_ds_set_string(): default_store.c, 146
netsnmp_ds_set_string: Setting APP:2 = "udp6:161"
trace: main(): snmpd.c, 750
snmpd/main: port spec: udp6:161

----- Original Message -----
From: "Dave Shield" <***@csc.liv.ac.uk>
To: "usha" <***@lycos.co.uk>
Cc: <net-snmp-***@lists.sourceforge.net>
Sent: Thursday, December 11, 2003 4:02 PM
Subject: Re: cant start agent for tracking ipv6 packet

Post by Dave Shield

/sbin/snmpd udp6:161 -c etc/snmpd.conf -C -f -L

No - I'm pretty sure that the address to listen to must come
*after* the command-line options.
Try
/sbin/snmpd -c etc/snmpd.conf -C -f -L udp6:161
And *please* don't send that amount of debugging output unless
you're specifically asked to. It's relatively unlikely to be
relevant or helpful, and is just a waste of time and bandwidth.
Dave
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003

usha

2003-12-13 07:29:03 UTC

Permalink

hi list,

Ive caught the source for the problem, is that my snmpd is not compiled
with libipv6 library. Now my rebuild doing so, works fine.

reagrds

----- Original Message -----
From: "usha" <***@lycos.co.uk>
To: "Dave Shield" <***@csc.liv.ac.uk>
Cc: <net-snmp-***@lists.sourceforge.net>
Sent: Saturday, December 13, 2003 12:13 PM
Subject: Re: cant start agent for tracking ipv6 packet

Post by usha
Dave, I can't start my snmpd and it throws the error "Error opening
# ./sbin/snmpd -c ./etc/snmpd.conf -C -f -L udp6:161
/etc/snmpd.conf: line 199: Warning: Unknown token: rocommunity6.
Warning: no access control information configured.
It's unlikely this agent can serve any useful purpose in this state.
Run "snmpconf -g basic_setup" to help you configure the snmpd.conf file
for this agent.
Error opening specified endpoint "udp6:161"
Server Exiting with code 1
But in linux i tried same build steps (except dubug option enabled) and test
trace: netsnmp_ds_set_boolean(): default_store.c, 68
netsnmp_ds_set_boolean: Setting APP:3 = 0/False
trace: netsnmp_ds_set_int(): default_store.c, 120
netsnmp_ds_set_int: Setting APP:4 = -1
trace: netsnmp_ds_set_int(): default_store.c, 120
netsnmp_ds_set_int: Setting APP:5 = -1
trace: netsnmp_ds_set_string(): default_store.c, 146
netsnmp_ds_set_string: Setting LIB:5 = "./etc/snmpd.conf"
trace: main(): snmpd.c, 731
snmpd/main: optind 3, argc 4
trace: netsnmp_ds_set_string(): default_store.c, 146
netsnmp_ds_set_string: Setting APP:2 = "udp6:161"
trace: main(): snmpd.c, 750
snmpd/main: port spec: udp6:161
----- Original Message -----
Sent: Thursday, December 11, 2003 4:02 PM
Subject: Re: cant start agent for tracking ipv6 packet

Post by Dave Shield

/sbin/snmpd udp6:161 -c etc/snmpd.conf -C -f -L

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.535 / Virus Database: 330 - Release Date: 11/1/2003