Net-SNMP 5.2 now available
Wes Hardaker <[email protected]> Wed, 01 Dec 2004 17:15:13 -0800
| Newsgroups | gmane.network.net-snmp.announce |
|---|---|
| Organization | Sparta |
| Message-ID | <[email protected]> |
Net-SNMP 5.2 has been made available on our download site
( http://www.Net-SNMP.org/download/ ). This release contains a quite
a few new features (keep reading for more details) as well as bug
fixes.
It has been a really long time since the Net-SNMP logo was updated.
I'm happy to say that there is a new logo on the main web page
containing the postcards I've received since last time. More web page
changes will be coming soon, and will be covered in a separate
announcement.
We hope you enjoy this new release,
The NET-SNMP Development Team
Contents of this announcement
-----------------------------
- What has Changed recently?
- Where can I get it?
- Are there binaries available?
- What operating systems does it run on?
- Which versions of the SNMP protocol are supported in this package?
- I've found a bug or have a suggestion, how do I tell you about it?
- What's the difference between UCD-SNMP and Net-SNMP?
What has Changed recently?
-------------------------------------------
Here's the portion of the NEWS file describing the changes in 5.2:
*5.2*
New:
For the security parnoid (like Wes):
- Insecure versions of SNMP may be completely disabled at compile time.
(configure using one or both of --disable-snmpv1 --disable-snmpv2c)
- Less secure versions of SNMPv3 authentication and encryption
algorithms may be completely disabled at compile time.
(configure using one or both of --disable-des --disable-md5)
(This requires you have OpenSSL to support SHA1 and AES instead)
- Diffie-Helman key negotianion (perfect-forward-secrecy - RFC2786)
has been implemented in both the agent and "snmpusm".
- better support for direct use of localized and master keys
(randomly generated keys have more entropy than passwords) See
the -3m -3M -3k and -3K options, and the defAuthLocalizedKey,
defPrivLocalizedKey, defAuthMasterKey, defPrivMasterKey
snmp.conf tokens)
library:
- send and receive buffer sizes for UDP/TCP are configurable
- .conf file token registration can now search multiple files
(separate file names to search by a :. IE, "snmpd:agentx")
snmptrapd:
- Embedded perl support for trap handlers (much faster than traphandles).
(configure --with-embedded-perl ; see 'perldoc NetSNMP::TrapReceiver')
- the snmptrapd usmUser table can be controlled through SNMP & AgentX
(the snmptrapd registers MIBs under the "snmptrapd" SNMPv3 context)
agent:
- community strings can be mapped to individual SNMPv3 contexts
(see the snmpd.conf manual on "com2sec").
- AgentX should work properly with SNMPv3 contexts now.
- improved version of "exec" extension directive - "extend":
supports multi-line output, configurable command input, SET
handling, a valid relocatable MIB output structure, etc
- more flexibility added to netsnmp_cache helper, including periodic
refreshing of caches and cache pre-loading.
- experimental implementation of DisMan Remote Operations MIB groups
(remote nslookup, ping, traceroute and expressions via SNMP)
- The proxy supports a new -Cc flag which passes the community
name through to the other side rather than hard-coding it.
- The config_require() and other modules can now be placed
inside of CPP directievs (#if, /* ... */) as header files are
now passed through CPP processing first.
- new config_exclude() macro for excluding certain modules
- new config_belongs_in() macro to specify if a chunk of code
found by --with-mib-modules belongs in the agent library or
the mib module library.
- Uses a smaller function stack.
commands:
- snmpusm: A number of key-change improvements
(EG, changing localized keys supported, diffie-helman support, ...)
- New -Ln option to completely disable logging.
mib2c:
- a number of new or updated configuration templates:
- mib2c.iterate.conf: the iterator-based table config
now produces fuller template code than before.
- mib2c.table_data.conf and mib2c.container.conf:
two new "internal-row" style configs
- mib2c.mfd.conf: "MIBs for Dummies" (or MFD) - intended to
reduce the SNMP knowledge needed to develop MIB modules
and add flexibility at the same time. Run "mib2c -S
mfd_interactive_setup=1 -c mib2c.mfd.conf OID" and follow
its guided instructions to help you tailor its results to
meet your needs.
- mib2c.genhtml.conf: Generates an easier-to-read HTML view of
a MIB tree structure. (See http://www.Net-SNMP.org/mibs/
for example output.)
- more node tags available for conf file writers
- additional search directories may be set via MIB2C_DIRS env var.
- mib2c-update: new utility to help update mib2c generated code
when conf file changes.
- a mib2c.conf manual page to describe how to write mib2c .conf files.
- support for embedded perl code in mib2c.conf files
documentation:
- New README.agent-mibs: an attempt to start documenting what
MIBs are implemented in the agent and on what architectures.
perl:
- An improved SNMP::gettable() method. Uses GETBULK if possible and
better GETNEXT requests if not, decodes indexes from OIDs,
requests multiple variables at once, ... ("perldoc SNMP" for details)
- A NetSNMP::OID::get_indexes() function to extract index values
from an OID.
Ports:
Linux:
- new experimental tables/rewrites for Linux, including:
ifTable, ifXTable, inetCidrRouteTable, ipCidrRouteTable,
ipAddressTable, ipSystemStatsTable, ipNetToPhysicalTable.
- Enable these talbles by specifying --enable-mfd-rewrites to configure.
- Most of these tables have IPv6 support as well.
- ifIndex no longer changes when interfaces are added/removed, and all
tables/object wiil now use the same ifIndex for the same interface.
Solaris:
- new experimental support for ucd-snmp/lmSensors MIB module
Win32:
- Support for the MinGW compiler
- Support for snmptrapd running as a service
- A Win32 specific build and install script
- Support for a .exe installer
(we'll make binaries available using it)
Fixes:
- AgentX memory leak on sets
- SNMPv3 not-in-time window after 248 days
- Agent hang in HOST-RESOURCES MIB
- double free on duplicate registration
- OIDs with IP Addresses as indexes now print prettier
-'Lazy' installation of headers (only install if newer)
- allow whitespace in rocommunity/rwcommunity
- many miscellaneous bug reports
Where can I get it?
------------------
Download:
- http://www.net-snmp.org/download/
- ftp://ftp.net-snmp.org/pub/sourceforge/net-snmp/
Web page:
- http://www.net-snmp.org/
Sourceforge Project page:
- http://www.net-snmp.org/project/
Mirrors (note that sourceforge download servers are mirrored themselves):
- US: ftp://ftp.freesnmp.com/mirrors/net-snmp/
- Bulgaria: http://rtfm.uni-svishtov.bg/net-snmp/ (appears to be out of date)
- Germany: ftp://ftp.mpg.goe.ni.schule.de/pub/internet/net-snmp/ (unknown host)
- Greece: ftp://ftp.ntua.gr/pub/net/snmp/net-snmp/
Are there binaries available?
----------------------------
- Binaries do appear on our download site, but often are published a
bit later than the normal source code. Most of the binaries that
are available have been linked with the OpenSSL package so you'll
need a copy of it installed in order to use them. If you don't
have OpenSSL installed and don't want it installed, please get the
net-snmp source release instead and built it yourself (but you'll
loose support for SNMPv3 with SHA1 authentication and both DES and
AES encryption).
What operating systems does it run on?
-------------------------------------
Both the applications and the agent have been reported as running
(at least in part) on the following operating systems:
* HP-UX (10.20 to 9.01 and 11.0 -- see README.hpux11)
* Ultrix (4.5 to 4.2)
* Solaris SPARC/ULTRA (2.8 to 2.3), Intel (2.9) and SunOS (4.1.4 to 4.1.2)
* OSF (4.0, 3.2)
* NetBSD (1.5alpha to 1.0)
* FreeBSD (4.1 to 2.2)
* BSDi (4.0.1 to 2.1)
* Linux (kernels 2.4 to 1.3)
* AIX (4.1.5, 3.2.5)
* OpenBSD (2.8, 2.6)
* Irix (6.5 to 5.1)
* OS X (10.1.1 and 10.1.2)
* Dynix/PTX 4.4
* QNX 6.2.1A
See our FAQ at http://www.Net-SNMP.org/FAQ.html for more details on
portability of the Net-SNMP package.
Which versions of the SNMP protocol are supported in this package?
-----------------------------------------------------------------
SNMPv1, SNMPv2c, and SNMPv3 (including user-based and kerberos-based support)
I've found a bug or have a suggestion, how do I tell you about it?
-----------------------------------------------------------------
Please submit the bug to our bug-tracking system at:
http://www.net-snmp.org/bugs/
Please submit patches (for features or bugs) to our patch-tracking
system. (You don't need to submit a big report as well, just a patch)
http://www.net-snmp.org/patches/
What's the difference between UCD-SNMP and Net-SNMP?
---------------------------------------------------
Not a great deal, really.
Although the project originally started at UC Davis (hence the name),
and it has always been based there, most of the contributors have had
little or no connection with this institution.
The move to SourceForge was intended to provide a more flexible
environment for the project, and to distribute the administrative
workload more evenly. The change of name simply reflects this move,
which was the last remaining link with UC Davis.
The 4.2.x line is the last release line that uses the ucd-snmp name,
and all releases under this banner will be bug-fixes only. Release
5.0 is the first version using the net-snmp name, and all new features
and significant development will be released under this name.
(Though the dividing line between a bug-fix and a new feature is
something of a vague one, so some changes in the 4.2.x line may be
relatively non-trivial!)
--
Wes Hardaker
Sparta
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/