Re: snmptrapd - avoiding ambiguity in log files

Andre wrote:
 We use perl to parse the syslog file, I can't see anything unusable
 strings in my logs...
 All informations I want, I got it from my logfile!
 The perl regex are very powerful to do anything with the output...
 I don't know where is the problem;(

I see some clarification is required.

Here's a demo of the problem.  I enter these commands:
 snmptrapd
 snmptrap -v 1 -c private 10.0.0.1 TRAP-TEST-MIB::asante 10.0.0.1 6
  117 '' SNMPv2-MIB::sysLocation.0 s $'XXX' .1.2.3.4 i 1234
 snmptrap -v 1 -c private 10.0.0.1 TRAP-TEST-MIB::asante 10.0.0.1 6
  117 '' SNMPv2-MIB::sysLocation.0 s $'XXX, iso.2.3.4 = INTEGER: 1234'

and get the following in syslog:
 Sep  7 13:31:45 don-eve snmptrapd[19509]: 10.0.0.1: Enterprise
  Specific Trap (117) Uptime: 145, SNMPv2-MIB::sysLocation.0 = STRING:
  XXX, iso.2.3.4 = INTEGER: 1234
 Sep  7 13:32:43 don-eve snmptrapd[19509]: 10.0.0.1: Enterprise
  Specific Trap (117) Uptime: 145, SNMPv2-MIB::sysLocation.0 = STRING:
  XXX, iso.2.3.4 = INTEGER: 1234

The output is the same.  The input is different.  I should be able to
determine the input from the output. 
This problem would be solved if the string were printed with quoting,
e.g., the first output should say 
 ... STRING: "XXX"
and the second
 ... STRING: "XXX, iso.2.3.4 = INTEGER: 1234"
and if the string contains any "'s or \'s they could be quoted with a
preceding \.



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users