RE: Unknown engine ID

Hello SNMP Experts.

 

The snmp packages on this particular system may be very old, but they
are the newest I can find on Red Hat Network for RHEL4.  We will be
upgrading to RHEL5 soon.

 

In the meantime, as long as the snmp packages we have are supposed to
handle snmpv3 properly, here is the info.

 

snmpd.log:

NET-SNMP version 5.1.2

Received SNMP packet(s) from 127.0.0.1

Received SNMP packet(s) from 10.11.14.61

 

Messages.log:

Nov 17 08:57:46 saomb57 snmpd: snmpd startup succeeded

Nov 17 08:57:46 saomb57 snmpd[23080]: NET-SNMP version 5.1.2

Nov 17 08:57:51 saomb57 snmptrapd[23101]: 2008-11-17 08:57:51 NET-SNMP
version 5.1.2 Started.

Nov 17 08:57:51 saomb57 snmptrapd: snmptrapd startup succeeded

Nov 17 08:57:55 saomb57 snmpd[23080]: Received SNMP packet(s) from
127.0.0.1

Nov 17 08:57:55 saomb57 snmpd[23080]: Received SNMP packet(s) from
10.11.14.61

 

Successful SNMP commands:

[saomb61]/home/ce6451 > snmpget saomb57 sysUpTime.0

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (934) 0:00:09.34

 

 

[saomb61]/home/ce6451 > snmpwalk saomb57 system

SNMPv2-MIB::sysDescr.0 = STRING: Linux saomb57 2.6.9-34.ELsmp #1 SMP Fri
Feb 24 16:54:53 EST 2006 i686

SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (1101) 0:00:11.01

SNMPv2-MIB::sysContact.0 = STRING: ce6451 <ce6451@localhost>

SNMPv2-MIB::sysName.0 = STRING: saomb57

SNMPv2-MIB::sysLocation.0 = STRING: NEOB 4th Floor computer room - Rack
# U26

SNMPv2-MIB::sysORLastChange.0 = Timeticks: (1) 0:00:00.01

SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB

SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB

SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB

SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip

SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB

SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup

SNMPv2-MIB::sysORID.7 = OID:
SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance

SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance

SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance

SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module to describe generic
objects for network interface sub-layers

SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities

SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP
implementations

SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing IP and
ICMP implementations

SNMPv2-MIB::sysORDescr.5 = STRING: The MIB module for managing UDP
implementations

SNMPv2-MIB::sysORDescr.6 = STRING: View-based Access Control Model for
SNMP.

SNMPv2-MIB::sysORDescr.7 = STRING: The SNMP Management Architecture MIB.

SNMPv2-MIB::sysORDescr.8 = STRING: The MIB for Message Processing and
Dispatching.

SNMPv2-MIB::sysORDescr.9 = STRING: The management information
definitions for the SNMP User-based Security Model.

SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00

SNMPv2-MIB::sysORUpTime.7 = Timeticks: (1) 0:00:00.01

SNMPv2-MIB::sysORUpTime.8 = Timeticks: (1) 0:00:00.01

SNMPv2-MIB::sysORUpTime.9 = Timeticks: (1) 0:00:00.01

[saomb61]/home/ce6451 >

 

 

Failing snmp commands (occurs 1-4 min after snmpd start):

[saomb61]/home/ce6451 > snmpget saomb57 sysUpTime.0

snmpget: Unknown engine ID (Sub-id not found: (top) -> sysUpTime)

[saomb61]/home/ce6451 > 

[saomb61]/home/ce6451 > snmpwalk saomb57 system

snmpwalk: Unknown engine ID (Sub-id not found: (top) -> system)

[saomb61]/home/ce6451 >

 

 

snmpd.conf file (community and user names changed for security)

####

# First, map the community name (COMMUNITY) into a security name

# (local and mynetwork, depending on where the request is coming

# from):

 

#       sec.name        source #         community

com2sec notConfigUser   default          secret

com2sec notConfigUser   localhost        secret

com2sec notConfigUser   10.11.14.0/24    secret

 

# Second, map the security name into a group name:

#       groupName       securityModel   securityName

group   notConfigGroup  v1              notConfigUser

group   notConfigGroup  v2c             notConfigUser

 

# Third, create a view for us to let the group have rights to:

# Open up the whole tree for ro, make the RFC 1213 required ones rw.

#       name            incl/excl       subtree mask(optional)

view    all          included        .1

view    all          included        system.sysContact

view    all          included        system.sysName

view    all          included        system.sysLocation

view    all          included
interfaces.ifTable.ifEntry.ifAdminStatus

view    all          included        at.atTable.atEntry.atPhysAddress

view    all          included        at.atTable.atEntry.atNetAddress

view    all          included        ip.ipForwarding

view    all          included        ip.ipDefaultTTL

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteDest

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteIfIndex

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMetric1

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMetric2

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMetric3

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMetric4

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteType

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteAge

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMask

view    all          included
ip.ipRouteTable.ipRouteEntry.ipRouteMetric5

view    all          included
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex

view    all          included
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaPhysAddress

view    all          included
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaNetAddress

view    all          included
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaType

view    all          included
tcp.tcpConnTable.tcpConnEntry.tcpConnState

view    all          included
egp.egpNeighTable.egpNeighEntry.egpNeighEventTrigger

view    all          included        snmp.snmpEnableAuthenTraps

 

# Finally, grant the group read-only access to the systemview view.

#       group          context sec.model sec.level prefix   read   write
notif

# access  notConfigGroup ""      any       noauth    exact  roview
rwview none

  access  notConfigGroup ""      any       noauth    exact  all    all
all

 

 

syscontact ce6451 <ce6451@localhost> 

syslocation NEOB 4th Floor computer room - Rack # U26

 

proc sendmail 10 1

proc httpd 10 2

proc pmd9 1 1

proc Xvfb 1 1

proc mountd

 

disk / 1000000

disk /tmp 5000000

disk /usr 5000000

disk /var 500000

disk /var/spool 5000000

disk /home 10000000

 

disk /mnt 10000000

 

load 12 14 14

pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat

 

 

# proxy -m /usr/share/snmp/mibs/JVM-MANAGEMENT-MIB.txt -v 2c -c public
10.11.14.61:1161 .1.3.6.1.4.1.42.2.145

exec .1.3.6.1.4.1.2021.51 ps /bin/ps 

exec .1.3.6.1.4.1.2021.52 top /usr/bin/top

exec .1.3.6.1.4.1.2021.53 mailq /usr/bin/mailq

 

rwuser user1

rouser user2

rouser user3

 

 

Thank you!

 

Eric Cardoza

 

 

 

 

________________________________________

From: Mike Ayers [[email protected]]

Sent: Sunday, November 16, 2008 3:32 PM

To: Cardoza, Eric; [email protected]

Subject: RE: Unknown engine ID

 

> From: Cardoza, Eric [mailto:[email protected]]

> Sent: Saturday, November 15, 2008 9:38 PM

 

> From: Cardoza, Eric D.

> Sent: Friday, November 14, 2008 3:03 PM

 

        Resending a message that has not been answered is OK, but it's
best to wait until after the weekend, as a good portion of everyday
participants have the weekend off.

 

> I apologize for my ignorance of community support list usage.

>  I am an old IBMer and not familiar with the proper open

> source community behavior.

 

        It's all good.  The general principole is to keep list related
discussions as list discussions.  This keeps the information available
in the archives for folk to find later, and also keeps an enviroment
where everyone is welcome to jump into the discussion, which is
generally a good thing.  You should only call p;eople out by name when
asking a question to them directly, as I will do now to you.

 

> Also, I notice as I read the postings on the list that my

> posting is the only one that does not have a Topic heading.

> Please let me know how I can establish a Topic for my posting.

 

        I'm not sure.  Are you talking about a web interface to the
archives here?

 

> Thank you for your help and patience.  Here is the

> information you requested.

> 

> OS:

> Linux 2.6.9-34.ELsmp #1 SMP Fri Feb 24 16:54:53 EST 2006 i686

> i686 i386

> GNU/Linux

> 

> NET-SNMP build from Red Hat Network:

> net-snmp-devel-5.1.2-13.el4_7.2

> net-snmp-libs-5.1.2-13.el4_7.2

> net-snmp-utils-5.1.2-13.el4_7.2

> net-snmp-5.1.2-13.el4_7.2

> 

> I did not explicitly set the engineID.  I had read in the

> Net-SNMP docs

 

        Hmmm - the kernel isn't the most recent, but should be good.
The package is darn old, though - we're on 5.4.2 now, and the revs don't
come quickly - I'd estimate you have a 4 or 5 year old package.  But
even that shouldn't have this problem.

 

        You may want to do a `yum upgrade -y` on that system, if you are
comfortable doing so.

 

        If someone on the list could point us to thye most recent RPMs,
please?

 

        Once you have upgraded or not, as befits, please post the
following:

 

        1)  The snmpd log (tip:  use the -Le flag and cut and paste from
the console, or use `-Le 2>&1 | tee snmpd.log` to save it to a file
while keeping it on the console.

 

        2)  The command and response for a successful get or getnext.

 

        3)  The command and response for a failing get or getnext.

 

        4)  The text of snmpd.conf

 

        I need a lot of info because I have no idea why this may happen.

 

 

        Thanks,

 

Mike

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users