Re: snmpd crash after "response to proxy request illegal. We're screwed"

Tomasz Chmielewski <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
On 29.03.2011 18:22, Dave Shield wrote:
> On 29 March 2011 11:47, Tomasz Chmielewski<[email protected]>  wrote:
>> snmpd (5.6.1) crashes for me quite frequently after logging "response to proxy request illegal.  We're screwed".
>>
>> Is there anything I can do to debug it further?
>
> What proxy entries do you have in the snmpd.conf file?

proxy -v 2c -c public localhost:1611 .1.3.6.1.4.1.34039.10


> What queries are you sending to the agent?

Well, not so sure here.

I checked with tcpdump or strace, and snmpd sends this:

0\201\220\2\1\1\4\6public\240\201\202\2\4\0327\373\313\2\1\0\2\1\0000t0\16\6\n+\6\1\4\1\202\211w\n\t\5\0000\16\6\n+\6\1\4\1\202\211w\n\6\5\0000\16\6\n+\6\1\4\1\202\211w\n\2\5\0000\20\6\f+\6\1\4\1\202\211w\n\r\1\3\5\0000\20\6\f+\6\1\4\1\202\211w\n\r\1\2\5\0000\16\6\n+\6\1\4\1\202\211w\n\6\5\0000\16\6\n+\6\1\4\1\202\211w\n\1\5\0

and gets exactly that:

0+\2\1\1\4\6public\242\36\2\4\0327\373\313\2\1\0\2\1\0000\0200\16\6\n+\6\1\4\1\202\211w\n\t\201\0


After which it crashes.

Probably gets something inappropriate... but still, it shouldn't just 
crash IMO.


>> There was a similar case back in 2005, with no fix though:
>>
>> http://groups.google.com/group/mailing.unix.net-snmp-users/browse_thread/thread/2454a5a796fb5814/1e7ebe0455051c7a
>
>  From a quick scan of that thread,  it looks as if the underlying problem
> was a bug in squid,  which failed to handle GETNEXT requests for two or
> more varbinds correctly.
>     Are you also working with squid - or do you have different proxied
> applications?

It's a different proxy application.


-- 
Tomasz Chmielewski
http://wpkg.org

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.