Re: Cannot receive v2 traps/informs sent via IPv6

I downloaded the code for 5.7.2.1 again because I wanted to insert trace statements so that I could tell you what the values were for the variables listed in #2 from your message.

I ran configure with these options:

./configure --without-nl --with-transports="UDP TCP Unix UDPIPv6 TCPIPv6" --with-mib-modules="mibII host notification ucd_snmp" --enable-ipv6 --without-perl --disable-embedded-perl

I don't know what options I used when I compiled the version I was previously using.  After running this new version I compiled I found that I had no problems receiving v3 or v2c traps via IPv6.  Because my Windows machine receives v2 traps via IPv6 fine I'm concluding that the problem must have been how I build the Linux version of snmptrapd.  I still don't understand how v3 via IPv6 would work but v2c wouldn't.  Either way, thanks for the help you provided me.

---- On Thu, 15 May 2014 07:15:14 -0700 Bill Fenner  wrote ---- 

>This is pretty interesting:
>
>trace: netsnmp_trapd_auth(): snmptrapd_auth.c, 130:
>snmptrapd:auth: Calling VACM for checking phase 0:read
>trace: vacm_check_view_contents(): mibgroup/mibII/vacm_conf.c, 1300:
> mibII/vacm_vars: vacm_in_view: ver=1, community=trappy
>trace: vacm_check_view_contents(): mibgroup/mibII/vacm_conf.c, 1401:
>mibII/vacm_vars: vacm_in_view: No security name found
>trace: netsnmp_trapd_auth(): snmptrapd_auth.c, 138:
> snmptrapd:auth:   result: not authorized
>
>
>
>Between lines 1300 and 1401, we have:
>
>
>1332 #ifdef NETSNMP_TRANSPORT_UDPIPV6_DOMAIN
>1333         } else if (pdu->tDomain == netsnmp_UDPIPv6Domain
> 1334 #ifdef NETSNMP_TRANSPORT_TCPIPV6_DOMAIN
>1335                    || pdu->tDomain == netsnmp_TCPIPv6Domain
>1336 #endif
>1337             ) {
>1338             if (!netsnmp_udp6_getSecName(pdu->transport_data,
> 1339                                          pdu->transport_data_length,
>1340                                          pdu_community,
>1341                                          pdu->community_len, &sn,
> 1342                                          &contextName)) {
>1343                 /*
>1344                  * There are no com2sec entries.  
>1345                  */
>1346                 sn = NULL;
> 1347             }
>
>
>
>now, there are no code paths through netsnmp_udp6_getSecName() that don't trace anything, and yet, there is no tracing from it in your log.  I can only draw one of two conclusions:
> 
>
>1. Your snmplib is built without NETSNMP_TRANSPORT_UDPIPV6_DOMAIN
>2. Somehow pdu->tDomain != netsnmp_UDPIPv6Domain
>
>
>I don't quite think #1 could be true, since the udp6: transport works.  This is very strange.
> 
>
>  Bill


------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.
Get unparalleled scalability from the best Selenium testing platform available
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users