RE: SNMPv3 Trap Question

Gary Dunlap <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
Hi.  Yes, I did a similar test to send SIGHUP, and looking at traps with Wireshark, the engineBoots count does stay the same while the engineTime increases as expected.  So I guess the simple reconfig is not the problem.

The kind of “event” I saw that I thought may have triggered the engineBoots increment was a change to the IF MIB contents, due to a network interface going down then up.  There was a debug message in snmpd.log that an interface had changed.  I don’t see the connection in code for what would invoke the function that increments the engineBoots count, though.  It’s a callback so it’s not easy to connect the dots.

Thanks for responding on this.

Gary


From: Bill Fenner [mailto:[email protected]]
Sent: Sunday, September 14, 2014 4:19 PM
To: Gary Dunlap
Cc: [email protected]; [email protected]
Subject: Re: SNMPv3 Trap Question

On Wed, Sep 3, 2014 at 11:10 AM, Gary Dunlap <[email protected]<mailto:[email protected]>> wrote:
Hi.  I’m having trouble with some of the SNMPv3 traps sent by snmpd being rejected, and I think it’s because of the SNMPv3 replay protection mechanism.

It looks like when some event causes a reconfigure of snmpd

Can you say more about what kind of event?  It doesn't happen (at least, in 5.7.2) with HUP - engineBoots before and after a HUP doesn't change for me.

notification before HUP:

dumph_recv:     msgAuthoritativeEngineBoots
dumpv_recv:        Integer:     1 (0x01)
dumph_recv:     msgAuthoritativeEngineTime
dumpv_recv:        Integer:     785 (0x311)

notification after HUP:

dumph_recv:       msgAuthoritativeEngineBoots
dumpv_recv:          Integer:   1 (0x01)
dumph_recv:       msgAuthoritativeEngineTime
dumpv_recv:          Integer:   843 (0x34B)

  Bill

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.