Re: problem with snmptrapd

Wes Hardaker san

Thank you for advice.

>At Mon, 20 Feb 2006 11:27:03 -0800,Wes Hardaker wrote:
>
> >>>>> On Mon, 20 Feb 2006 21:34:53 +0900, Dan Keimatsu <keimatsu@jpix.ad.jp> said:
>
> Dan> It is attached to the package, and whenever the trap is received by
> Dan> using snmptrapd, started traphandler two times.
>
> Is it possible that the trap is being sent twice? I'd bet on this
> being the problem. Run with -d to see how many packets it received.

-d The UDP packet did not overlap when having observed it by using the
option.

However, the program that exists in the argument of traphandle default
of snmptrapd.conf is started without fail by two times.

The content of the description of trapd.conf is as follows.

----------------------------------------------------
authCommunity log,execute,net community
traphandle default /home/dan/bin/snmptrap_notice.pl
----------------------------------------------------

Moreover, it was able to be confirmed still to start the handler
program with execve() twice though the movement of snmptrapd was
observed by the strace() command.

What is the cause?....


> Dan> <The tow>
> Dan> In snmptrapd, it is not possible to evaluate correctly, and I will
> Dan> evaluate it on the traphandler side.
>
> Dan> When those who transmit trap use v1, I think that it only has to
> Dan> evaluate the value of "SNMP-COMMUNITY-MIB::snmpTrapCommunity.0".
>
> Dan> However, there is no method of evaluating community when v2c is used.
>
> Dan> Is there something a good method?
>
> The 5.3.0.1 release provides you much more control over restricting
> access to when trap handlers are called based on incoming
> credentials. Also, it has better support for code executed and
> needing to get extra information out of it using the embedded-perl
> support (but obviously requires the handlers to be written in perl)

The problem of the community of trap has been splendidly improved by
using 5.3.0.1. !!

Thank you.

---
Dan Keimatsu
JPIX (JapanInternetExchanget)


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=...486&dat=121642
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users