SNMPv3?

Hello List,

Is mrtg SNMPv3 capable?


rootl1# SNMP Error:
no response received
---->SNMPv1_Session (remote host:
"10.40.12.18" [10.40.12.18].161)
                  community: "public"
                 reqüst ID: 1102526561
                PDU bufsize: 8000 bytes
                    timeout: 2s
                    retries: 5
                    backoff: 1)
 at /usr/local/lib/perl5/site_perl/5.005/SNMP_util.pm line
490
SNMPGET Problem for ifInOctets.80 ifOutOctets.80 on
public10.40.12.18::::::v4only

vs.


rootl1# snmpget -u root -aMD5 -A dadadsfwwrdfhdfh -v3  -c
public  10.40.12.18 sysName.0
SNMPv2-MIB::sysName.0 = STRING: brummel.grummel.de

-- 
Gruss

Stefan Kuttler (B.O.F.H.)    .ooO=Ooo.    https://www.netbeisser.de
 
GPG Fingerprint:  E7AC 1E9B 87D8 5BD2 E2F2 6F4A 3177 ED68
8185 480C

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

Am Donnerstag, 22. Juni 2006 16:12 schrieb Stefan Kuttler:
> Hello List,
>
> Is mrtg SNMPv3 capable?

Short: Yes

Longer: put v3 credentials into .snmp/snmp.conf.
Read man snmpcmd (1)

-- 
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn

Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4
EDD8 979B
Skype: misch42

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

Michael Schwartzkopff writes:

>  > Is mrtg SNMPv3 capable?
>  
>  Short: Yes
>  
>  Longer: put v3 credentials into .snmp/snmp.conf.
>  Read man snmpcmd (1)

	Is there an even longer version available?  I'd like to do
this, think I have the SNMP side handled, but am having
problems
with mrtg.


				Robert Huff

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

On 6/22/06, Robert Huff <roberthuffrcn.com> wrote:
>
> Michael Schwartzkopff writes:
>
>         Is there an even longer version available? 
I'd like to do
> this, think I have the SNMP side handled, but am having
problems
> with mrtg.


Have you tried looking over the MRTG refernece (
http://oss.oetiker.ch/mrtg/doc/mrtg-reference.en.html)?
 The following
search strings for that ref page seem to contain all the
stuff you'll need
to use without too much junk.  I don't use v3 so I'm just
tryint go help
here.

SnmpOptions (V3)
SnmpOptions
EnableSnmpV3
SNMPv3

CFGmaker can also use v3 optoins.  See
http:
//oss.oetiker.ch/mrtg/doc/cfgmaker.en.html and search
for "SNMP V3
Options".

Good Luck.

Paul


--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

On Thu, 2006-06-22 at 23:50 -0400, Robert Huff wrote:
> Michael Schwartzkopff writes:
> 
> >  > Is mrtg SNMPv3 capable?
> >  
> >  Short: Yes
> >  
> >  Longer: put v3 credentials into .snmp/snmp.conf.
> >  Read man snmpcmd (1)
> 
> 	Is there an even longer version available?  I'd like
to do
> this, think I have the SNMP side handled, but am having
problems
> with mrtg.

perldoc cfgmaker


There is a long discussion in the mrtg docs.  See
http://oss.oetiker.ch/mrtg/doc/mrtg-reference.
en.html#snmp_options

-- 
Daniel J McDonald, CCIE #2495, CNX, CISSP #78281
Austin Energy

gpg Key: http://austinn
etworkdesign.com/pgp.key
Key fingerprint = B527 F53D 0C8C D38B DCC7  901D 2F19 A13A
22E8 A76A

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

MrPaul writes:

>  >         Is there an even longer version
available?  I'd like to do
>  > this, think I have the SNMP side handled, but am
having problems
>  > with mrtg.
>  
>  Have you tried looking over the MRTG refernece (
>  http://oss.oetiker.ch/mrtg/doc/mrtg-reference.en.html)?

	For substantial parts of the last two days, including the
sections mentioned here and in other posts.  
	Here's where I stand:
	1) SNMP seems to work,  Running this:

huff>> snmpwalk -v 3 -u MRTG -l priv -a md5 -x aes
-A <deleted> -X <deleted> localhost

	works fine.
	2) I then run mrtg, and get:

Daemonizing MRTG ...
SNMPopen failed: Invalid argument '-username' at
/usr/local/bin/mrtg line 1986
SNMPGET Problem for jerusalem127.0.0.1::::::v4only at
/usr/local/bin/mrtg line 1986
ERROR: Target[jerusalem][_IN_] ' $target->[0]{$mode} '
did not eval into defined data
ERROR: Target[jerusalem][_OUT_] ' $target->[0]{$mode} '
did not eval into defined data

	Mrtg does not exit, and I get this message again every N
minutes.
	3) Applicable portion of mrtg.conf is appended.


				Robert Huff



RunAsDaemon: Yes
EnableSnmpV3: yes

Interval: 5
WriteExpires: Yes

Target[Jerusalem]: 2:jerusalem127.0.0.1
#SnmpOptions[Jerusalem]: username=>'MRTG'
SnmpOptions[Jerusalem]: username=>'MRTG',
authprotocol=>'md5',
authpassphrase->'<deleted>',
privprotocol=>'aescfb256',
privpassphrase->'<deleted>' 
Title[Jerusalem]: Traffic Analysis for Jerusalem
WithPeak[Jerusalem]: ym

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

On Fri, 2006-06-23 at 12:47 -0400, Robert Huff wrote:
> MrPaul writes:
> 
> >  >         Is there an even longer version
available?  I'd like to do
> >  > this, think I have the SNMP side handled,
but am having problems
> >  > with mrtg.
> >  
> >  Have you tried looking over the MRTG refernece (
> >  http://oss.oetiker.ch/mrtg/doc/mrtg-reference.en.html)?
> 

You need to specify the snmp version on the target:
jerusalem127.0.0.1:::::3

Also, you must be running mrtg 2.13 or 2.14, have the
net_snmp package
installed, and net_snmp_utils.pm (included with mrtg 2.13 or
14) must be
in INC

Here's what I have:
Target[ecc-net-0.austin-energy.net_Vl507]: #Vl507:fooecc-net-0.austin-energy.net::2:1:1:3
SnmpOptions[ecc-net-0.austin-energy.net_Vl507]:
authkey=>'<deleted>',authprotocol=>'sha',pri
vprotocol=>'des',username=>'public',privkey=>'
<deleted>'


This was generated from:
/usr/bin/cfgmaker --if-template=iosv3.iftemplate
--ifref=name
--interfaces --host-template=iosv3.template
--subdir=ecc/HOSTNAME
--username='public' --authkey='<deleted>'
--authproto='sha'
--privkey='<deleted>' --privproto='des'
--output=/var/mrtg/cfg/ecc/ecc-net-0.cfg
'foo'ecc-net-0.austin-energy.net::2:1:1:3

My ifTemplate is a workaround for low-speed circuits:
[mcdonalddjldap ~]$ cat /var/mrtg/cfg/iosv3.iftemplate
# Example CFGNAME: [DEVICE NAME]
if ($if_ok and $if_snmp_descr !~ /unrouted/ and
$if_snmp_descr !~ /Null/i) {
my $test_hc =
snmpget($router,$v3opt,'ifHCInOctets.'.$if_index);
if ($test_hc =~ /nosuchinstance/i) {
        $target_lines .= <<LOWSPEED
Target[$target_name]:
ifInOctets$if_ref&ifOutOctets$if_ref:$router_connect
LOWSPEED
;
} else {
        $target_lines .= <<HIGHSPEED
Target[$target_name]: $if_ref:$router_connect
HIGHSPEED
;
}
$target_lines .= <<TOPPART
SnmpOptions[$target_name]: $v3options
routers.cgi*ShortDesc[$target_name]: $html_if_snmp_name -
$html_if_snmp_alias
routers.cgi*Extension[$target_name]: "Show current
interface status" /cgi-bin/ifstatus.cgi camera2-sm.gif
bb*host[$target_name]: $router_name
TOPPART
;
if ($if_ip) {
        $target_lines .= <<IPPART
bbmap*ip[$target_name]: $if_ip
IPPART
;
}
$target_lines .= <<LASTPART
Directory[$target_name]: $directory_name
MaxBytes[$target_name]: $if_speed
Options[$target_name]: bits
WithPeak[$target_name]: wmy
Title[$target_name]: $html_if_snmp_name -
$html_if_snmp_alias
PageTop[$target_name]: <H1>$html_if_snmp_alias -
Traffic </H1>
LASTPART
;
}
else {
    $head_lines="";
    $problem_lines="";
    $target_lines="";
    $separator_lines="";
}


Hope that helps...


-- 
Daniel J McDonald, CCIE #2495, CNX, CISSP #78281
Austin Energy

gpg Key: http://austinn
etworkdesign.com/pgp.key
Key fingerprint = B527 F53D 0C8C D38B DCC7  901D 2F19 A13A
22E8 A76A

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

Daniel J McDonald writes:

	[Private copy not required, thanks.]

>  You need to specify the snmp version on the target:
>  jerusalem127.0.0.1:::::3
>
>  Also, you must be running mrtg 2.13 or 2.14,

	2.13.2.1

>									have the net_snmp
>   package

	Got it.


>  installed, and net_snmp_utils.pm (included with mrtg
2.13 or 14) must be
>  in INC

	Not sure how to check this.
	But it may be the winner.  After fixing a couple of typos
and
making the :::::3 change, I get (reformatted for
legibility):

Daemonizing MRTG ...
huffjerusalem>> Can't locate Crypt/Rijndael.pm in
INC
(INC
 contains: /usr/local/bin/../lib/mrtg2 /usr/local/bin
 /usr/local/lib/perl5/5.8.8/BSDPAN
 /usr/local/lib/perl5/site_perl/5.8.8/mach
 /usr/local/lib/perl5/site_perl/5.8.8
 /usr/local/lib/perl5/site_perl/5.8.7
 /usr/local/lib/perl5/site_perl/5.8.6
 /usr/local/lib/perl5/site_perl/5.6.1
 /usr/local/lib/perl5/site_perl
/usr/local/lib/perl5/5.8.8/mach
 /usr/local/lib/perl5/5.8.8 .) at (eval 15) line 3. 

	Off to do some checking.


			Robert Huff

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

On Fri, 2006-06-23 at 16:02 -0400, Robert Huff wrote:
> Daniel J McDonald writes:

> >  You need to specify the snmp version on the
target:
> >  jerusalem127.0.0.1:::::3
> >

> >  installed, and net_snmp_utils.pm (included with
mrtg 2.13 or 14) must be
> >  in INC

> 	But it may be the winner.  After fixing a couple of
typos and
> making the :::::3 change, I get (reformatted for
legibility):
> 
> Daemonizing MRTG ...
> huffjerusalem>> Can't locate Crypt/Rijndael.pm in
INC
(INC


The RPMS I built only called for perl-Crypt-des (since Cisco
only
supports des privacy).  You will also need the
perl-Crypt-Rijndael
package to support AES encryption.  Rijndael (pronounced
"rain doll")
was the name of the AES cipher before it was selected as a
standard.

I don't know what distro you are using, but Mandriva
provides that
package in the contrib repository.


> 	Off to do some checking.

-- 
Daniel J McDonald, CCIE #2495, CNX, CISSP #78281
Austin Energy

gpg Key: http://austinn
etworkdesign.com/pgp.key
Key fingerprint = B527 F53D 0C8C D38B DCC7  901D 2F19 A13A
22E8 A76A

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi

Daniel J McDonald writes:

>  > huffjerusalem>> Can't locate
Crypt/Rijndael.pm in INC (INC
>  
>  I don't know what distro you are using, but Mandriva
provides that
>  package in the contrib repository.

	Not Linux.  Making the necessary adjustments.  
	Installed Crypt-Rijndael - check.

	Round 3:

Daemonizing MRTG ...
SNMPopen failed: Invalid argument '-privpassphrase' at
/usr/local/bin/mrtg line 1986
SNMPGET Problem for jerusalem127.0.0.1:::::3:v4only at
/usr/local/bin/mrtg line 1986
ERROR: Target[jerusalem][_IN_] ' $target->[0]{$mode} '
did not eval into defined data
ERROR: Target[jerusalem][_OUT_] ' $target->[0]{$mode} '
did not eval into defined data

	and mrtg does not exit.


				Robert Huff

--
Unsubscribe mailto:mrtg-requestlist.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/
mrtg
FAQ         http://faq.mrtg.org   
Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz
.ch/lsg2.cgi