--> hampa has joined #net-snmp
--> JerJer has joined #net-snmp
[2003/01/15 01:42:15] #net-snmp <hampa> is it possilbe to specify oids for a rocommunity?
[2003/01/15 01:43:03] #net-snmp <hampa> sorry.. multiple oids for acommunity
[2003/01/15 01:44:02] #net-snmp <hampa> something like:
[2003/01/15 01:44:30] #net-snmp <hampa> rocommunity stat default .1.3.6.1.4.1.99999 .1.3.6.1.2.1.1.3
--> jmpnz has joined #net-snmp
[2003/01/15 02:18:35] #net-snmp <hampa> dont know if its possible with VACM either
--> dts has joined #net-snmp
[2003/01/15 02:48:00] #net-snmp <dts> hampa: No - it's not possible to list more than one OID subtree on a "community" line
[2003/01/15 02:48:23] #net-snmp <dts> But yes this is possible using the full VACM config - just define an appropriate view
[2003/01/15 02:48:31] #net-snmp <dts> See the FAQ entry for more details.
--> rstory has joined #net-snmp
--> wes has joined #net-snmp
--> rstory has joined #net-snmp
[2003/01/15 07:23:56] #net-snmp <rstory> wes: why would 'mib2c -f size.c -c /tmp/size.conf ipsecCredMngServiceTable' report 'no output file specified at /usr/local/bin/mib2c line 348, line 6.'?
[2003/01/15 07:26:21] #net-snmp <wes> you still need to do a @open $name.c@ at the top of the .conf file. Then -f size will produce size.c.
[2003/01/15 07:26:23] #net-snmp <wes> I tihnk.
[2003/01/15 07:26:47] #net-snmp <rstory> is there a way to make @open not overwrite an existing file?
[2003/01/15 07:27:14] #net-snmp <wes> no.
[2003/01/15 07:27:26] #net-snmp <wes> we could add a "are you sure you want to do this" kind of flag I suppose.
[2003/01/15 07:27:27] #net-snmp <wes> -i
[2003/01/15 07:27:35] #net-snmp <wes> for instance. Um, which is already taken.
[2003/01/15 07:28:10] #net-snmp <wes> if you tell me the real root of the problem I can probably give yo u a better suggestion.
[2003/01/15 07:29:50] #net-snmp <rstory> I want to use a .conf file on multiple tables with the output to one file..
[2003/01/15 07:31:13] #net-snmp <wes> Um, put @open -@ in it.
[2003/01/15 07:31:21] #net-snmp <wes> then > to a file directly.
[2003/01/15 07:31:26] #net-snmp <wes> (and >> )
--> mike has joined #net-snmp
--> nostaw has joined #net-snmp
--> TrogL has joined #net-snmp
--> TrogL666 has joined #net-snmp
--> rstory has joined #net-snmp
[2003/01/15 11:05:04] #net-snmp <TrogL> Robert - wes said I should talk to you about binaries (Solaris) and packaging
[2003/01/15 11:05:55] #net-snmp <TrogL> i've got a solaris 2_6 binary made up
[2003/01/15 11:07:59] #net-snmp <TrogL> and I could have binaries for Solaris 7 and 8 in an hour or so if you want them.
[2003/01/15 11:31:56] #net-snmp <rstory> I'll take the 2.6 and 7 binaries... I'll use the sf compile farm for 8...
[2003/01/15 11:33:50] #net-snmp <rstory> wes: do we still want --disable-privacy for binaries?
[2003/01/15 11:36:41] #net-snmp <wes> no
[2003/01/15 11:36:44] #net-snmp <wes> leave encryption on now.
[2003/01/15 11:37:39] #net-snmp <TrogL> do you want openssl in the binaries? I'm against this because I can't provide a reliable method of installing openssl for those who don't have gcc
[2003/01/15 11:38:45] #net-snmp <TrogL> unless we provide openssl as well.
[2003/01/15 11:39:06] #net-snmp <TrogL> my binaries do NOT have Perl as per Solaris Perl issues
[2003/01/15 11:39:07] #net-snmp <rstory> configure --with-sys-location=Unknown --disable-developer '--with-sys-contact=System Administrator' --with-defaults '--with-mib-modules= host disman/event-mib smux'
[2003/01/15 11:40:30] #net-snmp <TrogL> do we want agentx mibII/mta_sendmail and ucd-snmp/dlmod? they work
[2003/01/15 11:40:44] #net-snmp <TrogL> oh and ucd-snmp/diskio
[2003/01/15 11:40:55] #net-snmp <TrogL> --enable-shared?
[2003/01/15 11:41:31] #net-snmp <rstory> umm... wes?
[2003/01/15 11:45:34] #net-snmp <TrogL> also I need to implicitly turn off openssl to build on my 7 system - it's got openssl sintalled. is that --without-openssl?
[2003/01/15 11:46:35] #net-snmp <rstory> yes
[2003/01/15 11:48:53] #net-snmp <wes> you don't distribute openssl binaries at all.
[2003/01/15 11:49:05] #net-snmp <wes> just use static openssl libraries and you don't need to.
[2003/01/15 11:49:31] #net-snmp <TrogL> ok, talk me through how to do this
[2003/01/15 11:49:45] #net-snmp <rstory> what about the addition default modules he suggested
[2003/01/15 11:50:55] #net-snmp <wes> agentx is default, mta_sendmail if it compiles and dlmod is also default
[2003/01/15 11:51:15] #net-snmp <rstory> ah
[2003/01/15 11:51:45] #net-snmp <wes> ACTION is away: for lunch
[2003/01/15 11:51:51] #net-snmp <rstory> why now make host disman/event-mib and smux defaults too?
[2003/01/15 11:51:57] #net-snmp <rstory> s/now/not/
[2003/01/15 11:52:05] #net-snmp <wes> host: we're talking about it.
[2003/01/15 11:52:20] #net-snmp <wes> disman: it should be discussed on -coders, but it's still fairly new code.
[2003/01/15 11:52:26] #net-snmp <wes> smux: it's out of date and should be shot.
[2003/01/15 11:52:32] #net-snmp <TrogL> i'm using smux
[2003/01/15 11:52:35] #net-snmp <TrogL> for ORACLE
[2003/01/15 11:56:16] #net-snmp <TrogL> so how about.... ./configure --with-sys-location="Unknown" --disable-developer --with-sys-contact="System Administrator" --with-mib-modules="host ucd-snmp/diskio smux mibII/mta_sendmail" --with-cc-gcc --enable-shared
[2003/01/15 11:56:49] #net-snmp <rstory> --enable-shared is redundant, as it should be the default
[2003/01/15 11:56:54] #net-snmp <TrogL> will this succesfully pick up the openssl stuff? (i'll put it on the 6 version)
--> jlixfeld has joined #net-snmp
[2003/01/15 12:01:28] #net-snmp <TrogL> incidentally, I also got my SGI/IRIX box going
[2003/01/15 12:01:35] #net-snmp <TrogL> i'm trying a 2.0.7 right now
[2003/01/15 12:02:29] #net-snmp <jlixfeld> Hey.. can anyone tell me what the error "Reason: (readOnly) The two parties used do not have access to use the specified SNMP PDU." means? btw: I have the correct write community defined in my snmpset cmd..
[2003/01/15 12:08:27] #net-snmp <TrogL> the people who can best answer your questions are afk right now
[2003/01/15 12:11:17] #net-snmp <jlixfeld> dang :/
[2003/01/15 12:11:43] #net-snmp <TrogL> sorry, I'm not doing sets yet
[2003/01/15 12:11:59] #net-snmp <TrogL> I specialize in monitoring servers
[2003/01/15 12:16:48] #net-snmp <jlixfeld> :)
--> hampa has joined #net-snmp
--> rstory has joined #net-snmp
[2003/01/15 12:35:12] #net-snmp <TrogL> anyway, back to our story
[2003/01/15 12:35:51] #net-snmp <TrogL> while you were gone, I did a build on two boxes without openssl using the compile line we agreed upon
[2003/01/15 12:36:05] #net-snmp <TrogL> I'm just tseting the 2_6 version right now as compiled
[2003/01/15 12:36:13] #net-snmp <TrogL> 7 is building on another box
[2003/01/15 12:36:31] #net-snmp <TrogL> when I'm happy with the compiled version, I'll build a tarball and test it on another 2_6 system
[2003/01/15 12:37:13] #net-snmp <TrogL> unfortunately I don't have any "clean" systems to test on
[2003/01/15 12:41:28] #net-snmp <TrogL> 2_6's snmpwalk gave me pretty much what I was expecting
[2003/01/15 12:46:53] #net-snmp <TrogL> ACTION does his 2_6 distribution build
[2003/01/15 13:14:41] #net-snmp <TrogL> robert - it would help me a lot if the tarball explodes inside /usr/local instead of / or /usr .... OK?
[2003/01/15 13:15:20] #net-snmp <rstory> it should be "usr/local" (no leading slash)
[2003/01/15 13:16:08] #net-snmp <rstory> (so non root users can untar it in their home directories)
[2003/01/15 13:16:16] #net-snmp <TrogL> it has to do with my partitioning - I built many of my systems with separate /usr/local partitions and my /usr is full
[2003/01/15 13:16:57] #net-snmp <rstory> np, all the binaries will be prefixed with "usr/local"
[2003/01/15 13:19:57] #net-snmp <TrogL> Ok, but why do we need the "usr" - the only thing inside is local
--> mike has joined #net-snmp
[2003/01/15 13:21:29] #net-snmp <rstory> so an untar at / puts it in the right place...
[2003/01/15 13:22:47] #net-snmp <rstory> note that you shouldn't set any prefix via configure, but instead 'make install prefix=usr/local exec_prefix=usr/local'
[2003/01/15 13:25:13] #net-snmp <TrogL> grrrr
[2003/01/15 13:25:17] #net-snmp <TrogL> ACTION goes back to rebuild
[2003/01/15 13:27:22] #net-snmp <TrogL> I was doing make install prefix=/usr/local/dist/usr/local exec_prefix=/usr/local/dist/usr/local
[2003/01/15 13:27:30] #net-snmp <TrogL> then tarballing inside /usr/local/dist
[2003/01/15 13:27:59] #net-snmp <TrogL> or does that prefix get stuffed into some things?
[2003/01/15 13:29:40] #net-snmp <TrogL> ...or am I monumentally mssing the point?
[2003/01/15 13:30:15] #net-snmp <TrogL> what would be nice for me is a file of somesort that would reside off somewhere else wherever I happen to habve room eg /usr3
[2003/01/15 13:30:24] #net-snmp <TrogL> then explode itself inside /usr/local where it belongs
[2003/01/15 13:30:50] #net-snmp <TrogL> without having to write a full-blown installer
[2003/01/15 13:30:54] #net-snmp <rstory> no, that works..
[2003/01/15 13:31:18] #net-snmp <TrogL> OK, then I'm lost.
[2003/01/15 13:31:42] #net-snmp <rstory> i meant what you first said works...
[2003/01/15 13:31:43] #net-snmp <TrogL> if I do a make install --prefix=usr/local etc. ...
[2003/01/15 13:32:01] #net-snmp <TrogL> where's the binary gonna end up?
[2003/01/15 13:32:35] #net-snmp <rstory> you can make isntall prefix=/some-place-you-have-lots-of-space/usr/local exec_prefix=(same thing)
[2003/01/15 13:32:47] #net-snmp <rstory> then cd /some-place-you-have-lots-of-space
[2003/01/15 13:33:01] #net-snmp <rstory> then tar cvf x.tar usr
[2003/01/15 13:35:57] #net-snmp <TrogL> ok, but this still gives me 56Mb tarball I have to drop in /
[2003/01/15 13:36:21] #net-snmp <rstory> gzip it
[2003/01/15 13:37:07] #net-snmp <rstory> or are you talking about space at install time?
[2003/01/15 13:37:14] #net-snmp <TrogL> space at install time
[2003/01/15 13:37:20] #net-snmp <TrogL> i'm really tight on some systems
[2003/01/15 13:37:48] #net-snmp <TrogL> I inherited them - I wouldn't have built them that way
[2003/01/15 13:37:49] #net-snmp <rstory> the tarball can be anywhere... say, /tmp... then (cd /; tar xvfz /tmp/net-snmp-5.0.7.tar.gz)
[2003/01/15 13:38:11] #net-snmp <TrogL> THAT's what I was looking for!!
[2003/01/15 13:38:20] #net-snmp <rstory> heh
[2003/01/15 13:38:39] #net-snmp <TrogL> does suns' tar support xvfz?
[2003/01/15 13:41:12] #net-snmp <TrogL> OK, i'm in business
[2003/01/15 13:41:40] #net-snmp <TrogL> ...except for the openssl issue
[2003/01/15 13:42:06] #net-snmp <TrogL> I still don't understand what wes is talking about with the static libraries(?)
[2003/01/15 13:42:25] #net-snmp <TrogL> I'd prefer to ship with ssl for use with other equipment that supports ssl out of the box eg. routers and whatnot
[2003/01/15 13:42:43] #net-snmp <wes> Ok, wheer are your ssl libraries?
[2003/01/15 13:42:49] #net-snmp <wes> (ie, where is libcrypto.*)
[2003/01/15 13:43:09] #net-snmp <wes> probably /usr/local/ssl/lib?
[2003/01/15 13:43:27] #net-snmp <TrogL> yep
[2003/01/15 13:43:48] #net-snmp <wes> do: ls /usr/local/ssl/lib/libcrypto* for me and dump the output
[2003/01/15 13:44:22] #net-snmp <wes> (does sun have a ldd command or equivelent? I forget?)
[2003/01/15 13:44:35] #net-snmp <TrogL> its /usr/local/ssl/lib/libcrypto.a
[2003/01/15 13:45:28] #net-snmp <TrogL> there is a ldd
[2003/01/15 13:45:46] #net-snmp <wes> if all that is there is the .a file, then don't worry about it. that's all you want.
--> JerJer has joined #net-snmp
[2003/01/15 13:46:08] #net-snmp <JerJer> I'm having trouble figuring out exactly which interface to graph... Serial0/1 or Serial0/1.1 can someone help me determine which one to graph ?
[2003/01/15 13:46:13] #net-snmp <wes> if you build it with only that library around you don't need to do anything special when you package up the net-snmp group.
[2003/01/15 13:46:27] #net-snmp <wes> JerJer: can you be more specific?
[2003/01/15 13:46:53] #net-snmp <TrogL> , so I just re-compile with openssl, then drop the .a file into the appropriate place in the tarball?
[2003/01/15 13:47:07] #net-snmp <wes> no.
[2003/01/15 13:47:11] #net-snmp <wes> it's not needed at all.
[2003/01/15 13:47:25] #net-snmp <wes> it's included directly in the net-snmp binaries without your help.
[2003/01/15 13:47:34] #net-snmp <TrogL> i've also got a libssl.a
[2003/01/15 13:47:38] #net-snmp <JerJer> wes: well right now i'm graphing Serial0/1 on my cisco 3600 but it is showing out traffic when we are downloading
[2003/01/15 13:48:09] #net-snmp <wes> it's a "static" library, which means binaries built with it incorperate all the crypto.a code directly into the binary being built (and hence, are larger than if it was a shared library).
--> sharuk has joined #net-snmp
[2003/01/15 13:48:24] #net-snmp <TrogL> ok
[2003/01/15 13:48:24] #net-snmp <wes> graph both?
[2003/01/15 13:48:43] #net-snmp <JerJer> wes: but which one is right? they both are showing different values
[2003/01/15 13:49:12] #net-snmp <JerJer> wes: but its the same frame relay connection
[2003/01/15 13:49:14] #net-snmp <wes> I don'tknow because I don't know what a cisco 3600 is. If you graph both it'll show you traffic across both of them. See which one is being utilized!
[2003/01/15 13:49:20] #net-snmp <wes> Ah.
[2003/01/15 13:49:31] #net-snmp <JerJer> 3600 == phat router
[2003/01/15 13:49:41] #net-snmp <wes> I'd still graph both to see where statistics are being collecetd.
[2003/01/15 13:50:07] #net-snmp <JerJer> hmm ok
[2003/01/15 13:50:09] #net-snmp <wes> TrogL: run ldd on snmpget and it'll show you the shared libraries that must be on any system for which it is going to run on.
[2003/01/15 13:52:39] #net-snmp <TrogL> done
[2003/01/15 13:52:52] #net-snmp <JerJer> next question... why is my "Average bits in" (ifInOctets) graph showing traffic when we download ?
[2003/01/15 13:53:16] #net-snmp <TrogL> ewwww there's machine-specific stuff there
[2003/01/15 13:53:41] #net-snmp <TrogL> like /usr/platform/SUNW,SUn-Fire-880/lib/libc_psr.so.1
[2003/01/15 13:54:00] #net-snmp <wes> JerJer: it takes 2 halves of a conversation to download something.
[2003/01/15 13:54:17] #net-snmp <wes> you say "give me this", they say "here ya go", and you say "ok, thanks got it".
[2003/01/15 13:54:29] #net-snmp <wes> the here ya go is the large part, but the parts you say take traffic too.
[2003/01/15 13:54:37] #net-snmp <wes> (obviously it's more complex than that)
[2003/01/15 13:54:58] #net-snmp <JerJer> wes: yes but if i graph ifInOctets on my only router wouldn't that mean traffic IN from the world ?
[2003/01/15 13:55:18] #net-snmp <wes> yes it should.
[2003/01/15 13:55:38] #net-snmp <wes> I guess Idon't understand the question then.
[2003/01/15 13:55:43] #net-snmp <JerJer> we have one phat download going on right now... ifInOctets is shwoing 192kb/sec
[2003/01/15 13:56:15] #net-snmp <wes> ok, that seems right. You're downloading from somewhere else into your area which means the incoming pipe is running fast.
[2003/01/15 13:56:25] #net-snmp <JerJer> hmmmm
[2003/01/15 13:57:22] #net-snmp <JerJer> D'OH
[2003/01/15 13:57:28] #net-snmp <wes> heh.
[2003/01/15 13:57:28] #net-snmp <JerJer> i see where i fscked up
[2003/01/15 13:57:34] #net-snmp <wes> wrong interface?
[2003/01/15 13:57:54] #net-snmp <JerJer> on this one graph i used a blue line for ine and green area for out ... where it should be the other way
[2003/01/15 13:57:57] #net-snmp <JerJer> *smacks head*
[2003/01/15 13:58:00] #net-snmp <wes> heh.
[2003/01/15 13:58:09] #net-snmp <JerJer> i'm used to seing the blue line as outbuond traffic
[2003/01/15 13:58:11] #net-snmp <wes> anyway, gotta go help someone else now on a different channel...
[2003/01/15 13:58:13] #net-snmp <JerJer> ie up load
[2003/01/15 13:58:26] #net-snmp <JerJer> wes: yeah.. thanks for dealing wth my stupidity
[2003/01/15 13:58:31] #net-snmp <TrogL> wes: slightly off-topic - what's libc_psr.so for?
[2003/01/15 13:58:36] #net-snmp <wes> no idea.
[2003/01/15 14:00:07] #net-snmp <TrogL> snmpwalk and snmpget both want it - it makes the tarball non-portable between platforms
[2003/01/15 14:02:38] #net-snmp <TrogL> ACTION goes looking for it
[2003/01/15 14:03:17] #net-snmp <wes> it's probably on every sun system?
[2003/01/15 14:04:21] #net-snmp <TrogL> yep, in a different place on every box
[2003/01/15 14:07:54] #net-snmp <TrogL> i've grepped for libc_psr in pretty much every directory of the source and can't find it
[2003/01/15 14:09:41] #net-snmp <rstory> don't worry about it... the path isn't actually coded in the binary..
[2003/01/15 14:10:31] #net-snmp <wes> it'd be in /usr/lib most likely
[2003/01/15 14:11:00] #net-snmp <TrogL> nope
[2003/01/15 14:12:54] #net-snmp <TrogL> ldd lists all the other ones as links eg. libelf.so.1 => /usr/lib/libelf.so.1
[2003/01/15 14:13:00] #net-snmp <TrogL> libc_psr is hard-coded
[2003/01/15 14:16:53] #net-snmp <TrogL> if it's going for hardware, I would have expected it to be somewhere in "host"
[2003/01/15 14:21:07] #net-snmp <wes> you probably don'tneed to worry aboutit.
[2003/01/15 14:25:08] #net-snmp <TrogL> it's still wierd
[2003/01/15 14:26:03] #net-snmp <TrogL> ok, so which open ssl? i was using 0.9.6.g but you say 0.9.7 is out.
[2003/01/15 14:29:55] #net-snmp <TrogL> just to make sure we're clear on this.
[2003/01/15 14:30:07] #net-snmp <TrogL> i'm creating a binary to run on 2_6
[2003/01/15 14:30:22] #net-snmp <TrogL> it's gonna be installed on a system which does NOT have openssl installed...
[2003/01/15 14:30:38] #net-snmp <TrogL> and there's no way to install it because management won't let me have make or gcc
[2003/01/15 14:30:40] #net-snmp <TrogL> on that particular box
[2003/01/15 14:30:43] #net-snmp <TrogL> (security concerns)
[2003/01/15 14:30:49] #net-snmp <TrogL> so just have the .a file is enough?
[2003/01/15 14:31:05] #net-snmp <TrogL> rather, jsut having it compield intot he binary is enough?
[2003/01/15 14:31:05] #net-snmp <rstory> yes
[2003/01/15 14:31:12] #net-snmp <rstory> it will be embedded in the apps
[2003/01/15 14:31:18] #net-snmp <TrogL> ok, here goes
[2003/01/15 14:31:33] #net-snmp <rstory> makes them bigger, but more portable
[2003/01/15 14:31:54] #net-snmp <TrogL> is 0.9.6g sufficient?
[2003/01/15 14:32:13] #net-snmp <rstory> sure..
[2003/01/15 14:36:48] #net-snmp <TrogL> ACTION pities his poor users trying to work on his development box
--> sharuk has joined #net-snmp
--> jmpnz has joined #net-snmp
[2003/01/15 15:30:12] #net-snmp <TrogL> ACTION finishes up building with ssl support
--> sharuk has joined #net-snmp
[2003/01/15 15:42:14] #net-snmp <sharuk> hi ppl
[2003/01/15 15:42:27] #net-snmp <sharuk> I am just a new bie to the net-snmp
[2003/01/15 15:42:31] #net-snmp <sharuk> anybody, can tell me how a GET snmp_PDU treated in the agent..
[2003/01/15 15:42:31] #net-snmp <sharuk> to response?
--> sharuk has joined #net-snmp
--> jmpnz has joined #net-snmp