topic Re: snmp and ping in Operating System - HP-UX

snmp and ping

Michael_33 — Thu, 14 Mar 2002 07:20:34 GMT

Hi all,

1. www user can not ping, I got this error message:

"ping: socket: Permission denied"
but root can ping.

2. I also got this error when I config MRTG.

"SNMP error:
no response received"

Re: snmp and ping

S.K. Chan — Thu, 14 Mar 2002 07:37:10 GMT

1) Check ownership and permission of /usr/sbin/ping. It should be ..
-r-sr-xr-x bin bin .... ping

2) Is SNMP enabled on your machine ?
# ps -ef|grep snmp
to check ..

Re: snmp and ping

Michael_33 — Thu, 14 Mar 2002 07:54:48 GMT

thanks, the permission of
ping is correct,
and I do #ps -ef|grep snmp
it returns:
root 421 1 Mar 6 /usr/sbin/snmpdm

Any idea?

Re: snmp and ping

S.K. Chan — Thu, 14 Mar 2002 08:04:44 GMT

I'm sorry , the permission should be ..
-r-sr-xr-x 1 root bin 24576 Nov 14 2000 /usr/sbin/ping
Change the ownership to root and normal user should be ableto ping again.

As for the snmp q... I need to find out what exactly you did with MRTG, I believe this is a 3rd party monitoring tool ?

Re: snmp and ping

Michael_33 — Thu, 14 Mar 2002 08:17:00 GMT

the permission of ping is
the same as yours. but www
still can not ping.

I got snmp error when I run cfgmaker

cfgmaker --global "WorkDir: /home/www/sng" --global "Options[_]: growright,bits" --ifref=ip abc@116.com > mrtg.cfg

Re: snmp and ping

S.K. Chan — Thu, 14 Mar 2002 08:47:11 GMT

I'm not sure then about your 'ping' problem. For the snmp problem, I can only think of one thing, since you did not use any option in cfgmaker that specify the community name, I think it's going to assume it's "public". So you got to make sure that your box has community name "public" which I think it is already unless someone change it.
# more /etc/snmpd.conf
to confirm this. BTW also look through this document for details on "cfgmaker" command.

http://people.ee.ethz.ch/~oetiker/webtools/mrtg/cfgmaker.html

Re: snmp and ping

Printaporn_1 — Thu, 14 Mar 2002 09:08:59 GMT

Hi,

DO you start troubleshoot by try ping and do snmpget (by MRTG) to another snmp client.
look like it's problem with client not properly configure with snmp.

Re: snmp and ping

Michael_33 — Thu, 14 Mar 2002 09:09:26 GMT

good idea, I will see the /etc/snmpd.conf, need
I run /etc/inetd -c ?

Re: snmp and ping

Michael_33 — Thu, 14 Mar 2002 09:22:31 GMT

how to use snmpget to test?
thanks!

Re: snmp and ping

Steven Sim Kok Leong — Thu, 14 Mar 2002 12:31:46 GMT

Hi,

For ping check the permissions of the directory /var/spool/sockets. Make sure that it is rwx to all ie. rwxrwxrwx.

# ll -d /var/spool/sockets

For the no response, make sure that the server is running the snmp daemon. You can verify on the server side by executing:

# netstat -f inet|grep -e 161 -e snmp

Hope this helps. Regards.

Steven Sim Kok Leong

Re: snmp and ping

Michael_33 — Fri, 15 Mar 2002 01:14:33 GMT

Thanks Steven!
The permission of /var/spool/socket is correct, but when I run
netstat -f inetd|grep -e 161
-e snmp, it returned " inetd:
unknown address family"

Any ideas?

Re: snmp and ping

S.K. Chan — Fri, 15 Mar 2002 02:14:04 GMT

To answer your previous question, you need not run inetd after (if any) changes were made to /etc/snmpd.conf. Just have to restart snmpd. The " netstat -f .. " command, it should be inet not inetd.

Re: snmp and ping

Michael_33 — Fri, 15 Mar 2002 02:58:27 GMT

thanks, I do netstat -f inet|grep -e 161 -e snmp,
nothing returned.

I think something wrong with
/etc/snmpd.conf, I don't know
how to set "get-community-name"

Re: snmp and ping

Ron Kinner — Fri, 15 Mar 2002 03:56:59 GMT

Are you trying to use MRTG to monitor another device or your own computer?

The device you are monitoring has to be expecting an SNMP query (running SNMPD in UNIX land) AND it has to have the same read only (RO) community string. The default is usually "public" but for security reasons you really ought to change it.

If you have any firewalls they will need to be opened to let it through.

To use cfgmaker:

cfgmaker --global "WorkDir: /home/mrtg" public@router.place.xyz > mrtg.cfg

You can leave off the --global "workdir: /home/mrtg" and just add that later in the mrtg.cfg file. Can also just put in the a.b.c.d address instead of the name.

The fact that you are getting no snmp response means that the device either does not do SNMP or the community string is not "public".

Doing

netstat -a |grep 161

on the target box should show if it is going to respond.

If you have a Window box you can get a freeware program getif which will "walk" the snmp tree of a device. I'm sure there is some equivalent for UNIX.

Ron

Re: snmp and ping

Michael_33 — Fri, 15 Mar 2002 08:51:32 GMT

how to set "get-community-name" ?

Re: snmp and ping

Steven Sim Kok Leong — Fri, 15 Mar 2002 08:55:41 GMT

Hi,

In your /etc/snmpd.conf of the server you are polling, specify:

get-community-name whatever_you_want

This name must be the same as the community name you specified in your mrtg.cfg. It is used in snmpget to query the OID value of your server.

Note however that it is not advisable for you to use "public" as community string as it is widely known and if your snmpd has not been patched and not restricted to specific source addresses, it will be susceptible to DoS attacks.

For security reasons, use a community string that is not easily guessable.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: snmp and ping

Steven Sim Kok Leong — Fri, 15 Mar 2002 08:57:01 GMT

Hi,

Btw, you will need the colon:

get-community-name: whatever_you_want

Hope this helps. Regards.

Steven Sim Kok Leong