SNMP - what am I seeing?

 
Thread Tools Search this Thread
Special Forums UNIX and Linux Applications Infrastructure Monitoring SNMP - what am I seeing?
# 1  
Old 10-22-2010
SNMP - what am I seeing?

Hey everyone!
First, thank you in advance for any help you can provide. I'm a fairly experienced linux user, and just getting my feet wet in solaris for a project here at the office. I am trying to use snmpget on a linux box to get information from a Solaris 10 system. The solaris 10 system has snmpdx running (solstice, used for SNMP by a vendor solution that is installed). However it also appears to have snmpd running. Here are the commands and output that I get:

Code:
bash-3.00# ps -ef |grep snm
    root   775     1   0   Mar 10 ?         345:35 /usr/lib/snmp/brdsftMIB2 -r -c /usr/local/broadworks/bw_base/conf -p 10161
    root   726     1   0   Mar 10 ?           0:00 /usr/lib/dmi/snmpXdmid -s as1
    root   755     1   0   Mar 10 ?           9:16 /usr/sfw/sbin/snmpd
    root   717     1   0   Mar 10 ?           0:12 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
    root  2061 27184   0 19:23:21 pts/3       0:00 grep snm
  bworks  8672  8663   0   Oct 06 ?          31:42 /usr/local/java/java_base/bin/java -Dp=openclientserver -server -Docs.snmp.comp
  bworks  8421  8412   0   Oct 06 ?         154:45 /usr/local/java/java_base/bin/java -Dp=snmp -XX:ParallelGCThreads=2 -classpath 
  bworks  8410     1   0   Oct 06 ?           0:00 /usr/bin/perl ./bwpmd -snmp -d /var/broadworks/logs/snmp

Code:
bash-3.00# lsof -i -nP |grep snm
snmpdx      717   root    3u  IPv4 0x60000942040      0t0  UDP *:17
snmpdx      717   root    4u  IPv4 0x60000942240      0t0  UDP *:17
snmpdx      717   root    5u  IPv4 0x6000249fa80      0t0  UDP *:17
snmpXdmid   726   root    0u  IPv4 0x6000249f680      0t0  UDP *:17
snmpXdmid   726   root    1u  IPv4                         TCP no TCP/UDP/IP information available
snmpXdmid   726   root    5u  IPv4 0x6000249f880      0t0  UDP *:17
snmpXdmid   726   root    6u  IPv4 0x6000249f280      0t0  UDP *:17
snmpd       755   root   13u  IPv4 0x6000249ec80      0t0  UDP *:17
snmpd       755   root   14u  IPv4 0x6000249f080      0t0  UDP *:17
snmpd       755   root   15u  IPv4 0x6000249ee80      0t0  UDP *:17
snmpd       755   root   16u  IPv4 0x600015040c0      0t0  UDP *:17
snmpd       755   root   17u  IPv4 0x60002b65b00      0t0  UDP *:17
snmpd       755   root   18u  IPv4 0x60002b65900      0t0  UDP *:17

This shows the services running on UDP port 17. The problem is if I try and query remotely on port 17, everything fails. Why does lsof show port 17 and not 161? In fact typing
Code:
lsof -i |grep 161

doesn't return a single thing.

Any help would be appreciated. Both daemons show as running, and I'd like to figure out what ports they're running, and then figure out what information is attainable from each daemon. I'm assuming snmpdx is just vendor related stuff, because from my research snmpd should be for OS stuff. Any thoughts?
Thanks!
-Matthew
# 2  
Old 10-22-2010
https://www.unix.com/man-page/All/5/snmpd.conf/

Code:
       agentaddress [:][,...]
	      defines  a  list	of  listening  addresses,  on which to receive
	      incoming SNMP requests.  See the section LISTENING ADDRESSES  in
	      the  snmpd(8)  manual page for more information about the format
	      of listening addresses.

	      The default behaviour is to listen on UDP port 161 on  all  IPv4
	      interfaces.

# 3  
Old 10-22-2010
Quote:
Originally Posted by DGPickett
Man Page for snmpd.conf (All Section 5) - The UNIX and Linux Forums

Code:
       agentaddress [:][,...]
          defines  a  list    of  listening  addresses,  on which to receive
          incoming SNMP requests.  See the section LISTENING ADDRESSES  in
          the  snmpd(8)  manual page for more information about the format
          of listening addresses.

          The default behaviour is to listen on UDP port 161 on  all  IPv4
          interfaces.

I appreciate the link, but it still doesn't tell me why I don't see port 161 open anywhere. If the daemon is bound to that port, shouldn't it show up? Why is port 17 showing up?
# 4  
Old 10-22-2010
also: man snmpdx.
you have a 'non-monolithic' SNMP agent with the master/slave(s) paradigm.
# 5  
Old 10-22-2010
Quote:
Originally Posted by vgersh99
also: man snmpdx.
you have a 'non-monolithic' SNMP agent with the master/slave(s) paradigm.
Any possibility of putting that into lay terms? I'm still rather new to snmp, let alone solaris. I'm just not sure why the ports are showing something different than what is working - and googling monolithic snmp agent just tells me that monolithic means that the MIBs are compiled into the agent. Are you saying that snmpd is being used by snmpdx?

I am really sorry.

Both man pages show that the daemons are listening on port 161. But shouldn't lsof show 161 open? Does that mean that both daemons are using 161?
# 6  
Old 10-22-2010
Be aware: 161 is just the default. Maybe someone reconfigured to 17 or something such.
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Need to transfer all kernel logs (var/log/messages) to the snmp listener as snmp trap

i am working with embedded system -Dell DCS management sub system. my question is as below: currently we are using linux kernel 2.6.30 build and we have a kernel logs stored to the /var/log/messages path. now we have to transfer all this logs to the specified SNMP target as a part of SNMP... (4 Replies)
Discussion started by: vipul_prajapati
4 Replies

2. Infrastructure Monitoring

SNMP traps to SNMP server

Dear Champs, I am new to unix, and need to configure linux server to send below traps to a SNMP server. Monitoring TRAP Disk Space Low Monitoring TRAP Memory Low Monitoring TRAP CPU high Monitoring TRAP Admin login/Logoff Please help me how to send this information to my SNMP server... (2 Replies)
Discussion started by: stavar
2 Replies

3. IP Networking

SNMP Problem - SNMP not getting to the agent.

I am having a problem with an SNMP event, and I am not sure where I should be looking to solve this problem. Description: There is an SNMP event in our system that for one reason or another is not getting sent out as an email because it is never getting to our SNMP agent. I see where the... (0 Replies)
Discussion started by: broberts
0 Replies

4. Red Hat

Sending data from DELL OMSA SNMP and Custom SNMP MIB to same UDP port 161

Hi , Currently DELL OMSA SNMP sends data through default udp port 161.I want my custom SNMP MIB also to send data in the same udp port 161.Whether its possible.If yes where to configure .I tried starting my custom MIB in udp port 161,but it throws port already in use.Kindly guide. (1 Reply)
Discussion started by: prabakar4all
1 Replies

5. IP Networking

Sending data from DELL OMSA SNMP and Custom SNMP MIB to same UDP port 161

Hi , Currently DELL OMSA SNMP sends data through default udp port 161.I want my custom SNMP MIB also to send data in the same udp port 161.Whether its possible.If yes where to configure .I tried starting my custom MIB in udp port 161,but it throws port already in use.Kindly guide. (0 Replies)
Discussion started by: prabakar4all
0 Replies

6. Infrastructure Monitoring

snmp

hello, I am looking for Overall CPU usage info in net-snmp 5.1.2 on solaris 5.8. I didn't see hrProcessorLoad info from host-resource-mib. Is there any other MIB I could look into? Thanks (0 Replies)
Discussion started by: lamou23
0 Replies

7. Solaris

snmp

Hi, I want to configure snmp on solaris 10,What are steps (1 Reply)
Discussion started by: manoj.solaris
1 Replies
Login or Register to Ask a Question