Solved

SNMP - 32 bit or 64 bit counters.

Posted on 2006-11-13
2
995 Views
Last Modified: 2013-12-27
Hi,

I'm not sure if this is the right group for this, so if not, please advise on the proper group and I'll post there.

I have a number of scripts that I am using to poll our firewalls for various metric information. This info I then feed into a RRDtool database. My scripts make use of the snmpget.pl and snmpwalk.pl, which are part of the CPAN Net::Snmp package. I use these because I need the flexibility of specifying the target port...the Check Point SNMP agent is listening on port 260 rather than the traditional port 161.

A few of the OID's began returning some unexpected data. Two successive polling cycles, which are five minutes a part, returned 325535997 and -3964693308. These values are from counters that are counting the number of accepted packets. I had been specifying SNMP v 1 in my "get" commands, and I thought I would see if I received the same results if I used v 2c. When I attempted to execute the command, I get this:
# /usr/local/bin/snmpget.pl -v 2c -c public -p 260 166.68.134.85 1.3.6.1.4.1.2620.1.1.26.3.1.0
snmpget: No response from remote host '166.68.134.85'

However, if I specify v 1:
# /usr/local/bin/snmpget.pl -v 1 -c public -p 260 166.68.134.85 1.3.6.1.4.1.2620.1.1.26.3.1.0
1.3.6.1.4.1.2620.1.1.26.3.1.0 = INTEGER: -516928233

So, why can I not access the fw using v 2c? Is this setup in the agent configuration, and would the results I obtained trying to use v 2c imply that it was not active on the machine?

And how about counters? Are they a function of the OS or of the agent? Check Point's documentation doesn't state if the counters are 32 or 64 bit, but I'm beginning to think they may be 64bit, and that I need to use SNMP v 2c and not 1...or do I?

If anyone could shed some light on this I would greatly appreciate it. Oh, BTW these are all Solaris SPARC v9.

Thanks,
Jeff

0
Comment
Question by:jpetter
2 Comments
 
LVL 38

Accepted Solution

by:
yuzh earned 500 total points
ID: 17936055
I think SNMP v 1 only work with -v 1 , SNMPv3 work with  -v 3 etc.
see this doc:
http://src.opensolaris.org/source/xref/sfw/usr/src/cmd/sma/net-snmp/README.snmpv3

Solaris 9, the default SNMP agent is SNMPV1

type in:

/path-to/snmpd -v

to find out.

For more info on this see "man snmpd.conf" and/or the Net-SNMP FAQ: http://www.net-snmp.org/docs/FAQ.html (scroll to the AGENT section)
0
 

Author Comment

by:jpetter
ID: 17937443
Thank you yuzh. This was exactly what I was looking for.

Thanks,
Jeff
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
nodeip 9 80
reinstall 1 77
unix example issues 18 89
Linux "time" command output redirection 16 144
In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
I promised to write further about my project, and here I am.  First, I needed to setup the Primary Server.  You can read how in this article: Setup FreeBSD Server with full HDD encryption (http://www.experts-exchange.com/OS/Unix/BSD/FreeBSD/A_3660-S…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

806 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question