[AGENT++] error on manage when receiving a trap notfication withafinite number of variable bindings

Jochen Katz katz at agentpp.com
Thu Aug 30 23:09:10 CEST 2007


Hi Karthik,

> I rebuilt the receive_trap src with _DEBUG and here's what I see now:
> 
> 20070830.14:11:07: 9448: (1)DEBUG  : ++ SNMP++: data received from
> 10.100.100.94/1049.
> 20070830.14:11:07: 9448: (3)DEBUG  : 30 81 EA 02  01 01 04 06  70 75 62 6C

this message is valid. it decodes here to:
msg: SNMP++: Received SNMP Notification (trap or inform)
from: 127.0.0.1/32856
ID:  1.3.6.1.4.1.17856.1.1.4.1.4.5.0
Type:167
Oid: 1.3.6.1.4.1.17856.1.1.4.1.3.20
Val: 6004
Oid: 1.3.6.1.4.1.17856.1.1.4.1.3.21
Val: 2007:08:29:12:28:10:EDT
Oid: 1.3.6.1.4.1.17856.1.1.4.1.3.22
Val: Number of Listener threads > thread threshold
Oid: 1.3.6.1.4.1.17856.1.1.4.1.3.23
Val: Replication

> 20070830.14:11:07: 9448: (1)DEBUG  : ASN parse error (overflow of message)
> 20070830.14:11:07: 9448: (1)WARNING: Testing for v3 message: Bad parse of
> version

This is strange, as this does not happen here. On what platform (CPU,
operating system, compiler) are you testing?

The error occurs in asn_parse_int() at the following test:
  if ((asn_length + (bufp - data)) > (unsigned long)(*datalength)){
Can you add some printf to get these values?

> 20070830.14:11:07: 9471: (1)EVENT  : NotificationGenerator: sent trap
> (vers)(id)
> (tdomain)(addr)(vbs)(community/secName)(status): (1),
> (1.3.6.1.4.1.17856.1.1.4.1.4.5.0), (1), (127.0.0.1/10162), (4), (public),(0)
> 20070830.14:11:17: 9471: (1)EVENT  : NotificationGenerator: sent trap
> 
> If you look at the messages above, the version shows up as 1, but am sending
> a v2 trap using the following code on the agent: 

This is ok, as 0 is SNMPv1 and 1 is SNMPv2c. SNMPv3 would be 3.

Regards,
  Jochen



More information about the AGENTPP mailing list